$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: Ok/haMqPx+WBCj3jOhAmp1ehWyFppK8jvNfyr0WpHtM= Subject key identifier: 2D:F8:08:48:1E:E4:DD:BE:B0:D6:73:15:78:2B:C1:97:69:E6:89:C3 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0DC3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0DAF Signing time: Mon 12 May 2025 14:40:26 +0000 Manifest this update: Mon 12 May 2025 14:40:26 +0000 Manifest next update: Mon 19 May 2025 14:40:26 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: i9x4sQqm3V8dadzh22kyf7oerQkQslztZKKDkga8zRE=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3523 (0xdc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: May 12 14:40:26 2025 GMT Not After : May 19 14:40:26 2025 GMT Subject: CN=6822085a-f366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:4a:78:f5:88:f9:62:49:67:8e:b9:33:8d: 40:04:4b:30:76:81:09:df:24:3a:af:3f:97:61:46: 95:f9:ef:80:91:46:e4:d6:c9:65:b4:7a:7a:2a:00: ae:da:ee:e3:81:93:85:e3:77:6b:1e:93:d2:25:2b: c9:d6:1c:b5:37:ff:80:54:3a:c0:bc:b0:ca:fe:68: 55:09:0d:84:9b:31:94:78:51:7a:a7:ff:31:4b:d1: f3:23:d4:47:00:b5:6d:06:63:65:48:83:62:c5:c5: 2e:4d:ca:60:80:2f:d4:66:43:fc:26:c7:6e:a2:75: 28:95:13:e1:4b:c3:41:4f:57:b1:3d:16:fe:80:2c: b1:a0:1d:46:31:8b:a2:ab:ef:76:c3:ef:22:74:fc: 83:d1:c8:36:54:5b:78:6c:24:1d:f3:7c:3e:81:10: 69:c2:d0:f3:05:39:43:a4:01:fa:04:61:ee:8f:df: 8f:56:cf:a4:e7:16:9d:1f:9d:c1:15:b7:70:f2:e1: 02:e5:4a:fe:ac:ba:76:d8:7a:dd:d0:ec:c1:58:53: 97:60:2b:76:d8:fe:80:17:52:a3:84:9f:3f:56:59: 83:12:52:cc:19:82:08:aa:68:2d:cd:75:99:b3:2d: b0:ec:2e:43:7f:3c:2b:26:fd:58:e4:e5:5e:03:f5: ae:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F8:08:48:1E:E4:DD:BE:B0:D6:73:15:78:2B:C1:97:69:E6:89:C3 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ac:3e:3c:35:be:0e:e9:60:09:db:ba:f5:5b:22:73:22:d6: 17:65:88:a6:de:20:91:2a:57:a8:84:7f:2e:fb:b3:06:a1:67: 10:bb:75:ac:67:5b:37:8e:42:a8:9e:37:4e:7c:e1:9e:f4:08: 24:66:ae:7c:bf:c6:8d:11:ea:3e:25:05:12:13:2c:45:64:a8: a7:e6:15:4f:23:3f:b4:24:00:ca:3a:8c:05:07:14:ff:a4:71: b4:8e:e1:c9:ee:ae:67:6c:3d:f5:eb:18:32:b8:60:f8:3c:3b: 12:12:e6:86:40:4f:cf:30:5f:56:60:87:7e:8d:b8:d9:01:ec: 41:76:fa:a1:44:f5:58:36:a8:e1:5d:5f:6f:7e:51:5c:83:bd: 0f:08:3d:54:6e:7d:2e:f1:d7:f1:ee:6d:b0:52:3e:dc:3d:28: a0:36:8d:4d:5d:39:1b:bb:51:f7:87:cc:14:93:54:e0:5d:97: 46:5b:59:81:a3:9b:87:70:0d:bf:f5:6e:bb:92:87:17:d4:61: 3c:f5:d9:f7:94:fe:a1:27:f9:fa:19:16:94:d9:db:f7:6a:08: ef:76:63:97:fe:7a:17:ae:9a:1c:6d:3f:37:fd:ce:85:f4:b4: 2e:fb:92:44:01:5a:84:3a:f4:77:c8:92:5b:73:6d:f6:6f:09: b5:37:6f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjUwNTEyMTQ0MDI2WhcNMjUwNTE5MTQ0MDI2WjAYMRYwFAYD VQQDEw02ODIyMDg1YS1mMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApthKePWI+WJJZ465M41ABEswdoEJ3yQ6rz+XYUaV+e+AkUbk1slltHp6KgCu 2u7jgZOF43drHpPSJSvJ1hy1N/+AVDrAvLDK/mhVCQ2EmzGUeFF6p/8xS9HzI9RH ALVtBmNlSINixcUuTcpggC/UZkP8JsduonUolRPhS8NBT1exPRb+gCyxoB1GMYui q+92w+8idPyD0cg2VFt4bCQd83w+gRBpwtDzBTlDpAH6BGHuj9+PVs+k5xadH53B Fbdw8uEC5Ur+rLp22Hrd0OzBWFOXYCt22P6AF1KjhJ8/VlmDElLMGYIIqmgtzXWZ sy2w7C5DfzwrJv1Y5OVeA/WuywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC34CEge 5N2+sNZzFXgrwZdp5onDMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtrD48Nb4O6WAJ27r1WyJzItYXZYim3iCRKleohH8u+7MGoWcQu3Ws Z1s3jkKonjdOfOGe9AgkZq58v8aNEeo+JQUSEyxFZKin5hVPIz+0JADKOowFBxT/ pHG0juHJ7q5nbD316xgyuGD4PDsSEuaGQE/PMF9WYId+jbjZAexBdvqhRPVYNqjh XV9vflFcg70PCD1Ubn0u8dfx7m2wUj7cPSigNo1NXTkbu1H3h8wUk1TgXZdGW1mB o5uHcA2/9W67kocX1GE89dn3lP6hJ/n6GRaU2dv3agjvdmOX/noXrpocbT83/c6F 9LQu+5JEAVqEOvR3yJJbc232bwm1N2+X -----END CERTIFICATE-----Generated at Tue May 13 06:57:23 2025 by rpki-client