$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft File: mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json) Hash identifier: YuRyhWtJOkEe5piFfWVp4NrsBskgOxU5/EebS/v+NLk= Subject key identifier: 17:2B:6F:9F:4D:0A:1B:D0:85:3B:6A:B5:0D:BB:99:9B:EF:C6:BD:5B Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B Certificate issuer: /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft Manifest number: F3 Signing time: Sun 27 Apr 2025 04:08:32 +0000 Manifest this update: Sun 27 Apr 2025 04:08:32 +0000 Manifest next update: Sun 04 May 2025 04:08:32 +0000 Files and hashes: 1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: V1qA7sRHo8jGCmqbeJXPA+z+lDr4u/DSshTQtZbUDgc=) 2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 04:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Validity Not Before: Apr 27 04:08:32 2025 GMT Not After : May 4 04:08:32 2025 GMT Subject: CN=680dadc0-9885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:60:d0:6e:61:f9:7c:79:35:ad:72:be:2b: 2a:0c:f5:b9:5c:52:1c:81:d5:cf:81:85:2c:d1:eb: 33:17:6e:dc:02:dd:6d:f9:88:64:94:7d:ee:6a:53: 23:ae:da:93:d3:21:df:92:19:40:bb:e6:b6:5c:73: cc:fd:3b:53:71:14:22:ec:87:ce:d5:b4:7e:8f:d7: 93:7f:6a:5b:8d:03:65:41:8d:16:26:e1:c7:1f:fd: 33:12:33:e1:7b:3c:f4:c6:94:44:3b:63:c0:75:02: e6:ae:12:bd:c8:8c:c4:2b:50:3b:2c:ea:dd:a0:fe: 94:74:d6:8b:97:1b:94:e6:30:05:94:b0:41:37:64: 2b:98:1d:f6:ee:0e:cb:0d:e4:f5:29:5a:64:27:c1: 74:37:e9:b8:1d:59:b5:b6:65:e9:f6:22:ad:ad:46: bf:ff:74:ca:c3:2f:bd:73:b3:0c:8f:f2:9e:28:59: 2d:92:d0:60:df:e2:d3:59:9e:26:43:8c:73:6d:56: af:09:b9:5f:b2:90:ff:7d:53:be:3a:15:e0:5c:e2: ba:f1:8b:c4:91:6a:34:ad:bd:ef:81:90:9e:20:bc: 2c:ad:5e:ab:b2:88:06:69:a7:d9:d1:a3:51:b9:d8: c9:3b:82:84:c1:cf:82:b8:e7:bf:d5:2f:aa:8c:3a: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2B:6F:9F:4D:0A:1B:D0:85:3B:6A:B5:0D:BB:99:9B:EF:C6:BD:5B X509v3 Authority Key Identifier: keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:90:5f:b7:33:42:77:ec:85:61:08:a9:81:e1:8a:b9:48:97: 2c:7f:da:13:90:2b:f0:df:3b:58:b7:b8:6c:3d:73:c7:c2:f5: 5f:5b:b9:bd:1e:50:af:0c:f0:6e:af:84:bb:a6:9d:72:21:49: b7:1e:3e:63:1b:40:29:f5:ed:e4:ee:69:dd:35:1e:b6:7a:31: 63:d4:5a:1d:c0:b2:e0:73:47:f4:37:93:6c:4f:ad:52:4f:cf: bc:36:56:6a:2b:f8:d9:7a:da:31:6e:9a:bf:67:ab:29:38:ab: 76:9a:20:f5:ed:4a:90:e7:2f:df:28:18:33:18:15:72:dd:8a: 6a:a7:3a:77:d6:ff:0e:81:09:ec:73:da:b1:51:b7:e9:a2:63: bf:36:1a:fb:cd:25:e7:70:c9:4e:d9:47:18:b7:4c:a6:65:30: ba:58:bc:00:93:7f:35:d6:4f:59:1b:14:55:33:30:03:47:45: 77:78:3e:cc:ad:7f:1f:e6:f0:a4:58:ae:2e:5f:cc:54:50:3a: 7e:93:7f:3d:1b:5e:4a:c4:d0:24:d0:5f:09:70:9d:86:8a:08: 26:bb:25:aa:7b:30:e4:ea:e4:c8:ae:37:97:ad:12:23:b8:57: 31:a3:fd:7a:a7:6e:33:75:2b:93:17:cb:8f:08:69:be:c8:83: 3c:e2:a0:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC MDcxNjhGM0IwHhcNMjUwNDI3MDQwODMyWhcNMjUwNTA0MDQwODMyWjAYMRYwFAYD VQQDEw02ODBkYWRjMC05ODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug9g0G5h+Xx5Na1yvisqDPW5XFIcgdXPgYUs0eszF27cAt1t+YhklH3ualMj rtqT0yHfkhlAu+a2XHPM/TtTcRQi7IfO1bR+j9eTf2pbjQNlQY0WJuHHH/0zEjPh ezz0xpREO2PAdQLmrhK9yIzEK1A7LOrdoP6UdNaLlxuU5jAFlLBBN2QrmB327g7L DeT1KVpkJ8F0N+m4HVm1tmXp9iKtrUa//3TKwy+9c7MMj/KeKFktktBg3+LTWZ4m Q4xzbVavCblfspD/fVO+OhXgXOK68YvEkWo0rb3vgZCeILwsrV6rsogGaafZ0aNR udjJO4KEwc+CuOe/1S+qjDpclwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcrb59N ChvQhTtqtQ27mZvvxr1bMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80OUU0QjAwOEIwRUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3 NjBTLUFKZXFOaGl3Y1dqenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwkF+3M0J37IVhCKmB4Yq5SJcsf9oTkCvw3ztYt7hsPXPHwvVfW7m9 HlCvDPBur4S7pp1yIUm3Hj5jG0Ap9e3k7mndNR62ejFj1FodwLLgc0f0N5NsT61S T8+8NlZqK/jZetoxbpq/Z6spOKt2miD17UqQ5y/fKBgzGBVy3Ypqpzp31v8OgQns c9qxUbfpomO/Nhr7zSXncMlO2UcYt0ymZTC6WLwAk3811k9ZGxRVMzADR0V3eD7M rX8f5vCkWK4uX8xUUDp+k389G15KxNAk0F8JcJ2GiggmuyWqezDk6uTIrjeXrRIj uFcxo/16p24zdSuTF8uPCGm+yIM84qBb -----END CERTIFICATE-----Generated at Tue Apr 29 00:33:30 2025 by rpki-client