$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft File: madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json) Hash identifier: zPE2Umg93eEOu8oAtOKYtONdHo9vsd7yrNAasBYRh6s= Subject key identifier: 97:57:9B:AF:8F:73:39:38:D4:D5:19:E9:02:DE:13:2A:78:AC:13:3D Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A Certificate issuer: /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft Manifest number: 96 Signing time: Sun 15 Jun 2025 05:30:30 +0000 Manifest this update: Sun 15 Jun 2025 05:30:29 +0000 Manifest next update: Sun 22 Jun 2025 05:30:29 +0000 Files and hashes: 1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: fJPwa0m4jLkDRwHL0MjS/pxgmm/qiKq27ghOh10q3dw=) 2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: nmm+UaDTVZk1W14gJbVOSNyGWuVq3wHsOrXGhKoBHSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A Validity Not Before: Jun 15 05:30:29 2025 GMT Not After : Jun 22 05:30:29 2025 GMT Subject: CN=684e5a76-e68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:41:24:4a:9a:2d:0c:5f:22:ce:00:1a:5b: aa:44:32:fb:b2:96:6b:6f:69:84:1a:9d:a7:9f:f6: cb:56:a1:21:2e:12:df:bb:a8:1d:3f:0d:23:b2:54: bd:4e:0b:90:b0:d2:ae:3b:3a:fa:9f:ec:e3:f1:cd: 9d:14:9a:b8:da:3c:83:35:20:11:b5:a6:4c:2c:7d: 5e:f8:16:ee:0b:00:ed:ab:a9:cf:43:bf:48:1c:87: 46:04:82:38:fc:9d:37:aa:dc:e2:9c:76:75:6a:f1: ea:d9:98:e4:e7:eb:c0:45:fa:16:98:d2:8d:ac:99: 2b:73:0d:cb:dc:f8:c9:51:f8:3c:dd:7b:60:30:5a: 69:cc:6f:70:63:9f:7b:dc:5a:b9:88:b9:72:cc:c6: 3e:e9:ae:2d:00:bd:d1:1f:76:19:07:48:62:c8:e0: f0:2e:a0:95:b5:1d:dc:55:08:bd:75:3b:4d:bc:aa: e1:d6:68:bc:c9:86:c0:e8:28:28:46:bb:b5:42:cc: d2:ad:cb:91:42:8f:03:e2:eb:ed:78:46:88:a5:82: ad:0c:23:dd:b7:d9:fd:9d:dc:40:75:62:ca:af:d4: 21:6e:e8:15:9e:db:5e:fb:10:21:f4:f3:f0:63:23: 1a:fe:50:9b:8f:68:e3:cc:fe:88:c6:fd:b9:e6:96: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:57:9B:AF:8F:73:39:38:D4:D5:19:E9:02:DE:13:2A:78:AC:13:3D X509v3 Authority Key Identifier: keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:2d:d2:b2:26:84:33:22:85:c8:54:e4:48:c7:be:3c:e1:c1: df:5e:ea:a3:b9:a7:3c:67:99:63:c5:a4:45:c8:94:ad:c6:b5: ab:82:f6:47:8f:53:5d:35:21:0f:ec:31:32:9a:c5:0d:75:e4: 92:b3:76:d8:9e:62:3d:71:6f:d1:e9:11:98:91:9d:d5:42:59: b1:32:26:aa:a9:90:87:bb:a0:32:ec:71:31:c2:c8:78:0f:0f: 07:ed:31:35:21:8b:4e:22:b6:30:15:6f:8d:8b:bb:84:a8:ec: 53:f9:48:74:fc:c7:45:f3:6c:2b:dc:be:48:6f:31:cb:61:09: f6:24:99:16:42:d1:95:fe:37:69:a5:7e:3b:14:53:eb:5e:f0: b3:84:0c:74:6b:ca:b4:25:76:ca:7f:c9:c5:7c:21:ee:88:2a: 65:a4:45:38:4b:e6:29:52:38:9b:71:0a:21:ff:2c:eb:e6:56: f8:f8:e4:1f:4e:e4:e9:1a:06:ef:89:90:61:8e:5d:bf:59:04: de:f9:9f:90:b4:7b:23:7d:1a:42:b2:84:30:a9:89:27:39:24: b7:24:7a:29:91:30:08:46:37:23:3b:25:92:65:0b:17:bd:61: b5:3b:e0:33:6d:5c:9b:a1:e2:0e:29:fd:19:84:2c:85:31:8c: 05:02:fd:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1MDExMTAvBgNVBAUTKDk5QTc2NkQ0Q0ZBNDVBOUY5RTM3NzgyNTA0OThCMTI3 NjhDNDFFMUEwHhcNMjUwNjE1MDUzMDI5WhcNMjUwNjIyMDUzMDI5WjAYMRYwFAYD VQQDEw02ODRlNWE3Ni1lNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9VBJEqaLQxfIs4AGluqRDL7spZrb2mEGp2nn/bLVqEhLhLfu6gdPw0jslS9 TguQsNKuOzr6n+zj8c2dFJq42jyDNSARtaZMLH1e+BbuCwDtq6nPQ79IHIdGBII4 /J03qtzinHZ1avHq2Zjk5+vARfoWmNKNrJkrcw3L3PjJUfg83XtgMFppzG9wY597 3Fq5iLlyzMY+6a4tAL3RH3YZB0hiyODwLqCVtR3cVQi9dTtNvKrh1mi8yYbA6Cgo Rru1QszSrcuRQo8D4uvteEaIpYKtDCPdt9n9ndxAdWLKr9QhbugVntte+xAh9PPw YyMa/lCbj2jjzP6Ixv255pbkmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdXm6+P czk41NUZ6QLeEyp4rBM9MB8GA1UdIwQYMBaAFJmnZtTPpFqfnjd4JQSYsSdoxB4a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTUwMS8yNjg4RTMwMjY4 REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dwLWVOM2dsQkppeEoyakVI aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21hZG0xTS1rV3AtZU4zZ2xCSml4SjJqRUhoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTUwMS8yNjg4RTMwMjY4REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dw LWVOM2dsQkppeEoyakVIaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCLdKyJoQzIoXIVORIx7484cHfXuqjuac8Z5ljxaRFyJStxrWrgvZH j1NdNSEP7DEymsUNdeSSs3bYnmI9cW/R6RGYkZ3VQlmxMiaqqZCHu6Ay7HExwsh4 Dw8H7TE1IYtOIrYwFW+Ni7uEqOxT+Uh0/MdF82wr3L5IbzHLYQn2JJkWQtGV/jdp pX47FFPrXvCzhAx0a8q0JXbKf8nFfCHuiCplpEU4S+YpUjibcQoh/yzr5lb4+OQf TuTpGgbviZBhjl2/WQTe+Z+QtHsjfRpCsoQwqYknOSS3JHopkTAIRjcjOyWSZQsX vWG1O+AzbVyboeIOKf0ZhCyFMYwFAv25 -----END CERTIFICATE-----Generated at Sun Jun 15 10:25:11 2025 by rpki-client