$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft File: _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json) Hash identifier: G4hdX9jz0lT2+bRaxN//qMOnrm701ZRcaZQXRadudY8= Subject key identifier: A3:51:36:AA:5C:95:05:8F:8E:1E:81:49:39:20:C2:69:9F:CB:7C:74 Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE Certificate issuer: /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Certificate serial: 0804 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft Manifest number: 07FF Signing time: Sat 10 May 2025 20:35:08 +0000 Manifest this update: Sat 10 May 2025 20:35:08 +0000 Manifest next update: Sat 17 May 2025 20:35:08 +0000 Files and hashes: 1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: iwztYybZjdXgpFJcLie4lmLycQ+V62qgjfHBeBh1/lE=) 2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: k50ZB9p61nq4gYFWFacngoDcN0U36+Btc6YIKa1PUKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2052 (0x804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Validity Not Before: May 10 20:35:08 2025 GMT Not After : May 17 20:35:08 2025 GMT Subject: CN=681fb87c-2bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:0a:3f:38:88:1e:d8:bf:db:e9:c4:bc:f6: 53:ad:b2:24:4b:36:56:db:41:cb:79:0d:e1:1e:27: 1c:7a:16:77:2d:44:77:3d:a2:01:3f:cd:82:ca:e1: a5:3d:ff:11:bc:02:73:2e:11:d2:f1:b2:68:c9:40: c8:ed:0d:29:12:81:65:02:de:0b:a0:54:7c:5b:3f: fa:ba:71:83:79:dd:d3:9d:3d:91:4f:5a:6c:ec:65: 0f:3e:60:53:7f:d3:b4:6d:bc:30:53:82:22:8d:bc: fb:6b:ae:71:f8:e1:25:d7:85:8b:62:3f:ad:c1:0c: 61:5b:66:9c:92:2f:f8:2a:ba:54:16:f1:0f:18:7f: cc:dc:ad:dc:84:16:a6:c0:f8:3d:32:fe:0c:ba:bf: 76:0b:53:ea:d1:be:29:7a:4e:5f:73:85:d2:30:85: 09:60:88:ca:d0:51:2a:0d:f8:b9:f5:17:2b:f7:28: 0e:9c:cd:bc:41:46:43:fe:58:26:c1:cf:17:ce:98: eb:05:9e:9a:ea:29:b8:49:32:dd:d6:0d:93:61:f3: 23:83:cd:13:fd:60:d4:57:cd:66:21:6b:2f:99:1b: 1a:0b:31:2b:55:3d:70:24:2f:15:af:73:27:76:55: 74:97:e7:57:c1:76:b0:d6:42:25:a8:5f:b1:fc:53: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:51:36:AA:5C:95:05:8F:8E:1E:81:49:39:20:C2:69:9F:CB:7C:74 X509v3 Authority Key Identifier: keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:fc:f5:80:25:ec:05:33:c7:28:b1:59:e8:84:83:84:28:f5: 77:df:d6:f3:19:a8:27:ea:b2:eb:f0:06:f9:1c:3e:be:4d:74: 5e:ee:14:31:ea:92:f5:a9:5b:ae:04:36:36:34:b4:61:4f:20: 8f:00:47:7e:61:1b:a7:0d:ea:df:b4:a5:cf:61:70:71:14:92: bb:4c:5e:8c:16:71:76:d1:44:c8:d3:d6:79:5a:c9:c5:31:63: c5:13:4b:b3:4b:3f:55:a5:8c:74:b0:21:6f:5f:40:de:b3:6e: 02:c1:f4:fc:c4:31:01:83:96:0d:6d:e5:7b:ce:6a:79:b5:20: ef:c7:64:60:6d:e4:60:2e:cb:fb:24:26:74:bf:da:59:2c:38: 6b:45:23:19:aa:19:be:4b:cd:ca:2c:83:59:ba:e5:4a:ca:c0: c3:21:6a:5c:a4:9d:3b:c1:ba:62:37:f5:95:27:d0:10:9c:0d: 87:a0:15:b8:96:4d:7a:46:56:95:21:1a:72:ac:2b:8c:ad:7e: 53:41:4a:2a:e8:c1:5a:95:6b:cf:83:56:0a:a9:b9:55:d3:8d: c1:d3:20:cd:02:ff:bf:5f:d6:b1:0f:ff:a0:bd:73:e3:4b:33: e5:d8:7a:df:33:1b:25:8f:04:71:33:6e:fc:fd:6b:9d:17:78: 23:8d:05:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI0NjIxMTAvBgNVBAUTKEZENEQ4QzYzOUFEQzE1ODQ3QzdCNDkxMTE1OURFNzFC RDgxMzkzQUUwHhcNMjUwNTEwMjAzNTA4WhcNMjUwNTE3MjAzNTA4WjAYMRYwFAYD VQQDEw02ODFmYjg3Yy0yYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwREKPziIHti/2+nEvPZTrbIkSzZW20HLeQ3hHiccehZ3LUR3PaIBP82CyuGl Pf8RvAJzLhHS8bJoyUDI7Q0pEoFlAt4LoFR8Wz/6unGDed3TnT2RT1ps7GUPPmBT f9O0bbwwU4Iijbz7a65x+OEl14WLYj+twQxhW2acki/4KrpUFvEPGH/M3K3chBam wPg9Mv4Mur92C1Pq0b4pek5fc4XSMIUJYIjK0FEqDfi59Rcr9ygOnM28QUZD/lgm wc8XzpjrBZ6a6im4STLd1g2TYfMjg80T/WDUV81mIWsvmRsaCzErVT1wJC8Vr3Mn dlV0l+dXwXaw1kIlqF+x/FP8dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNRNqpc lQWPjh6BSTkgwmmfy3x0MB8GA1UdIwQYMBaAFP1NjGOa3BWEfHtJERWd5xvYE5Ou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjQ2Mi8zMkM3NTdFNkRD NDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZUjhlMGtSRlozbkc5Z1Rr NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VMk1ZNXJjRllSOGUwa1JGWjNuRzlnVGs2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjQ2Mi8zMkM3NTdFNkRDNDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZ UjhlMGtSRlozbkc5Z1RrNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1/PWAJewFM8cosVnohIOEKPV339bzGagn6rLr8Ab5HD6+TXRe7hQx 6pL1qVuuBDY2NLRhTyCPAEd+YRunDerftKXPYXBxFJK7TF6MFnF20UTI09Z5WsnF MWPFE0uzSz9VpYx0sCFvX0Des24CwfT8xDEBg5YNbeV7zmp5tSDvx2RgbeRgLsv7 JCZ0v9pZLDhrRSMZqhm+S83KLINZuuVKysDDIWpcpJ07wbpiN/WVJ9AQnA2HoBW4 lk16RlaVIRpyrCuMrX5TQUoq6MFalWvPg1YKqblV043B0yDNAv+/X9axD/+gvXPj SzPl2HrfMxsljwRxM278/WudF3gjjQVK -----END CERTIFICATE-----Generated at Sun May 11 13:26:41 2025 by rpki-client