$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json) Hash identifier: k3J/GEf0pyV5GMEHl+SHyPYKp79uuwF4KuzzSAWNgis= Subject key identifier: 25:CA:F1:34:81:B2:C0:F7:57:0C:BE:C4:FA:0C:81:F2:77:D1:7B:19 Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft Manifest number: 18 Signing time: Tue 13 May 2025 07:19:09 +0000 Manifest this update: Tue 13 May 2025 07:19:09 +0000 Manifest next update: Tue 20 May 2025 07:19:09 +0000 Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: KKqfn2VHe6aJ4PXk8zBgh7Ed0mb46SOnOE0VpxiY4rY=) 2: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: RNEYHFbl/lHVURQeSl/swC0oZ7j6giFqMqHaOjHDKKE=) 3: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: /APLoPia3hJaAawAfJ/kXfLzR5xKKXFF9u0rCxKw4H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Validity Not Before: May 13 07:19:09 2025 GMT Not After : May 20 07:19:09 2025 GMT Subject: CN=6822f26d-7995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:7c:0a:a3:69:4f:47:b8:e4:0e:9a:c7:0d: 8b:51:cf:74:1e:aa:10:4b:6e:19:84:7a:e1:12:9f: bf:51:a7:83:19:0b:4f:33:cc:d2:13:73:7d:7c:f2: 63:3b:2d:8d:43:b5:f6:2a:39:46:a5:15:23:95:14: 9b:56:5b:c4:63:81:4b:d4:88:0c:5c:e3:76:06:4d: 2b:83:44:9a:ac:2b:b6:e8:7a:f4:13:93:0c:71:6d: 53:f6:42:47:37:1d:da:89:21:95:37:09:8c:f2:28: 5d:bf:e2:87:f4:7c:08:f2:af:03:45:28:f6:9d:64: 13:89:44:0c:7a:e5:41:76:19:a7:a9:48:ec:6a:cd: a6:24:ec:7f:63:29:a6:d5:72:ef:ad:9e:05:46:d4: ba:fb:3b:ef:c2:bf:2c:f9:79:86:30:f6:d2:f8:d9: 66:e4:4d:40:0d:9d:e4:40:d0:dc:05:fe:53:1b:4f: db:05:da:ee:d7:45:4d:34:c3:43:3e:52:2c:52:2c: 6a:e8:0f:97:2e:25:cb:f7:c5:56:98:ba:35:71:5f: fa:23:b3:4c:ee:b7:fe:9e:6a:37:79:2b:67:71:e8: 22:38:58:bf:e9:75:10:4e:7b:4b:cc:df:b6:17:c2: 94:54:2a:98:d5:31:fe:98:80:fb:d3:19:5f:fc:59: d1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CA:F1:34:81:B2:C0:F7:57:0C:BE:C4:FA:0C:81:F2:77:D1:7B:19 X509v3 Authority Key Identifier: keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:8e:fc:9b:9d:c6:d6:5d:33:fd:cf:ff:12:4d:fc:cb:8e:50: 23:0a:0d:e1:2a:6a:25:6f:8e:67:16:43:38:f7:22:27:79:b6: e8:03:31:61:e9:6e:7d:47:b9:fb:dd:e3:d0:e1:bc:c7:19:51: bf:cc:63:d2:0d:31:d0:f9:06:4d:93:2c:80:4f:b5:66:46:f2: 53:af:0d:b8:f8:b4:cd:3d:a0:67:4c:6b:dc:58:53:e7:9c:e9: a6:6b:00:95:3f:af:89:cb:13:09:fe:d5:95:ad:d0:09:bb:c7: 00:0d:c9:98:b3:cd:d5:45:be:5a:9b:be:66:2f:44:22:28:05: 6b:13:5e:78:1d:07:1e:8d:c2:d3:3f:9b:3c:6e:13:42:d5:f5: ec:48:6e:ab:02:ab:a1:3f:f6:29:fc:15:f5:45:8a:00:6c:0c: 18:92:1b:26:af:8e:ad:38:7b:06:d5:ea:13:ce:31:eb:5e:5b: e1:5b:7e:1c:be:82:75:06:13:c6:e3:67:ca:91:4c:69:b2:a1: e3:f0:3a:d7:5a:f0:6d:40:2f:7f:90:3f:e6:0c:5a:e4:1b:5c: af:f7:e3:ae:33:75:93:f1:6f:5c:37:24:a1:cf:81:49:1c:bb: 5e:6c:df:71:2c:57:d5:a2:1b:93:6b:98:d4:9e:f2:f0:87:7b: a5:7e:9c:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0QyMTExMC8GA1UEBRMoODE4QkI5MDMzMjcxN0Y5MzU3MzBEQUYxNDcwOEZGQzJG NjA1RjA1RjAeFw0yNTA1MTMwNzE5MDlaFw0yNTA1MjAwNzE5MDlaMBgxFjAUBgNV BAMTDTY4MjJmMjZkLTc5OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8k3wKo2lPR7jkDprHDYtRz3QeqhBLbhmEeuESn79Rp4MZC08zzNITc3188mM7 LY1DtfYqOUalFSOVFJtWW8RjgUvUiAxc43YGTSuDRJqsK7boevQTkwxxbVP2Qkc3 HdqJIZU3CYzyKF2/4of0fAjyrwNFKPadZBOJRAx65UF2GaepSOxqzaYk7H9jKabV cu+tngVG1Lr7O+/Cvyz5eYYw9tL42WbkTUANneRA0NwF/lMbT9sF2u7XRU00w0M+ UixSLGroD5cuJcv3xVaYujVxX/ojs0zut/6eajd5K2dx6CI4WL/pdRBOe0vM37YX wpRUKpjVMf6YgPvTGV/8WdGfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJcrxNIGy wPdXDL7E+gyB8nfRexkwHwYDVR0jBBgwFoAUgYu5AzJxf5NXMNrxRwj/wvYF8F8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDRDIxLzM4QzI2MUU0MUMz ODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVOWE1OcnhSd2pfd3ZZRjhG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1l1NUF6SnhmNU5YTU5yeFJ3al93dllGOEY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD RDIxLzM4QzI2MUU0MUMzODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVO WE1OcnhSd2pfd3ZZRjhGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGO/JudxtZdM/3P/xJN/MuOUCMKDeEqaiVvjmcWQzj3Iid5tugDMWHp bn1Hufvd49DhvMcZUb/MY9INMdD5Bk2TLIBPtWZG8lOvDbj4tM09oGdMa9xYU+ec 6aZrAJU/r4nLEwn+1ZWt0Am7xwANyZizzdVFvlqbvmYvRCIoBWsTXngdBx6NwtM/ mzxuE0LV9exIbqsCq6E/9in8FfVFigBsDBiSGyavjq04ewbV6hPOMeteW+Fbfhy+ gnUGE8bjZ8qRTGmyoePwOtda8G1AL3+QP+YMWuQbXK/3464zdZPxb1w3JKHPgUkc u15s33EsV9WiG5NrmNSe8vCHe6V+nJw= -----END CERTIFICATE-----Generated at Tue May 13 09:24:07 2025 by rpki-client