$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft File: joN3gQz5wgS7ElhPPltfBQNoJG8.mft (raw, json) Hash identifier: YIE5fgLukfU3o6tRDr9fgY1pt7SDvUjmGSri5b4Bu6w= Subject key identifier: AD:84:81:5B:AF:DD:13:28:C3:CA:2C:C4:76:21:5D:70:E8:74:94:8B Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1EDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft Manifest number: 1EB3 Signing time: Wed 14 May 2025 16:08:09 +0000 Manifest this update: Wed 14 May 2025 16:08:08 +0000 Manifest next update: Wed 21 May 2025 16:08:08 +0000 Files and hashes: 1: joN3gQz5wgS7ElhPPltfBQNoJG8.crl (hash: 8ksIdC8wvmqH0TJV5Eqp/hHhITnO/PeIZdpOvXf4KH4=) 2: 48BB49E8763A11EFA077F11CC4F9AE02.roa (hash: kbKWOZNJMc5q48ZGAPJwk/No5hClmF4tRx65umSQzAA=) 3: A63484760E7511F0B651A474C4F9AE02.roa (hash: E5E7M+KU38t2hoCZnvux4qAliD8ibl/Vp9X6gykPlbI=) 4: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (hash: yrblWteuMzwUMPHL56NEpj1u/5SILXxLN8wP92DwqIY=) 5: 2E2A74580DFE11F087A25C3FC4F9AE02.roa (hash: fmsgiPf9NAexR5vlu7jiK+Ra4ISg07n1PLjbPNsyZNQ=) 6: 31603938763B11EF810E6D1FC4F9AE02.roa (hash: 7bLJ+6dveh56SJZSGgZCe9J26eijaiEXg9KDAFNqlo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7902 (0x1ede) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: May 14 16:08:08 2025 GMT Not After : May 21 16:08:08 2025 GMT Subject: CN=6824bfe8-9118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:22:29:a7:12:1b:5f:03:2c:80:a4:5f:17: 0c:7b:51:44:97:d0:c3:dd:75:f0:7c:49:14:1f:e2: f6:07:36:65:07:5d:9e:82:16:46:58:cb:fa:91:d7: 32:7d:04:38:c0:17:17:40:45:82:2e:c2:92:a4:6c: 08:18:8c:40:b5:7f:c1:52:66:e0:4b:30:71:db:7f: 17:e8:15:89:42:b2:b4:aa:f6:70:b8:43:cc:3a:de: ab:26:a6:8e:8d:35:a2:9b:11:ed:44:8e:07:8a:93: 4f:d8:43:f5:81:47:38:d6:85:ac:d0:f1:be:5c:11: f6:1a:af:ae:59:01:ee:bc:53:d7:86:de:27:16:1a: 43:f3:42:cc:f1:28:6d:31:8b:b0:4f:9d:b5:55:5e: 3b:1b:31:a3:c2:e0:6a:a5:d2:fa:77:85:c1:08:cf: 71:9a:3b:fc:d3:eb:c2:1d:b4:82:69:cb:82:4d:5a: ea:b9:59:ef:e6:75:cb:3d:9b:fd:1e:8e:aa:ca:a9: 79:26:75:b0:56:90:94:44:c4:0e:49:78:43:dd:2f: 5f:d8:bf:c4:2c:e0:26:ed:9c:11:54:13:ca:4a:1c: e7:2c:51:4b:25:2f:74:46:f4:0d:90:0d:f6:f7:b9: 30:aa:06:59:ce:16:af:be:be:02:8b:0e:02:79:29: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:84:81:5B:AF:DD:13:28:C3:CA:2C:C4:76:21:5D:70:E8:74:94:8B X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:50:cb:90:f0:d2:8a:72:ff:02:bd:c4:d2:b8:da:a4:4f:34: 91:53:2a:24:0e:07:fb:de:d8:9e:3d:18:c5:9d:7f:44:01:4a: 15:bc:38:a1:8a:b9:7e:05:d8:fb:48:a7:96:51:59:90:f4:92: 18:bc:74:07:3e:a0:23:37:cf:04:17:3b:54:9b:6e:98:32:35: ed:b3:e5:f5:e2:37:d4:d7:d9:d5:b4:82:08:52:c6:20:3c:b5: 2f:de:d0:5a:47:80:d5:84:cd:fd:79:ce:6d:da:74:cd:81:1b: 3d:71:c6:f5:8a:c1:63:43:f4:37:94:ad:f8:a7:fb:bb:59:a3: cf:d8:0c:b8:3e:a2:87:8b:99:0e:8b:64:f5:6f:cf:d8:d6:bf: 0b:d7:0c:52:99:62:1c:e0:4d:be:35:fe:3b:51:a5:e9:0b:8b: b6:26:43:2f:01:a5:e7:28:d0:04:e1:6a:28:61:71:51:e7:9e: ab:06:68:3d:a3:73:c1:83:8a:e2:47:7a:ff:30:ed:98:b5:9c: 48:1d:63:af:33:9c:d3:04:1a:ef:59:74:d1:63:db:84:40:a6: 20:5f:0f:b6:73:c4:9d:e2:61:aa:ca:f2:4e:47:6b:29:22:04: c9:fe:d1:3d:49:0f:db:1f:1d:6e:66:60:01:e2:40:15:6b:56: be:eb:ea:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUwNTE0MTYwODA4WhcNMjUwNTIxMTYwODA4WjAYMRYwFAYD VQQDEw02ODI0YmZlOC05MTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIkiKacSG18DLICkXxcMe1FEl9DD3XXwfEkUH+L2BzZlB12eghZGWMv6kdcy fQQ4wBcXQEWCLsKSpGwIGIxAtX/BUmbgSzBx238X6BWJQrK0qvZwuEPMOt6rJqaO jTWimxHtRI4HipNP2EP1gUc41oWs0PG+XBH2Gq+uWQHuvFPXht4nFhpD80LM8Sht MYuwT521VV47GzGjwuBqpdL6d4XBCM9xmjv80+vCHbSCacuCTVrquVnv5nXLPZv9 Ho6qyql5JnWwVpCURMQOSXhD3S9f2L/ELOAm7ZwRVBPKShznLFFLJS90RvQNkA32 97kwqgZZzhavvr4Ciw4CeSnXmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2EgVuv 3RMow8osxHYhXXDodJSLMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjBFMy8yOTE1NzZCRTZCMzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdn UzdFbGhQUGx0ZkJRTm9KRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXUMuQ8NKKcv8CvcTSuNqkTzSRUyokDgf73tiePRjFnX9EAUoVvDih irl+Bdj7SKeWUVmQ9JIYvHQHPqAjN88EFztUm26YMjXts+X14jfU19nVtIIIUsYg PLUv3tBaR4DVhM39ec5t2nTNgRs9ccb1isFjQ/Q3lK34p/u7WaPP2Ay4PqKHi5kO i2T1b8/Y1r8L1wxSmWIc4E2+Nf47UaXpC4u2JkMvAaXnKNAE4WooYXFR556rBmg9 o3PBg4riR3r/MO2YtZxIHWOvM5zTBBrvWXTRY9uEQKYgXw+2c8Sd4mGqyvJOR2sp IgTJ/tE9SQ/bHx1uZmAB4kAVa1a+6+oV -----END CERTIFICATE-----Generated at Fri May 16 11:56:02 2025 by rpki-client