$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json) Hash identifier: Hb4hqORvhQiP32zQyj8YF0mu7xFil2UGnnyMwWGyyAQ= Subject key identifier: 9B:CF:A9:15:35:A7:AB:17:B6:B7:9D:CB:F1:5F:57:BC:EF:AA:AB:C1 Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Certificate serial: 05D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft Manifest number: 05D1 Signing time: Sat 10 May 2025 22:36:30 +0000 Manifest this update: Sat 10 May 2025 22:36:29 +0000 Manifest next update: Sat 17 May 2025 22:36:29 +0000 Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: OdPnIseqJIe3lqcW5z6IKZTu2mBDIKuuyfEkGOfMEYI=) 2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: l216klg+EdFhZXizpzBgdSx3W8LT8OTJYqEFSmlWpW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1494 (0x5d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Validity Not Before: May 10 22:36:29 2025 GMT Not After : May 17 22:36:29 2025 GMT Subject: CN=681fd4ed-b9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:a1:d9:a3:e7:7e:35:c6:d3:f4:7d:4b:fa: 58:ec:fb:9d:eb:e9:87:50:9d:4a:9f:e9:5b:d5:5e: 48:da:c0:5e:92:ec:1f:89:6d:ee:b7:ce:d8:96:13: b9:bd:41:fe:0f:8f:14:f2:46:a7:ac:fe:6d:b7:98: 5b:d7:16:e8:c5:9f:f0:c3:50:3b:31:e5:06:ef:f5: 0f:1d:09:94:ce:5f:e6:71:20:4e:7c:5a:5e:3c:d8: d1:fc:9f:30:b7:50:84:5b:d7:52:48:4d:11:1a:2a: 6c:64:a7:96:40:35:e7:3c:d1:01:43:87:18:0c:bb: 79:8d:66:73:14:ef:63:23:87:aa:a7:4b:1a:13:0c: f0:79:15:9d:13:e6:ce:ae:62:ab:4a:47:07:ba:13: da:86:e7:8c:98:b3:e2:f8:8f:7b:43:4f:ba:8a:c9: 19:cd:0e:ef:0b:95:6f:22:f8:a1:bf:dc:47:3b:6e: 5e:f8:3a:7e:90:ce:0a:85:07:76:a0:f7:35:51:5a: cb:36:a6:d9:79:ff:08:dc:35:6a:e2:e2:d9:5e:97: 07:a2:a1:5a:f7:70:44:5d:9a:5c:aa:84:1b:c7:8e: 01:af:51:aa:f4:9c:85:7a:14:bd:06:ed:df:eb:09: 8c:72:19:ab:a7:e6:ff:1f:95:2a:ea:1b:49:95:74: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CF:A9:15:35:A7:AB:17:B6:B7:9D:CB:F1:5F:57:BC:EF:AA:AB:C1 X509v3 Authority Key Identifier: keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:4d:3d:37:1d:44:68:11:56:7e:cd:7b:43:f5:58:b0:bb:ca: 66:91:db:4d:38:08:dc:5b:d5:11:fd:bd:55:52:74:f2:fe:c7: 21:a8:f5:31:6f:77:9f:c3:d3:5c:29:c3:dd:a5:ac:10:a8:81: a1:e2:f8:59:e1:34:be:e0:90:3a:f9:67:fb:55:5a:c4:a8:c5: 55:8e:aa:a2:c1:80:03:c7:80:03:d1:5c:03:a2:ab:aa:15:1e: ae:26:8f:5f:5e:bf:75:e9:9a:e8:d6:47:8c:8b:c8:a4:15:3d: 08:24:11:10:0f:c4:42:98:19:26:ea:86:05:9e:5e:2a:b8:db: be:03:0e:aa:5c:9b:46:11:0a:86:50:7e:05:cf:c8:f7:0b:ce: cc:c0:38:dc:41:f1:da:1f:c6:fe:43:b0:3c:6a:30:40:42:64: 06:70:26:79:03:a2:6c:fd:c8:68:65:93:f0:df:0f:3b:00:bb: 23:e6:49:a0:8b:e3:3c:bf:e3:55:0d:51:35:1a:b2:d8:c6:27: 50:e0:69:21:81:bd:42:67:3b:0b:48:cc:d8:c7:9b:cc:c0:24: 25:90:54:5c:f2:32:02:40:4b:da:cb:9f:f2:c0:9d:2f:da:b4: 81:9b:21:ca:bd:02:3e:d9:6e:b0:fd:97:54:be:27:6d:4f:75: c2:b3:f3:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5 MzM2QzgyQjgwHhcNMjUwNTEwMjIzNjI5WhcNMjUwNTE3MjIzNjI5WjAYMRYwFAYD VQQDEw02ODFmZDRlZC1iOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYuh2aPnfjXG0/R9S/pY7Pud6+mHUJ1Kn+lb1V5I2sBekuwfiW3ut87YlhO5 vUH+D48U8kanrP5tt5hb1xboxZ/ww1A7MeUG7/UPHQmUzl/mcSBOfFpePNjR/J8w t1CEW9dSSE0RGipsZKeWQDXnPNEBQ4cYDLt5jWZzFO9jI4eqp0saEwzweRWdE+bO rmKrSkcHuhPahueMmLPi+I97Q0+6iskZzQ7vC5VvIvihv9xHO25e+Dp+kM4KhQd2 oPc1UVrLNqbZef8I3DVq4uLZXpcHoqFa93BEXZpcqoQbx44Br1Gq9JyFehS9Bu3f 6wmMchmrp+b/H5Uq6htJlXSGOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvPqRU1 p6sXtredy/FfV7zvqqvBMB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3 QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu cWQwV0Q5WUppWmlUTnNncmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFTT03HURoEVZ+zXtD9Viwu8pmkdtNOAjcW9UR/b1VUnTy/schqPUx b3efw9NcKcPdpawQqIGh4vhZ4TS+4JA6+Wf7VVrEqMVVjqqiwYADx4AD0VwDoquq FR6uJo9fXr916Zro1keMi8ikFT0IJBEQD8RCmBkm6oYFnl4quNu+Aw6qXJtGEQqG UH4Fz8j3C87MwDjcQfHaH8b+Q7A8ajBAQmQGcCZ5A6Js/choZZPw3w87ALsj5kmg i+M8v+NVDVE1GrLYxidQ4Gkhgb1CZzsLSMzYx5vMwCQlkFRc8jICQEvay5/ywJ0v 2rSBmyHKvQI+2W6w/ZdUvidtT3XCs/Ou -----END CERTIFICATE-----Generated at Sun May 11 19:57:27 2025 by rpki-client