$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json) Hash identifier: MtscxihfH7P/3vwLpaWguEELtCx4B+RfhUhLkIkc+Vc= Subject key identifier: 1F:9B:E8:AE:8F:DA:2D:3D:BC:59:20:94:BB:94:53:01:EB:BB:BE:15 Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft Manifest number: C3 Signing time: Sat 17 May 2025 05:25:58 +0000 Manifest this update: Sat 17 May 2025 05:25:57 +0000 Manifest next update: Sat 24 May 2025 05:25:57 +0000 Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: aE/h9yQuE/78U8AKlY2eU+djXTUVZTVNFzwEd6Hhbr8=) 2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: bHWlYJultpd4141lSOHtlDGQNuKfjn0r+UBsEdeuoEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Validity Not Before: May 17 05:25:57 2025 GMT Not After : May 24 05:25:57 2025 GMT Subject: CN=68281de5-8a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:21:11:78:1f:93:d5:93:4d:e7:aa:2a:cd: b7:83:a6:e5:7d:c7:56:55:ce:20:59:45:3c:01:d9: bf:a9:05:95:18:c7:ab:ae:26:36:f2:9a:5c:27:f0: 1e:27:72:d2:ea:66:64:5a:5d:df:29:72:94:24:d0: 3e:82:1b:75:e3:90:ed:28:5e:72:23:aa:cd:aa:00: 81:a8:3e:93:7f:f4:01:8d:fe:08:e3:96:1e:08:96: 59:6e:e5:0c:ed:53:26:c5:66:b0:36:7f:91:fa:b9: a1:e6:84:a5:8a:62:dc:e4:5a:ee:7b:2b:4f:a6:fa: 58:06:05:53:6c:16:9c:f0:38:90:26:8e:66:53:d3: 5d:d2:25:af:01:68:f7:08:ad:07:26:ba:95:05:bd: 2e:b2:b0:7f:c8:c3:a0:6f:98:db:e3:92:f1:14:54: b6:bf:c0:bd:47:8e:e7:df:81:1e:19:11:cf:37:ce: 06:dc:d0:10:17:2d:99:16:a3:ee:42:69:ef:b4:a4: 61:34:2f:0a:e0:9f:a0:1c:69:0a:8e:1f:d8:6b:57: a6:3b:91:68:92:81:93:cd:64:62:11:dc:ee:08:de: e3:bd:77:6e:93:47:b5:fb:96:49:11:8f:1e:8f:2d: fc:cb:ed:84:27:7f:71:b0:48:87:5b:6c:5f:ef:a8: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9B:E8:AE:8F:DA:2D:3D:BC:59:20:94:BB:94:53:01:EB:BB:BE:15 X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a0:f0:69:bd:02:81:47:ae:41:f9:4f:0e:40:52:f5:14:45: 32:54:8e:a9:e2:3d:a7:16:2b:67:81:4b:5f:68:9f:c6:b3:9f: 53:1e:56:a1:d8:dc:6f:09:28:71:4d:ae:47:6a:ef:25:c9:69: 6b:0f:d4:69:a5:cc:96:ac:d8:de:11:6d:30:9e:c0:a9:df:22: 48:45:1d:40:df:c6:f9:f4:8e:7c:25:16:7f:c3:de:6d:e4:14: 1c:2a:4a:0b:24:d8:be:8a:3c:99:3b:cd:f8:a2:93:ec:11:0a: c0:c7:af:b6:97:b5:ca:29:4b:b4:fa:b6:55:4b:c2:ab:26:9c: 89:56:99:aa:16:02:9c:f1:50:d8:21:3d:6c:9d:e8:a2:54:fc: c5:fe:0e:4f:69:61:0c:a7:03:fd:1e:3b:36:85:8b:9e:df:a9: a9:83:4f:63:c7:e8:e7:a3:3f:20:df:8c:56:12:1d:34:5d:64: bd:c5:96:3f:2a:2b:57:72:29:d2:51:06:e5:86:fb:86:42:2f: cb:60:72:6e:e9:64:6c:11:23:97:8c:72:21:55:83:65:3e:f2: e4:41:85:d0:76:f6:bc:40:2d:e6:5a:df:a2:bc:16:60:6e:1a: de:2c:77:3f:b8:04:dc:38:b3:05:0d:84:8c:a0:0b:4d:c1:96: b3:13:c6:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2OTkxMTAvBgNVBAUTKEE3NENFN0RBRDVGQjUwNERCMTZCQkU3MEMyRjlERjBB QTlGMDA2MDkwHhcNMjUwNTE3MDUyNTU3WhcNMjUwNTI0MDUyNTU3WjAYMRYwFAYD VQQDEw02ODI4MWRlNS04YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx94hEXgfk9WTTeeqKs23g6blfcdWVc4gWUU8Adm/qQWVGMerriY28ppcJ/Ae J3LS6mZkWl3fKXKUJNA+ght145DtKF5yI6rNqgCBqD6Tf/QBjf4I45YeCJZZbuUM 7VMmxWawNn+R+rmh5oSlimLc5FrueytPpvpYBgVTbBac8DiQJo5mU9Nd0iWvAWj3 CK0HJrqVBb0usrB/yMOgb5jb45LxFFS2v8C9R47n34EeGRHPN84G3NAQFy2ZFqPu QmnvtKRhNC8K4J+gHGkKjh/Ya1emO5FokoGTzWRiEdzuCN7jvXduk0e1+5ZJEY8e jy38y+2EJ39xsEiHW2xf76hVKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+b6K6P 2i09vFkglLuUUwHru74VMB8GA1UdIwQYMBaAFKdM59rV+1BNsWu+cML53wqp8AYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY5OS81NTg2RUY2QTE3 RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VFMnhhNzV3d3ZuZkNxbndC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VF MnhhNzV3d3ZuZkNxbndCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASoPBpvQKBR65B+U8OQFL1FEUyVI6p4j2nFitngUtfaJ/Gs59THlah 2NxvCShxTa5Hau8lyWlrD9RppcyWrNjeEW0wnsCp3yJIRR1A38b59I58JRZ/w95t 5BQcKkoLJNi+ijyZO834opPsEQrAx6+2l7XKKUu0+rZVS8KrJpyJVpmqFgKc8VDY IT1sneiiVPzF/g5PaWEMpwP9Hjs2hYue36mpg09jx+jnoz8g34xWEh00XWS9xZY/ KitXcinSUQblhvuGQi/LYHJu6WRsESOXjHIhVYNlPvLkQYXQdva8QC3mWt+ivBZg bhreLHc/uATcOLMFDYSMoAtNwZazE8YQ -----END CERTIFICATE-----Generated at Sun May 18 19:25:14 2025 by rpki-client