$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft File: mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json) Hash identifier: MmM3RlXNumxg75yy4DuHi+QgNZ0n6OZI1vCXl8vhuBs= Subject key identifier: 39:61:50:65:F6:DF:EF:67:2F:95:AB:72:A4:D2:91:27:5E:E1:6A:87 Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B Certificate issuer: /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft Manifest number: 010B Signing time: Sun 15 Jun 2025 04:07:21 +0000 Manifest this update: Sun 15 Jun 2025 04:07:20 +0000 Manifest next update: Sun 22 Jun 2025 04:07:20 +0000 Files and hashes: 1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: ey8WwZvJkIm/Pqq+VWcm8KM83SpP395p3tR3r6LTW40=) 2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Validity Not Before: Jun 15 04:07:20 2025 GMT Not After : Jun 22 04:07:20 2025 GMT Subject: CN=684e46f9-329b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:a7:8e:1a:1e:1f:44:ff:da:a2:77:72:fb: da:d0:bd:c6:dd:4c:a5:d5:56:55:77:e6:7c:a6:11: 75:14:9a:da:60:66:b5:44:d3:37:79:23:5f:df:be: 38:36:bb:cb:e7:d4:03:00:db:bc:02:98:b0:dd:53: d7:15:ea:d1:8d:80:ae:67:86:e7:08:31:18:ae:ca: cd:61:d0:51:56:c1:f4:f4:28:f7:86:1a:59:e5:d5: e9:c3:a4:34:40:5d:be:35:cf:00:58:6f:5d:99:5c: 0f:49:21:e9:d8:4f:81:12:a2:0a:cd:e4:21:90:08: a1:f3:ca:5b:b4:ca:93:85:bc:24:50:f8:76:0c:f5: e0:f8:8b:fd:0f:c0:25:a6:75:7e:33:23:83:2c:5b: f8:3e:f4:0b:a6:2f:f4:7a:a4:c4:e4:53:7b:c1:f6: 4e:4a:15:fd:b9:58:f2:35:17:65:32:5e:1c:74:97: f0:29:ef:3c:68:5e:4e:dc:87:46:82:34:e9:dd:62: 57:76:d2:5e:72:30:cf:98:2d:0a:f3:cc:9d:ee:c2: 64:90:67:6d:f4:cf:a5:60:58:9c:9b:3f:dc:0a:cf: 74:f3:71:59:0c:0e:55:50:72:6f:85:89:e4:76:0d: c2:7b:35:d9:d4:ce:28:82:c7:51:a1:b3:2d:2a:d4: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:61:50:65:F6:DF:EF:67:2F:95:AB:72:A4:D2:91:27:5E:E1:6A:87 X509v3 Authority Key Identifier: keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ff:04:7d:bb:21:52:ba:64:35:f8:a6:9a:0b:90:25:f2:94: 06:6f:f6:80:80:9f:26:a2:61:6d:ba:32:8c:c5:73:72:d4:fb: 04:16:b1:f6:0d:f5:cc:38:39:d1:32:17:25:12:a6:42:ae:fa: 71:40:e1:47:fb:ce:fc:ec:6f:89:cd:11:2c:64:f4:49:ad:d3: 71:58:c1:5e:c9:d1:59:3a:09:1a:25:70:08:6f:18:ca:6b:22: da:63:ee:4a:4f:e1:1c:61:82:80:cd:fc:c6:c3:f2:51:f2:6a: 4d:5e:3f:55:bc:9d:d8:6c:eb:66:39:79:a4:de:cf:7f:0a:9a: f3:80:51:d6:4e:81:e3:24:79:35:ba:55:a5:d4:af:48:ae:1e: 6c:10:5f:07:ee:2a:1c:a0:80:ae:0a:b7:fa:11:53:99:cb:d5: 7f:16:d0:b2:be:0b:ad:e1:8c:8c:51:48:82:ea:c1:52:fa:cf: 9c:f0:69:fa:d2:50:3a:9d:57:25:06:74:33:03:8f:4e:92:fd: 3b:44:51:1c:1f:22:69:97:8a:6c:3f:58:58:62:f1:b6:57:b6: bb:e7:67:2d:73:99:4b:89:39:d0:6e:ba:bd:46:38:10:d4:ac: 5c:a7:a5:38:e1:76:0b:e2:87:c1:5d:12:59:36:2d:0b:35:77: 5f:7a:9b:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC MDcxNjhGM0IwHhcNMjUwNjE1MDQwNzIwWhcNMjUwNjIyMDQwNzIwWjAYMRYwFAYD VQQDEw02ODRlNDZmOS0zMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCOnjhoeH0T/2qJ3cvva0L3G3Uyl1VZVd+Z8phF1FJraYGa1RNM3eSNf3744 NrvL59QDANu8Apiw3VPXFerRjYCuZ4bnCDEYrsrNYdBRVsH09Cj3hhpZ5dXpw6Q0 QF2+Nc8AWG9dmVwPSSHp2E+BEqIKzeQhkAih88pbtMqThbwkUPh2DPXg+Iv9D8Al pnV+MyODLFv4PvQLpi/0eqTE5FN7wfZOShX9uVjyNRdlMl4cdJfwKe88aF5O3IdG gjTp3WJXdtJecjDPmC0K88yd7sJkkGdt9M+lYFicmz/cCs9083FZDA5VUHJvhYnk dg3CezXZ1M4ogsdRobMtKtRSfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlhUGX2 3+9nL5WrcqTSkSde4WqHMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80OUU0QjAwOEIwRUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3 NjBTLUFKZXFOaGl3Y1dqenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6/wR9uyFSumQ1+KaaC5Al8pQGb/aAgJ8momFtujKMxXNy1PsEFrH2 DfXMODnRMhclEqZCrvpxQOFH+8787G+JzREsZPRJrdNxWMFeydFZOgkaJXAIbxjK ayLaY+5KT+EcYYKAzfzGw/JR8mpNXj9VvJ3YbOtmOXmk3s9/CprzgFHWToHjJHk1 ulWl1K9Irh5sEF8H7iocoICuCrf6EVOZy9V/FtCyvgut4YyMUUiC6sFS+s+c8Gn6 0lA6nVclBnQzA49Okv07RFEcHyJpl4psP1hYYvG2V7a752ctc5lLiTnQbrq9RjgQ 1Kxcp6U44XYL4ofBXRJZNi0LNXdfeptd -----END CERTIFICATE-----Generated at Mon Jun 16 08:21:23 2025 by rpki-client