$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json) Hash identifier: Hb0XLQe2WhAyqlATT6CDl0MWZDRns5G1KDMCvcCWly0= Subject key identifier: 4F:BD:13:F8:CA:B6:08:E8:E9:7D:0A:5E:F6:8B:C9:EE:AB:00:AE:57 Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft Manifest number: 0402 Signing time: Thu 15 May 2025 00:29:43 +0000 Manifest this update: Thu 15 May 2025 00:29:42 +0000 Manifest next update: Thu 22 May 2025 00:29:42 +0000 Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: h4uR4d9d/W8yD4D89Ey989/BkH6MRX5LPTG+Q/pZafY=) 2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NdcrODMvzPxbGahsHjIC859CSUu00GxcxQ7bS9fv+uc=) 3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Gfvw/vl1mymWE2Hz3blrobSO5Bvy6xdNCRghpmsy0TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634 Validity Not Before: May 15 00:29:42 2025 GMT Not After : May 22 00:29:42 2025 GMT Subject: CN=68253577-1673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:34:9d:3b:98:fb:a5:d5:ff:d7:db:0c:b4: 80:55:6f:56:7c:3c:cf:9b:9a:8e:49:9c:12:7a:ca: e1:50:1b:ab:28:a0:61:f0:a7:f8:7a:2f:51:18:8c: 66:f5:e9:3e:e2:15:69:13:9a:12:7c:20:4b:eb:b2: cd:29:a9:97:95:52:31:be:f7:ad:7e:74:00:21:3f: 6b:8d:5a:42:c2:97:2c:38:28:31:08:20:b0:db:89: 8e:79:96:22:44:84:c1:aa:61:5c:cf:a7:1c:ca:fa: e0:fe:3c:6b:b5:02:a4:24:8c:5b:5d:c7:9d:2f:71: 6a:00:a2:8d:d3:c0:14:f0:43:ba:6d:21:27:60:b2: 29:59:c3:7d:ce:84:17:be:cc:29:e9:5f:7c:44:83: 7f:29:29:34:d6:79:3b:44:8e:88:45:db:d1:38:5c: 72:6f:c2:a8:71:aa:85:3f:19:69:ce:23:24:32:79: 09:5c:10:fc:7d:52:cf:5b:9b:a4:4d:29:6c:ed:58: 4b:84:da:09:1e:0b:2b:f8:5f:52:1c:19:1d:c1:cf: ab:1b:95:56:df:c2:b4:39:51:1c:5f:6f:48:63:c2: 42:0d:a0:92:7a:64:d4:e1:60:6c:e1:71:cb:25:dc: 57:b8:f6:01:b1:58:a7:b9:ef:ff:52:e4:62:98:6d: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BD:13:F8:CA:B6:08:E8:E9:7D:0A:5E:F6:8B:C9:EE:AB:00:AE:57 X509v3 Authority Key Identifier: keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:b0:2e:52:92:68:b3:a6:3c:62:07:09:48:0a:2d:08:91:3f: 75:7a:54:c3:1d:f5:2d:33:63:ce:55:2e:a1:5a:dc:75:16:bb: 73:ea:22:bb:f7:30:72:72:1e:e6:f1:cd:58:d2:5c:48:1b:a5: bc:ca:21:77:78:4e:88:6f:24:9c:df:81:80:6b:a4:9e:22:77: ed:e1:91:e1:2b:47:76:e8:01:6d:fd:23:c7:cb:6c:7d:b2:72: b0:a2:10:a5:33:5f:f7:86:b6:ea:7a:31:9b:91:e2:ba:1f:4f: b8:dc:55:d2:84:fc:23:81:1a:2a:b0:ea:dc:04:fc:99:17:5b: 48:2f:ae:d6:a4:d4:b5:1d:35:48:81:79:e2:4d:6c:0b:5d:7e: 80:66:51:1f:54:27:bb:33:95:85:18:dd:35:fc:c8:99:ed:56: ff:7b:a7:ea:fe:c5:33:63:a6:09:d2:e0:ce:e1:83:e2:bb:25: 21:63:87:2d:83:99:2d:1a:14:d2:33:98:d7:0a:63:06:8c:e2: 21:e2:74:e7:d2:d0:11:a5:94:1f:6a:48:a5:52:4f:d9:24:23: fc:4b:9e:76:4f:fc:1c:6d:4d:72:91:e6:4b:b2:bb:d8:10:ba: e7:2d:34:f9:b7:25:27:11:5b:3e:20:2b:da:e2:78:be:dc:76: b7:71:49:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG REZBNzI2MzQwHhcNMjUwNTE1MDAyOTQyWhcNMjUwNTIyMDAyOTQyWjAYMRYwFAYD VQQDEw02ODI1MzU3Ny0xNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06M0nTuY+6XV/9fbDLSAVW9WfDzPm5qOSZwSesrhUBurKKBh8Kf4ei9RGIxm 9ek+4hVpE5oSfCBL67LNKamXlVIxvvetfnQAIT9rjVpCwpcsOCgxCCCw24mOeZYi RITBqmFcz6ccyvrg/jxrtQKkJIxbXcedL3FqAKKN08AU8EO6bSEnYLIpWcN9zoQX vswp6V98RIN/KSk01nk7RI6IRdvROFxyb8KocaqFPxlpziMkMnkJXBD8fVLPW5uk TSls7VhLhNoJHgsr+F9SHBkdwc+rG5VW38K0OVEcX29IY8JCDaCSemTU4WBs4XHL JdxXuPYBsVinue//UuRimG1M0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+9E/jK tgjo6X0KXvaLye6rAK5XMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ SEFKZFJxT2haX3o5LW5KalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmsC5SkmizpjxiBwlICi0IkT91elTDHfUtM2POVS6hWtx1Frtz6iK7 9zBych7m8c1Y0lxIG6W8yiF3eE6IbySc34GAa6SeInft4ZHhK0d26AFt/SPHy2x9 snKwohClM1/3hrbqejGbkeK6H0+43FXShPwjgRoqsOrcBPyZF1tIL67WpNS1HTVI gXniTWwLXX6AZlEfVCe7M5WFGN01/MiZ7Vb/e6fq/sUzY6YJ0uDO4YPiuyUhY4ct g5ktGhTSM5jXCmMGjOIh4nTn0tARpZQfakilUk/ZJCP8S552T/wcbU1ykeZLsrvY ELrnLTT5tyUnEVs+ICva4ni+3Ha3cUlE -----END CERTIFICATE-----Generated at Thu May 15 22:25:53 2025 by rpki-client