$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft File: 5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json) Hash identifier: qV1V6RBs0DlgSbFJEG+ouOF3XMPjJZDT/q1yxY1a1XY= Subject key identifier: FF:CE:92:11:B8:7B:36:92:D0:5A:AF:30:84:07:4B:7F:7A:FB:DB:DE Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 Certificate issuer: /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Certificate serial: 0DCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft Manifest number: 0DC4 Signing time: Mon 12 May 2025 17:47:56 +0000 Manifest this update: Mon 12 May 2025 17:47:55 +0000 Manifest next update: Mon 19 May 2025 17:47:55 +0000 Files and hashes: 1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: n2kozkOa1b4/Q43WEV8jpst+NbcdouiN9E+bU2vAk7A=) 2: 1801797EB79211E986129837C4F9AE02.roa (hash: I7CEbkBg9Av7yOv0PNqj77FDrgxZjjIl1US16C5a7sQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3533 (0xdcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Validity Not Before: May 12 17:47:55 2025 GMT Not After : May 19 17:47:55 2025 GMT Subject: CN=6822344c-06c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:a6:eb:8d:bd:b8:8f:30:d7:6a:08:21:e7: f4:6a:a8:94:e6:b4:1b:13:fa:ea:3f:36:15:68:5f: f9:c4:20:4c:83:6e:25:1d:45:08:fe:61:61:22:f2: 55:48:5a:35:08:35:d1:02:ba:91:33:d5:08:af:32: 66:9b:a3:cb:65:79:2c:d8:33:6c:44:19:85:c7:db: ba:ad:dd:a1:7b:3a:76:04:1c:0a:15:05:2c:7b:c4: dc:0d:f0:2e:65:e4:90:ed:61:15:4d:b0:5f:ec:2e: fb:5f:3a:0b:31:fe:f4:66:dc:e4:33:33:bf:f0:28: 3d:05:8c:e1:50:31:fd:c5:20:5d:7c:23:49:59:5e: e3:5d:dc:a6:f3:68:ce:c4:ff:85:6b:14:39:9e:ec: 6a:8d:c5:a5:01:1c:a9:18:75:9c:f6:fd:7a:53:81: 66:83:f5:b0:5c:3d:a6:c8:27:85:db:32:7e:ba:6d: 53:a9:d2:6e:22:b4:80:2f:b4:58:58:fa:83:c8:2d: 57:88:1a:1f:d8:80:13:db:d1:15:39:9d:bd:a5:48: eb:a8:05:88:19:f5:b5:1e:74:98:fd:fb:05:f4:03: a9:b2:0e:05:20:88:8d:f2:02:9e:a3:ae:24:97:5b: 61:3e:8d:e6:ca:f4:1e:65:d9:e1:ee:b0:47:ff:9d: 22:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CE:92:11:B8:7B:36:92:D0:5A:AF:30:84:07:4B:7F:7A:FB:DB:DE X509v3 Authority Key Identifier: keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:1c:74:f8:7d:c5:53:44:9e:d5:96:b7:9b:51:c6:33:7d:43: 12:13:f1:08:c2:58:35:e0:2b:13:44:39:8a:ad:38:ef:e0:27: bf:ab:0c:c7:70:22:b9:df:a2:67:5e:b5:3a:c8:9f:71:4f:b6: 52:18:cd:db:7f:35:e8:cc:8f:cd:d7:cb:4d:34:c4:e5:c8:ed: bf:4f:62:04:8c:37:e3:cb:31:14:52:d6:a4:1b:2e:74:db:e5: 0a:ee:b0:0b:a7:eb:3d:49:cf:fd:d3:2c:15:15:76:72:1d:7d: bc:22:5b:3e:bb:28:e3:94:7c:6a:26:3b:a1:06:8c:06:9e:1d: a5:5e:4e:e0:03:6d:2a:bf:e8:25:44:2c:cc:ea:fb:81:6b:16: 34:ac:67:e8:0d:e0:70:55:e7:31:5a:ba:7e:26:cd:4d:51:46: aa:3c:93:79:51:6a:a0:cd:8c:69:90:f1:87:cd:1b:fe:62:9b: ae:78:05:25:58:42:1d:ce:ed:7b:5a:cc:95:b3:3b:5f:5d:26: de:c5:d4:e9:96:1f:d4:1a:b8:ef:99:2d:8b:dc:b6:70:d1:d3: 37:42:f1:46:87:2f:13:78:64:04:a1:c0:7d:37:49:fc:e2:8b: 26:f8:a9:f9:3b:4f:59:92:80:be:3d:10:64:2e:66:ee:93:e2: df:29:88:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC OEU0QzEyOTQwHhcNMjUwNTEyMTc0NzU1WhcNMjUwNTE5MTc0NzU1WjAYMRYwFAYD VQQDEw02ODIyMzQ0Yy0wNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKKm6429uI8w12oIIef0aqiU5rQbE/rqPzYVaF/5xCBMg24lHUUI/mFhIvJV SFo1CDXRArqRM9UIrzJmm6PLZXks2DNsRBmFx9u6rd2hezp2BBwKFQUse8TcDfAu ZeSQ7WEVTbBf7C77XzoLMf70ZtzkMzO/8Cg9BYzhUDH9xSBdfCNJWV7jXdym82jO xP+FaxQ5nuxqjcWlARypGHWc9v16U4Fmg/WwXD2myCeF2zJ+um1TqdJuIrSAL7RY WPqDyC1XiBof2IAT29EVOZ29pUjrqAWIGfW1HnSY/fsF9AOpsg4FIIiN8gKeo64k l1thPo3myvQeZdnh7rBH/50iQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/OkhG4 ezaS0FqvMIQHS396+9veMB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3 OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRENy85OUQ5MTUzQUI3OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5L NDVuc3E0RnpvRDI0NU1FcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWHHT4fcVTRJ7VlrebUcYzfUMSE/EIwlg14CsTRDmKrTjv4Ce/qwzH cCK536JnXrU6yJ9xT7ZSGM3bfzXozI/N18tNNMTlyO2/T2IEjDfjyzEUUtakGy50 2+UK7rALp+s9Sc/90ywVFXZyHX28Ils+uyjjlHxqJjuhBowGnh2lXk7gA20qv+gl RCzM6vuBaxY0rGfoDeBwVecxWrp+Js1NUUaqPJN5UWqgzYxpkPGHzRv+YpuueAUl WEIdzu17WsyVsztfXSbexdTplh/UGrjvmS2L3LZw0dM3QvFGhy8TeGQEocB9N0n8 4osm+Kn5O09ZkoC+PRBkLmbuk+LfKYgs -----END CERTIFICATE-----Generated at Wed May 14 15:19:32 2025 by rpki-client