$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: US5ErlC/E/gquiJsDv9/vWXbjfibe5qHPXbCfDxqL4Y= Subject key identifier: 19:39:00:00:07:9E:2D:9A:FC:AF:45:AB:0C:39:AC:9A:47:E1:08:9B Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 2367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 2346 Signing time: Fri 16 May 2025 16:03:32 +0000 Manifest this update: Fri 16 May 2025 16:03:32 +0000 Manifest next update: Fri 23 May 2025 16:03:32 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: N8YSw0W1aYd0ZpSdZ/eCabHlM9Gf3MPIKOSgROlFIJ8=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9063 (0x2367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: May 16 16:03:32 2025 GMT Not After : May 23 16:03:32 2025 GMT Subject: CN=682761d4-555d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:0e:b3:59:19:7d:bd:9e:31:8d:97:08:72: 27:b2:67:b7:14:ff:38:52:77:82:d8:38:54:7d:b6: 15:36:e5:b7:81:a7:58:e7:c5:ae:9e:e7:94:a6:98: 0c:d4:2f:b2:ac:f5:0c:2d:94:28:6e:5c:1b:9e:b4: 50:4c:d2:93:e3:4c:3a:dc:be:64:5a:1c:06:72:b7: 4e:7d:c6:25:74:15:8a:39:50:51:74:ce:1f:e2:fb: 77:f4:65:c3:5c:5a:3f:42:43:83:45:0e:11:d4:a5: 12:07:66:b3:3d:d1:34:4e:d9:c0:46:59:2b:b5:f1: a0:cb:21:87:5a:78:ae:a8:68:80:35:1a:25:53:a9: 6f:91:94:f6:5f:12:1e:04:df:72:b3:c3:10:66:75: 4d:7c:21:c7:62:02:00:b9:f4:ba:20:2e:5c:c8:81: 8a:5c:29:33:63:ec:15:e0:ba:99:19:98:d1:b9:cd: fa:73:17:3b:fa:a5:a2:2b:9f:fa:ef:ba:f1:13:f8: c6:2c:e0:19:ca:6f:02:02:2f:91:ba:c3:cd:95:27: e7:a4:03:df:4a:cc:73:26:d7:64:d0:3b:21:fa:bc: 67:6b:86:0d:1e:27:c8:97:8d:0a:18:67:85:db:6d: 04:58:fe:2a:d1:49:12:38:2d:ca:21:6c:c8:20:97: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:39:00:00:07:9E:2D:9A:FC:AF:45:AB:0C:39:AC:9A:47:E1:08:9B X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:28:30:f0:dc:39:da:d7:bd:ea:d7:61:e7:d6:4b:d7:b7:9a: 62:ff:30:82:98:b3:0d:92:94:93:26:1a:84:07:25:1e:b2:57: 10:29:47:e7:ef:e0:e4:b1:d3:9e:30:f9:23:fa:61:cb:51:63: 37:92:3d:14:78:f6:c6:f9:96:da:5c:1f:43:46:2c:0f:dc:b8: f3:6c:58:e5:3d:33:65:24:c4:44:52:c9:99:fb:3b:2e:20:8f: cc:0a:db:4f:93:81:c8:94:91:2d:88:2f:6b:41:9d:f6:70:9f: 1e:e5:15:a8:a4:f7:c5:17:eb:72:b6:cc:9a:c4:f2:b1:41:69: 20:98:68:4b:f4:32:b0:69:a4:17:86:c8:88:3e:45:96:bb:9b: 36:6c:d0:e3:d5:fd:08:48:30:0a:b7:ac:9c:68:70:6f:50:b5: 10:f9:ea:a2:9a:d3:b2:f5:ad:21:cc:99:27:aa:1d:e9:5f:18: 9a:7d:69:6a:f8:8f:26:91:63:b0:07:08:09:63:71:bc:a6:e3: 1d:62:d3:0f:d2:28:bd:4d:4c:55:f1:81:41:6c:d2:81:f1:7c: 87:0d:5a:fe:46:9a:0b:6b:2a:0e:52:21:89:b7:71:98:c8:03: b2:22:92:2e:7f:1d:87:36:56:3b:3b:52:a9:01:3a:a1:04:fe: 4e:13:72:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjUwNTE2MTYwMzMyWhcNMjUwNTIzMTYwMzMyWjAYMRYwFAYD VQQDEw02ODI3NjFkNC01NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOYOs1kZfb2eMY2XCHInsme3FP84UneC2DhUfbYVNuW3gadY58WunueUppgM 1C+yrPUMLZQoblwbnrRQTNKT40w63L5kWhwGcrdOfcYldBWKOVBRdM4f4vt39GXD XFo/QkODRQ4R1KUSB2azPdE0TtnARlkrtfGgyyGHWniuqGiANRolU6lvkZT2XxIe BN9ys8MQZnVNfCHHYgIAufS6IC5cyIGKXCkzY+wV4LqZGZjRuc36cxc7+qWiK5/6 77rxE/jGLOAZym8CAi+RusPNlSfnpAPfSsxzJtdk0Dsh+rxna4YNHifIl40KGGeF 220EWP4q0UkSOC3KIWzIIJfBtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk5AAAH ni2a/K9Fqww5rJpH4QibMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAKDDw3Dna173q12Hn1kvXt5pi/zCCmLMNkpSTJhqEByUeslcQKUfn 7+DksdOeMPkj+mHLUWM3kj0UePbG+ZbaXB9DRiwP3LjzbFjlPTNlJMREUsmZ+zsu II/MCttPk4HIlJEtiC9rQZ32cJ8e5RWopPfFF+tytsyaxPKxQWkgmGhL9DKwaaQX hsiIPkWWu5s2bNDj1f0ISDAKt6ycaHBvULUQ+eqimtOy9a0hzJknqh3pXxiafWlq +I8mkWOwBwgJY3G8puMdYtMP0ii9TUxV8YFBbNKB8XyHDVr+RpoLayoOUiGJt3GY yAOyIpIufx2HNlY7O1KpATqhBP5OE3IZ -----END CERTIFICATE-----Generated at Sat May 17 01:05:06 2025 by rpki-client