$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json) Hash identifier: 0RFXjA7aQIszZTGbq7IKE4/bZ92SOGIdOGuM30zUeRI= Subject key identifier: 59:03:25:C2:D8:87:06:35:77:DC:F9:A9:D0:D5:BC:D0:1B:CF:B0:B9 Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Certificate serial: 12E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft Manifest number: 12DF Signing time: Fri 16 May 2025 17:17:43 +0000 Manifest this update: Fri 16 May 2025 17:17:42 +0000 Manifest next update: Fri 23 May 2025 17:17:42 +0000 Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: t3gU3PyUpmNvnsylN7MRbVyJors8Kdii8GHEBy92ZDU=) 2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: rzftRMPtJ5B6XfKei48LV2pqboch+DlK8AP2NtHbsfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4838 (0x12e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Validity Not Before: May 16 17:17:42 2025 GMT Not After : May 23 17:17:42 2025 GMT Subject: CN=68277336-e6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:55:dc:75:57:6b:ec:7c:44:de:33:8f:05: 91:0f:a7:a1:4a:77:79:07:70:15:a3:35:b1:0a:5b: 1d:a5:93:b7:f5:40:91:27:e9:29:b6:bf:fc:16:a3: a7:a2:19:c0:9e:d0:89:8e:39:01:aa:9e:7c:bc:f0: 24:33:c9:a0:52:b6:99:6c:a4:8e:3a:7e:7c:90:87: a8:ac:d1:98:dd:03:fa:98:f8:0e:07:df:50:c2:b0: 89:5f:6b:50:b5:a9:ad:11:4f:7b:c9:8c:e4:66:9c: b4:86:11:60:69:62:2a:2e:fa:4d:53:63:cd:b0:63: 95:86:30:ca:4c:09:26:b8:fa:f1:c1:1c:5f:2e:2c: d8:f1:82:02:72:35:e7:d9:85:9b:54:64:31:3e:33: fa:6f:fa:d8:17:bf:94:ed:1b:39:c0:33:86:eb:bc: d9:38:cb:90:6c:d0:d4:9c:4f:0e:7f:c3:f7:4c:ab: 6c:fa:5c:18:42:f1:f8:32:1c:6b:0e:bb:4e:39:0b: 61:e2:75:e5:7f:93:00:ad:dc:b5:3f:ca:e6:72:e9: 22:ef:51:95:1a:1e:d3:81:6c:35:ab:8a:dd:31:88: 0e:64:ea:c9:6c:d0:a1:06:e1:c5:de:6d:e6:db:25: 15:ae:8e:cf:fe:a8:e4:68:55:f3:20:e7:4d:69:7d: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:03:25:C2:D8:87:06:35:77:DC:F9:A9:D0:D5:BC:D0:1B:CF:B0:B9 X509v3 Authority Key Identifier: keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9d:28:26:27:ca:dc:b2:76:92:87:c4:03:59:7e:d1:39:ea: 6c:a3:f3:2c:e0:d3:3e:e8:20:b2:41:66:27:80:5c:ac:91:1b: 5b:93:1c:b2:58:af:80:50:30:0e:30:58:9c:97:60:1a:e1:6a: c5:3d:73:98:64:75:63:05:b1:36:34:9a:55:3a:e4:b3:e3:0c: 43:d0:99:f0:7c:6d:21:74:0a:81:70:46:3f:88:2c:ac:cc:c5: 37:7c:9c:7c:f0:a5:64:cc:08:32:a8:47:4c:55:8b:19:84:51: aa:ad:f8:b2:be:27:f8:21:37:5b:b8:9a:59:bc:3d:43:34:c3: 8f:81:f3:22:61:ac:c5:bd:9d:e4:d4:11:db:e6:8c:14:aa:92: 16:62:7c:ea:e5:25:b8:06:4f:99:b0:dc:46:56:7e:3b:b8:19: d2:8b:f7:c1:b2:24:ae:cc:42:0e:49:b0:27:9b:16:ea:3b:5e: 58:a8:66:0c:9a:68:d0:2a:0c:f5:02:a7:51:f8:fc:8d:e4:8c: 7d:74:3b:14:9a:40:4f:f4:90:54:af:21:75:6f:c2:32:74:3e: 95:da:ea:0c:80:4f:f7:ed:0d:96:a7:b6:a3:8d:b3:19:da:c9: 62:a2:ed:64:e7:4c:da:50:3d:54:78:c4:4a:e5:8d:20:cf:09: b3:8a:2f:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC QkJFNzQxQkMwHhcNMjUwNTE2MTcxNzQyWhcNMjUwNTIzMTcxNzQyWjAYMRYwFAYD VQQDEw02ODI3NzMzNi1lNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMpV3HVXa+x8RN4zjwWRD6ehSnd5B3AVozWxClsdpZO39UCRJ+kptr/8FqOn ohnAntCJjjkBqp58vPAkM8mgUraZbKSOOn58kIeorNGY3QP6mPgOB99QwrCJX2tQ tamtEU97yYzkZpy0hhFgaWIqLvpNU2PNsGOVhjDKTAkmuPrxwRxfLizY8YICcjXn 2YWbVGQxPjP6b/rYF7+U7Rs5wDOG67zZOMuQbNDUnE8Of8P3TKts+lwYQvH4Mhxr DrtOOQth4nXlf5MArdy1P8rmcuki71GVGh7TgWw1q4rdMYgOZOrJbNChBuHF3m3m 2yUVro7P/qjkaFXzIOdNaX2feQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkDJcLY hwY1d9z5qdDVvNAbz7C5MB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2 NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx anJsbEtsS3p1Yy03dm5RYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJnSgmJ8rcsnaSh8QDWX7ROepso/Ms4NM+6CCyQWYngFyskRtbkxyy WK+AUDAOMFicl2Aa4WrFPXOYZHVjBbE2NJpVOuSz4wxD0JnwfG0hdAqBcEY/iCys zMU3fJx88KVkzAgyqEdMVYsZhFGqrfiyvif4ITdbuJpZvD1DNMOPgfMiYazFvZ3k 1BHb5owUqpIWYnzq5SW4Bk+ZsNxGVn47uBnSi/fBsiSuzEIOSbAnmxbqO15YqGYM mmjQKgz1AqdR+PyN5Ix9dDsUmkBP9JBUryF1b8IydD6V2uoMgE/37Q2Wp7ajjbMZ 2sliou1k50zaUD1UeMRK5Y0gzwmzii+9 -----END CERTIFICATE-----Generated at Sun May 18 05:55:41 2025 by rpki-client