$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: UwDCq+yZg5Q3Dsq8j4rpdYkNbgoEg+2xeEMoShO4I6s= Subject key identifier: 8F:C3:B3:55:EA:4B:CB:E2:F2:12:F4:F9:DD:85:E5:E5:BE:77:A4:7F Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1E9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1E3C Signing time: Sat 10 May 2025 16:01:17 +0000 Manifest this update: Sat 10 May 2025 16:01:17 +0000 Manifest next update: Sat 17 May 2025 16:01:17 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: cFuOlRWcWpQD6fsW28ro2LYi3qSD7h74fi6OYMURMf0=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: WKYh+NxnsT3X7rLjv5qUGFM6/m1tIHkeIZefmgprnPs=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: i+bH68t7yKzy0Rw6D9wkVEOs5mv50GBBoWxW4vThyQY=) 4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: Hy5wV1LNqpxbM5ijt7NUzM7tVBcEJ4OJJPk557Hpy8c=) 5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 7XnoI3SWGKSLq9zz7HLNS32aw+KK++smhLaAOQ+1lDo=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: T6jmHSx80+1QapW6ywMYadpctCcOQDce4QIxekTXdlo=) 7: B0ACAB905A2011EA9E34F70BC4F9AE02.roa (hash: K3rejCNdQ0NeO9mAgLHI687zq5GLAF1vM1BDZ4QHrk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7837 (0x1e9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: May 10 16:01:17 2025 GMT Not After : May 17 16:01:17 2025 GMT Subject: CN=681f784d-32ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:75:ce:85:8b:65:c8:e8:31:d4:05:91:ee:b3: 5f:19:d6:cf:99:d7:d9:58:dd:7c:79:f2:90:c3:46: 5b:aa:e1:eb:43:34:9e:98:c4:e6:cb:da:c3:0c:32: a4:20:0b:b9:4c:a4:6c:d0:94:44:12:33:93:2e:bd: 3e:d5:c4:e2:99:83:3f:cb:65:27:fd:d8:3d:1f:bf: 66:0f:aa:51:c5:4c:7f:c8:80:d6:f1:97:bb:0a:e5: ef:9e:cf:07:68:dd:db:b3:32:d3:79:0e:b2:30:87: 53:a6:bc:6c:42:2f:78:73:b5:be:c1:7f:48:0d:bf: 48:2f:73:52:eb:e1:64:65:c7:01:f4:41:f8:7a:72: a2:8e:45:18:a6:e1:80:0a:21:f7:96:22:5e:5e:21: 58:47:2b:db:ee:76:11:0a:1f:18:e8:cc:cd:b2:fb: e1:05:27:41:7e:25:b8:15:72:0d:68:a9:5d:59:fe: a7:3a:be:2c:dd:26:6e:79:71:6d:25:95:e2:ae:eb: 7f:4e:b7:7a:48:80:95:d0:fd:d5:08:43:55:de:59: 96:d6:70:bd:14:3d:fa:83:30:ce:c9:f3:b8:24:d1: af:b0:cd:c9:4d:b2:7a:b8:2d:70:53:2d:38:75:a5: a5:2f:55:5e:1b:67:e2:51:ec:bd:94:ad:3e:60:ec: 19:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C3:B3:55:EA:4B:CB:E2:F2:12:F4:F9:DD:85:E5:E5:BE:77:A4:7F X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a0:96:9f:9e:f8:cb:74:fe:ad:7e:5f:b5:9a:df:80:56:81: 58:5f:ed:db:7c:d7:ed:65:b3:92:dc:44:a5:27:7c:05:a5:f3: b3:61:16:b0:59:61:96:15:89:61:36:6e:14:64:87:42:c2:d7: fb:8f:9b:8e:5a:ca:1e:75:81:de:cb:e0:81:31:05:e4:85:05: 3e:fe:83:11:21:c9:fa:4d:6b:7e:1a:6f:4c:bd:a4:04:9e:36: f8:1f:40:f3:fa:9a:3d:71:1a:b1:a8:fb:23:9a:6c:ce:b9:0b: 38:f2:14:1b:73:fe:8b:9f:e5:5f:c0:2e:20:79:de:60:e1:87: 14:1b:ca:c0:50:3e:e1:df:af:5d:c9:36:a0:d7:6b:97:cd:d2: b6:1d:ad:e0:f2:7a:3f:86:95:3b:fb:5d:b0:14:cb:a6:88:1b: 23:32:2a:2a:54:7b:56:08:ae:e9:a3:41:90:e2:1f:7c:b8:2b: 27:da:49:a2:27:e6:ea:1d:ed:d0:66:64:49:e5:a7:92:26:16: 63:af:d0:97:74:12:4a:81:e8:65:9b:84:b4:34:f6:fc:bb:66: 17:e1:c1:f5:13:f6:05:90:91:b0:a8:93:b2:91:ee:0e:c3:be: cf:0f:09:a0:59:df:72:e5:43:d8:56:59:93:19:95:23:7a:a6: 93:28:f3:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUwNTEwMTYwMTE3WhcNMjUwNTE3MTYwMTE3WjAYMRYwFAYD VQQDEw02ODFmNzg0ZC0zMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3XOhYtlyOgx1AWR7rNfGdbPmdfZWN18efKQw0ZbquHrQzSemMTmy9rDDDKk IAu5TKRs0JREEjOTLr0+1cTimYM/y2Un/dg9H79mD6pRxUx/yIDW8Ze7CuXvns8H aN3bszLTeQ6yMIdTprxsQi94c7W+wX9IDb9IL3NS6+FkZccB9EH4enKijkUYpuGA CiH3liJeXiFYRyvb7nYRCh8Y6MzNsvvhBSdBfiW4FXINaKldWf6nOr4s3SZueXFt JZXirut/Trd6SICV0P3VCENV3lmW1nC9FD36gzDOyfO4JNGvsM3JTbJ6uC1wUy04 daWlL1VeG2fiUey9lK0+YOwZIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/Ds1Xq S8vi8hL0+d2F5eW+d6R/MB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZoJafnvjLdP6tfl+1mt+AVoFYX+3bfNftZbOS3ESlJ3wFpfOzYRaw WWGWFYlhNm4UZIdCwtf7j5uOWsoedYHey+CBMQXkhQU+/oMRIcn6TWt+Gm9MvaQE njb4H0Dz+po9cRqxqPsjmmzOuQs48hQbc/6Ln+VfwC4ged5g4YcUG8rAUD7h369d yTag12uXzdK2Ha3g8no/hpU7+12wFMumiBsjMioqVHtWCK7po0GQ4h98uCsn2kmi J+bqHe3QZmRJ5aeSJhZjr9CXdBJKgehlm4S0NPb8u2YX4cH1E/YFkJGwqJOyke4O w77PDwmgWd9y5UPYVlmTGZUjeqaTKPMB -----END CERTIFICATE-----Generated at Mon May 12 07:20:19 2025 by rpki-client