$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft File: J4qsn8YiO7A3FX6zn5bbvajm0lY.mft (raw, json) Hash identifier: a9Y9O8mbXdV04iDdliLSqh4WGKjGMk9rRqiZdMhXgZ0= Subject key identifier: EB:27:D3:F7:1F:92:50:72:86:70:A5:E0:C6:13:6C:CD:0E:83:9B:F9 Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 Certificate issuer: /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft Manifest number: 05E7 Signing time: Mon 12 May 2025 18:47:50 +0000 Manifest this update: Mon 12 May 2025 18:47:49 +0000 Manifest next update: Mon 19 May 2025 18:47:49 +0000 Files and hashes: 1: J4qsn8YiO7A3FX6zn5bbvajm0lY.crl (hash: jpkTIGwHURQrhc6vhEzyOiwFzp+0xn0FLGcTwkOWwSw=) 2: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (hash: w1O1ZsevC2HzFSEj/1IPY4lUEna5oDbCvbrv+EoKv3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Validity Not Before: May 12 18:47:49 2025 GMT Not After : May 19 18:47:49 2025 GMT Subject: CN=68224256-170d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:80:7b:7d:54:1c:96:fe:e6:1b:68:8e:b9: a7:66:59:21:e0:1b:f8:c3:76:2b:fe:07:ac:8b:4b: 17:40:b3:c4:54:0f:48:c0:a7:5e:78:7e:1a:e4:d3: ba:f7:c2:d3:cf:a1:20:ea:8c:3a:38:57:1e:ee:a3: 05:1a:24:ba:54:5e:fa:9f:42:0f:39:46:21:7a:b6: af:05:51:a6:9d:37:31:0b:49:d2:df:8f:ef:39:52: 0f:20:9e:8c:52:c9:75:a8:52:c9:77:0f:4c:96:fe: 21:32:c7:bc:a8:47:e4:f3:8f:e3:e9:0c:cb:81:9a: 89:ca:24:fa:bf:cb:f9:1b:98:3c:55:ee:05:85:92: a8:c8:0c:67:70:45:44:63:a6:5d:80:35:c6:cb:dc: 15:02:af:4c:a5:25:4d:7f:65:70:1f:06:3a:e4:96: 59:4f:83:c4:92:99:3c:cd:50:51:38:49:f4:23:68: f0:94:42:f1:0a:a6:b2:46:f3:a8:ad:b1:35:eb:9b: 51:3e:2d:0d:f2:29:dd:c7:7e:e1:79:33:23:93:a0: 08:06:4e:60:ee:75:8b:bf:64:2e:08:80:9f:bc:78: ff:cf:0a:73:a3:72:15:0a:10:1f:4f:83:dd:3e:ea: d4:47:a4:a6:57:40:51:dd:ed:88:47:f8:1e:9c:c1: 1a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:27:D3:F7:1F:92:50:72:86:70:A5:E0:C6:13:6C:CD:0E:83:9B:F9 X509v3 Authority Key Identifier: keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:57:f0:61:a5:89:e4:7c:86:90:44:ba:70:e4:ef:01:77:0d: 8e:a4:5f:7a:fd:be:84:b7:9d:c7:66:4d:14:47:d0:55:c1:6b: e4:46:e1:68:40:50:71:4c:33:78:3d:8e:72:6b:1b:10:bf:b6: 14:aa:fb:29:f8:5e:56:b3:06:af:da:da:a7:2c:50:de:b5:08: 84:2c:2b:e7:6e:ec:7e:13:49:bb:30:ae:e6:6e:95:df:a2:11: f9:4a:e8:9b:6c:fc:d5:dc:06:21:72:a3:47:ff:47:21:bd:b3: e4:a3:98:a3:96:37:f3:55:42:cd:bb:a8:ef:a3:c4:1a:6e:b3: 90:4e:dd:ef:18:ed:e8:5c:23:d8:81:51:38:d9:4c:a7:e8:8d: 45:8d:dd:7b:1e:f8:62:cc:b2:b3:fa:e9:60:4e:1a:12:1f:48: c4:13:b4:8c:fb:35:b0:3a:81:32:93:77:fc:cc:6e:20:bf:6a: 17:47:49:76:5d:fa:78:51:1c:c7:d3:ba:ea:b1:87:24:ad:2a: e9:80:f7:d8:50:26:9d:70:33:15:0b:bb:3d:b6:96:c6:cf:f8: 64:f6:29:2f:30:7f:4f:ed:b2:b0:20:e0:12:21:d3:de:8f:58: e9:c1:cf:dc:b9:85:42:58:83:1c:11:3f:98:6c:9c:cb:95:95: ac:8f:0e:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDI3OEFBQzlGQzYyMjNCQjAzNzE1N0VCMzlGOTZEQkJE QThFNkQyNTYwHhcNMjUwNTEyMTg0NzQ5WhcNMjUwNTE5MTg0NzQ5WjAYMRYwFAYD VQQDEw02ODIyNDI1Ni0xNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAze+Ae31UHJb+5htojrmnZlkh4Bv4w3Yr/gesi0sXQLPEVA9IwKdeeH4a5NO6 98LTz6Eg6ow6OFce7qMFGiS6VF76n0IPOUYheravBVGmnTcxC0nS34/vOVIPIJ6M Usl1qFLJdw9Mlv4hMse8qEfk84/j6QzLgZqJyiT6v8v5G5g8Ve4FhZKoyAxncEVE Y6ZdgDXGy9wVAq9MpSVNf2VwHwY65JZZT4PEkpk8zVBROEn0I2jwlELxCqayRvOo rbE165tRPi0N8indx37heTMjk6AIBk5g7nWLv2QuCICfvHj/zwpzo3IVChAfT4Pd PurUR6SmV0BR3e2IR/genMEaqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsn0/cf klByhnCl4MYTbM0Og5v5MB8GA1UdIwQYMBaAFCeKrJ/GIjuwNxV+s5+W272o5tJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS84MzU1OUM3Q0Iy MTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83QTNGWDZ6bjViYnZham0w bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0o0cXNuOFlpTzdBM0ZYNnpuNWJidmFqbTBsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkMwNS84MzU1OUM3Q0IyMTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83 QTNGWDZ6bjViYnZham0wbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6V/BhpYnkfIaQRLpw5O8Bdw2OpF96/b6Et53HZk0UR9BVwWvkRuFo QFBxTDN4PY5yaxsQv7YUqvsp+F5Wswav2tqnLFDetQiELCvnbux+E0m7MK7mbpXf ohH5SuibbPzV3AYhcqNH/0chvbPko5ijljfzVULNu6jvo8QabrOQTt3vGO3oXCPY gVE42Uyn6I1Fjd17HvhizLKz+ulgThoSH0jEE7SM+zWwOoEyk3f8zG4gv2oXR0l2 Xfp4URzH07rqsYckrSrpgPfYUCadcDMVC7s9tpbGz/hk9ikvMH9P7bKwIOASIdPe j1jpwc/cuYVCWIMcET+YbJzLlZWsjw5b -----END CERTIFICATE-----Generated at Tue May 13 20:47:04 2025 by rpki-client