$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft File: bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json) Hash identifier: 4PG0ng4Dq67/Pgey8RZhQ5QLI1gEY9BEALckpaRWbz0= Subject key identifier: 6F:03:E1:C1:F9:B9:1C:00:A2:62:CB:35:29:D2:FF:3E:10:87:C8:35 Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 Certificate issuer: /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849 Certificate serial: 04D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft Manifest number: 04D2 Signing time: Thu 08 May 2025 23:35:58 +0000 Manifest this update: Thu 08 May 2025 23:35:57 +0000 Manifest next update: Thu 15 May 2025 23:35:57 +0000 Files and hashes: 1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: DVvmE1drrFlXe2cwtDBzdWDZ5uXYtBFXjf+45ooJGiI=) 2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: O7MsLUw+gaoXTG9KiMvLQn/bjyCnjO8H09gMJ3FbG7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1238 (0x4d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849 Validity Not Before: May 8 23:35:57 2025 GMT Not After : May 15 23:35:57 2025 GMT Subject: CN=681d3fdd-39c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:fa:55:3f:23:35:1e:7f:6a:ce:3c:36:2c:d7: f2:3c:17:48:0a:2d:be:bb:d2:6c:e0:42:3f:6e:92: c0:cc:ad:d4:c2:c2:e3:bf:a5:45:be:8a:f6:1c:d1: 77:55:92:32:11:39:0f:20:bb:b3:81:2d:7f:70:1e: 9a:82:ac:09:a3:76:b4:e3:9c:3f:1e:82:fb:5a:b5: 3d:33:40:69:78:4a:76:d0:48:36:f3:02:df:e4:36: 97:7e:3d:ee:50:c7:f0:61:34:b3:46:8e:4f:c7:93: fa:82:16:c4:0e:63:7e:80:76:3b:16:ae:93:d5:d1: aa:bb:4a:76:d4:1d:74:bd:2c:52:59:16:b1:a2:93: 25:bd:41:3e:32:1c:20:ea:4a:ad:6b:31:bc:47:d7: 14:7c:53:9d:ba:7b:70:32:7a:b7:75:47:f1:ae:53: 4c:bd:b5:0a:69:a9:80:ac:26:ad:0f:d7:42:70:2b: 62:b8:7e:4c:6d:f7:66:fd:f4:87:f4:5f:d5:c7:fc: 73:c1:57:39:6d:9b:5f:15:fe:2d:2f:0d:63:54:a1: d5:80:10:36:c1:25:be:dc:3c:9f:bc:29:82:7d:1e: 4e:39:ca:7d:99:45:4d:35:55:21:db:29:cf:e9:85: 9d:c0:4d:24:23:0b:fd:66:b5:77:f3:6e:cf:1d:37: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:03:E1:C1:F9:B9:1C:00:A2:62:CB:35:29:D2:FF:3E:10:87:C8:35 X509v3 Authority Key Identifier: keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:64:d4:64:87:1a:bc:f2:35:f7:e6:99:f9:54:1f:d0:08:64: 20:fc:66:0f:5c:23:b8:bf:e5:9c:61:44:e1:d1:d2:52:7e:06: 20:5f:63:2f:1c:32:ac:ee:cf:aa:92:c0:5a:b3:8c:69:be:ef: df:88:ac:96:9c:ed:f1:24:0b:54:e5:f0:c7:de:11:38:55:06: 95:2f:ed:76:79:4b:a3:bb:61:d5:6f:c2:cd:4b:5e:ed:1f:8d: f6:df:2f:29:13:ba:87:6e:cc:60:96:93:50:99:90:e7:56:01: 9d:2d:01:37:98:99:51:b0:7e:09:ed:8e:a9:d5:48:14:f8:41: d0:c6:4d:5e:6a:25:88:27:de:01:a4:7e:e0:ed:35:49:a2:35: f4:b7:7f:20:4b:73:13:51:11:f8:78:ac:22:16:79:1a:5f:b3: df:37:60:31:bb:27:0c:7a:20:c7:d0:3c:03:ed:89:00:bb:f2: f6:d7:90:19:b9:0c:f5:3c:96:da:05:7a:17:f3:db:36:53:33: 48:67:82:8f:1e:9e:17:0a:13:82:b1:e6:ca:85:fd:d3:c0:5e: 7d:0a:4b:7e:50:7a:cc:eb:2f:61:0d:4e:46:0a:1d:6f:63:2d: 8b:53:eb:67:d8:a5:ad:11:a7:e9:03:f0:ec:71:fc:27:ab:c0: 26:4e:ee:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4MjcxMTAvBgNVBAUTKDZFRUU3NzFCQjNDRTdFOThEQjM5NjBDNEQ4MkY3NDJB MkNGN0U4NDkwHhcNMjUwNTA4MjMzNTU3WhcNMjUwNTE1MjMzNTU3WjAYMRYwFAYD VQQDEw02ODFkM2ZkZC0zOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+PpVPyM1Hn9qzjw2LNfyPBdICi2+u9Js4EI/bpLAzK3UwsLjv6VFvor2HNF3 VZIyETkPILuzgS1/cB6agqwJo3a045w/HoL7WrU9M0BpeEp20Eg28wLf5DaXfj3u UMfwYTSzRo5Px5P6ghbEDmN+gHY7Fq6T1dGqu0p21B10vSxSWRaxopMlvUE+Mhwg 6kqtazG8R9cUfFOduntwMnq3dUfxrlNMvbUKaamArCatD9dCcCtiuH5Mbfdm/fSH 9F/Vx/xzwVc5bZtfFf4tLw1jVKHVgBA2wSW+3DyfvCmCfR5OOcp9mUVNNVUh2ynP 6YWdwE0kIwv9ZrV3827PHTd/+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8D4cH5 uRwAomLLNSnS/z4Qh8g1MB8GA1UdIwQYMBaAFG7udxuzzn6Y2zlgxNgvdCos9+hJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODgyNy8zQzdDQjQ1MDFC RTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2ZwamJPV0RFMkM5MEtpejM2 RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1NTNHN1BPZnBqYk9XREUyQzkwS2l6MzZFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODgyNy8zQzdDQjQ1MDFCRTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2Zw amJPV0RFMkM5MEtpejM2RWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvZNRkhxq88jX35pn5VB/QCGQg/GYPXCO4v+WcYUTh0dJSfgYgX2Mv HDKs7s+qksBas4xpvu/fiKyWnO3xJAtU5fDH3hE4VQaVL+12eUuju2HVb8LNS17t H4323y8pE7qHbsxglpNQmZDnVgGdLQE3mJlRsH4J7Y6p1UgU+EHQxk1eaiWIJ94B pH7g7TVJojX0t38gS3MTURH4eKwiFnkaX7PfN2AxuycMeiDH0DwD7YkAu/L215AZ uQz1PJbaBXoX89s2UzNIZ4KPHp4XChOCsebKhf3TwF59Ckt+UHrM6y9hDU5GCh1v Yy2LU+tn2KWtEafpA/Dscfwnq8AmTu4q -----END CERTIFICATE-----Generated at Sat May 10 07:42:46 2025 by rpki-client