$ rpki-client -vvf rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft File: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft (raw, json) Hash identifier: Rb2j049KE3pA+WVy/8WsM1OFw2jmsCqwYfSB/g4F1k8= Subject key identifier: 0E:B3:1E:41:A3:F4:A2:4C:10:7C:7B:DE:91:11:37:51:5F:10:B8:59 Authority key identifier: 07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 Certificate issuer: /CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft Manifest number: 5E Signing time: Thu 15 May 2025 06:28:48 +0000 Manifest this update: Thu 15 May 2025 06:28:47 +0000 Manifest next update: Thu 22 May 2025 06:28:47 +0000 Files and hashes: 1: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl (hash: z3oIzNj02BnWLebtrF+mx/cmLk1vr7I0+JKfNLEjd9M=) 2: A5CE322CAD4311EF8552641BC4F9AE02.roa (hash: oXiSJMCySt2dFDYGEcN3qaUXeVsh5lk+krDNaZUgJ2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129162, serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Validity Not Before: May 15 06:28:47 2025 GMT Not After : May 22 06:28:47 2025 GMT Subject: CN=6825899f-9649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:93:82:ab:93:7c:be:98:b0:fd:0b:b1:e6: ff:8a:6d:5b:11:ee:56:97:9c:0d:75:c4:a5:91:30: 06:0e:82:0e:4d:42:1c:5b:81:2b:25:57:df:43:8f: 5f:14:08:f9:a3:ff:07:a0:d4:33:af:c4:a2:fe:7e: f9:27:57:98:7e:11:98:20:1e:94:fe:f4:83:6a:8d: 2d:21:4f:eb:55:f8:c2:06:d0:79:69:3b:27:c9:e8: e3:15:43:1a:82:56:8c:29:7d:53:6d:06:c7:b1:42: f1:f4:d5:c2:07:c8:f4:5d:ca:9b:0a:e6:46:c4:ab: b8:bd:a3:c5:ee:52:a8:4c:ca:f7:a4:a6:d9:1c:d0: 4b:14:d5:81:f3:6b:e6:03:ae:e0:a3:cf:cd:e0:19: a2:08:26:d0:c2:62:a3:22:c4:97:ee:09:6e:35:aa: d7:ce:b5:55:62:a1:eb:5f:36:a2:71:0c:05:bb:45: bf:9c:e5:4d:77:93:b2:1d:a4:c9:5c:6b:a9:f4:d7: 68:45:e4:bc:05:73:a3:8a:3d:d0:8e:10:93:4d:75: 89:b5:51:1a:72:0e:4f:7d:cf:bf:d9:0a:34:49:2a: 76:b0:71:27:21:c4:e4:eb:ee:e8:dc:e2:d6:dd:8c: ee:96:a8:92:f3:9e:db:0f:5d:d6:86:a4:a9:1c:af: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B3:1E:41:A3:F4:A2:4C:10:7C:7B:DE:91:11:37:51:5F:10:B8:59 X509v3 Authority Key Identifier: keyid:07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:67:36:98:4b:14:15:11:ed:44:92:3b:2d:c9:0a:d3:89:a8: f5:12:49:29:72:d5:4b:86:8b:6c:d6:14:2a:ea:3b:44:e6:f0: ca:dd:a1:3a:1c:b2:03:e5:be:45:bb:51:64:7a:e6:ec:47:81: 6d:03:82:b5:0a:51:18:60:23:1f:2b:c9:64:5e:ed:95:51:f6: 2b:5e:41:f0:41:55:10:f7:68:80:9e:2a:cf:7d:7b:14:c7:cd: 10:59:d0:2f:cf:25:a9:7b:2a:56:8e:8c:00:51:41:b2:32:45: af:10:bb:b6:1c:68:55:0e:13:ee:d5:4e:e3:9d:41:48:f4:40: 89:31:91:52:42:98:1b:6a:e9:c8:ff:e3:37:ac:c2:12:25:d8: 12:23:ff:27:3a:c5:54:b9:7c:75:f4:c8:23:ec:b1:d5:87:39: 98:2c:08:f3:f3:69:9a:3f:7c:53:3e:49:ab:39:ab:2d:aa:45: c2:49:f6:6d:d4:98:ce:30:2d:a8:a9:42:a6:5c:16:9b:5c:3b: 89:73:e2:1a:be:6b:8b:30:4d:99:7f:f4:97:41:65:1d:95:79: 75:1a:58:db:2e:3f:84:78:42:57:fb:73:f6:d4:23:c3:03:62: 48:87:a3:63:e0:a9:19:f5:66:9f:64:11:8f:f7:78:8a:d8:9c: aa:2e:e7:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTE2MjExMC8GA1UEBRMoMDdBNjgxQzkxQzNFMDUxMkQzNjg5RTk5QkNFNUJDNjY0 MDkxNjczNDAeFw0yNTA1MTUwNjI4NDdaFw0yNTA1MjIwNjI4NDdaMBgxFjAUBgNV BAMTDTY4MjU4OTlmLTk2NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIvZOCq5N8vpiw/Qux5v+KbVsR7laXnA11xKWRMAYOgg5NQhxbgSslV99Dj18U CPmj/weg1DOvxKL+fvknV5h+EZggHpT+9INqjS0hT+tV+MIG0HlpOyfJ6OMVQxqC VowpfVNtBsexQvH01cIHyPRdypsK5kbEq7i9o8XuUqhMyvekptkc0EsU1YHza+YD ruCjz83gGaIIJtDCYqMixJfuCW41qtfOtVVioetfNqJxDAW7Rb+c5U13k7IdpMlc a6n012hF5LwFc6OKPdCOEJNNdYm1URpyDk99z7/ZCjRJKnawcSchxOTr7ujc4tbd jO6WqJLzntsPXdaGpKkcr+MvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDrMeQaP0 okwQfHvekRE3UV8QuFkwHwYDVR0jBBgwFoAUB6aByRw+BRLTaJ6ZvOW8ZkCRZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MTYyLzVBMzgwRDZBQUQ0 MzExRUZBQTg2QzMxQUM0RjlBRTAyL0I2YUJ5UnctQlJMVGFKNlp2T1c4WmtDUlp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjZhQnlSdy1CUkxUYUo2WnZPVzhaa0NSWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 MTYyLzVBMzgwRDZBQUQ0MzExRUZBQTg2QzMxQUM0RjlBRTAyL0I2YUJ5UnctQlJM VGFKNlp2T1c4WmtDUlp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJxnNphLFBUR7USSOy3JCtOJqPUSSSly1UuGi2zWFCrqO0Tm8MrdoToc sgPlvkW7UWR65uxHgW0DgrUKURhgIx8ryWRe7ZVR9iteQfBBVRD3aICeKs99exTH zRBZ0C/PJal7KlaOjABRQbIyRa8Qu7YcaFUOE+7VTuOdQUj0QIkxkVJCmBtq6cj/ 4zeswhIl2BIj/yc6xVS5fHX0yCPssdWHOZgsCPPzaZo/fFM+Sas5qy2qRcJJ9m3U mM4wLaipQqZcFptcO4lz4hq+a4swTZl/9JdBZR2VeXUaWNsuP4R4Qlf7c/bUI8MD YkiHo2PgqRn1Zp9kEY/3eIrYnKou57g= -----END CERTIFICATE-----Generated at Sat May 17 03:23:18 2025 by rpki-client