$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft File: fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json) Hash identifier: wQ89X7yTy7AAo7jP67KG+9VjphTFBOyrZOdFtG9mVnc= Subject key identifier: F7:BA:3C:C1:6B:EF:11:DD:32:ED:4A:61:31:7F:7D:4B:18:1B:14:DC Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 Certificate issuer: /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft Manifest number: 56 Signing time: Sun 11 May 2025 05:57:17 +0000 Manifest this update: Sun 11 May 2025 05:57:17 +0000 Manifest next update: Sun 18 May 2025 05:57:17 +0000 Files and hashes: 1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: VSgbb9rzkkQp/Glm5y+Y8jB3gyF/V871/gzNZEz/Ic0=) 2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Validity Not Before: May 11 05:57:17 2025 GMT Not After : May 18 05:57:17 2025 GMT Subject: CN=68203c3d-1746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:d4:7b:15:b0:25:90:71:0e:ef:bd:d0:87: 81:ab:28:99:9e:d0:f8:a3:bf:fd:0f:d9:67:f3:f0: cc:39:1d:a9:da:8b:22:17:38:c7:c7:1d:19:a8:11: 11:9f:b9:0b:46:37:91:c5:a7:47:95:76:3f:37:da: 10:c2:a7:f6:31:24:5d:74:ab:57:50:2d:19:a1:bd: a9:0b:08:48:de:db:6b:1e:9a:c8:5f:ef:ba:c4:9d: b6:6b:b3:3f:6c:69:2d:39:aa:e7:35:5e:44:6f:4e: d8:c5:7c:11:6a:d7:18:43:c4:23:22:86:cd:98:73: 57:3e:20:e6:41:f5:85:47:d1:d0:53:8c:78:98:8e: 04:1d:09:cc:16:63:5e:b0:2b:7a:b4:72:56:eb:12: 24:8f:42:97:0a:60:87:32:f5:61:42:d8:01:a7:bc: 66:e2:39:aa:4e:20:5f:08:3d:18:46:ea:7f:99:5d: 88:4b:40:60:11:cc:bd:a6:60:f4:84:e8:1f:ca:bb: b6:45:cf:48:eb:ed:c7:af:3f:dd:ce:5e:c9:f9:6a: 72:33:17:03:dc:2d:d2:be:8c:c2:83:09:fa:9f:27: 1a:1a:cd:3e:61:93:15:14:2d:d9:a9:e4:87:75:e2: 82:62:4f:02:33:5b:20:4f:34:f7:12:cb:9d:b9:c5: cb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BA:3C:C1:6B:EF:11:DD:32:ED:4A:61:31:7F:7D:4B:18:1B:14:DC X509v3 Authority Key Identifier: keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f2:fc:8e:be:e3:ef:fc:63:1e:db:76:60:b6:0b:42:5a:55: d6:00:8b:5b:c6:da:52:05:a7:09:b7:b0:6a:2d:80:2d:ab:65: a6:0e:49:71:91:e3:41:29:b4:c7:6c:71:54:8d:c6:8c:46:ad: 57:3c:31:60:82:b4:70:2c:4d:07:95:5b:ea:1f:b1:85:cc:ae: 0c:a3:68:65:61:ad:41:f5:43:e5:9d:bb:d5:9b:4b:17:c3:9d: 7f:31:1a:53:aa:81:54:40:67:d9:a1:09:4f:69:9b:65:f8:d6: e9:44:af:4d:02:3e:63:f5:c6:3c:38:f2:e3:21:04:39:44:a9: 8b:61:ef:28:95:de:7f:19:a1:b8:d9:27:2f:85:d6:8d:ee:8d: 0a:99:61:2d:26:5c:74:d2:87:9e:44:57:b3:06:b6:9c:ce:2d: b9:31:22:8a:04:c8:09:b1:d7:75:db:57:9d:31:ea:19:3b:e1: f6:fe:7b:be:40:e9:f4:3d:a2:fb:56:78:59:62:01:10:f4:50: d6:31:25:7e:50:52:f0:a6:58:38:5a:ea:74:da:19:58:db:ad: fa:d3:f1:5a:50:1d:a2:9a:84:e2:8f:de:08:70:0e:a3:5e:d9: 12:f7:2d:ff:6e:db:43:2d:cb:03:cd:47:c3:32:d7:59:58:8c: 7a:25:a7:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQyMDExMC8GA1UEBRMoN0UzQUE0OEQ2N0VCOTk2OTlDMDJCODFGNzE2OTZERjQ2 NUE4QTZFNTAeFw0yNTA1MTEwNTU3MTdaFw0yNTA1MTgwNTU3MTdaMBgxFjAUBgNV BAMTDTY4MjAzYzNkLTE3NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC34dR7FbAlkHEO773Qh4GrKJme0Pijv/0P2Wfz8Mw5HanaiyIXOMfHHRmoERGf uQtGN5HFp0eVdj832hDCp/YxJF10q1dQLRmhvakLCEje22semshf77rEnbZrsz9s aS05quc1XkRvTtjFfBFq1xhDxCMihs2Yc1c+IOZB9YVH0dBTjHiYjgQdCcwWY16w K3q0clbrEiSPQpcKYIcy9WFC2AGnvGbiOapOIF8IPRhG6n+ZXYhLQGARzL2mYPSE 6B/Ku7ZFz0jr7cevP93OXsn5anIzFwPcLdK+jMKDCfqfJxoazT5hkxUULdmp5Id1 4oJiTwIzWyBPNPcSy525xcuRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU97o8wWvv Ed0y7UphMX99SxgbFNwwHwYDVR0jBBgwFoAUfjqkjWfrmWmcArgfcWlt9GWopuUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDIwL0M0MkIzM0Q0QUM4 RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdtY0FyZ2ZjV2x0OUdXb3B1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZmpxa2pXZnJtV21jQXJnZmNXbHQ5R1dvcHVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDIwL0M0MkIzM0Q0QUM4RDExRUY4ODYwQkUzNEM0RjlBRTAyL2ZqcWtqV2ZybVdt Y0FyZ2ZjV2x0OUdXb3B1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIvy/I6+4+/8Yx7bdmC2C0JaVdYAi1vG2lIFpwm3sGotgC2rZaYOSXGR 40EptMdscVSNxoxGrVc8MWCCtHAsTQeVW+ofsYXMrgyjaGVhrUH1Q+Wdu9WbSxfD nX8xGlOqgVRAZ9mhCU9pm2X41ulEr00CPmP1xjw48uMhBDlEqYth7yiV3n8ZobjZ Jy+F1o3ujQqZYS0mXHTSh55EV7MGtpzOLbkxIooEyAmx13XbV50x6hk74fb+e75A 6fQ9ovtWeFliARD0UNYxJX5QUvCmWDha6nTaGVjbrfrT8VpQHaKahOKP3ghwDqNe 2RL3Lf9u20MtywPNR8My11lYjHolpx4= -----END CERTIFICATE-----Generated at Mon May 12 18:41:55 2025 by rpki-client