$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: CeDnpWpNBER+11k3ZttDV9XoTsc6hPWNmQh4P4xnilA= Subject key identifier: 10:C1:72:FB:F4:51:11:4C:AD:D5:9B:AB:16:99:D3:89:62:EE:0A:65 Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 111A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 1112 Signing time: Thu 24 Apr 2025 17:17:04 +0000 Manifest this update: Thu 24 Apr 2025 17:17:04 +0000 Manifest next update: Thu 01 May 2025 17:17:04 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: zh4Ci1DCWRpDe6Vl5UdVPF+2k/lO2pnIj+GxnRtntsw=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: gteMkfVnVg4ffsJGo4gzYRn2LBvsScWGIppneQ2BQXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4378 (0x111a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Apr 24 17:17:04 2025 GMT Not After : May 1 17:17:04 2025 GMT Subject: CN=680a7210-e413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:4c:f8:a0:86:cc:57:9a:d5:89:92:5a:73: ef:b7:84:b1:4a:37:68:39:b6:5b:78:92:f1:76:54: a5:af:0c:b9:c1:5d:7f:b0:24:af:3f:ad:1e:77:27: 72:0f:cc:fc:78:c3:48:b3:12:dc:ea:e1:9f:76:6f: 5f:4f:4a:ea:68:16:aa:c6:7e:e2:67:45:42:a7:ad: b2:73:06:a5:21:a3:03:20:f9:8e:a7:ee:59:f1:70: 73:4e:e1:0b:17:47:c7:4e:f1:ee:1c:a8:90:8b:83: c4:b7:75:a5:e0:08:cb:46:ad:88:6a:c0:f9:55:23: 16:73:38:58:19:37:cd:56:6f:19:ef:5a:dd:14:83: 26:95:2e:7d:1d:41:e1:bb:b6:7a:6f:fb:8b:0e:02: 73:df:fa:db:7e:e4:73:aa:b8:67:64:58:41:e3:5b: ce:91:ea:17:6e:03:a9:16:eb:a5:9b:1a:4d:bc:68: 04:f3:66:f9:00:8b:49:d8:e6:4a:b3:6b:db:fc:98: de:41:aa:81:14:5c:40:7e:bd:ec:03:45:a1:87:29: d8:0c:40:47:b2:b1:2b:1b:08:c8:c2:e6:64:a1:a7: 84:ba:7b:14:4e:75:3c:02:94:9d:ee:4d:46:8e:3f: 37:e2:ac:cc:5e:4b:59:21:74:85:c5:f7:7e:18:66: 48:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C1:72:FB:F4:51:11:4C:AD:D5:9B:AB:16:99:D3:89:62:EE:0A:65 X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:97:a4:85:ed:af:26:c7:60:d4:c3:09:45:a9:c6:7c:0b:df: 4e:b8:45:ea:01:a6:19:c6:21:0b:21:ae:70:2a:3e:09:61:b1: 01:93:a9:aa:04:52:6e:eb:36:8a:50:93:ac:78:fd:32:dc:81: f8:6c:19:4d:be:61:8b:65:4d:1f:d9:87:42:7b:1d:e8:93:b6: d4:52:85:ee:ff:f2:f7:88:9a:9d:f1:47:a2:27:9f:b7:2d:ce: 5c:9b:df:c1:71:4f:5b:e6:f1:e2:71:02:ab:8b:f1:8d:4b:46: 58:e5:e0:28:7d:bf:b9:f0:b0:36:e0:df:aa:3f:56:88:a1:32: ea:50:8a:72:1a:7d:c5:3d:9d:88:bb:47:7c:07:c7:c6:9b:7d: a6:24:4a:1b:5b:af:9c:78:18:b8:79:61:e3:ac:79:49:dd:cf: 26:76:f2:5f:1b:4d:cb:ec:1a:4f:0c:07:1d:bb:8d:8a:5c:77: 24:03:6f:0c:59:da:5f:d7:e0:a8:59:97:0b:c6:18:c2:0b:c0: 8c:3c:7b:1e:f3:6c:69:af:65:2f:2e:a3:62:d6:c9:ca:cc:e9: e1:42:3f:5c:15:80:9d:ab:33:b0:a2:ff:0d:71:4a:fc:46:eb: 17:a5:37:c4:48:56:90:7e:fb:ab:ac:9b:3f:d8:83:bd:5f:b4: d1:31:2a:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjUwNDI0MTcxNzA0WhcNMjUwNTAxMTcxNzA0WjAYMRYwFAYD VQQDEw02ODBhNzIxMC1lNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAJM+KCGzFea1YmSWnPvt4SxSjdoObZbeJLxdlSlrwy5wV1/sCSvP60edydy D8z8eMNIsxLc6uGfdm9fT0rqaBaqxn7iZ0VCp62ycwalIaMDIPmOp+5Z8XBzTuEL F0fHTvHuHKiQi4PEt3Wl4AjLRq2IasD5VSMWczhYGTfNVm8Z71rdFIMmlS59HUHh u7Z6b/uLDgJz3/rbfuRzqrhnZFhB41vOkeoXbgOpFuulmxpNvGgE82b5AItJ2OZK s2vb/JjeQaqBFFxAfr3sA0WhhynYDEBHsrErGwjIwuZkoaeEunsUTnU8ApSd7k1G jj834qzMXktZIXSFxfd+GGZImQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDBcvv0 URFMrdWbqxaZ04li7gplMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCel6SF7a8mx2DUwwlFqcZ8C99OuEXqAaYZxiELIa5wKj4JYbEBk6mq BFJu6zaKUJOseP0y3IH4bBlNvmGLZU0f2YdCex3ok7bUUoXu//L3iJqd8UeiJ5+3 Lc5cm9/BcU9b5vHicQKri/GNS0ZY5eAofb+58LA24N+qP1aIoTLqUIpyGn3FPZ2I u0d8B8fGm32mJEobW6+ceBi4eWHjrHlJ3c8mdvJfG03L7BpPDAcdu42KXHckA28M Wdpf1+CoWZcLxhjCC8CMPHse82xpr2UvLqNi1snKzOnhQj9cFYCdqzOwov8NcUr8 RusXpTfESFaQfvurrJs/2IO9X7TRMSpU -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:37 2025 by rpki-client