$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: c0is99RpOYQCeHsGNjKFdD1N6Ewba1S82Yu58bleZlA= Subject key identifier: 55:5C:28:26:A7:98:CD:B4:47:13:EB:AB:4F:B7:8B:EF:1C:16:CF:45 Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 01E1 Signing time: Sun 11 May 2025 01:42:42 +0000 Manifest this update: Sun 11 May 2025 01:42:41 +0000 Manifest next update: Sun 18 May 2025 01:42:41 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: hpqQQ83YVogqCpXuCRj/4RfWlF/Ye+Pbya4+51P6Rvw=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: uRdIMNdIglfdteGkf069/isP402avOmjbNb7y/lUw5k=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: N73Qn6fYVAUW9KUPlhOzNYAivlJPaPply2UAI5lOlWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: May 11 01:42:41 2025 GMT Not After : May 18 01:42:41 2025 GMT Subject: CN=68200092-e04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:39:da:18:99:e7:e9:bc:4f:42:b0:6e:11: 26:fe:b4:8d:e7:71:cb:8c:74:f7:54:1e:12:68:c7: da:03:dc:ff:cd:07:d8:9b:33:7a:87:25:b3:ac:30: 5f:dc:be:a1:4b:b3:6f:2f:86:cb:45:10:a0:98:68: a8:0b:50:63:c5:c7:33:7a:65:8f:bd:61:97:8d:30: fe:80:03:0f:e4:5f:f7:67:07:92:4e:a6:d4:3e:b2: ff:5c:cd:cf:56:44:ac:fe:f5:59:ab:98:12:32:bf: f9:62:00:38:2d:8c:0d:57:7d:34:da:ec:16:2f:f3: 19:10:72:93:c2:aa:7a:25:38:10:f7:5e:af:38:92: 22:e4:6a:87:c2:f4:2c:4d:57:6a:99:d3:9c:35:7c: 2a:50:7d:3c:5b:c1:3e:48:41:3f:74:1f:25:98:5f: e6:b1:41:79:bc:c7:ad:91:56:a9:77:6a:bc:05:53: 76:f8:0c:60:dd:de:f7:3c:0f:3f:17:19:62:a3:01: a1:65:36:5a:58:59:73:81:ec:75:59:9a:ca:67:60: 2d:68:8e:a1:47:39:f6:ec:5f:1b:63:bd:e1:f0:d4: b2:20:cb:81:54:3d:25:1e:60:30:0e:f5:46:d0:4b: 96:85:ff:db:aa:e2:bc:79:9c:22:34:02:3f:83:40: 48:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5C:28:26:A7:98:CD:B4:47:13:EB:AB:4F:B7:8B:EF:1C:16:CF:45 X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c7:c6:ab:82:a6:4f:8c:c0:b4:97:95:e1:f8:d9:6f:a9:39: 6e:74:bd:d8:8a:9b:27:cd:0e:43:ca:2f:7f:2f:e3:71:34:8e: 57:e8:73:21:a9:42:b2:14:70:45:b2:d6:f3:39:b3:40:65:e4: bc:4f:a4:f8:d4:28:af:93:3c:57:16:7f:8e:04:fc:a1:04:6f: 7e:08:71:48:94:3e:7e:40:d4:e0:3d:e5:ee:95:7a:29:00:25: 8c:c6:e6:cd:01:23:74:2b:3b:c1:85:04:ad:eb:23:07:5b:84: 62:7a:cd:69:7f:a2:94:37:c3:33:11:39:db:c7:e5:cb:f8:3b: 7b:62:dc:19:de:85:0d:b5:47:c2:e4:f5:f4:b3:dd:c1:37:6c: 2b:e0:47:b0:ca:ef:be:eb:83:cb:1c:a0:0c:0f:83:8f:0b:50: 98:35:13:8a:31:0d:4c:76:c9:a7:a6:51:89:46:8f:a0:16:d9: d1:3c:37:94:cd:28:a1:12:74:bd:61:38:a0:66:81:47:dc:aa: 77:ea:67:9c:dd:9b:54:16:d8:f5:df:41:27:38:0b:c1:07:fe: 1a:04:e2:63:64:ac:7b:dc:b2:7e:04:71:35:f3:d7:bc:ba:57: 47:81:01:19:f5:65:1b:17:0e:96:5e:b3:a6:d3:c1:ba:bc:ff: 08:8b:e1:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjUwNTExMDE0MjQxWhcNMjUwNTE4MDE0MjQxWjAYMRYwFAYD VQQDEw02ODIwMDA5Mi1lMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VQ52hiZ5+m8T0KwbhEm/rSN53HLjHT3VB4SaMfaA9z/zQfYmzN6hyWzrDBf 3L6hS7NvL4bLRRCgmGioC1BjxcczemWPvWGXjTD+gAMP5F/3ZweSTqbUPrL/XM3P VkSs/vVZq5gSMr/5YgA4LYwNV3002uwWL/MZEHKTwqp6JTgQ916vOJIi5GqHwvQs TVdqmdOcNXwqUH08W8E+SEE/dB8lmF/msUF5vMetkVapd2q8BVN2+Axg3d73PA8/ FxliowGhZTZaWFlzgex1WZrKZ2AtaI6hRzn27F8bY73h8NSyIMuBVD0lHmAwDvVG 0EuWhf/bquK8eZwiNAI/g0BIPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVcKCan mM20RxPrq0+3i+8cFs9FMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBix8argqZPjMC0l5Xh+NlvqTludL3YipsnzQ5Dyi9/L+NxNI5X6HMh qUKyFHBFstbzObNAZeS8T6T41CivkzxXFn+OBPyhBG9+CHFIlD5+QNTgPeXulXop ACWMxubNASN0KzvBhQSt6yMHW4Ries1pf6KUN8MzETnbx+XL+Dt7YtwZ3oUNtUfC 5PX0s93BN2wr4Eewyu++64PLHKAMD4OPC1CYNROKMQ1MdsmnplGJRo+gFtnRPDeU zSihEnS9YTigZoFH3Kp36mec3ZtUFtj130EnOAvBB/4aBOJjZKx73LJ+BHE189e8 uldHgQEZ9WUbFw6WXrOm08G6vP8Ii+Ev -----END CERTIFICATE-----Generated at Sun May 11 18:51:57 2025 by rpki-client