$ rpki-client -vvf rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft File: n47RxT7pDTyshKZHDEt1lMVXXYU.mft (raw, json) Hash identifier: 4JnflDmBU3jhuUv88QcRtNg0lSFDnbZLyFLfqEtM1Vk= Subject key identifier: E2:71:4E:09:B8:0E:FF:3D:6B:7D:AA:1C:C5:EE:F2:D6:D5:08:4A:DA Authority key identifier: 9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 Certificate issuer: /CN=A912B983/serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft Manifest number: 0177 Signing time: Tue 13 May 2025 03:04:16 +0000 Manifest this update: Tue 13 May 2025 03:04:15 +0000 Manifest next update: Tue 20 May 2025 03:04:15 +0000 Files and hashes: 1: n47RxT7pDTyshKZHDEt1lMVXXYU.crl (hash: furu4usIMl9vEQ7XlQ5AU3fu74QJDF1O/vOV40nI1yE=) 2: FD4E307AFEA711EDBC673B4BC4F9AE02.roa (hash: /gcnA3lv0gvYzo5Yy1H0Ai0POjgkW7UZBEUoiqUQvoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B983, serialNumber=9F8ED1C53EE90D3CAC84A6470C4B7594C5575D85 Validity Not Before: May 13 03:04:15 2025 GMT Not After : May 20 03:04:15 2025 GMT Subject: CN=6822b6b0-78e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:10:9b:91:88:bb:91:9c:88:36:5d:97:b5: b5:b5:e3:cd:2f:ef:fe:09:a0:21:2f:e5:2b:1f:67: e2:8e:6a:59:ce:9b:47:dd:31:f1:b4:42:bb:44:0f: 53:f6:ef:29:b4:a3:7c:0f:f7:1f:37:ca:91:9a:59: 8d:98:8d:73:e7:5f:4d:30:4d:c0:10:34:83:3d:40: 44:0c:0e:d8:15:55:b0:b2:80:3c:fa:07:54:8e:90: 86:17:b4:1f:80:82:0b:16:3a:ee:99:42:63:48:a7: a0:de:c2:45:64:3b:62:f6:bf:79:c8:70:8a:a6:bb: 51:8d:8e:41:45:46:cd:8e:af:9f:fb:e2:ea:05:85: 2f:46:b2:86:44:8c:67:08:cb:c4:be:3c:fe:9d:f3: 2d:20:00:16:25:ad:b6:17:94:99:2d:42:e1:9b:cf: 2e:94:7c:47:8f:a4:6b:0a:56:26:eb:a5:65:d5:46: 98:57:bd:05:ec:3c:03:07:5e:dc:ce:bc:93:69:ef: 7f:0e:51:00:8b:b5:54:08:7e:d3:a9:22:aa:9d:18: b4:41:c6:1e:79:1e:7e:62:f5:25:8a:34:d9:12:e6: ff:46:a6:f5:0c:82:57:5a:8d:b7:07:41:ae:81:77: 74:5e:0a:df:c5:04:8d:14:02:75:7d:3a:1c:8e:b1: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:71:4E:09:B8:0E:FF:3D:6B:7D:AA:1C:C5:EE:F2:D6:D5:08:4A:DA X509v3 Authority Key Identifier: keyid:9F:8E:D1:C5:3E:E9:0D:3C:AC:84:A6:47:0C:4B:75:94:C5:57:5D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n47RxT7pDTyshKZHDEt1lMVXXYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B983/E6A8ACECFEA211EDAEF29047C4F9AE02/n47RxT7pDTyshKZHDEt1lMVXXYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:3c:76:6b:ef:85:98:97:20:88:3e:8b:ae:ac:c2:4a:79:dd: 89:03:02:54:c9:a4:7f:f8:98:55:7a:11:60:9d:c0:37:66:fe: 56:4b:9d:52:41:d1:49:db:bf:fa:c0:c7:62:69:5c:0f:ea:c3: 15:b9:cb:a0:b3:68:9f:f3:1c:b0:51:1b:93:e7:90:0e:c2:13: 75:87:45:d7:6e:56:2f:ba:c9:09:5d:9b:7f:b0:e6:a9:63:b4: 2f:21:7f:23:c5:c0:c7:ac:bf:5c:cb:15:ff:71:07:7d:01:1a: 13:5a:38:ba:ef:35:2d:0b:e7:df:95:2a:2f:c8:5a:ad:4c:df: b6:a8:03:56:8d:4f:e8:87:05:4a:f3:d3:50:f8:a6:fb:65:c9: 99:ef:aa:3b:51:0c:d4:90:2b:9e:db:97:bc:e2:64:c7:50:d7: c7:c9:a7:ae:68:d1:c0:e2:f8:a9:e2:4b:5e:1e:08:0a:e4:a0: 12:6c:02:ab:21:ad:31:aa:8d:94:bb:d7:4b:4e:d8:6b:7f:d0: bd:55:70:37:a1:cf:3f:ea:4d:77:4b:f9:8f:15:02:26:a3:ca: f1:9f:0f:3b:6e:e3:46:72:4d:45:a3:61:f3:ae:6e:9e:27:df: f8:4e:3d:54:bc:35:68:fe:61:9b:cf:d9:d1:01:2d:d2:30:90: 43:f9:b9:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI5ODMxMTAvBgNVBAUTKDlGOEVEMUM1M0VFOTBEM0NBQzg0QTY0NzBDNEI3NTk0 QzU1NzVEODUwHhcNMjUwNTEzMDMwNDE1WhcNMjUwNTIwMDMwNDE1WjAYMRYwFAYD VQQDEw02ODIyYjZiMC03OGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+cQm5GIu5GciDZdl7W1tePNL+/+CaAhL+UrH2fijmpZzptH3THxtEK7RA9T 9u8ptKN8D/cfN8qRmlmNmI1z519NME3AEDSDPUBEDA7YFVWwsoA8+gdUjpCGF7Qf gIILFjrumUJjSKeg3sJFZDti9r95yHCKprtRjY5BRUbNjq+f++LqBYUvRrKGRIxn CMvEvjz+nfMtIAAWJa22F5SZLULhm88ulHxHj6RrClYm66Vl1UaYV70F7DwDB17c zryTae9/DlEAi7VUCH7TqSKqnRi0QcYeeR5+YvUlijTZEub/Rqb1DIJXWo23B0Gu gXd0XgrfxQSNFAJ1fTocjrHaSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJxTgm4 Dv89a32qHMXu8tbVCEraMB8GA1UdIwQYMBaAFJ+O0cU+6Q08rISmRwxLdZTFV12F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjk4My9FNkE4QUNFQ0ZF QTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERUeXNoS1pIREV0MWxNVlhY WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240N1J4VDdwRFR5c2hLWkhERXQxbE1WWFhZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjk4My9FNkE4QUNFQ0ZFQTIxMUVEQUVGMjkwNDdDNEY5QUUwMi9uNDdSeFQ3cERU eXNoS1pIREV0MWxNVlhYWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhPHZr74WYlyCIPouurMJKed2JAwJUyaR/+JhVehFgncA3Zv5WS51S QdFJ27/6wMdiaVwP6sMVucugs2if8xywURuT55AOwhN1h0XXblYvuskJXZt/sOap Y7QvIX8jxcDHrL9cyxX/cQd9ARoTWji67zUtC+fflSovyFqtTN+2qANWjU/ohwVK 89NQ+Kb7ZcmZ76o7UQzUkCue25e84mTHUNfHyaeuaNHA4vip4kteHggK5KASbAKr Ia0xqo2Uu9dLTthrf9C9VXA3oc8/6k13S/mPFQImo8rxnw87buNGck1Fo2Hzrm6e J9/4Tj1UvDVo/mGbz9nRAS3SMJBD+blt -----END CERTIFICATE-----Generated at Wed May 14 16:25:24 2025 by rpki-client