$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft File: 8mzvyND2FJXOpWXLF0zPkuc6CJk.mft (raw, json) Hash identifier: KNE0JThAbXCVLIlq7CV5tcL+pe7Umh029NtJUU87iBM= Subject key identifier: F4:1C:25:38:C8:80:53:08:E1:D6:EF:34:D1:35:D4:57:F2:30:CD:B0 Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 Certificate issuer: /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft Manifest number: C3 Signing time: Tue 13 May 2025 05:01:03 +0000 Manifest this update: Tue 13 May 2025 05:01:02 +0000 Manifest next update: Tue 20 May 2025 05:01:02 +0000 Files and hashes: 1: 8mzvyND2FJXOpWXLF0zPkuc6CJk.crl (hash: i5fsVAYmM6lWey6BeqGOqQnbauBbffc+vFrnPZp47qY=) 2: 81DED04C065411EFAAF0D25DC4F9AE02.roa (hash: KnA/iGGYoBgm/bcH9BItyxCBripYpEURjIllmAUmPC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184A0A, serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Validity Not Before: May 13 05:01:02 2025 GMT Not After : May 20 05:01:02 2025 GMT Subject: CN=6822d20f-7336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:69:63:42:f3:46:e8:a7:c1:56:bf:75:21: ba:6e:4e:82:78:47:f4:d4:e8:f0:4b:10:a6:d9:a1: b2:8f:59:56:9b:bc:30:98:d7:5d:53:76:c7:8d:cc: 4e:00:02:12:a9:f2:66:61:9d:df:0b:cc:62:77:96: ad:6b:81:12:71:cf:6e:0f:86:ef:18:df:18:af:52: 0f:b1:be:bf:0e:f6:75:7f:7a:dc:71:dc:25:c7:e5: 3c:32:dd:f3:ca:6b:30:cd:a6:5c:2e:8a:87:db:5d: d4:05:1a:15:42:22:d0:8c:27:af:f0:31:ae:0b:88: d1:fb:ca:7a:c8:af:8d:f3:c7:69:3b:5d:6e:9f:b0: ba:af:f9:fd:b9:ad:6b:67:f6:ad:74:34:53:c6:e2: 0a:1a:f6:95:3d:77:62:de:98:4e:18:15:2d:24:bb: ea:46:b5:f3:3b:31:ba:9e:3a:c1:62:c9:38:14:b4: c6:76:2a:76:e8:ee:44:70:d3:cd:e6:9d:7d:2c:c1: e7:42:2c:d4:27:3d:db:c7:a8:54:ee:cf:9b:a3:08: f1:7b:8f:9b:76:e1:82:1c:ff:e0:e7:e8:09:9e:c0: 48:9a:4c:a4:95:75:c5:22:55:ee:61:00:75:2c:e5: 09:45:a5:6f:26:6f:41:17:f1:60:39:b7:2a:7c:d8: b0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1C:25:38:C8:80:53:08:E1:D6:EF:34:D1:35:D4:57:F2:30:CD:B0 X509v3 Authority Key Identifier: keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:76:08:19:d0:fd:5f:f5:4d:cb:90:d9:1b:2c:74:cc:2f:25: aa:4c:e6:4c:02:c9:b3:9a:38:c2:79:cf:18:80:6f:3b:05:ae: f1:d6:b1:bd:c3:f0:4a:5d:78:69:5d:82:aa:2a:57:8e:4f:7b: 30:4d:7c:c4:58:bc:0c:67:cd:1a:59:17:6e:85:bf:b8:0b:04: 72:d7:14:14:e7:ca:06:ea:e9:d4:bc:f0:12:b2:3f:ef:32:f9: 06:49:c6:a7:3c:ef:86:a9:45:b4:71:8e:0f:af:d0:83:f5:fd: 29:45:9c:6a:32:1e:a8:d3:5c:5a:cc:05:54:84:e3:b0:61:f2: b3:96:6d:5d:a1:da:73:66:03:5b:1b:0f:34:06:20:b7:8f:5d: aa:f4:21:e8:e2:46:f7:58:e7:ca:3c:1d:c7:c3:1d:c4:71:42: aa:56:c9:1a:af:bd:f8:64:41:ec:c7:31:9d:16:e0:6b:9d:bd: d8:b3:47:85:0b:e9:98:47:aa:c0:a4:7c:8b:56:f2:4d:a4:85: a0:60:1a:fb:70:f6:ae:56:d9:2d:28:94:50:c2:6f:d8:e3:cb: b5:22:57:fa:57:b2:57:f6:08:d9:ca:3f:48:a6:70:e2:ea:7c: 02:a0:39:38:1f:d9:3d:57:c8:73:34:7a:7c:92:2f:a0:81:7d: 97:7e:96:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBMEExMTAvBgNVBAUTKEYyNkNFRkM4RDBGNjE0OTVDRUE1NjVDQjE3NENDRjky RTczQTA4OTkwHhcNMjUwNTEzMDUwMTAyWhcNMjUwNTIwMDUwMTAyWjAYMRYwFAYD VQQDEw02ODIyZDIwZi03MzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwFpY0LzRuinwVa/dSG6bk6CeEf01OjwSxCm2aGyj1lWm7wwmNddU3bHjcxO AAISqfJmYZ3fC8xid5ata4EScc9uD4bvGN8Yr1IPsb6/DvZ1f3rccdwlx+U8Mt3z ymswzaZcLoqH213UBRoVQiLQjCev8DGuC4jR+8p6yK+N88dpO11un7C6r/n9ua1r Z/atdDRTxuIKGvaVPXdi3phOGBUtJLvqRrXzOzG6njrBYsk4FLTGdip26O5EcNPN 5p19LMHnQizUJz3bx6hU7s+bowjxe4+bduGCHP/g5+gJnsBImkyklXXFIlXuYQB1 LOUJRaVvJm9BF/FgObcqfNiwHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQcJTjI gFMI4dbvNNE11FfyMM2wMB8GA1UdIwQYMBaAFPJs78jQ9hSVzqVlyxdMz5LnOgiZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEEwQS9ENDkxRDg4MDA2 NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZKWE9wV1hMRjB6UGt1YzZD SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhtenZ5TkQyRkpYT3BXWExGMHpQa3VjNkNKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEEwQS9ENDkxRDg4MDA2NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZK WE9wV1hMRjB6UGt1YzZDSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFdggZ0P1f9U3LkNkbLHTMLyWqTOZMAsmzmjjCec8YgG87Ba7x1rG9 w/BKXXhpXYKqKleOT3swTXzEWLwMZ80aWRduhb+4CwRy1xQU58oG6unUvPASsj/v MvkGScanPO+GqUW0cY4Pr9CD9f0pRZxqMh6o01xazAVUhOOwYfKzlm1dodpzZgNb Gw80BiC3j12q9CHo4kb3WOfKPB3Hwx3EcUKqVskar734ZEHsxzGdFuBrnb3Ys0eF C+mYR6rApHyLVvJNpIWgYBr7cPauVtktKJRQwm/Y48u1Ilf6V7JX9gjZyj9IpnDi 6nwCoDk4H9k9V8hzNHp8ki+ggX2XfpYk -----END CERTIFICATE-----Generated at Tue May 13 19:31:34 2025 by rpki-client