$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: DH5hLEn5pVciOoJKydAXoWHtZicpXpvVA7XFLVqrkhc= Subject key identifier: BA:FE:90:6C:D7:9B:44:D4:57:04:5B:7F:E9:0F:0A:66:EA:9E:75:21 Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 02D2 Signing time: Tue 13 May 2025 01:10:37 +0000 Manifest this update: Tue 13 May 2025 01:10:36 +0000 Manifest next update: Tue 20 May 2025 01:10:36 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: gamjlMFF1AgZSHm3L9xt0n8D0pU6cuuVdDfXeueUei8=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: ZM5rRUd00+nBfPasOFVmxXpUPYX0MShZkN1FXso/iDI=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: pjNUbtH7HoaOJ7Yp/zo9LBV9AiGXTeeEg0CufDMnsg0=) 4: 43CEF64C5E7111EDAD328E21C4F9AE02.roa (hash: CMs488Hhl5oLPF4YmVkuRaqJu0RzsjH0FTfUHm+gkes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: May 13 01:10:36 2025 GMT Not After : May 20 01:10:36 2025 GMT Subject: CN=68229c0c-474d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:32:11:51:62:c1:17:70:22:17:6f:c2:ce: 76:63:b8:4f:76:46:f0:9a:19:ac:b9:b4:ca:eb:39: 7c:f4:a5:b4:28:2d:b6:4e:b0:84:51:98:2e:ed:38: 6c:54:06:e6:f5:e7:bc:5e:fa:75:75:fb:09:c8:02: 06:f1:9d:82:86:e5:de:54:a3:08:cb:bc:b3:e7:9d: f9:de:d0:46:4e:83:66:0a:a7:7a:5e:d3:80:7f:27: f5:81:ac:a5:c3:b9:46:91:08:fa:c1:4c:91:2f:dc: 4c:35:b7:c9:7d:60:31:88:f6:ba:52:20:31:17:f2: bb:a0:bd:d1:79:e0:4f:34:f7:6b:f2:2f:ee:a0:2a: e8:60:86:e9:67:f3:11:30:46:2f:d7:3d:8f:2c:a3: 8b:23:6d:04:c8:65:42:f7:62:44:16:0a:cd:61:12: 30:b6:ba:89:11:cb:1c:0e:d9:86:b4:9d:d6:61:c0: 84:1f:41:4d:8c:d3:79:93:38:5b:c4:47:6f:3d:c3: 44:17:4a:3e:c5:cb:e0:06:df:d7:9e:4e:dc:58:df: 03:ff:77:ea:7b:ec:50:f7:08:6a:64:54:75:d9:26: 90:f2:7f:82:cc:48:c1:a8:01:1c:25:8c:96:ed:2a: 6b:f1:24:bd:52:f9:1d:a9:f8:4e:e1:49:df:09:e8: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:90:6C:D7:9B:44:D4:57:04:5B:7F:E9:0F:0A:66:EA:9E:75:21 X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:49:fa:22:66:6b:d9:01:01:2b:b9:cf:e9:23:60:83:5f:5b: 9e:74:d6:7f:a6:38:fc:4a:d7:c0:7e:42:5d:38:3c:d3:1d:de: a8:fa:b2:53:a2:d8:d9:09:2f:0e:04:5b:2d:37:ca:13:44:f6: 06:c5:69:ec:33:09:94:60:db:a7:f7:e0:a4:95:d3:9e:16:df: 56:88:93:0c:46:d6:fc:60:2f:95:61:71:aa:9f:b7:ef:4a:ac: 19:c5:3b:0d:92:cf:1f:16:b7:ff:f2:b8:79:70:b1:03:1b:7d: 78:e4:38:9f:b8:0f:ce:72:48:f5:12:4f:45:8c:1b:19:71:95: 25:ae:40:08:5c:84:56:5c:b5:31:7e:93:2a:98:46:33:e6:c5: a1:a3:fa:a0:cf:f8:2c:58:6a:58:ac:b5:e6:14:de:6e:f8:df: 6b:12:0c:38:8c:c9:27:09:77:bc:66:2c:38:f6:f4:a3:bf:30: d1:5a:a2:27:db:1e:24:2d:b4:67:02:99:83:eb:ad:4c:4a:2e: 06:96:2e:26:51:2a:52:5b:a4:aa:84:d5:79:a2:5e:cf:ad:e9: 08:88:ff:25:b3:41:e5:f7:e9:61:3b:2d:8a:fc:30:b6:d1:11: a9:79:3a:6c:06:f0:b8:cd:99:87:eb:85:ab:96:bb:b1:5c:0d: 2b:07:e8:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjUwNTEzMDExMDM2WhcNMjUwNTIwMDExMDM2WjAYMRYwFAYD VQQDEw02ODIyOWMwYy00NzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzh8yEVFiwRdwIhdvws52Y7hPdkbwmhmsubTK6zl89KW0KC22TrCEUZgu7Ths VAbm9ee8Xvp1dfsJyAIG8Z2ChuXeVKMIy7yz55353tBGToNmCqd6XtOAfyf1gayl w7lGkQj6wUyRL9xMNbfJfWAxiPa6UiAxF/K7oL3ReeBPNPdr8i/uoCroYIbpZ/MR MEYv1z2PLKOLI20EyGVC92JEFgrNYRIwtrqJEcscDtmGtJ3WYcCEH0FNjNN5kzhb xEdvPcNEF0o+xcvgBt/Xnk7cWN8D/3fqe+xQ9whqZFR12SaQ8n+CzEjBqAEcJYyW 7Spr8SS9UvkdqfhO4UnfCehzuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr+kGzX m0TUVwRbf+kPCmbqnnUhMB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYSfoiZmvZAQEruc/pI2CDX1uedNZ/pjj8StfAfkJdODzTHd6o+rJT otjZCS8OBFstN8oTRPYGxWnsMwmUYNun9+CkldOeFt9WiJMMRtb8YC+VYXGqn7fv SqwZxTsNks8fFrf/8rh5cLEDG3145DifuA/Ockj1Ek9FjBsZcZUlrkAIXIRWXLUx fpMqmEYz5sWho/qgz/gsWGpYrLXmFN5u+N9rEgw4jMknCXe8Ziw49vSjvzDRWqIn 2x4kLbRnApmD661MSi4Gli4mUSpSW6SqhNV5ol7PrekIiP8ls0Hl9+lhOy2K/DC2 0RGpeTpsBvC4zZmH64WrlruxXA0rB+hV -----END CERTIFICATE-----Generated at Wed May 14 12:57:02 2025 by rpki-client