$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: vn+L+uLAx6BSzZXL/QcX0U4Y6x2YtqOatmJLVEz6+ac= Subject key identifier: 80:82:1E:DD:EB:FA:9C:3C:4E:99:29:D5:CF:11:A1:46:28:3B:6B:2A Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: 011B Signing time: Tue 01 Jul 2025 05:15:22 +0000 Manifest this update: Tue 01 Jul 2025 05:15:21 +0000 Manifest next update: Tue 08 Jul 2025 05:15:21 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: 2uxiT+nDEY72Sd6ZWMjWkoZ53XjQKYWdGX0GPF2TTkQ=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: v8vLgjK5S+JdCLTZc8YYYPXnZStqFTZMOLbog1OTRVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Validity Not Before: Jul 1 05:15:21 2025 GMT Not After : Jul 8 05:15:21 2025 GMT Subject: CN=68636ee9-e908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:00:98:87:73:b1:24:2b:44:56:1c:55:e0: 65:1e:66:94:40:34:82:9b:fd:03:a6:9b:97:8f:a6: 5d:55:3e:db:18:76:a5:62:c0:76:94:17:14:ba:ee: 2c:dc:96:07:12:83:ad:2b:eb:e0:42:b9:fb:1c:12: 99:b4:ce:66:28:6d:45:b5:af:be:0a:4c:e1:34:1e: 56:a3:3a:82:8b:21:65:b2:c8:84:d1:4d:ff:ae:a9: 74:0e:ba:6e:c0:b2:c3:4b:c8:74:1f:82:9f:a6:9c: 17:65:9d:52:2b:f2:f9:71:42:dd:31:62:1f:a2:d6: 63:fa:60:94:b5:39:fa:2e:da:e0:e3:01:61:6f:75: 7a:21:5b:33:57:ff:2a:54:c0:a7:c1:eb:ee:ef:0b: e0:56:e7:43:57:4d:53:92:69:4d:53:9f:97:38:3a: 72:c3:ae:33:9d:ae:18:e2:48:5e:f9:bc:91:b7:f0: 98:c6:07:95:b6:3f:dd:df:32:1a:62:d8:99:bb:0d: 52:ad:a5:d5:d3:7e:be:f3:c5:08:91:d5:bd:1a:7e: 6f:73:39:b9:58:ff:37:4f:5b:3d:9e:02:b9:27:41: 90:99:93:af:2b:4f:1f:b2:cd:f1:17:5e:ed:ca:5f: ee:05:31:99:23:e1:e7:11:f0:b3:49:c7:87:b0:74: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:82:1E:DD:EB:FA:9C:3C:4E:99:29:D5:CF:11:A1:46:28:3B:6B:2A X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e9:02:47:6b:a9:61:6b:b4:10:b1:a0:c8:a0:05:dd:fe:03: 9e:5a:0f:4b:73:e4:e1:f8:6a:4b:ea:2c:61:ee:4f:68:d1:d9: 39:ec:5e:e6:12:b1:f2:be:a4:26:ad:03:2c:6d:ea:a9:84:5b: 62:87:e4:ab:6f:9c:50:d1:6e:89:9f:11:bc:56:07:e0:0b:15: d0:ce:23:d1:19:1b:9a:b4:9a:2c:4d:f0:77:9b:d0:f9:92:bd: df:41:33:f7:e4:1c:ac:70:8a:82:9c:7f:52:18:31:85:9e:e4: 1c:42:97:7c:5f:df:da:85:66:61:fc:52:be:47:bf:8a:4b:a4: b7:6b:ae:76:90:fb:f5:c9:dc:9a:8a:ae:11:4a:23:aa:ff:fc: 82:2b:6a:71:6a:5c:72:ad:1d:9a:17:51:a3:95:4b:22:21:43: 78:1a:c6:c4:8d:8a:f7:bf:ab:ac:10:ea:18:7a:2b:ee:08:8f: 68:26:47:40:2e:83:2e:20:b1:6a:3c:cc:7f:80:4d:3f:b5:0a: 59:ed:84:9f:c0:70:b2:8a:f7:5a:a9:19:57:97:be:82:cf:e1: ae:16:dd:0b:9c:82:d5:32:de:5d:ac:01:f4:09:12:04:1e:35: 1c:d7:a8:41:ef:aa:46:d8:86:3e:84:2e:16:65:e0:13:e8:1c: 1a:59:53:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURDMjMxODhFMzJB QUExQjFCNDQwHhcNMjUwNzAxMDUxNTIxWhcNMjUwNzA4MDUxNTIxWjAYMRYwFAYD VQQDEw02ODYzNmVlOS1lOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoV0AmIdzsSQrRFYcVeBlHmaUQDSCm/0DppuXj6ZdVT7bGHalYsB2lBcUuu4s 3JYHEoOtK+vgQrn7HBKZtM5mKG1Fta++CkzhNB5WozqCiyFlssiE0U3/rql0Drpu wLLDS8h0H4KfppwXZZ1SK/L5cULdMWIfotZj+mCUtTn6Ltrg4wFhb3V6IVszV/8q VMCnwevu7wvgVudDV01TkmlNU5+XODpyw64zna4Y4khe+byRt/CYxgeVtj/d3zIa YtiZuw1SraXV036+88UIkdW9Gn5vczm5WP83T1s9ngK5J0GQmZOvK08fss3xF17t yl/uBTGZI+HnEfCzSceHsHQ2tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICCHt3r +pw8Tpkp1c8RoUYoO2sqMB8GA1UdIwQYMBaAFNBayQogf2CHzgLtwjGI4yqqGxtE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxMi80QjIzM0VFQUEy RDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJZk9BdTNDTVlqaktxb2JH MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJ Zk9BdTNDTVlqaktxb2JHMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu6QJHa6lha7QQsaDIoAXd/gOeWg9Lc+Th+GpL6ixh7k9o0dk57F7m ErHyvqQmrQMsbeqphFtih+Srb5xQ0W6JnxG8VgfgCxXQziPRGRuatJosTfB3m9D5 kr3fQTP35ByscIqCnH9SGDGFnuQcQpd8X9/ahWZh/FK+R7+KS6S3a652kPv1ydya iq4RSiOq//yCK2pxalxyrR2aF1GjlUsiIUN4GsbEjYr3v6usEOoYeivuCI9oJkdA LoMuILFqPMx/gE0/tQpZ7YSfwHCyivdaqRlXl76Cz+GuFt0LnILVMt5drAH0CRIE HjUc16hB76pG2IY+hC4WZeAT6BwaWVND -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:02 2025 by rpki-client