$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft File: elxN0KO7nNgUshdK9pPj90FLmVs.mft (raw, json) Hash identifier: ummcCwzuKlYsg/I+CbDizsRVX3k3GwXqawUE/ubxgCQ= Subject key identifier: 2C:41:71:5B:EB:55:57:73:9F:49:AB:94:31:60:98:F4:A1:5C:22:21 Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft Manifest number: 0129 Signing time: Tue 01 Jul 2025 05:10:16 +0000 Manifest this update: Tue 01 Jul 2025 05:10:16 +0000 Manifest next update: Tue 08 Jul 2025 05:10:16 +0000 Files and hashes: 1: elxN0KO7nNgUshdK9pPj90FLmVs.crl (hash: iK4qoYHRZh7NlP0Ro0+/8xG4qUwhIPNkuHQiAMXmDO4=) 2: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (hash: 8E473KkpiKjZKNroBEhCbINIeIwzAWwWEuJqRVf36nY=) 3: 24CB4F36957811EEA7BF2753C4F9AE02.roa (hash: UV3XO65spY2KLBvMTAJ4CDMAZHABDW2pouUNViGYZzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FD0, serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Validity Not Before: Jul 1 05:10:16 2025 GMT Not After : Jul 8 05:10:16 2025 GMT Subject: CN=68636db8-33ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:74:00:56:af:38:59:1b:8e:1a:f8:e0:63:96: 3a:a9:be:b1:10:7f:f7:e4:bc:3b:e5:45:a2:3a:06: 34:29:ce:ac:22:59:23:3e:3d:b6:e4:f9:5c:dd:8e: 0e:4b:ee:df:9d:d5:fe:2d:42:64:d3:8d:42:e1:1f: 74:23:43:5a:92:d2:64:9b:a5:8f:56:a2:dc:1f:fd: b1:14:2e:00:a6:2f:be:a3:95:46:03:3a:d5:2d:a3: d0:30:1c:93:61:4d:4e:fe:df:cb:27:0e:cb:0f:67: a9:88:a1:4c:d3:84:13:8a:a8:fb:ff:30:6c:d1:e1: 51:94:69:f6:06:7c:65:58:3a:16:a3:89:1e:86:4b: b0:bc:84:49:af:84:7e:e4:3b:25:43:a1:f4:a7:a0: ed:ce:81:13:3e:b1:65:f1:d4:4c:cf:20:af:8c:c7: 10:d7:69:88:16:b7:a8:35:b2:b0:52:6f:c9:d0:0d: 83:fb:21:d7:3f:c6:0f:e9:09:70:a7:de:c6:6b:91: e0:e0:0e:ac:f2:60:23:66:34:8a:ab:81:a6:1d:4e: b5:86:c3:ef:e4:8c:94:7f:b8:99:24:32:50:35:86: a3:c2:0b:32:89:c4:f7:c6:99:c5:1e:32:b0:56:14: 74:40:9d:5f:4d:15:42:f4:60:1e:2e:49:ea:5e:4f: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:41:71:5B:EB:55:57:73:9F:49:AB:94:31:60:98:F4:A1:5C:22:21 X509v3 Authority Key Identifier: keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e5:2a:30:9a:2b:89:ce:64:9d:91:01:b2:bc:cf:db:59:70: 13:47:7a:06:f8:8d:57:d3:00:85:61:4c:9e:f8:36:4e:c2:bd: f2:aa:98:88:1e:6c:fb:6f:07:22:cd:60:a9:d3:3c:55:5e:82: c7:f1:c3:e5:15:61:8a:a7:f1:e4:c3:11:30:16:8d:5a:c5:03: d3:1c:02:07:cc:7b:73:62:f2:48:84:b6:bb:fa:93:7a:0a:c6: cd:87:17:91:eb:96:a6:a4:74:c2:1b:dc:71:82:4c:bb:d1:6a: ab:7a:03:c5:d0:73:91:7d:12:f3:f7:df:ce:cc:3c:9c:5f:7f: 35:18:b1:1a:e7:cb:e4:92:27:29:58:d4:f6:2c:12:f3:cc:45: 01:d7:a3:52:b8:eb:a0:c5:ba:c0:f0:cf:ce:fb:3e:02:78:6d: ce:eb:39:70:90:c4:94:28:bd:dc:0a:12:0e:be:ff:08:42:16: f6:1a:61:7e:a8:5e:f1:a0:4f:d5:5c:84:7f:02:c2:4b:bc:bc: df:a6:ed:5c:71:bf:36:75:57:bd:a0:6c:49:7b:35:96:db:4c: 75:8a:f1:38:4d:32:12:09:dc:fc:45:2d:2b:30:fa:b8:79:34: 28:c0:d9:48:78:ff:ea:a5:59:b4:b7:39:25:d9:9c:c3:4c:45: b5:3a:44:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRDAxMTAvBgNVBAUTKDdBNUM0REQwQTNCQjlDRDgxNEIyMTc0QUY2OTNFM0Y3 NDE0Qjk5NUIwHhcNMjUwNzAxMDUxMDE2WhcNMjUwNzA4MDUxMDE2WjAYMRYwFAYD VQQDEw02ODYzNmRiOC0zM2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznQAVq84WRuOGvjgY5Y6qb6xEH/35Lw75UWiOgY0Kc6sIlkjPj225Plc3Y4O S+7fndX+LUJk041C4R90I0NaktJkm6WPVqLcH/2xFC4Api++o5VGAzrVLaPQMByT YU1O/t/LJw7LD2epiKFM04QTiqj7/zBs0eFRlGn2BnxlWDoWo4kehkuwvIRJr4R+ 5DslQ6H0p6DtzoETPrFl8dRMzyCvjMcQ12mIFreoNbKwUm/J0A2D+yHXP8YP6Qlw p97Ga5Hg4A6s8mAjZjSKq4GmHU61hsPv5IyUf7iZJDJQNYajwgsyicT3xpnFHjKw VhR0QJ1fTRVC9GAeLknqXk/MwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxBcVvr VVdzn0mrlDFgmPShXCIhMB8GA1UdIwQYMBaAFHpcTdCju5zYFLIXSvaT4/dBS5lb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZEMC8yQzlBQTMxQzk1 NzYxMUVFODJFRkNCMUNDNEY5QUUwMi9lbHhOMEtPN25OZ1VzaGRLOXBQajkwRkxt VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VseE4wS083bk5nVXNoZEs5cFBqOTBGTG1Wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZEMC8yQzlBQTMxQzk1NzYxMUVFODJFRkNCMUNDNEY5QUUwMi9lbHhOMEtPN25O Z1VzaGRLOXBQajkwRkxtVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX5SowmiuJzmSdkQGyvM/bWXATR3oG+I1X0wCFYUye+DZOwr3yqpiI Hmz7bwcizWCp0zxVXoLH8cPlFWGKp/HkwxEwFo1axQPTHAIHzHtzYvJIhLa7+pN6 CsbNhxeR65ampHTCG9xxgky70WqregPF0HORfRLz99/OzDycX381GLEa58vkkicp WNT2LBLzzEUB16NSuOugxbrA8M/O+z4CeG3O6zlwkMSUKL3cChIOvv8IQhb2GmF+ qF7xoE/VXIR/AsJLvLzfpu1ccb82dVe9oGxJezWW20x1ivE4TTISCdz8RS0rMPq4 eTQowNlIeP/qpVm0tzkl2ZzDTEW1OkS/ -----END CERTIFICATE-----Generated at Wed Jul 2 15:57:18 2025 by rpki-client