$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft File: madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json) Hash identifier: s7tTrYMc6Gn7p4Itvwoos8hN4TWaIlKk4MCHBnQTfRo= Subject key identifier: CF:38:C0:27:0D:B4:05:75:5B:CA:35:1D:21:0C:7C:7E:8A:9F:26:73 Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A Certificate issuer: /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft Manifest number: 87 Signing time: Thu 15 May 2025 05:52:28 +0000 Manifest this update: Thu 15 May 2025 05:52:28 +0000 Manifest next update: Thu 22 May 2025 05:52:28 +0000 Files and hashes: 1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: FLIFQPEpL3ReIIRJjVELRAu9pKDEapuqzKgqVoNLgmY=) 2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: nmm+UaDTVZk1W14gJbVOSNyGWuVq3wHsOrXGhKoBHSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A Validity Not Before: May 15 05:52:28 2025 GMT Not After : May 22 05:52:28 2025 GMT Subject: CN=6825811c-c023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:b2:5b:00:46:14:b0:90:2b:27:ab:29:34: 44:36:74:2e:3d:54:dd:2e:98:b7:cf:58:17:f2:fd: 37:06:21:d6:ad:ed:00:bd:d6:73:e5:c2:c9:49:53: 34:d1:6c:42:96:92:f1:be:38:7f:59:c4:8a:74:66: c5:06:29:fb:11:56:cd:40:dc:ac:ef:18:a1:75:37: 50:62:f8:d8:4e:ca:e4:06:e9:91:5b:09:6e:69:fb: 9e:52:bf:f8:2a:98:d0:e8:37:17:f2:f9:78:96:60: 5e:06:05:3f:56:7b:59:5d:ef:2e:63:e0:bd:c6:27: 73:1d:ac:3d:28:aa:e7:79:2f:b6:a0:b9:36:5b:1f: f5:ec:50:29:5b:af:9b:0b:5c:3a:b7:ac:a0:a5:0b: 73:7f:46:8f:51:88:68:9a:f7:af:7d:f1:49:00:6a: 6a:e3:dc:32:63:8c:11:1a:4a:a3:d2:55:68:ba:91: 9e:db:35:40:52:77:21:f6:e0:38:f1:25:ee:fc:92: c4:af:a2:b9:f4:f6:3e:d6:74:24:d5:ea:bf:13:ec: 10:77:36:9a:c7:d4:c8:7b:8f:ea:3e:f1:67:67:13: 2d:07:1c:bc:e3:98:d0:ea:0c:f1:46:9a:f1:84:cb: e2:9f:5a:c5:db:55:10:31:46:28:1d:3b:ad:c5:6d: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:38:C0:27:0D:B4:05:75:5B:CA:35:1D:21:0C:7C:7E:8A:9F:26:73 X509v3 Authority Key Identifier: keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:1e:43:87:eb:ef:d0:a8:d6:13:3a:f2:da:a1:2c:d1:07:7e: 68:67:58:48:2f:41:1a:2b:ab:11:10:4b:9d:bd:c0:4c:db:9c: b9:16:cb:66:65:c4:02:66:99:0b:22:ac:31:c9:59:0c:27:92: 79:d8:12:ab:66:56:e5:55:ba:14:3b:47:eb:54:e0:25:dc:36: da:5d:10:be:0c:01:92:d5:d4:0e:60:6b:2c:e4:1f:1f:42:9e: 47:ac:8b:8c:5b:ce:64:6e:37:1f:d2:b9:9d:02:b9:5d:39:0c: 6f:dc:26:67:d9:96:4b:a7:dd:09:d6:20:e6:b4:da:f2:41:cb: 6f:3b:d0:aa:68:bf:03:0f:1e:ad:3d:49:11:33:ef:2e:d1:13: 39:4c:0e:23:34:5d:bd:c9:5a:bd:77:4b:1b:1e:01:7d:77:f5: 7f:d2:2b:c9:8c:7f:af:8d:86:63:fb:ac:a9:5f:4e:c7:04:d1: f6:ac:40:73:90:1e:7e:3d:2e:2b:8b:55:05:4e:cf:27:91:4c: c7:1a:be:64:cc:0f:1a:3f:99:62:df:74:35:10:90:ab:a7:d4: 4d:d7:93:c9:fd:1f:e4:f1:54:4c:eb:0e:33:15:1b:7f:f9:05: b3:91:25:eb:cc:28:74:7c:da:ef:4f:39:2f:38:e4:23:43:27: c8:e3:cd:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1MDExMTAvBgNVBAUTKDk5QTc2NkQ0Q0ZBNDVBOUY5RTM3NzgyNTA0OThCMTI3 NjhDNDFFMUEwHhcNMjUwNTE1MDU1MjI4WhcNMjUwNTIyMDU1MjI4WjAYMRYwFAYD VQQDEw02ODI1ODExYy1jMDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTSyWwBGFLCQKyerKTRENnQuPVTdLpi3z1gX8v03BiHWre0AvdZz5cLJSVM0 0WxClpLxvjh/WcSKdGbFBin7EVbNQNys7xihdTdQYvjYTsrkBumRWwluafueUr/4 KpjQ6DcX8vl4lmBeBgU/VntZXe8uY+C9xidzHaw9KKrneS+2oLk2Wx/17FApW6+b C1w6t6ygpQtzf0aPUYhomvevffFJAGpq49wyY4wRGkqj0lVoupGe2zVAUnch9uA4 8SXu/JLEr6K59PY+1nQk1eq/E+wQdzaax9TIe4/qPvFnZxMtBxy845jQ6gzxRprx hMvin1rF21UQMUYoHTutxW0PmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM84wCcN tAV1W8o1HSEMfH6KnyZzMB8GA1UdIwQYMBaAFJmnZtTPpFqfnjd4JQSYsSdoxB4a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTUwMS8yNjg4RTMwMjY4 REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dwLWVOM2dsQkppeEoyakVI aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21hZG0xTS1rV3AtZU4zZ2xCSml4SjJqRUhoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTUwMS8yNjg4RTMwMjY4REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dw LWVOM2dsQkppeEoyakVIaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoHkOH6+/QqNYTOvLaoSzRB35oZ1hIL0EaK6sREEudvcBM25y5Fstm ZcQCZpkLIqwxyVkMJ5J52BKrZlblVboUO0frVOAl3DbaXRC+DAGS1dQOYGss5B8f Qp5HrIuMW85kbjcf0rmdArldOQxv3CZn2ZZLp90J1iDmtNryQctvO9CqaL8DDx6t PUkRM+8u0RM5TA4jNF29yVq9d0sbHgF9d/V/0ivJjH+vjYZj+6ypX07HBNH2rEBz kB5+PS4ri1UFTs8nkUzHGr5kzA8aP5li33Q1EJCrp9RN15PJ/R/k8VRM6w4zFRt/ +QWzkSXrzCh0fNrvTzkvOOQjQyfI4800 -----END CERTIFICATE-----Generated at Fri May 16 03:10:54 2025 by rpki-client