$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json) Hash identifier: xstY0MfxmLnnZ62TV0Ph1T/ilkylO1Onf1wn6ygVbGw= Subject key identifier: C6:06:85:ED:80:B5:6E:BD:7E:CA:F7:0D:6B:B9:47:0A:9E:9E:36:4F Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft Manifest number: 0166 Signing time: Sun 11 May 2025 02:54:20 +0000 Manifest this update: Sun 11 May 2025 02:54:19 +0000 Manifest next update: Sun 18 May 2025 02:54:19 +0000 Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: lnVETHvSGHaBVSznl+BLggnmxYkOBCuAJmDJKD0pOHM=) 2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: 9NHfjKZ92JKgdcrA4N9M5ns+wKMTAc0NwSsWt7LXuOk=) 3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: Nc2DNs1eibu6K2aHjIt+L2SkvNewi7SdNMt96VyUl+w=) 4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: Tr1GoB0OJ0WV/koJHwH589Dyk++1e8UfDHIpzpMoMFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Validity Not Before: May 11 02:54:19 2025 GMT Not After : May 18 02:54:19 2025 GMT Subject: CN=6820115b-a612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:9b:53:ee:e5:47:5f:2e:1c:a6:a7:80:51: 71:23:91:fe:39:e1:a4:d3:5b:0a:58:a0:42:29:b6: 69:71:90:3d:64:72:4b:4b:bf:79:1a:f6:fe:33:73: ee:0e:3a:e5:dc:d1:d6:b0:f3:b8:7d:f0:4a:ed:4c: 6b:43:07:09:6d:88:3f:91:e8:0e:c1:1a:1f:80:30: ee:4d:3f:fa:00:f4:e7:44:e5:a8:69:c7:e9:13:4b: 7e:ee:21:f4:a9:26:22:27:fa:81:02:32:63:49:34: 2d:a3:b1:c0:2a:77:db:2e:a7:cd:04:e6:86:47:7b: 70:fb:de:9a:ad:0c:b5:16:f1:58:ed:be:33:6b:05: 42:b7:39:e4:83:48:f8:51:93:05:b4:d2:d3:5b:98: 41:a3:f6:51:88:a9:10:81:6c:8f:a7:df:39:84:9a: 59:2e:16:18:b7:c8:c6:cd:15:e2:a1:78:d6:89:ca: f3:ab:99:ab:6f:0d:3e:dd:5e:83:ca:d4:ff:77:b1: 90:36:39:fc:53:fb:c8:89:d3:b0:dc:d6:79:4f:77: 59:99:8c:39:32:f8:56:be:72:93:2c:85:b2:3c:71: e2:08:72:a9:f9:50:d6:d9:04:9f:c0:0b:82:3d:be: e8:55:0b:76:96:fa:8e:a6:90:7c:e7:f5:4d:44:56: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:06:85:ED:80:B5:6E:BD:7E:CA:F7:0D:6B:B9:47:0A:9E:9E:36:4F X509v3 Authority Key Identifier: keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0d:86:dd:19:40:e0:ee:6d:a8:28:f7:cb:3f:3c:64:cc:b4: b3:95:3a:bd:98:d0:23:ea:87:d8:73:a5:97:a1:08:70:bd:63: 76:82:3f:5f:33:01:36:e3:e0:e2:a3:3a:da:d0:88:ba:ed:f7: c0:5a:08:61:a1:9f:3b:d4:b5:e6:92:55:fb:6e:f4:ff:a0:66: a5:dd:5b:a7:53:bb:a3:95:ed:9a:83:a1:3a:bf:3e:75:4c:03: c2:9e:b9:09:71:ea:ea:06:95:2f:53:8e:ed:66:f0:60:8f:3d: 5a:a3:5d:22:c4:e7:ca:f0:02:ea:fb:55:5d:f5:3b:71:f8:f8: 87:10:bf:2c:38:ac:54:2e:1a:06:9d:b3:ec:6b:b7:c6:fc:a4: db:6e:35:a5:fd:09:86:50:56:e7:90:1e:2d:ac:2c:b3:3e:25: 47:0a:b6:7a:82:aa:20:9a:35:9b:df:ce:fb:94:c7:19:a0:85: 2b:ce:bb:f9:e3:58:70:b6:53:df:f8:f3:58:9e:f2:86:26:56: 5a:c1:df:c0:32:58:ad:cd:0a:e4:3b:e1:e6:72:a6:c8:3b:de: 90:10:13:0c:5f:25:ed:3a:09:ad:73:b1:38:83:e0:f3:af:5e: 82:dc:10:cb:aa:b8:a9:c1:2e:05:eb:53:ec:63:b3:36:8b:16: 73:3e:d6:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC QUFGRkI4NjUwHhcNMjUwNTExMDI1NDE5WhcNMjUwNTE4MDI1NDE5WjAYMRYwFAYD VQQDEw02ODIwMTE1Yi1hNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApG6bU+7lR18uHKangFFxI5H+OeGk01sKWKBCKbZpcZA9ZHJLS795Gvb+M3Pu Djrl3NHWsPO4ffBK7UxrQwcJbYg/kegOwRofgDDuTT/6APTnROWoacfpE0t+7iH0 qSYiJ/qBAjJjSTQto7HAKnfbLqfNBOaGR3tw+96arQy1FvFY7b4zawVCtznkg0j4 UZMFtNLTW5hBo/ZRiKkQgWyPp985hJpZLhYYt8jGzRXioXjWicrzq5mrbw0+3V6D ytT/d7GQNjn8U/vIidOw3NZ5T3dZmYw5MvhWvnKTLIWyPHHiCHKp+VDW2QSfwAuC Pb7oVQt2lvqOppB85/VNRFbY9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYGhe2A tW69fsr3DWu5RwqenjZPMB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ c2dqbkdDUjdIa202cl91R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGDYbdGUDg7m2oKPfLPzxkzLSzlTq9mNAj6ofYc6WXoQhwvWN2gj9f MwE24+Diozra0Ii67ffAWghhoZ871LXmklX7bvT/oGal3VunU7ujle2ag6E6vz51 TAPCnrkJcerqBpUvU47tZvBgjz1ao10ixOfK8ALq+1Vd9Ttx+PiHEL8sOKxULhoG nbPsa7fG/KTbbjWl/QmGUFbnkB4trCyzPiVHCrZ6gqogmjWb3877lMcZoIUrzrv5 41hwtlPf+PNYnvKGJlZawd/AMlitzQrkO+HmcqbIO96QEBMMXyXtOgmtc7E4g+Dz r16C3BDLqripwS4F61PsY7M2ixZzPtZV -----END CERTIFICATE-----Generated at Mon May 12 18:25:57 2025 by rpki-client