$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: eV0zukQnVf5qjl+kACwBb0ajoLwauv0gsbY+LaPdKqM= Subject key identifier: D7:1B:E8:42:FB:B6:52:24:E9:DE:50:AE:E3:AB:D6:50:69:6B:81:27 Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 0335 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 032B Signing time: Sun 11 May 2025 00:42:04 +0000 Manifest this update: Sun 11 May 2025 00:42:04 +0000 Manifest next update: Sun 18 May 2025 00:42:04 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: Y3yfbN+L44O1AUZepNBIJt4RHAAPgohxUQBPYq9eXok=) 2: 48DBC234F4DB11EFAC0A7D1AC4F9AE02.roa (hash: MMIkwa2VF05y1vJp43/649+EQByZjCMwwH+3GumiKxU=) 3: EF789834F4DA11EFB3FF6B19C4F9AE02.roa (hash: x6KLXmxialEvQm9chZWjV+m4aGyDo45aTYp7F93yY6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 821 (0x335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: May 11 00:42:04 2025 GMT Not After : May 18 00:42:04 2025 GMT Subject: CN=681ff25c-1162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:41:20:bf:52:47:bc:9c:f9:30:76:29:ae: 09:dd:29:9f:b7:c8:85:36:c1:6b:4a:13:e0:f7:9e: 9e:04:86:35:9e:44:94:36:b5:ee:15:1b:eb:cb:32: d3:9a:09:35:61:22:5c:53:d2:34:5d:64:26:7f:31: 3a:84:8c:c6:a1:52:72:de:72:ec:69:d5:43:26:e5: 32:ae:06:ad:6b:25:36:a7:dd:5d:1d:69:73:70:86: 1a:fe:37:39:54:ff:98:bd:af:dd:b2:5f:c9:0b:c2: 06:9f:09:82:81:24:c7:3d:64:e4:82:83:2a:4b:be: 34:1b:e5:6b:24:76:4b:4d:83:6d:af:56:73:c2:9f: 67:8a:58:57:0e:e1:e3:39:f2:75:61:19:b3:fe:e6: 01:10:50:c9:c0:44:0b:83:88:aa:a8:68:21:cc:c5: a5:e5:5a:44:d7:7d:07:33:36:69:d2:bb:d8:ce:a8: 35:1d:09:8a:c6:62:57:2f:66:aa:3f:3a:91:fe:7e: c7:a3:e8:3c:83:00:10:b9:03:98:db:8c:60:d4:1a: 15:fc:6a:dc:65:b7:5c:da:c6:3a:f3:47:63:75:14: 9e:fb:b6:24:f7:a9:e6:61:a5:99:46:74:59:e9:41: fc:70:b8:ad:a5:58:70:74:15:14:46:fd:36:f2:3c: 2b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1B:E8:42:FB:B6:52:24:E9:DE:50:AE:E3:AB:D6:50:69:6B:81:27 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ef:41:d7:0c:43:37:18:02:99:df:15:00:05:19:75:f7:8f: cc:59:ba:e7:d5:dd:68:f0:67:7a:b4:73:2a:db:7c:ed:7a:b5: cb:e8:92:e9:85:17:36:04:c2:07:f7:5a:8b:28:6d:b2:16:ff: cc:31:10:f0:37:ae:e1:5f:8f:b3:44:bb:04:a5:fb:60:63:a3: b6:7d:0f:ec:45:e2:b0:5f:f9:b9:36:d5:ee:6b:34:93:58:e1: bb:03:20:35:40:ca:a8:f2:60:42:83:6b:f4:3b:6c:4d:01:38: 65:d7:92:e1:43:20:c7:04:2d:ea:55:1f:89:2b:64:90:7a:c7: 03:27:ec:67:6a:f7:78:94:ae:f6:85:67:e6:21:8e:55:83:03: 05:ea:9f:a7:be:99:e8:32:46:d5:9a:f8:46:2e:5c:45:75:18: 35:18:7d:89:f1:5d:e3:a8:b1:a5:38:09:bd:85:89:4a:22:83: 74:e2:53:43:ae:01:8e:f1:61:91:07:e7:a5:6b:7f:e8:64:c4: 1f:25:02:4f:a4:a0:ac:26:f0:91:92:ed:89:d0:35:10:65:18: f6:d1:89:15:2a:a0:90:fa:d9:9a:a0:9a:f0:2c:21:3e:81:e6: 16:c3:be:d1:9e:23:8f:1b:fa:c6:7e:6b:f9:18:b8:f3:ff:37: 2c:e8:24:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjUwNTExMDA0MjA0WhcNMjUwNTE4MDA0MjA0WjAYMRYwFAYD VQQDEw02ODFmZjI1Yy0xMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkhBIL9SR7yc+TB2Ka4J3Smft8iFNsFrShPg956eBIY1nkSUNrXuFRvryzLT mgk1YSJcU9I0XWQmfzE6hIzGoVJy3nLsadVDJuUyrgatayU2p91dHWlzcIYa/jc5 VP+Yva/dsl/JC8IGnwmCgSTHPWTkgoMqS740G+VrJHZLTYNtr1Zzwp9nilhXDuHj OfJ1YRmz/uYBEFDJwEQLg4iqqGghzMWl5VpE130HMzZp0rvYzqg1HQmKxmJXL2aq PzqR/n7Ho+g8gwAQuQOY24xg1BoV/GrcZbdc2sY680djdRSe+7Yk96nmYaWZRnRZ 6UH8cLitpVhwdBUURv028jwrsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcb6EL7 tlIk6d5QruOr1lBpa4EnMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG70HXDEM3GAKZ3xUABRl194/MWbrn1d1o8Gd6tHMq23zterXL6JLp hRc2BMIH91qLKG2yFv/MMRDwN67hX4+zRLsEpftgY6O2fQ/sReKwX/m5NtXuazST WOG7AyA1QMqo8mBCg2v0O2xNAThl15LhQyDHBC3qVR+JK2SQescDJ+xnavd4lK72 hWfmIY5VgwMF6p+nvpnoMkbVmvhGLlxFdRg1GH2J8V3jqLGlOAm9hYlKIoN04lND rgGO8WGRB+ela3/oZMQfJQJPpKCsJvCRku2J0DUQZRj20YkVKqCQ+tmaoJrwLCE+ geYWw77RniOPG/rGfmv5GLjz/zcs6CQn -----END CERTIFICATE-----Generated at Sun May 11 10:34:24 2025 by rpki-client