$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: z3KoDfqLNsT6PG/vf5IYSF9vO8zNYvB5wozfYugUtCc= Subject key identifier: DD:3E:2F:AC:15:D7:CE:8C:8C:60:6B:3A:1E:2B:BE:3B:CA:EA:5F:50 Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 2D Signing time: Sat 17 May 2025 07:10:37 +0000 Manifest this update: Sat 17 May 2025 07:10:37 +0000 Manifest next update: Sat 24 May 2025 07:10:37 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: DRYq+oH0KuHtdklRDwFV9ASzIJYQNd8M/+lZC0FEaqs=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 07:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: May 17 07:10:37 2025 GMT Not After : May 24 07:10:37 2025 GMT Subject: CN=6828366d-2a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:97:60:6c:9e:88:3a:6e:d4:45:5d:e2:9e:48: 83:af:72:e7:1b:22:5c:54:cb:66:4f:b1:71:cb:cc: e0:96:2a:94:48:5a:10:a4:8c:11:77:81:92:cd:97: 9d:e1:bc:3e:9f:9c:81:fe:50:18:c4:9e:90:58:49: ff:4f:64:38:d7:c5:fa:4e:5a:d7:48:c0:2a:ae:86: 0a:8d:f5:67:8d:d8:e4:da:d4:dc:ce:79:30:b2:a2: 6c:7a:b1:1c:23:8d:b3:46:c2:18:ec:f8:3c:c6:e9: ee:24:a4:9b:63:01:a4:ed:cb:cd:b4:a8:1f:04:5d: 84:2d:df:89:2e:a0:ae:75:bd:90:73:e8:6c:0a:f8: 09:84:6a:b9:7e:5b:e5:43:ba:51:d7:fb:53:f6:2a: 44:38:dc:1e:a6:c8:5b:b6:df:2c:63:46:57:73:13: 7a:04:cf:9c:69:1a:53:d1:bd:81:fa:b0:9d:47:85: 89:63:e0:d2:37:ed:46:12:87:54:64:92:87:38:e2: d4:a1:2c:15:a9:80:20:1e:a0:a9:d8:f1:db:63:87: c8:10:9d:d7:0d:8b:04:46:0f:d9:5f:44:12:02:ea: a9:8a:78:fd:b8:e6:1e:2b:c5:41:34:76:b7:62:16: 80:85:85:a0:68:1d:45:b8:f4:2e:d0:97:d4:6f:91: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3E:2F:AC:15:D7:CE:8C:8C:60:6B:3A:1E:2B:BE:3B:CA:EA:5F:50 X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:db:79:6c:a4:81:75:bd:b5:56:b5:cd:54:7c:3d:79:73:b9: 9c:f1:95:f4:22:03:83:b0:31:f9:98:e3:f5:13:a2:86:7c:9d: 4a:a2:63:0d:c6:b5:33:44:bd:22:a6:b3:b2:e6:97:53:cf:c1: f7:30:e3:e2:ff:ce:6b:08:a3:00:4f:30:f4:cb:07:7d:10:82: d2:b9:8d:e1:7a:3d:cf:ac:d7:be:0a:77:9c:76:07:8a:aa:64: c6:8f:f5:36:f1:98:0d:d6:35:4b:34:e1:28:a3:a1:41:01:6d: 8c:53:a1:a8:b4:41:67:b3:b6:ec:3f:21:d1:11:46:5b:2f:28: 32:23:7c:df:a4:58:19:d3:62:8f:99:c7:2c:14:ae:bf:6d:92: fe:d3:69:5d:97:94:90:97:8d:9e:cb:35:ee:04:ae:9e:0d:b0: 89:4e:d9:2d:aa:b8:ea:90:22:bc:dd:a9:53:f5:ab:5f:db:b4: 51:51:01:af:d5:21:12:7e:27:21:be:e6:30:72:e8:90:43:1f: c9:86:81:f8:43:ac:51:db:0e:f7:37:89:25:28:3b:2a:35:7f: 48:dc:86:c5:5b:f1:08:90:ff:bf:a5:90:1d:17:4e:5c:4b:3e: 0a:21:73:b3:12:e8:1f:f9:9a:a0:41:dc:63:c5:0f:03:8b:17: 2c:60:f8:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkI1RDExMC8GA1UEBRMoMEZFMDYzMjRGMTc4N0M4RjIxNEZCRUFFNjdEODg2RDIy RjgxNjcwMjAeFw0yNTA1MTcwNzEwMzdaFw0yNTA1MjQwNzEwMzdaMBgxFjAUBgNV BAMTDTY4MjgzNjZkLTJhNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjl2Bsnog6btRFXeKeSIOvcucbIlxUy2ZPsXHLzOCWKpRIWhCkjBF3gZLNl53h vD6fnIH+UBjEnpBYSf9PZDjXxfpOWtdIwCquhgqN9WeN2OTa1NzOeTCyomx6sRwj jbNGwhjs+DzG6e4kpJtjAaTty820qB8EXYQt34kuoK51vZBz6GwK+AmEarl+W+VD ulHX+1P2KkQ43B6myFu23yxjRldzE3oEz5xpGlPRvYH6sJ1HhYlj4NI37UYSh1Rk koc44tShLBWpgCAeoKnY8dtjh8gQndcNiwRGD9lfRBIC6qmKeP245h4rxUE0drdi FoCFhaBoHUW49C7Ql9RvkVY/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3T4vrBXX zoyMYGs6Hiu+O8rqX1AwHwYDVR0jBBgwFoAUD+BjJPF4fI8hT76uZ9iG0i+BZwIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QjVELzk4RkQxQTQyRjFD MDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRC1CakpQRjRmSThoVDc2dVo5aUcwaS1CWndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QjVELzk4RkQxQTQyRjFDMDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4 aFQ3NnVaOWlHMGktQlp3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHTbeWykgXW9tVa1zVR8PXlzuZzxlfQiA4OwMfmY4/UTooZ8nUqiYw3G tTNEvSKms7Lml1PPwfcw4+L/zmsIowBPMPTLB30QgtK5jeF6Pc+s174Kd5x2B4qq ZMaP9TbxmA3WNUs04SijoUEBbYxToai0QWeztuw/IdERRlsvKDIjfN+kWBnTYo+Z xywUrr9tkv7TaV2XlJCXjZ7LNe4Erp4NsIlO2S2quOqQIrzdqVP1q1/btFFRAa/V IRJ+JyG+5jBy6JBDH8mGgfhDrFHbDvc3iSUoOyo1f0jchsVb8QiQ/7+lkB0XTlxL Pgohc7MS6B/5mqBB3GPFDwOLFyxg+FQ= -----END CERTIFICATE-----Generated at Sat May 17 10:36:20 2025 by rpki-client