$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json) Hash identifier: 7KmCrPsN1oC1w+odzbMPuIR2ffIl9Nvl2LbWRZ6sCJY= Subject key identifier: 72:A6:A1:F5:8C:0C:01:7D:AA:D9:74:DA:6E:D3:AA:55:5F:BB:66:55 Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft Manifest number: 0265 Signing time: Sun 11 May 2025 01:17:33 +0000 Manifest this update: Sun 11 May 2025 01:17:33 +0000 Manifest next update: Sun 18 May 2025 01:17:33 +0000 Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: JsPyrxtqCYHqGGAPwUltEvMIjfOMe/CeXH0z2MsVdQk=) 2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: NQf56Uj9m/23kHcMdcevpS6JxvdYxcKJxC0qqxSbed4=) 3: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: bsnKJQWxF5UUZ+STFoaUleWe8G1krXm9q3cPKIQEWa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Validity Not Before: May 11 01:17:33 2025 GMT Not After : May 18 01:17:33 2025 GMT Subject: CN=681ffaad-ffed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:60:78:a0:af:04:c8:7e:ec:23:06:e9:c3:79: d1:8b:9e:72:77:7f:fd:46:a0:4d:9c:68:e5:21:65: 83:6c:86:98:fc:4e:79:56:f3:e1:e2:80:3f:dd:6f: 31:0f:90:f6:76:bb:13:f4:3d:20:17:40:0e:71:e3: ba:fc:78:05:98:73:35:f4:71:b8:06:33:74:4d:fd: 9f:cf:a0:15:6a:47:a1:d9:46:ec:06:5c:96:15:cd: 27:31:c4:d4:5b:38:34:44:a3:92:bd:5b:44:8d:7f: 6f:cf:f6:f7:b2:c5:88:3f:b7:1b:95:80:ea:f9:3b: 81:ab:29:1f:1a:a5:3b:4e:a7:85:d1:b1:aa:10:f5: 57:db:e5:ee:0c:f1:2e:b5:6e:90:17:ed:49:e7:66: 37:c4:1d:d1:14:aa:ec:0a:63:3e:8a:c0:67:74:e8: 5c:0f:64:16:f1:2c:30:c6:09:07:40:02:5e:53:e8: 22:28:49:83:3e:95:6f:6d:b1:c0:eb:4b:e1:d5:34: 01:5b:d6:df:fe:a7:7b:c9:fa:fd:63:c9:11:b8:a1: 14:2f:6c:79:55:f2:d0:8c:0b:65:55:7e:83:3c:0d: 8d:48:b6:f3:8f:43:d9:c5:9a:80:52:36:ed:06:cb: 0e:fa:32:58:39:6b:23:c3:8a:2d:9b:f0:ac:ed:93: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A6:A1:F5:8C:0C:01:7D:AA:D9:74:DA:6E:D3:AA:55:5F:BB:66:55 X509v3 Authority Key Identifier: keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b8:1d:a5:ba:f6:a4:31:3d:41:f9:42:4d:ac:22:12:f3:9a: d3:ef:89:7b:e6:36:37:c7:f4:d8:8d:7f:6e:b7:89:e4:ef:3b: 00:7e:e7:ac:45:60:1b:24:ac:ea:8d:3e:de:4d:09:4c:55:e2: 11:22:fb:4e:99:bf:b0:05:03:2f:72:a0:ff:2d:1b:bb:44:40: 0c:1c:47:07:9a:b3:51:e0:5f:d8:8b:06:8e:45:f0:9d:76:83: f6:a3:dc:9c:4c:0e:77:19:d4:ab:9c:6f:3b:ef:7c:40:71:04: e2:eb:c7:6e:13:70:8a:be:9b:35:f6:94:b0:5f:b3:8e:d4:5b: 14:be:3a:86:0d:7c:ab:f5:1e:94:5b:1e:cd:18:9b:be:ab:e4: bf:73:1c:b3:4b:0f:bf:3d:84:17:40:13:8e:ae:7f:c7:5c:5a: 95:63:7e:a0:2a:4e:4b:f2:ac:90:a3:34:69:a4:cf:28:93:99: 56:eb:33:63:c0:4d:dd:08:c9:64:d0:a1:e3:58:19:1f:4d:bd: b6:f5:0d:4f:1c:f8:dc:61:6e:6a:7d:30:e1:87:15:f6:63:7a: 33:36:ee:45:e6:52:86:45:b7:05:7b:48:c3:f6:d3:c2:10:aa: f1:c6:f9:50:51:65:c7:30:54:31:50:e9:e7:e8:e2:41:92:4c: 1f:6b:26:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyN0YxMTAvBgNVBAUTKDM3OUJENEU3NzMyRjFBOEQxQzNCMjIyREI3NzczQzFD MTU0MTlGNDIwHhcNMjUwNTExMDExNzMzWhcNMjUwNTE4MDExNzMzWjAYMRYwFAYD VQQDEw02ODFmZmFhZC1mZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2B4oK8EyH7sIwbpw3nRi55yd3/9RqBNnGjlIWWDbIaY/E55VvPh4oA/3W8x D5D2drsT9D0gF0AOceO6/HgFmHM19HG4BjN0Tf2fz6AVakeh2UbsBlyWFc0nMcTU Wzg0RKOSvVtEjX9vz/b3ssWIP7cblYDq+TuBqykfGqU7TqeF0bGqEPVX2+XuDPEu tW6QF+1J52Y3xB3RFKrsCmM+isBndOhcD2QW8SwwxgkHQAJeU+giKEmDPpVvbbHA 60vh1TQBW9bf/qd7yfr9Y8kRuKEUL2x5VfLQjAtlVX6DPA2NSLbzj0PZxZqAUjbt BssO+jJYOWsjw4otm/Cs7ZP16QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKmofWM DAF9qtl02m7TqlVfu2ZVMB8GA1UdIwQYMBaAFDeb1OdzLxqNHDsiLbd3PBwVQZ9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTI3Ri9CQ0ZEQUZDQzEw REQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdvMGNPeUl0dDNjOEhCVkJu MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dlU1M012R28wY095SXR0M2M4SEJWQm4wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTI3Ri9CQ0ZEQUZDQzEwREQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdv MGNPeUl0dDNjOEhCVkJuMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLuB2luvakMT1B+UJNrCIS85rT74l75jY3x/TYjX9ut4nk7zsAfues RWAbJKzqjT7eTQlMVeIRIvtOmb+wBQMvcqD/LRu7REAMHEcHmrNR4F/YiwaORfCd doP2o9ycTA53GdSrnG8773xAcQTi68duE3CKvps19pSwX7OO1FsUvjqGDXyr9R6U Wx7NGJu+q+S/cxyzSw+/PYQXQBOOrn/HXFqVY36gKk5L8qyQozRppM8ok5lW6zNj wE3dCMlk0KHjWBkfTb229Q1PHPjcYW5qfTDhhxX2Y3ozNu5F5lKGRbcFe0jD9tPC EKrxxvlQUWXHMFQxUOnn6OJBkkwfayae -----END CERTIFICATE-----Generated at Sun May 11 13:24:30 2025 by rpki-client