$ rpki-client -vvf rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft File: baLnsgc31v3aKTEYAyM4Tcf4AXI.mft (raw, json) Hash identifier: +Pb3EGVrv3OtRoeaObHQzJXTtmJi1aIf5LQguSrbVq4= Subject key identifier: CB:C8:88:30:86:F6:4D:B2:60:42:DB:66:EE:86:9B:3D:C4:CC:71:96 Authority key identifier: 6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72 Certificate issuer: /CN=A911D415/serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft Manifest number: 012C Signing time: Tue 13 May 2025 03:48:39 +0000 Manifest this update: Tue 13 May 2025 03:48:38 +0000 Manifest next update: Tue 20 May 2025 03:48:38 +0000 Files and hashes: 1: baLnsgc31v3aKTEYAyM4Tcf4AXI.crl (hash: p0/SWkh/zw6IqpXOnKej3j0xy00UuDCgDiTYdaFrXGk=) 2: B2B7B96067BA11EE99370352C4F9AE02.roa (hash: P/WWt5eI8v2C+zoec4Zd9OnVnDcSJ3bbXF6r7+A0KgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D415, serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172 Validity Not Before: May 13 03:48:38 2025 GMT Not After : May 20 03:48:38 2025 GMT Subject: CN=6822c117-685f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:41:e6:2d:4f:1c:54:d3:23:e4:32:f8:2a: ec:a9:50:3c:df:38:73:09:57:c0:fc:3c:02:0f:ba: 20:b6:f1:c2:d0:25:55:e9:7f:f8:72:ec:a0:4d:aa: 2c:45:46:fa:d0:05:20:1b:44:b4:92:b4:63:b0:77: c9:17:fb:99:3d:4c:18:26:d3:04:4d:27:84:33:de: 59:41:89:9b:4f:b5:e6:f0:bb:bc:fe:dd:72:43:9d: 6f:a4:0d:c4:4b:7e:ef:29:23:2a:2a:3b:ef:0a:45: fd:19:ca:94:bf:9f:0c:58:57:bb:5b:da:4c:a2:36: 4a:1f:3c:95:fe:58:90:30:d3:05:8c:e5:b8:ed:55: b0:f4:f6:a1:e5:57:31:c4:c7:d9:c8:c8:9b:60:49: 5b:b5:31:d4:fd:0d:9e:fa:ce:ba:6a:01:99:0c:df: a3:92:ee:8f:48:69:04:94:12:2d:f3:48:1c:25:c8: 42:c5:b0:4d:1b:9f:7f:aa:59:a4:60:cf:b8:a3:c1: f9:f1:6a:5b:f6:73:01:af:5e:d5:1b:23:98:3b:ce: d8:32:8e:6a:fc:8d:06:4d:2f:38:d9:04:03:70:0b: 34:63:b0:a5:9a:2e:c7:31:d8:85:e2:83:ee:4f:62: d2:ed:d6:f5:f6:78:fe:c9:9a:1a:a9:59:4f:5f:ce: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C8:88:30:86:F6:4D:B2:60:42:DB:66:EE:86:9B:3D:C4:CC:71:96 X509v3 Authority Key Identifier: keyid:6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:02:bc:92:a7:4a:56:1e:18:4a:3b:f5:db:54:9b:3c:d4:59: 97:4b:5b:56:94:74:14:ed:4a:c4:89:7c:63:7f:25:df:f9:0c: e1:51:7a:c2:1a:ab:38:f7:7d:45:05:3d:2f:c1:12:39:59:76: cc:a5:fe:02:e9:e6:78:7f:d2:46:9a:b2:59:a3:0c:24:e7:4b: 12:7a:1c:e6:2d:5a:fc:24:74:62:ef:7b:e7:a1:48:75:06:ad: 15:d3:f4:61:44:20:3b:03:8f:fa:51:d8:b7:46:c3:c9:40:0c: 41:be:22:2b:86:4a:41:30:a8:61:67:bb:9b:62:d3:41:80:fd: 06:aa:b9:fc:13:65:42:ed:23:3c:b9:78:3f:b9:cc:94:93:5e: 77:b0:7f:13:8b:8b:ad:80:47:b8:e2:29:a0:87:32:ba:4e:86: 7c:6b:6f:e9:f5:c6:4c:0d:d6:cf:e6:01:3a:96:fc:b0:41:36: 93:f2:60:8d:0f:3b:70:94:2e:60:31:e6:1f:aa:d2:61:6a:c1: 4e:d8:df:30:79:e3:ba:bf:0a:17:86:ba:57:0d:07:ad:7e:a9: dc:71:a3:2d:bf:1f:f2:62:62:09:40:42:00:4c:53:6a:85:39: bb:5c:b2:33:cd:99:59:57:18:47:e6:63:af:1e:44:f0:fd:bd: 2e:10:b4:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MTUxMTAvBgNVBAUTKDZEQTJFN0IyMDczN0Q2RkREQTI5MzExODAzMjMzODRE QzdGODAxNzIwHhcNMjUwNTEzMDM0ODM4WhcNMjUwNTIwMDM0ODM4WjAYMRYwFAYD VQQDEw02ODIyYzExNy02ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7xB5i1PHFTTI+Qy+CrsqVA83zhzCVfA/DwCD7ogtvHC0CVV6X/4cuygTaos RUb60AUgG0S0krRjsHfJF/uZPUwYJtMETSeEM95ZQYmbT7Xm8Lu8/t1yQ51vpA3E S37vKSMqKjvvCkX9GcqUv58MWFe7W9pMojZKHzyV/liQMNMFjOW47VWw9Pah5Vcx xMfZyMibYElbtTHU/Q2e+s66agGZDN+jku6PSGkElBIt80gcJchCxbBNG59/qlmk YM+4o8H58Wpb9nMBr17VGyOYO87YMo5q/I0GTS842QQDcAs0Y7Clmi7HMdiF4oPu T2LS7db19nj+yZoaqVlPX84OGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvIiDCG 9k2yYELbZu6Gmz3EzHGWMB8GA1UdIwQYMBaAFG2i57IHN9b92ikxGAMjOE3H+AFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQxNS82NEI3NzYyRTY3 QkExMUVFQTkxMkRFMzdDNEY5QUUwMi9iYUxuc2djMzF2M2FLVEVZQXlNNFRjZjRB WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhTG5zZ2MzMXYzYUtURVlBeU00VGNmNEFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQxNS82NEI3NzYyRTY3QkExMUVFQTkxMkRFMzdDNEY5QUUwMi9iYUxuc2djMzF2 M2FLVEVZQXlNNFRjZjRBWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQArySp0pWHhhKO/XbVJs81FmXS1tWlHQU7UrEiXxjfyXf+QzhUXrC Gqs4931FBT0vwRI5WXbMpf4C6eZ4f9JGmrJZowwk50sSehzmLVr8JHRi73vnoUh1 Bq0V0/RhRCA7A4/6Udi3RsPJQAxBviIrhkpBMKhhZ7ubYtNBgP0Gqrn8E2VC7SM8 uXg/ucyUk153sH8Ti4utgEe44imghzK6ToZ8a2/p9cZMDdbP5gE6lvywQTaT8mCN DztwlC5gMeYfqtJhasFO2N8weeO6vwoXhrpXDQetfqnccaMtvx/yYmIJQEIATFNq hTm7XLIzzZlZVxhH5mOvHkTw/b0uELRM -----END CERTIFICATE-----Generated at Wed May 14 16:19:28 2025 by rpki-client