$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: MFDu8wdxuDXsk06vMEL11+EBhelZdcp7rfjQaXx9UKw= Subject key identifier: 35:0F:BA:BF:27:66:33:E2:81:3E:7D:2E:EE:00:9E:21:1B:4B:C7:8B Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 350D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 34AD Signing time: Mon 12 May 2025 14:24:16 +0000 Manifest this update: Mon 12 May 2025 14:24:16 +0000 Manifest next update: Mon 19 May 2025 14:24:16 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: FjGLCCxycsA62Kxyyxf/1wq68mQrK9viK6O21O1xYbI=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13581 (0x350d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: May 12 14:24:16 2025 GMT Not After : May 19 14:24:16 2025 GMT Subject: CN=68220490-b07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:5c:5a:19:eb:e4:70:b8:fa:94:86:63:e3: da:cd:53:70:17:5d:2e:03:fa:be:db:b6:7c:76:7c: 5f:e6:3d:1c:b8:0c:b3:aa:c5:f7:1d:56:b3:c6:12: a5:dd:e7:57:73:83:f3:41:80:3b:8d:70:0b:b8:14: 18:75:49:f7:56:d9:c4:a2:d2:75:9e:72:4e:67:02: 8a:bd:9d:dc:73:07:e5:4c:8a:12:40:b1:7b:16:29: 75:82:f5:f5:b2:a8:1e:33:00:77:8a:f0:fc:f8:80: 71:47:b1:10:bf:c8:b5:e7:f3:3f:ab:8b:d0:c6:b6: 55:f8:cc:ad:42:b0:1a:5f:29:ef:62:70:c5:68:d1: b0:df:6c:bd:65:b1:cd:5a:e5:53:06:ff:38:60:dd: 60:16:48:3f:76:e5:2b:60:de:47:7b:dc:34:29:92: 05:dd:8e:9c:fc:92:5e:d4:17:e8:4c:f2:51:70:79: df:32:7f:17:35:fc:94:2e:d7:d3:46:04:1a:6b:0c: f3:44:b2:2e:82:14:8c:c6:ab:90:ab:a7:a6:1e:7b: a3:e5:f1:e8:fe:19:aa:05:36:48:50:e5:82:db:76: 6b:3f:b8:e5:4f:7d:b8:2f:b7:54:98:32:ef:2e:d7: 67:f4:cb:7e:5a:0a:cb:14:6a:59:c3:b6:1d:d2:78: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0F:BA:BF:27:66:33:E2:81:3E:7D:2E:EE:00:9E:21:1B:4B:C7:8B X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:73:10:c4:1e:b6:e8:c7:57:3d:2c:05:d6:c3:5e:4e:1b:b2: da:87:9b:35:0c:33:05:93:e0:6f:92:24:4c:63:d6:2b:fb:db: 8a:49:46:95:5d:56:ab:c1:d8:15:91:07:98:05:30:0f:58:a0: d9:aa:80:c9:e3:61:95:cb:41:19:31:6d:79:89:86:de:d5:34: 58:09:29:d8:fa:50:c5:94:7f:09:21:30:f5:d6:43:a3:5b:9a: c3:16:fb:66:8e:ce:85:6a:32:e3:6f:83:27:30:d4:89:15:d5: bb:bc:76:f5:42:a2:56:b8:59:5c:67:1d:17:99:f7:49:f5:1b: 6b:d5:21:8a:8b:29:01:39:b4:a4:9d:d4:bc:c5:cd:d2:1b:aa: 92:43:0c:7f:1b:35:bf:83:4c:6d:4d:4b:02:b1:17:bf:35:e2: fa:9d:da:b1:1a:64:02:39:37:b7:06:7a:d0:71:40:67:17:48: d6:27:2c:18:eb:60:68:65:5a:df:97:3a:3b:9b:a8:d1:2f:af: 92:4a:da:e2:18:a2:64:1b:da:5b:b7:f8:f0:4c:dd:cc:fc:a7: 08:5d:e4:50:f6:6c:f5:f5:bc:89:9f:d9:5b:4c:4c:04:7c:14: b1:05:bf:11:48:2e:3f:0d:d0:e3:b5:cc:29:35:d3:be:2f:ba: 57:24:43:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUwNTEyMTQyNDE2WhcNMjUwNTE5MTQyNDE2WjAYMRYwFAYD VQQDEw02ODIyMDQ5MC1iMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3pcWhnr5HC4+pSGY+PazVNwF10uA/q+27Z8dnxf5j0cuAyzqsX3HVazxhKl 3edXc4PzQYA7jXALuBQYdUn3VtnEotJ1nnJOZwKKvZ3ccwflTIoSQLF7Fil1gvX1 sqgeMwB3ivD8+IBxR7EQv8i15/M/q4vQxrZV+MytQrAaXynvYnDFaNGw32y9ZbHN WuVTBv84YN1gFkg/duUrYN5He9w0KZIF3Y6c/JJe1BfoTPJRcHnfMn8XNfyULtfT RgQaawzzRLIughSMxquQq6emHnuj5fHo/hmqBTZIUOWC23ZrP7jlT324L7dUmDLv Ltdn9Mt+WgrLFGpZw7Yd0ngA0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUPur8n ZjPigT59Lu4AniEbS8eLMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVcxDEHrbox1c9LAXWw15OG7Lah5s1DDMFk+BvkiRMY9Yr+9uKSUaV XVarwdgVkQeYBTAPWKDZqoDJ42GVy0EZMW15iYbe1TRYCSnY+lDFlH8JITD11kOj W5rDFvtmjs6FajLjb4MnMNSJFdW7vHb1QqJWuFlcZx0XmfdJ9Rtr1SGKiykBObSk ndS8xc3SG6qSQwx/GzW/g0xtTUsCsRe/NeL6ndqxGmQCOTe3BnrQcUBnF0jWJywY 62BoZVrflzo7m6jRL6+SStriGKJkG9pbt/jwTN3M/KcIXeRQ9mz19byJn9lbTEwE fBSxBb8RSC4/DdDjtcwpNdO+L7pXJEO2 -----END CERTIFICATE-----Generated at Wed May 14 14:55:11 2025 by rpki-client