$ rpki-client -vvf rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft File: rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft (raw, json) Hash identifier: 6qYWv5KWpVzWeS9CRMG/5Nh3PclNOtiRe2uQSTa3Opk= Subject key identifier: 21:0F:82:E4:46:72:D3:FC:55:B9:02:A2:B2:92:6E:8C:8B:AD:39:1C Authority key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD Certificate issuer: /CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft Manifest number: 065E Signing time: Mon 12 May 2025 22:12:58 +0000 Manifest this update: Mon 12 May 2025 22:12:58 +0000 Manifest next update: Mon 19 May 2025 22:12:58 +0000 Files and hashes: 1: rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl (hash: asPD3AYR9xYr+xaQ4M5C/fuT8f00Jhy7KG2QHIQIy3E=) 2: D18881E6807A11EBB44A0A58C4F9AE02.roa (hash: 9X7s4Zr8J67+2NJv1oqimpUYFSW3VJpeiZEh6uYKUO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164E50, serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Validity Not Before: May 12 22:12:58 2025 GMT Not After : May 19 22:12:58 2025 GMT Subject: CN=6822726a-9fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a2:e3:f0:b8:10:05:e7:4e:fd:5a:49:09:53: 89:c9:2e:2b:f3:7d:6a:1c:bf:93:31:67:08:41:67: ed:23:01:8e:2a:55:67:ca:b8:77:39:18:82:59:74: a2:7a:14:93:d8:f1:91:42:bd:d7:01:dc:99:dd:17: ed:98:07:bc:19:16:45:3e:d5:c5:27:81:63:42:57: f7:5b:4b:f5:30:18:a9:db:86:96:20:e3:fa:67:de: e3:42:61:48:b7:5d:6b:b6:d0:40:25:2d:07:02:f8: 0a:c0:28:12:23:6e:c7:8a:25:0b:48:4f:cb:17:36: 68:43:7e:8f:a0:3b:24:03:38:fc:4e:b1:b5:e6:26: fd:ee:f9:c5:69:34:13:5f:2d:75:b4:d4:bf:65:7d: af:50:ec:7b:52:b5:52:3a:d7:35:2e:da:fc:d1:19: 5e:ef:71:bf:18:1c:09:ab:7c:fe:3d:34:28:eb:6e: e5:24:bd:72:85:88:36:f0:f0:37:e1:38:ab:a6:0d: 70:09:23:a9:50:cc:ed:3f:70:36:be:63:b7:2e:95: cf:c6:2b:2f:21:64:df:9a:0e:70:aa:25:49:d2:f8: d9:c8:ae:fa:6d:44:61:ed:fe:1a:9d:2d:c1:c3:ba: 6a:da:07:c0:81:e3:7e:9e:43:61:df:e7:17:8f:a1: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0F:82:E4:46:72:D3:FC:55:B9:02:A2:B2:92:6E:8C:8B:AD:39:1C X509v3 Authority Key Identifier: keyid:AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fa:cb:d1:b2:a7:01:6e:4f:82:62:32:83:d5:5f:b7:f3:d0: 9c:c6:73:30:3a:91:ab:d1:93:fb:b2:bd:f7:bd:a4:b7:b2:f4: 93:88:5e:48:41:ad:2c:40:5c:eb:cb:58:d5:d0:93:15:cb:e2: 09:06:50:32:a1:0c:f9:98:2f:c8:ee:e2:86:cd:ff:a9:5e:ef: 84:0a:90:72:23:ba:7a:33:01:b6:e8:05:4f:d2:19:46:c7:99: 38:aa:a6:19:ae:c7:ec:6c:18:d7:fd:d3:2e:f8:d1:cd:6d:31: b1:1f:8c:0f:12:fc:d5:49:e7:a4:b1:1c:e9:3d:4f:a5:c6:f9: f1:34:f2:4c:8c:89:00:9a:f6:56:a6:53:f2:c5:3e:9f:eb:77: 07:bb:3d:27:c9:b7:2c:48:f4:b7:94:9b:4c:f2:33:aa:8b:9f: 5b:9f:14:76:5f:2e:6b:2e:e6:b5:73:3c:6c:42:2a:16:27:dd: e3:96:68:75:5e:2b:f9:40:48:e9:ba:b4:b1:fb:f0:bf:0a:e7: e4:43:b7:f2:a1:f5:89:83:0c:bf:e3:be:5c:e1:fe:de:78:d6: e3:ed:1d:c7:ce:bf:3d:b6:62:0f:2a:35:80:19:40:a9:81:07: a1:7d:10:83:f2:c0:a0:05:c7:03:9f:46:53:2d:2f:a4:c3:f1: 09:5a:b7:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRFNTAxMTAvBgNVBAUTKEFERjBGNUFCQUZGQjk4NDVCNTVDQjM2MUEwOTJGNTZE NEU0MDA1REQwHhcNMjUwNTEyMjIxMjU4WhcNMjUwNTE5MjIxMjU4WjAYMRYwFAYD VQQDEw02ODIyNzI2YS05ZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KLj8LgQBedO/VpJCVOJyS4r831qHL+TMWcIQWftIwGOKlVnyrh3ORiCWXSi ehST2PGRQr3XAdyZ3RftmAe8GRZFPtXFJ4FjQlf3W0v1MBip24aWIOP6Z97jQmFI t11rttBAJS0HAvgKwCgSI27HiiULSE/LFzZoQ36PoDskAzj8TrG15ib97vnFaTQT Xy11tNS/ZX2vUOx7UrVSOtc1Ltr80Rle73G/GBwJq3z+PTQo627lJL1yhYg28PA3 4Tirpg1wCSOpUMztP3A2vmO3LpXPxisvIWTfmg5wqiVJ0vjZyK76bURh7f4anS3B w7pq2gfAgeN+nkNh3+cXj6EL+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEPguRG ctP8VbkCorKSboyLrTkcMB8GA1UdIwQYMBaAFK3w9auv+5hFtVyzYaCS9W1OQAXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEU1MC9BNDBBMjQyMDgw NkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21FVzFYTE5ob0pMMWJVNUFC ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmRDFxNl83bUVXMVhMTmhvSkwxYlU1QUJkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEU1MC9BNDBBMjQyMDgwNkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21F VzFYTE5ob0pMMWJVNUFCZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK+svRsqcBbk+CYjKD1V+389CcxnMwOpGr0ZP7sr33vaS3svSTiF5I Qa0sQFzry1jV0JMVy+IJBlAyoQz5mC/I7uKGzf+pXu+ECpByI7p6MwG26AVP0hlG x5k4qqYZrsfsbBjX/dMu+NHNbTGxH4wPEvzVSeeksRzpPU+lxvnxNPJMjIkAmvZW plPyxT6f63cHuz0nybcsSPS3lJtM8jOqi59bnxR2Xy5rLua1czxsQioWJ93jlmh1 Xiv5QEjpurSx+/C/CufkQ7fyofWJgwy/475c4f7eeNbj7R3Hzr89tmIPKjWAGUCp gQehfRCD8sCgBccDn0ZTLS+kw/EJWreK -----END CERTIFICATE-----Generated at Wed May 14 09:34:40 2025 by rpki-client