$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft File: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json) Hash identifier: RPhmy/vQY1NIueVFAAkpBkthw78n/FzLoIaU87F5iSo= Subject key identifier: B5:A1:0F:15:59:7A:0C:AE:58:8F:C3:E1:40:F1:80:2B:03:A1:39:DA Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Certificate serial: 0D88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft Manifest number: 0D71 Signing time: Wed 14 May 2025 18:05:33 +0000 Manifest this update: Wed 14 May 2025 18:05:32 +0000 Manifest next update: Wed 21 May 2025 18:05:32 +0000 Files and hashes: 1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: peGuBmWioRhHQsnSnSjcgvAGKVA9klznPpl233lOL0U=) 2: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: HGatQ3NBKjAKkQPomWLYHF4m0jKMBV6J5PFitZtRd34=) 3: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: MezHZiP7Ru8seZ060InpEpEJV9FnDzBoEJ7GFAcZfh4=) 4: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: L8kpi1SVm7ckPOHWxdzSsXqtMgpg83APjUnCBcHdbJE=) 5: 79666614E79311EC81D3720BC4F9AE02.roa (hash: +SK15TzGKYn5ZYvjCDCxNInAkPIS5ISaiZ+uwJr/wDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3464 (0xd88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Validity Not Before: May 14 18:05:32 2025 GMT Not After : May 21 18:05:32 2025 GMT Subject: CN=6824db6c-cdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:94:03:88:48:da:12:01:48:15:d6:52:27: 34:0e:c1:dc:59:35:5e:2d:1b:57:cc:3e:ac:67:60: 35:26:54:e5:47:d3:c9:dc:32:6b:cc:90:29:43:57: 57:78:22:a3:3c:28:c2:a9:d2:f6:8d:80:0b:00:ef: 1a:b7:ad:16:19:16:01:0b:c6:cf:f2:3e:d7:46:ea: 13:b0:12:5b:ce:bc:c8:5e:35:5c:10:48:04:17:43: 52:6c:19:26:5e:70:c2:0a:39:b9:d2:81:d1:64:db: ec:e2:e7:15:9d:b0:04:55:f5:de:84:38:21:9b:b5: 7e:4a:19:54:94:00:e7:a3:be:fb:5d:41:2f:77:54: a7:ab:d7:45:8c:4a:b8:26:5e:b5:66:33:86:05:8d: d6:90:be:3e:5d:bf:94:d0:66:38:49:4a:ef:f6:67: 7c:cd:15:1c:0b:34:0c:d8:6c:73:47:bb:a3:e6:7f: 11:14:65:ab:76:dc:ba:9b:3e:41:f8:a8:6a:e5:b0: 39:43:dd:7c:76:25:fa:01:86:4a:1a:a6:0b:bb:b2: 7d:40:88:56:ba:1a:1f:cd:69:65:06:3c:c7:c7:9a: 9a:d8:c8:22:45:c6:fe:d5:f6:48:e4:20:b0:6e:44: df:11:5c:45:07:94:a7:bd:84:f7:b9:d4:93:3a:17: 4f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A1:0F:15:59:7A:0C:AE:58:8F:C3:E1:40:F1:80:2B:03:A1:39:DA X509v3 Authority Key Identifier: keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:6b:93:40:a7:05:36:85:5a:aa:8e:88:c9:19:db:0d:21:bb: 46:b0:e3:a1:4e:90:fe:7e:b4:76:44:80:51:39:e7:d2:7c:7e: ac:6a:03:80:44:8d:90:8a:35:1d:22:6c:14:d3:42:34:24:f7: 12:8e:16:0e:11:68:d6:a3:69:46:26:75:67:db:2b:f0:48:0f: 22:35:3e:d9:d3:4e:2f:e2:7c:cc:19:fe:12:d1:6a:52:a4:da: 07:7d:cf:d6:94:bf:22:56:82:4f:ac:e3:63:d8:56:28:f7:9a: 32:1a:74:82:c2:cb:d0:ca:7b:4b:3b:af:76:6d:41:27:6a:a8: 14:ae:9f:83:3d:9a:fa:d0:d8:77:28:6f:42:d0:d2:a2:78:d6: dc:d3:e3:da:4c:24:0a:56:75:b4:f8:c8:5a:31:08:87:6d:bb: 93:37:dc:67:ed:26:f1:1e:d0:80:52:a5:7c:6b:13:73:c2:d9: e7:a3:4c:e4:19:3f:21:24:ac:34:07:f7:19:26:a3:58:67:2a: 73:ca:76:62:27:3e:11:65:27:5a:55:3e:2c:d5:82:63:05:f6: 01:d4:95:ee:40:0f:55:ec:8a:84:0c:1b:23:f7:c4:77:a4:3e: fb:d7:aa:2b:53:3a:96:d6:7f:40:82:65:4f:b0:d9:6f:17:3c: 98:02:a4:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyQUMxMTAvBgNVBAUTKEY0N0QwRkJCNkU4QjY0RUNEOTkxMTY4RDhGNzMwRjc4 OTFFNEY0NEUwHhcNMjUwNTE0MTgwNTMyWhcNMjUwNTIxMTgwNTMyWjAYMRYwFAYD VQQDEw02ODI0ZGI2Yy1jZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC2UA4hI2hIBSBXWUic0DsHcWTVeLRtXzD6sZ2A1JlTlR9PJ3DJrzJApQ1dX eCKjPCjCqdL2jYALAO8at60WGRYBC8bP8j7XRuoTsBJbzrzIXjVcEEgEF0NSbBkm XnDCCjm50oHRZNvs4ucVnbAEVfXehDghm7V+ShlUlADno777XUEvd1Snq9dFjEq4 Jl61ZjOGBY3WkL4+Xb+U0GY4SUrv9md8zRUcCzQM2GxzR7uj5n8RFGWrdty6mz5B +Khq5bA5Q918diX6AYZKGqYLu7J9QIhWuhofzWllBjzHx5qa2MgiRcb+1fZI5CCw bkTfEVxFB5SnvYT3udSTOhdPFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWhDxVZ egyuWI/D4UDxgCsDoTnaMB8GA1UdIwQYMBaAFPR9D7tui2Ts2ZEWjY9zD3iR5PRO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBQy82NDE3MTMxNkNB MzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpPelprUmFOajNNUGVKSGs5 RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlIMFB1MjZMWk96WmtSYU5qM01QZUpIazlFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTJBQy82NDE3MTMxNkNBMzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpP elprUmFOajNNUGVKSGs5RTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAa5NApwU2hVqqjojJGdsNIbtGsOOhTpD+frR2RIBROefSfH6sagOA RI2QijUdImwU00I0JPcSjhYOEWjWo2lGJnVn2yvwSA8iNT7Z004v4nzMGf4S0WpS pNoHfc/WlL8iVoJPrONj2FYo95oyGnSCwsvQyntLO692bUEnaqgUrp+DPZr60Nh3 KG9C0NKieNbc0+PaTCQKVnW0+MhaMQiHbbuTN9xn7SbxHtCAUqV8axNzwtnno0zk GT8hJKw0B/cZJqNYZypzynZiJz4RZSdaVT4s1YJjBfYB1JXuQA9V7IqEDBsj98R3 pD7716orUzqW1n9AgmVPsNlvFzyYAqQe -----END CERTIFICATE-----Generated at Fri May 16 09:47:15 2025 by rpki-client