$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json) Hash identifier: G/RMfCgVqm7KwBA0+KTR7eDzoDK5oBEnVgQM6Ab+e1c= Subject key identifier: 2C:54:B5:56:C3:69:7B:6A:49:F0:A3:E0:08:EF:CE:85:CF:37:5C:2A Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft Manifest number: 07D0 Signing time: Mon 12 May 2025 20:55:01 +0000 Manifest this update: Mon 12 May 2025 20:55:01 +0000 Manifest next update: Mon 19 May 2025 20:55:01 +0000 Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: dVasLczGEZgZmQGSfVerdRq9GFoSj04kckuxMHU579A=) 2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: qjMMlEqEvaBO7XAFYzvleISXKC2IIZdSXJalJOe7pw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Validity Not Before: May 12 20:55:01 2025 GMT Not After : May 19 20:55:01 2025 GMT Subject: CN=68226025-d6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:03:28:2e:6f:0b:39:01:32:fe:bb:7b:2c: 78:cd:f5:e2:7d:f9:bf:56:4b:86:0e:22:ec:cb:70: cc:df:b5:cb:e1:84:fb:e2:50:25:5d:77:c4:ab:c6: fc:a9:43:97:10:22:55:6c:8b:0d:85:8e:0d:7a:b6: 3c:48:3d:cd:c7:2f:87:8e:11:46:6f:8b:c9:f4:50: c5:79:bb:fa:22:41:7e:99:c4:a9:d4:26:4b:41:ab: 8a:80:60:23:17:a2:8e:0f:19:08:c5:5c:3b:bb:e6: 0d:e8:2d:89:ad:3b:91:9f:7e:24:15:9e:8b:24:9b: 0d:49:b7:24:cd:87:c8:d8:2b:1e:9f:b8:23:d0:f4: da:1b:fa:1e:75:d4:fe:01:a5:f2:bb:25:11:99:a6: c2:f1:ac:e9:04:8c:94:c3:af:1b:25:02:46:58:92: 27:6b:6b:e1:6b:f8:ee:e8:8e:7a:81:88:68:c1:d2: e2:48:5e:78:a8:48:ae:6a:36:8d:4c:23:21:d0:5d: a5:02:be:4e:4a:cb:58:fd:13:1f:19:e7:71:8d:8e: a7:d8:fe:78:5e:04:63:ce:45:3c:25:8f:cf:0b:18: 39:92:d0:9a:be:20:08:d2:e3:31:4f:ad:96:5b:a1: f5:fe:5c:69:ba:c3:c5:fd:53:f6:64:c8:db:8d:c2: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:54:B5:56:C3:69:7B:6A:49:F0:A3:E0:08:EF:CE:85:CF:37:5C:2A X509v3 Authority Key Identifier: keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:5f:37:08:1e:83:10:fc:ee:29:0e:f0:ca:f5:6c:04:a9:86: 58:d2:46:e0:48:49:2b:93:4e:1b:95:07:6e:f1:ba:81:82:c1: d4:75:15:aa:49:fc:50:c5:c4:47:c0:ad:d9:68:fc:5e:f7:5c: 24:9e:19:26:0d:1a:16:cd:1a:df:17:56:55:d5:40:3a:c9:6d: 11:ef:11:f3:77:4d:9f:67:0f:9b:cc:0c:a2:47:71:62:8a:58: 2b:5d:5d:1b:c6:db:f6:f3:d6:46:60:a8:82:d0:78:fe:5c:6d: 81:20:d2:59:e0:67:3b:c7:e4:08:a2:f2:c0:37:31:ef:ba:51: 6a:72:11:c3:72:5f:cc:df:02:7f:3e:2c:c2:ae:3c:73:81:38: d0:d7:fd:7b:16:96:77:55:22:b4:99:6a:78:26:7d:46:32:49: ff:e1:49:0d:38:eb:9d:61:45:85:d8:16:a2:93:f7:6a:35:30: 2c:0b:9d:30:e4:de:50:cf:fc:ee:5a:24:34:ac:aa:e7:3b:f6: 19:86:8b:6d:fe:eb:a0:4b:67:c0:d9:b6:01:cc:48:69:3b:1d: 86:c8:7e:0f:10:4b:24:1d:f7:67:55:f1:3e:0a:14:b3:02:9c: 19:c0:1f:9b:92:99:c8:5c:f6:4c:f7:4f:60:7f:0e:32:2a:46: 9a:c6:19:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy NUE1NjUxNTYwHhcNMjUwNTEyMjA1NTAxWhcNMjUwNTE5MjA1NTAxWjAYMRYwFAYD VQQDEw02ODIyNjAyNS1kNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoMDKC5vCzkBMv67eyx4zfXiffm/VkuGDiLsy3DM37XL4YT74lAlXXfEq8b8 qUOXECJVbIsNhY4NerY8SD3Nxy+HjhFGb4vJ9FDFebv6IkF+mcSp1CZLQauKgGAj F6KODxkIxVw7u+YN6C2JrTuRn34kFZ6LJJsNSbckzYfI2Csen7gj0PTaG/oeddT+ AaXyuyURmabC8azpBIyUw68bJQJGWJIna2vha/ju6I56gYhowdLiSF54qEiuajaN TCMh0F2lAr5OSstY/RMfGedxjY6n2P54XgRjzkU8JY/PCxg5ktCaviAI0uMxT62W W6H1/lxpusPF/VP2ZMjbjcLyyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxUtVbD aXtqSfCj4AjvzoXPN1wqMB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTM4RC80RjZFOTMxOEYzRUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNH NlM0UXQ0bTZ3c1lscFdVVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVXzcIHoMQ/O4pDvDK9WwEqYZY0kbgSEkrk04blQdu8bqBgsHUdRWq SfxQxcRHwK3ZaPxe91wknhkmDRoWzRrfF1ZV1UA6yW0R7xHzd02fZw+bzAyiR3Fi ilgrXV0bxtv289ZGYKiC0Hj+XG2BINJZ4Gc7x+QIovLANzHvulFqchHDcl/M3wJ/ PizCrjxzgTjQ1/17FpZ3VSK0mWp4Jn1GMkn/4UkNOOudYUWF2Baik/dqNTAsC50w 5N5Qz/zuWiQ0rKrnO/YZhott/uugS2fA2bYBzEhpOx2GyH4PEEskHfdnVfE+ChSz ApwZwB+bkpnIXPZM909gfw4yKkaaxhmo -----END CERTIFICATE-----Generated at Tue May 13 15:12:08 2025 by rpki-client