$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json) Hash identifier: sIi34ajGjlpr1CVTVweWI4pQkLjMhq8sf2ni56zX8HM= Subject key identifier: 8E:CF:21:2E:CE:5B:FA:A8:09:A8:6A:97:60:92:16:93:80:3F:21:01 Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Certificate serial: 0BC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft Manifest number: 0B9D Signing time: Wed 14 May 2025 19:07:55 +0000 Manifest this update: Wed 14 May 2025 19:07:55 +0000 Manifest next update: Wed 21 May 2025 19:07:55 +0000 Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: H28Vyn5cdsKK7QDXY04Su1HW/SIx8c38d9w21+nvNQk=) 2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: PsugJWGM5ONkTT/QKBNZcGT+Fx1Ca8/gO0JC72FJj/U=) 3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: DqyU+6nXvs6HOFMKI16Emo+flYs9ktEh2tA31OF4Cw4=) 4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: re/IaJHi711uC7kt/qe355ZQkGdlvPCAcW6M1Vv6a/M=) 5: 4CC6B77C0A9111EEB13EAF44C4F9AE02.roa (hash: PDvCAZx5hVOPcyfQ4LwOi2hSUYUbvW/tgd4X2jQj+2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3009 (0xbc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Validity Not Before: May 14 19:07:55 2025 GMT Not After : May 21 19:07:55 2025 GMT Subject: CN=6824ea0b-e162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:31:e4:22:84:9b:7c:a2:6a:8b:7c:b6:7b: 06:c5:ce:62:b3:87:58:d7:ac:a5:6e:41:50:f0:30: 19:64:93:06:cb:5c:02:d9:6e:4b:82:ef:fd:23:55: 06:6b:e1:6d:4f:9b:0a:c4:28:e5:43:af:53:8a:82: b5:9f:2e:e5:16:65:d3:f3:85:f7:bb:35:ab:72:59: da:e7:e1:a4:78:ef:04:80:5b:86:a5:9e:53:1d:3b: b6:27:14:6f:7e:53:b0:00:fa:b9:02:80:91:86:17: 8d:cc:40:9c:99:9d:a9:2b:f4:46:48:6d:fa:ce:ce: d0:ec:b3:55:0a:21:eb:e0:90:b6:31:41:c4:6c:fe: fb:da:f8:8d:d5:36:47:56:82:82:0e:ae:1b:ad:d8: fc:32:11:01:64:99:7c:d6:c4:77:cb:00:03:81:50: 28:d9:0e:2e:6f:4f:e2:7a:6a:8f:01:3f:73:b8:bc: 5a:24:b3:10:f8:56:fa:62:3b:14:02:79:9f:15:31: 77:12:7d:02:09:d7:74:e7:ca:38:b7:d3:c7:63:78: 63:d8:3c:d8:14:28:39:bf:6d:a4:5c:ca:c8:8e:40: 2b:4c:4f:5b:0c:7b:f4:a7:bb:db:ed:24:67:6e:aa: a6:ec:28:fe:e8:6d:ba:8d:18:5d:8a:10:60:57:23: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CF:21:2E:CE:5B:FA:A8:09:A8:6A:97:60:92:16:93:80:3F:21:01 X509v3 Authority Key Identifier: keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:08:13:60:99:30:6c:3e:19:cb:a6:e4:5f:6f:07:e5:c8:b6: c6:61:03:87:00:31:fc:ea:72:2a:0f:cd:a0:cd:7a:f6:08:ac: 5e:dd:be:66:85:04:ff:a9:fc:70:9e:b2:bd:ca:73:00:76:13: fe:dc:70:6b:27:00:c8:3d:38:52:31:91:4a:1e:8b:f9:3d:b5: 12:a5:3b:e3:66:7a:7c:3e:5f:bc:e1:1a:e3:1f:f1:41:ed:1e: ab:1e:96:ce:ea:73:85:1e:86:4d:49:02:45:07:67:5f:9a:98: 2b:a7:39:0f:b5:67:bf:e0:74:b3:53:ea:88:e5:8b:10:63:e2: 42:e6:33:50:f0:f4:90:c3:16:6c:c9:e3:3a:fb:20:85:43:66: ed:55:a4:13:30:0b:00:db:93:57:5d:61:4b:63:40:83:99:cf: 1f:45:50:65:ea:43:34:5c:f2:88:46:87:84:31:fe:42:3c:d5: 99:9f:80:70:ba:0a:f0:1b:0a:6c:3c:c4:ff:b5:44:21:d2:a4: 0d:e0:e2:2d:93:99:6b:5e:4b:d1:03:40:b8:b2:c0:b8:18:44: 25:c2:d4:58:ea:90:6e:30:24:42:61:00:36:cb:3d:74:bb:65: 3c:98:4b:b3:ea:92:e1:04:f7:ad:ac:c0:62:a6:8a:d2:39:1b: 99:97:37:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD QTE2RDlDRDUwHhcNMjUwNTE0MTkwNzU1WhcNMjUwNTIxMTkwNzU1WjAYMRYwFAYD VQQDEw02ODI0ZWEwYi1lMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv8x5CKEm3yiaot8tnsGxc5is4dY16ylbkFQ8DAZZJMGy1wC2W5Lgu/9I1UG a+FtT5sKxCjlQ69TioK1ny7lFmXT84X3uzWrclna5+GkeO8EgFuGpZ5THTu2JxRv flOwAPq5AoCRhheNzECcmZ2pK/RGSG36zs7Q7LNVCiHr4JC2MUHEbP772viN1TZH VoKCDq4brdj8MhEBZJl81sR3ywADgVAo2Q4ub0/iemqPAT9zuLxaJLMQ+Fb6YjsU AnmfFTF3En0CCdd058o4t9PHY3hj2DzYFCg5v22kXMrIjkArTE9bDHv0p7vb7SRn bqqm7Cj+6G26jRhdihBgVyOEywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7PIS7O W/qoCahql2CSFpOAPyEBMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2 MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs cTAtYjlOcFN0dFhLRnRuTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnCBNgmTBsPhnLpuRfbwflyLbGYQOHADH86nIqD82gzXr2CKxe3b5m hQT/qfxwnrK9ynMAdhP+3HBrJwDIPThSMZFKHov5PbUSpTvjZnp8Pl+84RrjH/FB 7R6rHpbO6nOFHoZNSQJFB2dfmpgrpzkPtWe/4HSzU+qI5YsQY+JC5jNQ8PSQwxZs yeM6+yCFQ2btVaQTMAsA25NXXWFLY0CDmc8fRVBl6kM0XPKIRoeEMf5CPNWZn4Bw ugrwGwpsPMT/tUQh0qQN4OItk5lrXkvRA0C4ssC4GEQlwtRY6pBuMCRCYQA2yz10 u2U8mEuz6pLhBPetrMBiporSORuZlzeJ -----END CERTIFICATE-----Generated at Thu May 15 22:33:23 2025 by rpki-client