$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json) Hash identifier: HmfREbH9RilffcqE0Q6h9LcCbT/wYwl7IukoZ/2Kk30= Subject key identifier: 2C:AE:56:BC:8C:53:B6:ED:11:C3:DA:37:90:C1:94:5B:E9:20:CB:C1 Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft Manifest number: 0246 Signing time: Tue 13 May 2025 01:40:33 +0000 Manifest this update: Tue 13 May 2025 01:40:32 +0000 Manifest next update: Tue 20 May 2025 01:40:32 +0000 Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: e4lsnWLdy3DlMIzuFMM2LfJWdoNFZSDyTyuIr49uVWU=) 2: 899B070834D511ED99B1921FC4F9AE02.roa (hash: 59L53XZQZjjT2hN0a9eIPXDObrfGJobgfFbYtXLEctM=) 3: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: L9Ip2okOSQMq2psn2x0tTtvnTzOcLa7ive90M13do6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: May 13 01:40:32 2025 GMT Not After : May 20 01:40:32 2025 GMT Subject: CN=6822a310-57fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:eb:6e:a7:8e:94:8d:f3:6b:f9:5c:72:00:36: e3:21:54:b2:b1:14:11:9c:f9:5d:54:90:3f:ec:09: eb:f9:e6:e3:e2:49:a7:71:85:e8:d9:0f:bf:08:41: 39:f4:39:4f:ec:b9:a9:69:5b:06:e5:5f:da:9f:6c: 13:c8:74:6f:67:6b:69:ef:af:4d:9d:19:26:f7:0f: 75:53:e7:fd:e7:c1:f7:61:ab:5f:95:f9:99:f2:2e: 43:90:de:dd:9b:71:3c:3c:dd:43:d6:7e:ff:77:74: ae:f0:cd:cb:9e:e7:3a:5c:4f:5f:00:dc:23:0a:72: a7:f4:82:2c:c5:b5:45:0e:45:17:41:9c:05:7a:2b: 88:61:af:ab:3c:36:30:02:e9:ca:79:94:64:35:49: 05:64:f6:d0:92:24:45:be:a5:aa:27:99:a6:cc:38: 09:15:51:ed:d3:2c:19:16:8f:96:12:68:67:90:e5: 42:06:1d:0d:13:19:1f:e7:b3:e2:d6:d4:2f:f5:5a: 36:0b:e0:71:12:b2:0b:ef:6a:a1:b6:3b:8e:fb:37: cf:9b:85:33:0f:2d:27:d6:16:c0:8b:98:48:b6:af: 76:25:22:dc:29:0e:1a:4f:54:9d:42:92:02:08:16: 5b:0a:b3:fe:25:c9:4d:08:60:a9:96:85:35:70:82: 45:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AE:56:BC:8C:53:B6:ED:11:C3:DA:37:90:C1:94:5B:E9:20:CB:C1 X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d0:f5:86:03:a3:82:0b:79:88:54:ba:d5:0b:27:54:79:b9: 89:e0:e7:16:c2:dd:ac:d6:2c:cb:65:5d:98:b0:9d:1f:96:03: 46:5b:43:38:df:da:14:60:8a:36:d8:25:f8:1e:26:60:fc:4f: a8:d0:8b:31:88:28:16:12:2e:f6:96:10:8f:5e:f4:84:3f:52: 91:47:41:9d:6c:a0:4d:a0:ba:e1:23:6d:9e:13:20:07:ee:94: 58:a6:2d:83:38:51:2d:d1:4e:fb:d2:82:bf:e2:5c:85:70:7b: a8:c2:84:dc:c4:0d:2b:38:0f:57:21:11:e9:d7:0a:7c:ad:6d: a9:da:c1:84:d9:c6:94:2b:27:4c:fb:a8:65:79:b3:12:1a:bc: d5:72:b9:e7:70:5e:5b:ad:1f:15:75:dc:5e:ef:0f:fe:5e:4e: ee:c6:47:00:ec:0f:a3:f7:f3:c9:49:55:2f:16:c6:b0:df:aa: eb:43:7a:1b:12:f8:fc:35:6f:88:7c:82:b9:1f:e1:f0:3a:92: ea:8c:ce:1d:54:a2:62:76:01:e1:ed:bc:9e:51:fe:3f:66:38: 3c:6c:a5:d1:97:8a:fb:01:a7:80:3d:d8:bf:03:6b:87:2a:cb: 20:f4:ba:4d:27:f0:44:a0:3a:88:b4:67:7b:1c:cd:6d:6e:ae: b8:9d:89:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjUwNTEzMDE0MDMyWhcNMjUwNTIwMDE0MDMyWjAYMRYwFAYD VQQDEw02ODIyYTMxMC01N2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+tup46UjfNr+VxyADbjIVSysRQRnPldVJA/7Anr+ebj4kmncYXo2Q+/CEE5 9DlP7LmpaVsG5V/an2wTyHRvZ2tp769NnRkm9w91U+f958H3YatflfmZ8i5DkN7d m3E8PN1D1n7/d3Su8M3Lnuc6XE9fANwjCnKn9IIsxbVFDkUXQZwFeiuIYa+rPDYw AunKeZRkNUkFZPbQkiRFvqWqJ5mmzDgJFVHt0ywZFo+WEmhnkOVCBh0NExkf57Pi 1tQv9Vo2C+BxErIL72qhtjuO+zfPm4UzDy0n1hbAi5hItq92JSLcKQ4aT1SdQpIC CBZbCrP+JclNCGCploU1cIJFYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyuVryM U7btEcPaN5DBlFvpIMvBMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3 cmFhRnNjYWhONXRvalhRNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL0PWGA6OCC3mIVLrVCydUebmJ4OcWwt2s1izLZV2YsJ0flgNGW0M4 39oUYIo22CX4HiZg/E+o0IsxiCgWEi72lhCPXvSEP1KRR0GdbKBNoLrhI22eEyAH 7pRYpi2DOFEt0U770oK/4lyFcHuowoTcxA0rOA9XIRHp1wp8rW2p2sGE2caUKydM +6hlebMSGrzVcrnncF5brR8Vddxe7w/+Xk7uxkcA7A+j9/PJSVUvFsaw36rrQ3ob Evj8NW+IfIK5H+HwOpLqjM4dVKJidgHh7byeUf4/Zjg8bKXRl4r7AaeAPdi/A2uH Kssg9LpNJ/BEoDqItGd7HM1tbq64nYnb -----END CERTIFICATE-----Generated at Tue May 13 04:46:29 2025 by rpki-client