$ rpki-client -vvf rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.mft File: if6Hw1yRomVecR6xVLheb47OI1M.mft (raw, json) Hash identifier: 36BcwMwjqXIyFMdQMOhrObSgynZAPZAXKJXk8urXxPQ= Subject key identifier: 16:94:5E:68:3E:3E:B2:E0:27:B3:29:99:35:FF:08:20:08:08:5F:36 Authority key identifier: 89:FE:87:C3:5C:91:A2:65:5E:71:1E:B1:54:B8:5E:6F:8E:CE:23:53 Certificate issuer: /CN=A912E5AE/serialNumber=89FE87C35C91A2655E711EB154B85E6F8ECE2353 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if6Hw1yRomVecR6xVLheb47OI1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.mft Manifest number: 98 Signing time: Fri 25 Apr 2025 05:21:09 +0000 Manifest this update: Fri 25 Apr 2025 05:21:08 +0000 Manifest next update: Fri 02 May 2025 05:21:08 +0000 Files and hashes: 1: if6Hw1yRomVecR6xVLheb47OI1M.crl (hash: Zmejhs8LlfmyPl6ShqEKYpyaao8u3DSJ6Pa1+n7AIQc=) 2: C9486F603DCC11EFAD649F74C4F9AE02.roa (hash: QyyZXWoFyyd/zgjkEiwCU3kViI7zVVd7w0F9bGaDuyw=) 3: 4654B41C3DCF11EF9418A322C4F9AE02.roa (hash: FvOQCogvi9xGBh11M1aTYlZCd0AJ8WKZK2+tYPFYqs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.crl rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if6Hw1yRomVecR6xVLheb47OI1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E5AE, serialNumber=89FE87C35C91A2655E711EB154B85E6F8ECE2353 Validity Not Before: Apr 25 05:21:08 2025 GMT Not After : May 2 05:21:08 2025 GMT Subject: CN=680b1bc4-b29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:b3:84:a3:e2:54:58:c6:82:d9:5c:1c:80: e9:81:35:e5:d9:42:ea:1e:db:e9:77:e9:00:c5:ae: 26:54:e9:9c:9f:b3:b5:e9:5f:f7:d1:00:63:fe:7e: 9c:51:0a:40:f4:c9:c9:51:7c:d2:b0:a8:30:31:09: c0:1d:67:1b:17:f5:3b:84:61:cd:6d:6d:98:73:14: 7e:63:8c:e6:8e:4a:9c:66:a5:16:c1:90:a1:f5:8c: a7:f3:21:15:6e:bc:a4:78:f6:d7:b1:7c:48:79:66: 59:bc:62:5c:8c:0d:d5:7d:64:6d:e3:75:10:47:70: 1c:4b:b7:15:6a:3c:94:b0:b9:54:af:c2:95:ce:32: e2:7c:38:e3:62:92:ae:30:d9:04:d1:c8:3d:7f:d0: 95:67:1b:7e:6a:ec:d9:99:45:b4:5e:e2:15:41:61: 3c:a4:26:ea:ee:fc:32:9d:ff:74:f8:50:da:fe:29: 7c:8b:1e:3e:49:28:9c:b0:08:1d:32:e6:81:58:6d: 1f:10:6f:63:f4:03:a7:39:7c:b9:13:e5:ff:0e:b2: 4a:44:93:6f:8e:45:fe:aa:b5:00:a5:12:7d:92:75: 01:cb:84:e2:28:a0:b2:cb:cc:3e:8c:40:16:10:78: c4:9d:7a:85:60:d7:4e:35:8d:60:c6:b4:58:b3:4a: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:94:5E:68:3E:3E:B2:E0:27:B3:29:99:35:FF:08:20:08:08:5F:36 X509v3 Authority Key Identifier: keyid:89:FE:87:C3:5C:91:A2:65:5E:71:1E:B1:54:B8:5E:6F:8E:CE:23:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if6Hw1yRomVecR6xVLheb47OI1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:38:07:b6:bf:d8:89:46:c3:b0:96:26:b2:87:e5:2c:57:99: 51:b3:c9:af:38:e6:98:d7:00:db:10:51:56:4d:bc:17:d7:36: 3b:da:c3:43:a2:47:42:3d:c4:eb:21:35:d9:0a:5a:17:55:b3: 99:e0:f2:15:62:41:c4:81:e9:49:9c:a4:cc:2f:05:d6:31:18: ed:53:6e:1a:3e:0e:5f:60:83:a7:1b:8e:cb:5e:83:d6:f0:1c: 20:1d:df:0f:ca:37:46:9e:cd:87:a3:ba:c4:3c:50:7f:67:c5: a9:d4:11:84:0e:17:44:61:68:2d:80:19:b1:9c:1b:92:aa:29: ef:db:b9:50:07:b6:8c:b0:6d:9a:a8:1e:17:9b:cb:c4:0e:1e: e9:60:0d:93:e2:53:7e:d8:7a:04:4e:28:08:90:df:8c:9d:8d: f2:d6:3b:32:83:a4:fc:71:5c:75:ff:0e:c9:d9:19:57:2b:e3: be:8c:ed:ee:ee:95:2f:43:dc:8c:2f:50:2f:a4:59:15:4e:8a: b4:20:b6:c1:34:a7:24:a5:1d:91:47:fa:c3:13:a1:e3:3a:79: d0:96:15:41:a5:a4:d2:d0:75:fd:56:a4:15:6e:34:9a:c5:9c: db:e9:dc:a2:43:68:32:14:da:15:bf:06:d2:74:66:ec:59:22: 49:85:ab:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1QUUxMTAvBgNVBAUTKDg5RkU4N0MzNUM5MUEyNjU1RTcxMUVCMTU0Qjg1RTZG OEVDRTIzNTMwHhcNMjUwNDI1MDUyMTA4WhcNMjUwNTAyMDUyMTA4WjAYMRYwFAYD VQQDEw02ODBiMWJjNC1iMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HCzhKPiVFjGgtlcHIDpgTXl2ULqHtvpd+kAxa4mVOmcn7O16V/30QBj/n6c UQpA9MnJUXzSsKgwMQnAHWcbF/U7hGHNbW2YcxR+Y4zmjkqcZqUWwZCh9Yyn8yEV brykePbXsXxIeWZZvGJcjA3VfWRt43UQR3AcS7cVajyUsLlUr8KVzjLifDjjYpKu MNkE0cg9f9CVZxt+auzZmUW0XuIVQWE8pCbq7vwynf90+FDa/il8ix4+SSicsAgd MuaBWG0fEG9j9AOnOXy5E+X/DrJKRJNvjkX+qrUApRJ9knUBy4TiKKCyy8w+jEAW EHjEnXqFYNdONY1gxrRYs0prDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaUXmg+ PrLgJ7MpmTX/CCAICF82MB8GA1UdIwQYMBaAFIn+h8NckaJlXnEesVS4Xm+OziNT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTVBRS8zM0Y3NEREQzNE Q0MxMUVGODlCNUIwNzNDNEY5QUUwMi9pZjZIdzF5Um9tVmVjUjZ4VkxoZWI0N09J MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmNkh3MXlSb21WZWNSNnhWTGhlYjQ3T0kxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTVBRS8zM0Y3NEREQzNEQ0MxMUVGODlCNUIwNzNDNEY5QUUwMi9pZjZIdzF5Um9t VmVjUjZ4VkxoZWI0N09JMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOOAe2v9iJRsOwliayh+UsV5lRs8mvOOaY1wDbEFFWTbwX1zY72sND okdCPcTrITXZCloXVbOZ4PIVYkHEgelJnKTMLwXWMRjtU24aPg5fYIOnG47LXoPW 8BwgHd8PyjdGns2Ho7rEPFB/Z8Wp1BGEDhdEYWgtgBmxnBuSqinv27lQB7aMsG2a qB4Xm8vEDh7pYA2T4lN+2HoETigIkN+MnY3y1jsyg6T8cVx1/w7J2RlXK+O+jO3u 7pUvQ9yML1AvpFkVToq0ILbBNKckpR2RR/rDE6HjOnnQlhVBpaTS0HX9VqQVbjSa xZzb6dyiQ2gyFNoVvwbSdGbsWSJJhau0 -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:58 2025 by rpki-client