$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft File: sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json) Hash identifier: ez+1MIGw8RpYTJXf2G3Tu1sb9F2MbVivT0CJhta1bI8= Subject key identifier: BB:CC:32:4F:52:53:96:50:BF:D0:40:04:DF:1E:71:4E:6A:D2:E3:52 Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC Certificate issuer: /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC Certificate serial: 06F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft Manifest number: 0A8C Signing time: Mon 12 May 2025 19:24:18 +0000 Manifest this update: Mon 12 May 2025 19:24:17 +0000 Manifest next update: Mon 19 May 2025 19:24:17 +0000 Files and hashes: 1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: OnEvVfq22nnYl8GHR1LrHQczJSl0v/vKnBj9zIVJG5g=) 2: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (hash: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk=) 3: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: SjnLXmN7OQs2QJo93KJDaMm8uwo9AE2p0tGK7wMyelo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1783 (0x6f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC Validity Not Before: May 12 19:24:17 2025 GMT Not After : May 19 19:24:17 2025 GMT Subject: CN=68224ae2-dd8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1e:f9:8d:30:8d:77:1b:c9:41:00:03:d7:d9: 7b:2b:c0:c0:5f:c4:3d:a1:67:f2:08:15:ca:6b:62: fe:8c:1e:99:a4:6f:16:d2:33:ff:44:84:63:44:69: 92:0a:4e:24:76:36:8d:4f:e7:16:90:ba:f2:bb:8d: fd:40:ea:9b:b4:61:a4:b1:50:3c:d6:92:6e:2a:03: 6b:df:e2:16:97:c7:5e:44:73:ec:28:1c:81:4d:94: 3e:8a:41:33:b9:fd:a2:d1:f2:b1:90:8c:b4:ab:5e: f7:3b:42:34:cb:b0:06:d3:e4:fa:4a:c6:80:7f:fd: f4:2a:ab:74:35:b6:3d:4b:50:16:e2:65:43:dc:58: 0d:06:c1:c8:bc:5c:fb:1a:ec:37:76:26:7c:ce:97: 69:a5:41:3d:a7:7a:97:b2:98:75:8c:fa:7e:0b:f7: f6:d0:6a:68:4f:87:2b:94:87:56:b9:fb:8c:f5:0c: 2b:02:47:1f:03:ce:05:40:75:0c:27:c9:ee:69:3f: b6:42:7f:30:e8:df:02:69:e3:50:ed:86:d8:6a:a8: b1:52:72:58:08:49:7f:4b:91:06:fa:f4:db:8a:e8: ab:b7:b0:df:1c:8d:60:80:30:75:16:d4:71:f4:e5: a6:c8:80:cd:a3:b4:b5:77:71:c0:96:53:1b:e7:b7: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:32:4F:52:53:96:50:BF:D0:40:04:DF:1E:71:4E:6A:D2:E3:52 X509v3 Authority Key Identifier: keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:7a:4c:68:64:e1:e0:99:c7:63:87:98:98:37:c0:a6:5a:6d: e8:75:c7:4d:5c:89:d0:4a:99:e3:5c:fa:95:78:7c:53:0d:2c: 95:17:a8:41:c6:a4:ab:48:ce:b4:ef:e1:cc:30:58:0d:7d:ad: 4b:08:1e:50:aa:3d:ee:0b:de:3d:3c:ca:70:cd:9c:3e:63:17: e6:40:a1:dd:66:50:38:e9:cb:3c:8d:5e:d3:59:82:c7:7e:da: d2:8b:b0:ac:09:1c:4f:05:c7:c1:16:89:dd:84:6a:cd:32:e2: b4:55:ab:09:20:e9:0e:bc:ca:75:ec:08:11:9a:cd:89:95:fa: af:f5:f7:18:51:55:9e:ad:3d:1e:8c:a0:db:60:f5:85:03:a1: da:b2:1e:9c:e3:0d:ab:41:9f:60:0a:36:b2:95:a0:67:f3:ea: 2c:fb:d1:45:3d:85:d8:da:09:b5:9b:f6:80:ce:05:11:39:1e: a9:6b:c4:b3:01:1a:26:62:a0:39:50:27:33:f8:c6:11:37:0f: e4:1e:5d:6b:b8:5b:0b:28:a5:ca:0f:d6:ca:87:c4:ae:64:c0: 9a:2f:d4:5b:f9:c0:92:91:c3:ea:0a:72:ed:df:5b:ef:23:f1: 7e:fc:21:82:61:44:a8:7f:f5:cc:2b:82:a2:f3:b1:af:90:11: 22:ee:9d:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VFNzcxMTAvBgNVBAUTKEIxOEVBNEI0ODY4NEE2N0RFQTAxMzhCQUJBMjMzMDZE MDAwM0NEQ0MwHhcNMjUwNTEyMTkyNDE3WhcNMjUwNTE5MTkyNDE3WjAYMRYwFAYD VQQDEw02ODIyNGFlMi1kZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5h75jTCNdxvJQQAD19l7K8DAX8Q9oWfyCBXKa2L+jB6ZpG8W0jP/RIRjRGmS Ck4kdjaNT+cWkLryu439QOqbtGGksVA81pJuKgNr3+IWl8deRHPsKByBTZQ+ikEz uf2i0fKxkIy0q173O0I0y7AG0+T6SsaAf/30Kqt0NbY9S1AW4mVD3FgNBsHIvFz7 Guw3diZ8zpdppUE9p3qXsph1jPp+C/f20GpoT4crlIdWufuM9QwrAkcfA84FQHUM J8nuaT+2Qn8w6N8CaeNQ7YbYaqixUnJYCEl/S5EG+vTbiuirt7DfHI1ggDB1FtRx 9OWmyIDNo7S1d3HAllMb57f21QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvMMk9S U5ZQv9BABN8ecU5q0uNSMB8GA1UdIwQYMBaAFLGOpLSGhKZ96gE4urojMG0AA83M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU3Ny9DNDAwQkI1QzU2 RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBuM3FBVGk2dWlNd2JRQUR6 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZNmt0SWFFcG4zcUFUaTZ1aU13YlFBRHpjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUU3Ny9DNDAwQkI1QzU2RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBu M3FBVGk2dWlNd2JRQUR6Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCekxoZOHgmcdjh5iYN8CmWm3odcdNXInQSpnjXPqVeHxTDSyVF6hB xqSrSM607+HMMFgNfa1LCB5Qqj3uC949PMpwzZw+YxfmQKHdZlA46cs8jV7TWYLH ftrSi7CsCRxPBcfBFondhGrNMuK0VasJIOkOvMp17AgRms2Jlfqv9fcYUVWerT0e jKDbYPWFA6Hash6c4w2rQZ9gCjaylaBn8+os+9FFPYXY2gm1m/aAzgUROR6pa8Sz ARomYqA5UCcz+MYRNw/kHl1ruFsLKKXKD9bKh8SuZMCaL9Rb+cCSkcPqCnLt31vv I/F+/CGCYUSof/XMK4Ki87GvkBEi7p2W -----END CERTIFICATE-----Generated at Tue May 13 05:09:51 2025 by rpki-client