$ rpki-client -vvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft File: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft (raw, json) Hash identifier: Zy8ebBbqQDShQpQsT5QKaD00kETHeZO/bz9v2Ux8qbo= Subject key identifier: 3F:3D:93:88:C7:8B:36:26:4A:09:F8:AA:4C:5D:E9:FD:FB:18:BD:4E Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 Certificate issuer: /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft Manifest number: 065A Signing time: Fri 16 May 2025 22:44:16 +0000 Manifest this update: Fri 16 May 2025 22:44:15 +0000 Manifest next update: Fri 23 May 2025 22:44:15 +0000 Files and hashes: 1: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl (hash: +/NTm6U8Zz3pBsBgJBu45pi1guwxhgYvgIaHZPyJGW4=) 2: 436B3BEC822D11EBB19C1844C4F9AE02.roa (hash: aR8xqbFUFjm+ccG/d5FkPfm2CRqS0a29lHr1SXFGeCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E215, serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Validity Not Before: May 16 22:44:15 2025 GMT Not After : May 23 22:44:15 2025 GMT Subject: CN=6827bfc0-bfa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:ac:ac:29:ca:68:5f:29:81:79:3e:23:49: 16:cc:46:a9:90:a7:8e:33:73:a4:17:05:45:13:3c: b4:50:1b:ef:ad:a3:c1:5a:f1:42:14:05:9c:e3:a9: 0c:86:08:1d:bc:2b:74:3d:f6:e6:7e:e5:3f:c6:37: 27:9e:01:74:4d:e5:30:4f:a3:3f:32:fd:86:65:fe: b7:06:49:72:53:c8:dd:3c:60:23:79:70:34:dc:62: a5:d0:4a:ae:ae:90:c6:a5:dd:0c:3a:8c:0c:90:1b: 09:d3:92:2d:79:2c:f2:ea:68:cf:f2:f8:59:2d:40: 47:dd:3c:aa:85:f5:3b:38:c0:67:b4:2e:87:b0:03: 3f:e0:50:22:07:ce:f9:7f:da:82:af:3c:d5:4e:41: f0:a1:2b:fb:ae:3e:65:5f:0c:a8:78:24:86:c1:46: d1:bf:1d:80:6b:fb:03:b6:5c:5d:c9:55:df:8f:fc: 96:ce:91:53:03:bf:cd:fc:e2:f5:11:d7:b3:a8:92: 48:43:10:e4:af:e8:3f:4d:7a:e7:5a:29:70:a0:b5: a7:0c:58:e4:5e:a1:d9:94:b1:b9:a2:8c:a0:e1:42: 56:67:3e:d3:01:db:9a:c4:2b:05:33:cb:64:a0:26: b6:f1:6c:3c:53:dd:32:b3:07:84:08:a0:01:2d:0e: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3D:93:88:C7:8B:36:26:4A:09:F8:AA:4C:5D:E9:FD:FB:18:BD:4E X509v3 Authority Key Identifier: keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c1:1a:08:5e:6b:cb:36:f0:3e:01:63:48:78:cb:6b:e5:dc: 5a:36:93:1d:ac:16:8e:d9:f9:d1:21:c4:f2:ff:5b:1a:37:4a: 54:ff:09:dc:61:cb:aa:86:05:08:0e:69:c0:b0:c3:53:cb:ad: 0e:b4:4c:0a:9b:cb:cf:bb:55:0f:b4:90:b5:e3:4e:cd:f6:48: 35:0d:fa:10:b2:93:e0:20:0c:be:83:23:70:66:87:e9:bc:d1: 10:39:1e:8e:0d:4e:10:13:86:3f:b0:8c:7c:60:2f:25:7a:b7: 72:6c:54:cc:02:50:e3:5c:d0:eb:21:f1:55:b0:a3:81:0d:ce: 6a:60:02:7b:bf:06:cb:7d:c4:0a:fb:76:05:16:7d:0f:06:d2: 01:d2:fd:85:88:e3:bd:d9:20:b8:39:49:8e:fc:2e:7d:90:2f: c9:8d:fc:ff:da:79:52:e7:a5:67:a8:ee:e4:2c:3e:ca:db:da: e6:47:31:49:09:c9:61:37:e7:d1:f1:a6:1f:c7:34:b8:0b:96: f0:3d:0c:cc:90:95:68:d4:0f:9b:6d:76:e8:9b:bd:82:77:da: 06:92:ef:f5:9f:78:4b:81:83:72:24:a4:a3:14:d6:e3:bb:c2: 0c:a4:16:6a:0f:28:98:f0:48:c9:e8:a6:f9:53:70:f3:c0:c7: f0:26:3d:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUyMTUxMTAvBgNVBAUTKEQyMEU1MkQwOUNFQkU2QjU3MDUwMzU4Q0EyOTMwRDg5 Mzk3NzI5MTEwHhcNMjUwNTE2MjI0NDE1WhcNMjUwNTIzMjI0NDE1WjAYMRYwFAYD VQQDEw02ODI3YmZjMC1iZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysGsrCnKaF8pgXk+I0kWzEapkKeOM3OkFwVFEzy0UBvvraPBWvFCFAWc46kM hggdvCt0PfbmfuU/xjcnngF0TeUwT6M/Mv2GZf63BklyU8jdPGAjeXA03GKl0Equ rpDGpd0MOowMkBsJ05IteSzy6mjP8vhZLUBH3TyqhfU7OMBntC6HsAM/4FAiB875 f9qCrzzVTkHwoSv7rj5lXwyoeCSGwUbRvx2Aa/sDtlxdyVXfj/yWzpFTA7/N/OL1 EdezqJJIQxDkr+g/TXrnWilwoLWnDFjkXqHZlLG5ooyg4UJWZz7TAduaxCsFM8tk oCa28Ww8U90ysweECKABLQ7z3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD89k4jH izYmSgn4qkxd6f37GL1OMB8GA1UdIwQYMBaAFNIOUtCc6+a1cFA1jKKTDYk5dykR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTIxNS85MjJEQkI5NDgy MkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVyVndVRFdNb3BNTmlUbDNL UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBnNVMwSnpyNXJWd1VEV01vcE1OaVRsM0tSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTIxNS85MjJEQkI5NDgyMkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVy VndVRFdNb3BNTmlUbDNLUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzwRoIXmvLNvA+AWNIeMtr5dxaNpMdrBaO2fnRIcTy/1saN0pU/wnc YcuqhgUIDmnAsMNTy60OtEwKm8vPu1UPtJC1407N9kg1DfoQspPgIAy+gyNwZofp vNEQOR6ODU4QE4Y/sIx8YC8lerdybFTMAlDjXNDrIfFVsKOBDc5qYAJ7vwbLfcQK +3YFFn0PBtIB0v2FiOO92SC4OUmO/C59kC/Jjfz/2nlS56VnqO7kLD7K29rmRzFJ CclhN+fR8aYfxzS4C5bwPQzMkJVo1A+bbXbom72Cd9oGku/1n3hLgYNyJKSjFNbj u8IMpBZqDyiY8EjJ6Kb5U3DzwMfwJj33 -----END CERTIFICATE-----Generated at Sun May 18 10:04:32 2025 by rpki-client