$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft File: rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json) Hash identifier: wFkvXxFUTW/XwAtt17vs4Bi2ERIxx2uPYM4sswksfqU= Subject key identifier: 3C:C0:6F:0D:40:F1:76:D7:75:BD:32:AD:A3:43:DB:33:9D:B1:6A:A8 Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft Manifest number: 01E3 Signing time: Tue 13 May 2025 02:02:54 +0000 Manifest this update: Tue 13 May 2025 02:02:54 +0000 Manifest next update: Tue 20 May 2025 02:02:54 +0000 Files and hashes: 1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: e3fRNmNazM6eE+VhLFXmEgvmXgsx8GcpsifqHPLgaK0=) 2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: A+Aqziv+l/eva8pdjPnNDIFSBuh+7kSFLQzVhKrXMMo=) 3: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: nWteaBso5vE4iYgh/So+lkoA6pmFNyiwA37OG5bT7wo=) 4: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: I9Pcv4IIcwx4nw81OeoGh2DbUKg+x99yv1jaTnfKTew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Validity Not Before: May 13 02:02:54 2025 GMT Not After : May 20 02:02:54 2025 GMT Subject: CN=6822a84e-cdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:6e:77:cb:da:a8:1a:b9:41:c2:4d:06:a7: 6a:1a:3a:51:da:e0:40:f7:7b:06:7a:a6:78:87:fd: 20:aa:45:48:b7:3d:2b:a0:5e:ee:a3:4f:4e:aa:0f: 89:ad:ae:79:58:8e:64:f2:c7:3a:fe:3d:9d:f8:e4: c4:e2:3c:b3:92:f8:94:a3:46:d1:98:96:5c:f0:00: 8a:bd:7b:49:c7:d3:15:61:48:af:a0:5e:94:c3:3f: 3d:11:e0:1d:92:d6:d5:37:52:bd:d5:4e:9f:81:12: 0a:4d:a2:bf:64:99:48:1a:39:bb:f3:91:7b:a1:2a: ee:db:9c:f5:c0:c7:2a:06:64:35:6a:a7:75:89:de: 70:84:7e:9b:f5:1e:e9:ac:5e:44:a3:34:b5:0f:5c: 35:10:42:ab:2c:2e:7f:14:39:f0:5f:71:8b:6c:83: e1:49:dc:0b:fe:01:7e:93:a5:45:e8:fe:63:55:8e: 58:e6:a5:3a:d0:f1:44:f4:00:a4:81:0c:83:02:7d: f2:6c:aa:a3:86:c5:79:8b:92:fc:25:b8:1a:da:17: bf:90:a6:58:90:4b:c3:ad:bf:ae:3f:93:14:bb:be: 24:6f:74:7f:ef:9d:61:dd:a0:47:7a:e9:ae:43:76: 8c:e5:c8:5a:a0:3d:95:ed:71:58:cd:81:49:19:0b: 5a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C0:6F:0D:40:F1:76:D7:75:BD:32:AD:A3:43:DB:33:9D:B1:6A:A8 X509v3 Authority Key Identifier: keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:01:0f:2d:fb:d6:e0:70:a4:b4:00:2d:dc:3a:bf:59:7f:f3: d7:f0:b1:35:76:dd:74:81:f4:88:6d:b1:e9:9e:5d:53:23:d3: 2b:cb:9b:4e:f9:ca:28:6f:ba:3d:2e:24:23:7a:03:fc:c7:77: d3:ec:2a:2e:00:ed:c3:57:10:a8:b5:53:45:4d:44:c0:1a:2c: 48:39:b4:72:25:75:7d:d5:c9:b4:6d:5d:b4:1d:65:eb:b1:f4: a7:b6:04:7f:ae:6b:5c:a2:f2:43:92:81:36:0c:6f:29:38:23: 1f:c3:55:22:cf:be:17:d9:f1:b0:83:80:c2:09:e7:fb:cb:9f: 11:45:6e:ea:6d:59:30:46:cd:6b:3b:35:b4:65:68:83:73:c8: 73:01:7c:fb:ef:a4:09:4c:14:95:ea:40:b6:aa:46:42:1a:f8: 47:ca:0b:e3:10:a0:11:86:04:db:06:db:27:46:e2:9a:eb:a6: f7:3b:bd:f0:f7:68:67:e3:cc:72:0e:ca:29:b6:57:35:57:d0: f1:c4:7b:c8:e9:f8:ff:0b:71:a5:ae:9d:b8:c3:66:3a:57:df: 48:43:96:63:d2:65:7a:22:bc:db:ae:b9:1b:d3:97:53:0f:3c: 6d:ad:7a:ae:54:4a:eb:5a:af:18:36:f8:04:9c:99:84:18:a5: 61:98:a9:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4NUMxMTAvBgNVBAUTKEFDOTEyQ0VGQTc1OEExMTk5QzFCRURFMDZCMTRBOUVB Mzk4OTc1RjcwHhcNMjUwNTEzMDIwMjU0WhcNMjUwNTIwMDIwMjU0WjAYMRYwFAYD VQQDEw02ODIyYTg0ZS1jZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvFud8vaqBq5QcJNBqdqGjpR2uBA93sGeqZ4h/0gqkVItz0roF7uo09Oqg+J ra55WI5k8sc6/j2d+OTE4jyzkviUo0bRmJZc8ACKvXtJx9MVYUivoF6Uwz89EeAd ktbVN1K91U6fgRIKTaK/ZJlIGjm785F7oSru25z1wMcqBmQ1aqd1id5whH6b9R7p rF5EozS1D1w1EEKrLC5/FDnwX3GLbIPhSdwL/gF+k6VF6P5jVY5Y5qU60PFE9ACk gQyDAn3ybKqjhsV5i5L8Jbga2he/kKZYkEvDrb+uP5MUu74kb3R/751h3aBHeumu Q3aM5chaoD2V7XFYzYFJGQtaeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzAbw1A 8XbXdb0yraND2zOdsWqoMB8GA1UdIwQYMBaAFKyRLO+nWKEZnBvt4GsUqeo5iXX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjg1Qy8wQTY4QjExODYw OEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9SbWNHLTNnYXhTcDZqbUpk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKRXM3NmRZb1JtY0ctM2dheFNwNmptSmRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjg1Qy8wQTY4QjExODYwOEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9S bWNHLTNnYXhTcDZqbUpkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCAQ8t+9bgcKS0AC3cOr9Zf/PX8LE1dt10gfSIbbHpnl1TI9Mry5tO +coob7o9LiQjegP8x3fT7CouAO3DVxCotVNFTUTAGixIObRyJXV91cm0bV20HWXr sfSntgR/rmtcovJDkoE2DG8pOCMfw1Uiz74X2fGwg4DCCef7y58RRW7qbVkwRs1r OzW0ZWiDc8hzAXz776QJTBSV6kC2qkZCGvhHygvjEKARhgTbBtsnRuKa66b3O73w 92hn48xyDsoptlc1V9DxxHvI6fj/C3Glrp24w2Y6V99IQ5Zj0mV6Irzbrrkb05dT DzxtrXquVErrWq8YNvgEnJmEGKVhmKmU -----END CERTIFICATE-----Generated at Wed May 14 14:57:07 2025 by rpki-client