$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: uM/GIWE+7vEIUKlYPAaoTj7vRrS0EseLsFXIkjtyp14= Subject key identifier: 12:50:46:11:F5:25:DE:AE:F4:B1:0D:01:23:83:4C:CC:B3:8F:48:98 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 0487 Signing time: Mon 12 May 2025 23:50:45 +0000 Manifest this update: Mon 12 May 2025 23:50:45 +0000 Manifest next update: Mon 19 May 2025 23:50:45 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: 9O3y/i2t2A1fTXUh+dlvaKN/h1eIDKXb8oiIPbs9Xhw=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: Sfq7zwsHIT4LApgTVDRFHk10JkrfthfbYhUwRPOBCl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: May 12 23:50:45 2025 GMT Not After : May 19 23:50:45 2025 GMT Subject: CN=68228955-1ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:be:3b:c1:57:77:9f:73:2c:6c:75:ad:10: f1:67:37:1f:cb:86:d7:11:31:67:7b:98:67:10:06: 98:1b:a2:ee:08:00:d6:01:88:e5:73:30:74:41:43: 04:e5:28:72:0c:27:94:0e:37:aa:ce:26:4c:bc:c2: 0e:86:a0:a3:87:f7:2a:2e:d3:97:a2:2b:74:2b:22: 50:46:42:84:ee:2a:39:46:cc:65:a4:bd:6f:43:92: fd:3e:2b:ca:e0:4a:f4:9f:c4:97:81:34:f9:1c:34: 34:69:13:69:07:4c:a7:02:2e:52:76:6e:11:a8:be: a4:d0:35:0f:a0:a5:36:27:c8:f6:98:94:ba:ef:ea: 7a:9c:e6:61:a8:46:fe:67:61:3e:22:7b:ff:bc:74: 8d:8e:0e:4e:55:c6:4c:c7:83:32:90:25:ee:2a:c5: ed:56:61:8e:df:48:7b:78:ca:9d:4a:93:53:37:7c: 7a:11:b5:08:2b:6f:d0:b0:a6:81:25:18:65:7d:0c: 7b:d8:f6:99:e0:b5:1d:24:b2:5e:6a:7b:41:af:2b: b0:87:2e:13:f3:57:71:41:6d:11:7b:6f:45:67:98: 4f:96:c2:5e:c0:00:04:de:fa:9e:98:e9:0e:41:4b: c4:bc:b8:07:4b:ee:cf:d2:99:24:c2:1c:03:fc:7c: ea:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:50:46:11:F5:25:DE:AE:F4:B1:0D:01:23:83:4C:CC:B3:8F:48:98 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:07:d6:a8:6b:7d:80:d9:57:17:7b:5c:ef:b2:7c:b1:e4:75: 1a:33:81:dc:1c:f6:93:90:1a:80:76:01:4c:7f:73:2d:8f:ec: 1f:6d:bc:a3:66:6c:cd:2c:f1:9b:40:78:da:b9:a3:fd:01:bc: 18:23:db:58:10:5a:e5:e5:6e:04:4a:b9:97:77:89:f1:1e:73: 35:d7:32:db:c1:88:d8:e1:0e:e1:ad:63:35:2e:60:e4:bd:9f: e8:b5:bb:5f:e8:c5:08:cc:3c:bb:c4:6a:d5:8c:b1:2e:04:e7: 13:a3:02:37:57:70:d6:10:7f:52:aa:d8:4f:2f:59:06:4b:b5: eb:e7:a5:82:2b:3b:79:bb:5b:26:1c:9f:11:f1:96:45:70:83: f4:6f:92:38:3a:91:fe:3a:8c:40:d2:82:41:a1:12:dd:51:93: f6:11:df:08:f1:a6:1e:2b:ef:36:19:24:c5:a6:74:03:73:bc: 35:26:f9:60:eb:92:e5:da:ce:cf:4e:ce:50:a6:97:86:70:6a: a8:02:b4:12:68:12:8b:3c:1f:68:c3:b1:9e:4f:80:ff:eb:79: e1:47:f5:d6:cd:68:78:e4:b4:7a:be:e3:60:63:a0:89:11:2a: ff:d7:c7:dc:89:39:48:cb:36:5e:fe:d3:58:55:b9:44:8a:92: fb:ae:a1:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjUwNTEyMjM1MDQ1WhcNMjUwNTE5MjM1MDQ1WjAYMRYwFAYD VQQDEw02ODIyODk1NS0xZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCW+O8FXd59zLGx1rRDxZzcfy4bXETFne5hnEAaYG6LuCADWAYjlczB0QUME 5ShyDCeUDjeqziZMvMIOhqCjh/cqLtOXoit0KyJQRkKE7io5RsxlpL1vQ5L9PivK 4Er0n8SXgTT5HDQ0aRNpB0ynAi5Sdm4RqL6k0DUPoKU2J8j2mJS67+p6nOZhqEb+ Z2E+Inv/vHSNjg5OVcZMx4MykCXuKsXtVmGO30h7eMqdSpNTN3x6EbUIK2/QsKaB JRhlfQx72PaZ4LUdJLJeantBryuwhy4T81dxQW0Re29FZ5hPlsJewAAE3vqemOkO QUvEvLgHS+7P0pkkwhwD/HzqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJQRhH1 Jd6u9LENASODTMyzj0iYMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzB9aoa32A2VcXe1zvsnyx5HUaM4HcHPaTkBqAdgFMf3Mtj+wfbbyj ZmzNLPGbQHjauaP9AbwYI9tYEFrl5W4ESrmXd4nxHnM11zLbwYjY4Q7hrWM1LmDk vZ/otbtf6MUIzDy7xGrVjLEuBOcTowI3V3DWEH9SqthPL1kGS7Xr56WCKzt5u1sm HJ8R8ZZFcIP0b5I4OpH+OoxA0oJBoRLdUZP2Ed8I8aYeK+82GSTFpnQDc7w1Jvlg 65Ll2s7PTs5QppeGcGqoArQSaBKLPB9ow7GeT4D/63nhR/XWzWh45LR6vuNgY6CJ ESr/18fciTlIyzZe/tNYVblEipL7rqGq -----END CERTIFICATE-----Generated at Thu May 15 00:31:34 2025 by rpki-client