$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft File: 9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json) Hash identifier: gvG/ENhA7HboTsRNV6m4aHjQ+D5lK9fIsDKcAAWo/KE= Subject key identifier: 31:05:17:82:88:2E:6D:59:A2:03:1A:81:06:93:95:3F:7C:C3:C5:E0 Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Certificate serial: 0463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft Manifest number: 0425 Signing time: Sun 11 May 2025 00:09:46 +0000 Manifest this update: Sun 11 May 2025 00:09:46 +0000 Manifest next update: Sun 18 May 2025 00:09:46 +0000 Files and hashes: 1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: /R/eoyk8/Pgel7J9x+H+A7Uet9Bcq8Vu/UrSeaPUx2Y=) 2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: jw0OS28NBUixcPBkwOHR1vk2bGtDUl1DjQdu4UsyyXU=) 3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: yyqYiyN6Yt2drA5esyg23pSPV3UCCGrSIBo6P8TjMZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1123 (0x463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Validity Not Before: May 11 00:09:46 2025 GMT Not After : May 18 00:09:46 2025 GMT Subject: CN=681feaca-956e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:59:97:0b:c5:ed:bf:2a:a9:33:9b:e2:e9: 8f:6b:c7:ea:7f:d5:e3:d4:6c:1b:9e:ee:16:9d:60: f0:17:5b:3d:8b:e5:0e:d7:e8:09:b4:2f:c0:69:75: cd:b4:97:b9:bb:0f:ec:c5:bc:4d:23:ba:ea:ae:10: 12:41:97:bb:70:d0:1b:fc:e7:77:2d:28:bb:0c:31: fd:d2:bc:80:c5:16:40:6e:55:26:2b:74:64:73:b5: 33:75:32:8e:76:7d:ea:65:2f:ef:4d:19:f4:e5:b1: 82:8c:1f:fd:e7:0f:39:8d:b7:74:aa:92:c9:a0:cc: 0a:3d:c7:ca:43:5e:60:74:35:62:ff:1e:12:90:89: b5:73:15:3c:46:e6:b5:33:9a:5f:8d:68:15:b1:1b: a4:88:b5:94:38:54:42:b7:c9:f2:9b:5e:30:52:fa: 1a:fc:f4:f0:ae:93:ce:c0:13:13:12:ad:9f:cd:3b: f0:6b:5b:50:07:66:f9:b9:71:0f:91:e9:cb:00:88: 34:f4:23:47:1f:2f:d2:b9:e5:e9:a2:7c:a4:d7:8b: 4c:3c:7b:25:82:16:6a:40:32:bc:df:be:fe:49:00: 93:40:63:67:c7:1b:0c:23:fa:53:7f:80:cb:7c:50: 75:99:16:64:b3:e0:c2:5c:52:b8:21:34:91:f3:83: c0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:05:17:82:88:2E:6D:59:A2:03:1A:81:06:93:95:3F:7C:C3:C5:E0 X509v3 Authority Key Identifier: keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:f1:aa:ff:0a:9a:49:f3:6c:2e:de:4f:7d:62:c9:b1:9d:f5: a1:19:5e:dc:e1:d7:6c:31:a1:e4:16:5f:66:64:36:17:c7:a2: 32:14:54:c3:31:7d:99:96:6f:5f:c9:c8:55:72:bb:7d:56:06: 04:c8:7d:59:50:5e:91:79:c0:56:f4:83:05:9d:6f:d6:af:07: 93:26:97:00:99:06:e0:75:30:8f:3b:5c:1d:be:2d:66:72:9b: d4:1c:ca:8e:ab:cb:4d:99:4d:46:06:6b:42:8f:e1:1b:d6:04: da:fe:c1:4b:4a:ae:7c:08:84:67:ab:46:49:61:b7:33:8a:03: e9:93:f2:0d:30:b0:a5:a7:58:70:dc:8f:bd:f9:21:3f:5d:52: fe:91:74:d4:b6:5c:9f:af:b4:a9:1d:fa:d8:41:60:5f:8d:d6: 4c:73:fd:c0:41:20:c4:b6:0a:13:48:12:39:bb:18:4b:f6:2d: da:f2:81:24:c4:e0:0d:b1:9f:b8:0c:5d:d2:1f:f4:fb:c4:d7: aa:d5:76:a0:a3:71:a2:69:db:cf:67:cd:9b:f7:aa:9e:5c:81: 84:73:8c:77:17:c6:da:f0:47:9f:68:bf:2e:19:89:36:28:bc: 7d:c4:4b:82:f3:e4:8b:d6:96:a3:20:7c:f2:0e:bf:ce:7c:4c: 2b:c5:22:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3 ODNFODJDN0YwHhcNMjUwNTExMDAwOTQ2WhcNMjUwNTE4MDAwOTQ2WjAYMRYwFAYD VQQDEw02ODFmZWFjYS05NTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJZZlwvF7b8qqTOb4umPa8fqf9Xj1Gwbnu4WnWDwF1s9i+UO1+gJtC/AaXXN tJe5uw/sxbxNI7rqrhASQZe7cNAb/Od3LSi7DDH90ryAxRZAblUmK3Rkc7UzdTKO dn3qZS/vTRn05bGCjB/95w85jbd0qpLJoMwKPcfKQ15gdDVi/x4SkIm1cxU8Rua1 M5pfjWgVsRukiLWUOFRCt8nym14wUvoa/PTwrpPOwBMTEq2fzTvwa1tQB2b5uXEP kenLAIg09CNHHy/SueXponyk14tMPHslghZqQDK8377+SQCTQGNnxxsMI/pTf4DL fFB1mRZks+DCXFK4ITSR84PALwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEFF4KI Lm1ZogMagQaTlT98w8XgMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzYxQi81MUVGRkEzMDgyNjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRV U3dOTzhvaXdwalI0UG9MSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA28ar/CppJ82wu3k99YsmxnfWhGV7c4ddsMaHkFl9mZDYXx6IyFFTD MX2Zlm9fychVcrt9VgYEyH1ZUF6RecBW9IMFnW/WrweTJpcAmQbgdTCPO1wdvi1m cpvUHMqOq8tNmU1GBmtCj+Eb1gTa/sFLSq58CIRnq0ZJYbczigPpk/INMLClp1hw 3I+9+SE/XVL+kXTUtlyfr7SpHfrYQWBfjdZMc/3AQSDEtgoTSBI5uxhL9i3a8oEk xOANsZ+4DF3SH/T7xNeq1Xago3GiadvPZ82b96qeXIGEc4x3F8ba8EefaL8uGYk2 KLx9xEuC8+SL1pajIHzyDr/OfEwrxSIh -----END CERTIFICATE-----Generated at Mon May 12 16:47:28 2025 by rpki-client