$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json) Hash identifier: eF6Fb+BX4SJh34/6GbHbihdvgo7kyuXiS0MxxoQXlis= Subject key identifier: C1:BE:F7:79:73:28:93:CA:A8:C4:D9:52:CA:D0:49:9C:83:48:AD:08 Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft Manifest number: 01A6 Signing time: Fri 09 May 2025 02:28:44 +0000 Manifest this update: Fri 09 May 2025 02:28:43 +0000 Manifest next update: Fri 16 May 2025 02:28:43 +0000 Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: 8y0E+0ypOMP85Rop45oeCnwMjwq+nXZ3YhcAI9n4Qyg=) 2: B1335F1AC56A11ED9C305A33C4F9AE02.roa (hash: xgbES0ex3GdKtSSPoPs5HQUTvXl7g1+/YUUyrUA3DJY=) 3: F2A9D4BAC36211ED9D79ED6FC4F9AE02.roa (hash: +RO07JHGmdi0Lx5cV1Zx6lUdug7RiXfOSxrsmEM5WK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Validity Not Before: May 9 02:28:43 2025 GMT Not After : May 16 02:28:43 2025 GMT Subject: CN=681d685b-666c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:52:c7:46:a1:af:99:8b:de:0e:38:9d:bc:df: b7:e2:53:e4:a7:34:43:d6:e2:09:8d:ab:d7:bc:05: 9a:74:f9:12:dc:fd:4a:ad:98:22:ab:5c:be:1b:69: 5e:66:4e:55:6c:38:03:7f:99:ce:b7:95:e1:bd:fe: 4f:17:00:28:bb:62:b3:b6:83:16:18:e6:21:a6:02: 04:66:ac:a8:88:50:2c:dc:01:48:9d:16:f3:46:20: 73:0c:44:ff:f6:54:53:91:0e:6d:e1:dd:60:9b:da: 3f:32:25:dc:96:e2:73:ce:86:8d:d1:c1:88:0f:09: 8c:22:52:b0:d7:73:a2:e0:15:d0:7e:e4:bf:f4:9e: 9f:ad:22:b7:a3:da:9f:66:c1:ed:cb:3c:0a:d4:3d: 4e:cf:b4:d9:f7:17:91:12:33:2a:66:3e:f5:7d:9e: 6b:28:56:c4:e8:e5:81:74:e8:f8:09:a8:ee:98:41: 4f:bf:40:c7:3d:39:8d:6f:bd:8c:81:4a:a6:72:1a: fb:56:aa:a4:f9:43:63:e1:22:c2:0f:81:06:2a:78: 2e:ea:2a:71:14:d8:e6:66:3f:4a:3e:89:b6:08:60: 95:a9:18:8b:a2:f7:93:c4:ef:01:b4:92:30:a1:ab: 43:5b:38:bd:bf:dc:a3:e5:8e:c9:a4:3d:4b:fb:21: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BE:F7:79:73:28:93:CA:A8:C4:D9:52:CA:D0:49:9C:83:48:AD:08 X509v3 Authority Key Identifier: keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:3e:5e:f5:f7:41:f7:55:77:45:fd:73:df:52:31:50:b7:e2: fc:9a:41:6b:b3:f8:ed:f0:fd:33:48:ea:cf:5b:aa:6c:02:5a: 73:3b:3e:13:c7:73:5f:4e:f1:88:6e:99:fe:8a:65:be:68:88: 17:bc:00:06:e8:ca:ec:13:c7:ed:dc:ba:59:eb:18:4b:f9:a8: 2b:30:48:14:54:b5:02:37:5d:c5:5d:f8:de:08:1d:e8:68:c1: 87:b8:36:6d:24:da:2a:98:00:ed:dc:f4:e3:f5:29:1f:26:b8: b3:ca:76:17:32:d4:bd:88:b5:1b:17:0d:e7:b6:63:5c:1f:aa: 48:a2:47:ea:a3:4c:99:aa:b3:b2:85:e3:ae:40:59:69:96:04: 14:09:65:81:92:fe:9b:63:8b:b5:d5:d2:00:5f:f4:1c:5c:d2: 28:a7:51:1d:ed:0d:eb:14:d3:83:8e:2b:68:5c:ec:9b:f1:f2: f2:8a:72:71:2e:46:d4:11:78:86:c4:0e:0f:86:a2:65:44:8e: 93:4c:3b:fb:9a:c9:ed:d6:4d:2b:e3:85:65:9e:69:a2:10:a0: 1f:0d:68:d7:a7:83:29:71:38:a8:e3:8a:53:ab:5f:71:0d:6c: 4f:68:64:cd:64:26:23:a6:0f:28:1d:c8:f2:f8:28:19:6b:7d: 16:8a:c7:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx RUY3MDQwREIwHhcNMjUwNTA5MDIyODQzWhcNMjUwNTE2MDIyODQzWjAYMRYwFAYD VQQDEw02ODFkNjg1Yi02NjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21LHRqGvmYveDjidvN+34lPkpzRD1uIJjavXvAWadPkS3P1KrZgiq1y+G2le Zk5VbDgDf5nOt5Xhvf5PFwAou2KztoMWGOYhpgIEZqyoiFAs3AFInRbzRiBzDET/ 9lRTkQ5t4d1gm9o/MiXcluJzzoaN0cGIDwmMIlKw13Oi4BXQfuS/9J6frSK3o9qf ZsHtyzwK1D1Oz7TZ9xeREjMqZj71fZ5rKFbE6OWBdOj4CajumEFPv0DHPTmNb72M gUqmchr7Vqqk+UNj4SLCD4EGKngu6ipxFNjmZj9KPom2CGCVqRiLoveTxO8BtJIw oatDWzi9v9yj5Y7JpD1L+yGTSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMG+93lz KJPKqMTZUsrQSZyDSK0IMB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3 Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCPl7190H3VXdF/XPfUjFQt+L8mkFrs/jt8P0zSOrPW6psAlpzOz4T x3NfTvGIbpn+imW+aIgXvAAG6MrsE8ft3LpZ6xhL+agrMEgUVLUCN13FXfjeCB3o aMGHuDZtJNoqmADt3PTj9SkfJrizynYXMtS9iLUbFw3ntmNcH6pIokfqo0yZqrOy heOuQFlplgQUCWWBkv6bY4u11dIAX/QcXNIop1Ed7Q3rFNODjitoXOyb8fLyinJx LkbUEXiGxA4PhqJlRI6TTDv7msnt1k0r44VlnmmiEKAfDWjXp4MpcTio44pTq19x DWxPaGTNZCYjpg8oHcjy+CgZa30WiseN -----END CERTIFICATE-----Generated at Sun May 11 00:46:38 2025 by rpki-client