$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft File: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json) Hash identifier: zOM+/3vCSV1Ko6iPn2h8NuYQDMBACFaHwI52MtSR0Z8= Subject key identifier: 3A:E8:85:44:7F:9E:3A:83:FA:A8:D0:A4:13:93:3C:EB:28:F7:1F:29 Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D Certificate issuer: /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft Manifest number: 18 Signing time: Tue 13 May 2025 07:14:47 +0000 Manifest this update: Tue 13 May 2025 07:14:46 +0000 Manifest next update: Tue 20 May 2025 07:14:46 +0000 Files and hashes: 1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: /DeE91J10Ld+MYXhUeuaIK+T6vF/GPEJIpi6tRpKBPU=) 2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: wOxc2mRdKwnrkxXakYEXBYgQ1Llp1nvGe0GOb+4AM30=) 3: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: AY2s5T5nFgYlJrJemH+atWCYX2gv1ohpQJNZYKJbmMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Validity Not Before: May 13 07:14:46 2025 GMT Not After : May 20 07:14:46 2025 GMT Subject: CN=6822f166-3600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dd:4e:3d:55:7f:63:a2:f5:7d:a5:fc:dc:d3: e5:8e:70:54:d6:0b:1a:48:fb:d3:ca:e2:df:7f:e9: 42:51:83:b4:98:cd:bd:e9:06:aa:35:47:8f:9e:c1: eb:c9:b7:7f:a1:70:ec:f5:77:a7:8b:e6:20:fa:04: ac:41:c7:81:b8:79:53:07:44:99:f0:da:5f:bf:ab: b9:ec:78:45:c8:43:97:4c:d9:e1:13:03:36:d4:03: 9e:43:1b:a9:3d:04:24:f7:23:dd:81:d1:e0:f7:32: 6d:0b:1e:f8:53:af:f9:b7:df:12:e9:f5:a9:95:6c: d3:98:5f:8a:90:d6:3c:be:56:61:6e:15:00:4a:1e: 58:b6:87:e7:d3:7b:e3:7a:34:43:d9:3e:cb:d8:6c: ad:9e:66:d5:cd:8e:b3:a8:c4:21:64:2a:b6:9f:41: 9d:24:9d:ff:29:39:16:2a:03:b5:b1:8a:f9:78:da: 37:b1:37:03:84:b5:27:e7:92:4d:e1:92:4a:a4:7b: 97:7f:15:cd:60:fb:6e:63:8c:03:a4:01:47:64:04: d6:00:d0:d8:9b:82:63:1e:66:6f:cf:b4:01:d8:ba: 0b:1e:7a:f9:0d:9d:e2:a9:cf:d0:90:85:bd:19:63: c6:10:91:8e:7c:ff:55:ef:74:86:3a:b2:4d:ef:1c: e8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E8:85:44:7F:9E:3A:83:FA:A8:D0:A4:13:93:3C:EB:28:F7:1F:29 X509v3 Authority Key Identifier: keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:06:8e:00:ef:ee:80:28:3c:6b:3d:13:83:6f:0e:55:4c:fd: 9e:d8:5b:fc:03:91:4d:5c:ee:d7:80:00:a5:b2:44:60:0c:dd: 8d:0e:e1:83:c8:82:85:7b:0e:92:58:79:9a:b2:42:57:d1:47: 91:0f:3d:41:0b:5a:b3:a6:02:9f:cc:32:10:ce:15:dc:18:c7: 60:1c:b6:7a:55:6f:7c:b3:21:b6:6e:b5:91:b9:e6:22:1d:bf: 47:31:0f:9b:64:85:75:dd:a8:12:d2:f6:99:cc:30:67:4a:fe: e7:05:4c:81:5f:49:a9:2e:60:1b:c2:82:d6:50:7c:88:56:50: 6b:8a:5e:7a:39:56:82:70:40:07:6e:2b:38:3e:50:7f:4d:9e: cb:5c:36:a4:18:58:4d:cc:d5:92:6c:70:e0:b6:8c:e3:cd:61: 31:2d:b0:77:c0:94:2a:51:28:d2:52:14:6c:8e:31:9e:03:cc: 11:35:88:b7:ca:1d:17:0e:34:38:41:2c:14:33:1b:39:89:b2: 24:73:40:9c:63:ff:8a:bb:50:cb:b9:f0:b2:2f:82:b8:07:50: 71:9c:1a:cb:e8:ce:b6:5b:43:a8:ab:4a:58:fa:f0:3b:7e:c6: 21:a7:2d:1c:c8:02:c9:21:2f:58:e8:c3:64:a1:27:54:2b:1a: 65:ad:f7:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0MwODExMC8GA1UEBRMoMzIxRUVGQjgwODUxRkY4MkZFQjdDQjZDMDhBOTRGNURE MkQ5MjcwRDAeFw0yNTA1MTMwNzE0NDZaFw0yNTA1MjAwNzE0NDZaMBgxFjAUBgNV BAMTDTY4MjJmMTY2LTM2MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj3U49VX9jovV9pfzc0+WOcFTWCxpI+9PK4t9/6UJRg7SYzb3pBqo1R4+ewevJ t3+hcOz1d6eL5iD6BKxBx4G4eVMHRJnw2l+/q7nseEXIQ5dM2eETAzbUA55DG6k9 BCT3I92B0eD3Mm0LHvhTr/m33xLp9amVbNOYX4qQ1jy+VmFuFQBKHli2h+fTe+N6 NEPZPsvYbK2eZtXNjrOoxCFkKrafQZ0knf8pORYqA7Wxivl42jexNwOEtSfnkk3h kkqke5d/Fc1g+25jjAOkAUdkBNYA0NibgmMeZm/PtAHYugseevkNneKpz9CQhb0Z Y8YQkY58/1XvdIY6sk3vHOjRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOuiFRH+e OoP6qNCkE5M86yj3HykwHwYDVR0jBBgwFoAUMh7vuAhR/4L+t8tsCKlPXdLZJw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczQzA4L0FGRkMwREU0MTE3 QzExRjBCMjM0Q0Q3OEM0RjlBRTAyL01oN3Z1QWhSXzRMLXQ4dHNDS2xQWGRMWkp3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWg3dnVBaFJfNEwtdDh0c0NLbFBYZExaSncwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz QzA4L0FGRkMwREU0MTE3QzExRjBCMjM0Q0Q3OEM0RjlBRTAyL01oN3Z1QWhSXzRM LXQ4dHNDS2xQWGRMWkp3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALAGjgDv7oAoPGs9E4NvDlVM/Z7YW/wDkU1c7teAAKWyRGAM3Y0O4YPI goV7DpJYeZqyQlfRR5EPPUELWrOmAp/MMhDOFdwYx2ActnpVb3yzIbZutZG55iId v0cxD5tkhXXdqBLS9pnMMGdK/ucFTIFfSakuYBvCgtZQfIhWUGuKXno5VoJwQAdu Kzg+UH9NnstcNqQYWE3M1ZJscOC2jOPNYTEtsHfAlCpRKNJSFGyOMZ4DzBE1iLfK HRcONDhBLBQzGzmJsiRzQJxj/4q7UMu58LIvgrgHUHGcGsvozrZbQ6irSlj68Dt+ xiGnLRzIAskhL1jow2ShJ1QrGmWt94E= -----END CERTIFICATE-----Generated at Wed May 14 14:44:58 2025 by rpki-client