$ rpki-client -vvf rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft File: mm0VemfN-P9qHM6gPkPkwtlb-G0.mft (raw, json) Hash identifier: 4pvugSLYh9xXSZ00UnOAnwY+zysnWtk8h/d5EfUxzw4= Subject key identifier: 5F:41:C5:C8:95:60:50:D9:47:96:5E:96:CE:89:10:45:D8:38:14:3B Authority key identifier: 9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D Certificate issuer: /CN=A915E777/serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D Certificate serial: 0F85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft Manifest number: 0F85 Signing time: Sun 04 May 2025 17:26:15 +0000 Manifest this update: Sun 04 May 2025 17:26:15 +0000 Manifest next update: Sun 11 May 2025 17:26:15 +0000 Files and hashes: 1: mm0VemfN-P9qHM6gPkPkwtlb-G0.crl (hash: FhfziNVBNqsiNdDnF5Q9yYQ4SAUbQ5IqJEALzQpZ9ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3973 (0xf85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E777, serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D Validity Not Before: May 4 17:26:15 2025 GMT Not After : May 11 17:26:15 2025 GMT Subject: CN=6817a337-27e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:3b:b5:10:83:0b:ac:81:b8:2b:97:0d:67: 69:4a:48:41:15:be:63:0e:22:81:1e:18:37:b2:92: f8:fe:64:9f:3b:b3:f6:6f:8d:03:7b:f9:0b:1e:22: 75:3a:0a:83:17:97:57:8a:3d:3d:ae:91:2c:4a:bd: 74:88:99:98:03:7e:b6:23:9d:d0:91:13:15:48:06: 9f:54:da:26:80:5a:82:ae:7d:07:f2:a2:f5:0d:99: ce:ba:f2:53:58:23:bd:7b:45:29:dd:7d:cf:e8:11: a6:65:04:da:86:9a:3e:91:44:83:91:1b:59:91:ee: aa:cf:a9:17:07:5b:49:d2:77:7c:18:56:47:e7:e3: 00:70:c8:56:29:d0:7a:b5:62:62:00:fa:76:39:ca: fb:7c:f2:c0:56:8f:dd:f4:a5:ad:6e:a6:6c:ba:db: ac:10:8c:96:db:ce:2b:d9:40:ab:72:f5:b6:6d:bf: 0a:7e:d2:1d:fe:6e:b3:76:fd:e3:b4:31:ab:27:a9: d9:72:c2:67:6f:5b:5f:53:63:02:f3:b7:ac:96:69: ab:c6:df:24:41:a9:81:c1:f4:cc:1f:33:2f:ce:dc: d7:4a:55:7b:1a:cd:31:45:b1:a7:22:6d:9d:2d:e7: 3f:f0:bb:11:3d:c4:23:98:f2:8a:3d:a8:29:62:69: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:41:C5:C8:95:60:50:D9:47:96:5E:96:CE:89:10:45:D8:38:14:3B X509v3 Authority Key Identifier: keyid:9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:25:c5:9a:e7:ee:15:83:63:0e:69:66:e6:2a:8a:ea:48:c3: 8f:7b:7e:e0:ff:86:80:a3:56:a4:a5:d2:d0:d8:d3:f6:21:d8: 3a:84:15:61:16:2c:2d:06:f1:88:e5:15:3e:56:6a:97:00:5d: 78:06:13:a1:5e:dd:45:2c:3d:84:4e:ff:e5:9c:d7:b1:8f:33: 0d:aa:3d:32:c7:6e:92:46:2e:b3:52:15:29:c4:44:6c:c6:71: 68:8b:f0:7e:20:bc:4b:c8:16:c1:45:4b:77:72:42:6f:9a:d6: 66:03:9b:b8:4b:9e:4f:51:46:da:65:6f:60:ea:6c:c5:e4:7a: a7:8e:74:5d:6b:76:4e:e3:c9:f4:9f:ea:03:1c:a2:10:2b:f5: d4:6b:1b:c4:f9:b6:bf:73:0d:85:ed:5b:7b:d5:ec:2e:29:3b: d1:70:ed:a0:ab:da:53:99:6d:2b:1c:0e:fd:a2:91:5e:37:a4: e2:6f:99:90:7c:5b:be:48:3d:fd:f5:7f:5a:49:e0:0d:ee:46: 0d:29:ad:f7:db:6a:51:f9:66:2f:7f:03:4a:ad:e8:26:7f:f7: 1f:6f:52:05:62:22:db:b2:43:0a:c4:b9:ea:64:e5:b3:7d:b6: 7c:d2:09:f0:2b:f9:7d:31:63:f2:44:5a:82:d8:85:81:8f:3b: 5a:29:df:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NzcxMTAvBgNVBAUTKDlBNkQxNTdBNjdDREY4RkY2QTFDQ0VBMDNFNDNFNEMy RDk1QkY4NkQwHhcNMjUwNTA0MTcyNjE1WhcNMjUwNTExMTcyNjE1WjAYMRYwFAYD VQQDEw02ODE3YTMzNy0yN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs87tRCDC6yBuCuXDWdpSkhBFb5jDiKBHhg3spL4/mSfO7P2b40De/kLHiJ1 OgqDF5dXij09rpEsSr10iJmYA362I53QkRMVSAafVNomgFqCrn0H8qL1DZnOuvJT WCO9e0Up3X3P6BGmZQTahpo+kUSDkRtZke6qz6kXB1tJ0nd8GFZH5+MAcMhWKdB6 tWJiAPp2Ocr7fPLAVo/d9KWtbqZsutusEIyW284r2UCrcvW2bb8KftId/m6zdv3j tDGrJ6nZcsJnb1tfU2MC87eslmmrxt8kQamBwfTMHzMvztzXSlV7Gs0xRbGnIm2d Lec/8LsRPcQjmPKKPagpYmnNrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9BxciV YFDZR5Zels6JEEXYOBQ7MB8GA1UdIwQYMBaAFJptFXpnzfj/ahzOoD5D5MLZW/ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc3Ny82NkE0MDM2MjVD RTgxMUU5QTJFREYzMkJDNEY5QUUwMi9tbTBWZW1mTi1QOXFITTZnUGtQa3d0bGIt RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21tMFZlbWZOLVA5cUhNNmdQa1Brd3RsYi1HMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc3Ny82NkE0MDM2MjVDRTgxMUU5QTJFREYzMkJDNEY5QUUwMi9tbTBWZW1mTi1Q OXFITTZnUGtQa3d0bGItRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGJcWa5+4Vg2MOaWbmKorqSMOPe37g/4aAo1akpdLQ2NP2Idg6hBVh FiwtBvGI5RU+VmqXAF14BhOhXt1FLD2ETv/lnNexjzMNqj0yx26SRi6zUhUpxERs xnFoi/B+ILxLyBbBRUt3ckJvmtZmA5u4S55PUUbaZW9g6mzF5HqnjnRda3ZO48n0 n+oDHKIQK/XUaxvE+ba/cw2F7Vt71ewuKTvRcO2gq9pTmW0rHA79opFeN6Tib5mQ fFu+SD399X9aSeAN7kYNKa3322pR+WYvfwNKregmf/cfb1IFYiLbskMKxLnqZOWz fbZ80gnwK/l9MWPyRFqC2IWBjztaKd+1 -----END CERTIFICATE-----Generated at Mon May 5 15:37:10 2025 by rpki-client