$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: JMWQY6bwiQtmwJDNykH8FaEtao240BPQxN/fdFYqYBg= Subject key identifier: DE:C8:33:11:49:17:A9:23:97:22:05:A3:80:79:30:75:4F:5F:BE:18 Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 036C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 035B Signing time: Tue 13 May 2025 00:50:11 +0000 Manifest this update: Tue 13 May 2025 00:50:10 +0000 Manifest next update: Tue 20 May 2025 00:50:10 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: +x1YMCI++q/Lkj3UdqAXFBygNmyuwmrYBYQcV0JgdvI=) 2: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (hash: tjP7XKoMqNX1LQ2yQaonbdxhhj6KFZbH0sAXzwNewCI=) 3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: May 13 00:50:10 2025 GMT Not After : May 20 00:50:10 2025 GMT Subject: CN=68229742-8bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:86:4a:b6:f4:57:b9:96:6d:8e:59:29:15: 7e:b8:da:e6:e8:1c:c0:35:ac:1c:e1:f0:f4:83:cf: 83:84:c9:2d:55:6d:67:5a:10:37:8c:c7:52:eb:19: 86:b1:74:55:51:76:6b:59:c3:a4:c8:2c:d2:67:df: 27:56:ee:3c:b5:07:32:39:ee:d1:88:37:c0:a3:89: 75:c5:1c:0e:24:f3:09:81:f1:7e:63:45:d5:4a:b6: 11:e4:f1:08:86:32:43:41:97:42:5e:de:55:35:52: bc:d5:a0:d9:23:a8:86:56:ac:f3:fa:0c:d5:b1:49: 14:08:f1:fc:fc:92:f8:ee:87:69:13:e3:a3:b8:90: a0:3f:90:d3:cf:7f:20:5a:98:03:ef:34:26:a3:8b: 88:e0:a0:0f:95:01:8e:e0:d8:c4:0b:ec:45:fc:31: 75:4d:72:87:45:ea:bc:ca:23:85:fb:ce:b9:44:db: d7:30:c0:6a:80:c5:80:04:ec:9e:cc:bc:d8:0b:bd: d2:b5:a1:27:ee:78:b0:29:27:e2:cb:7a:32:ab:11: d4:c6:ba:33:42:47:cf:e0:c5:66:f7:5f:2c:a8:c9: 7d:94:ec:37:81:bf:09:88:3b:93:ff:31:4f:45:19: 30:5a:ff:50:c2:b1:80:6f:1e:8d:95:fc:f0:2f:67: b1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C8:33:11:49:17:A9:23:97:22:05:A3:80:79:30:75:4F:5F:BE:18 X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:bf:9d:7a:b7:13:1d:63:97:98:16:95:f3:73:2a:05:bb:2b: cb:6b:d8:80:2b:6c:fa:23:f6:dc:89:6e:8a:5c:b2:6f:84:e7: 8c:00:1c:32:7b:2f:56:06:c4:73:39:e9:84:1f:a0:88:15:72: 22:a6:10:e8:7f:f1:17:49:30:1a:a8:32:10:3a:31:f1:94:b7: 90:30:ce:55:6d:4b:4f:8c:f2:cb:0d:89:df:1d:3a:58:1e:07: f6:29:3e:7a:ab:e6:be:11:a8:d6:be:93:e9:f4:6a:4a:82:e4: ae:46:14:97:76:07:a0:62:44:ef:69:9d:49:b8:88:61:62:1b: f1:94:c0:92:e9:d1:32:ae:7d:29:9f:0f:64:03:e7:c5:08:6d: ed:59:3e:21:e5:2f:05:f7:a3:68:37:94:01:6f:3f:44:a9:04: f8:70:32:1e:ee:53:70:c1:15:85:fd:4c:6b:36:6c:9c:b4:7f: db:4d:e1:4f:76:b3:d7:af:f4:84:72:a6:cd:a5:ee:c3:fb:fe: aa:92:e0:56:6b:bb:92:95:85:d4:b7:eb:62:40:45:f8:33:5b: 08:a3:46:cb:ae:5f:1b:88:a8:53:22:d2:22:e7:7f:fb:59:7c: 62:c5:43:62:54:96:1e:b0:e0:16:33:5d:40:74:37:1d:e5:6e: 71:a5:a0:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjUwNTEzMDA1MDEwWhcNMjUwNTIwMDA1MDEwWjAYMRYwFAYD VQQDEw02ODIyOTc0Mi04YmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtamGSrb0V7mWbY5ZKRV+uNrm6BzANawc4fD0g8+DhMktVW1nWhA3jMdS6xmG sXRVUXZrWcOkyCzSZ98nVu48tQcyOe7RiDfAo4l1xRwOJPMJgfF+Y0XVSrYR5PEI hjJDQZdCXt5VNVK81aDZI6iGVqzz+gzVsUkUCPH8/JL47odpE+OjuJCgP5DTz38g WpgD7zQmo4uI4KAPlQGO4NjEC+xF/DF1TXKHReq8yiOF+865RNvXMMBqgMWABOye zLzYC73StaEn7niwKSfiy3oyqxHUxrozQkfP4MVm918sqMl9lOw3gb8JiDuT/zFP RRkwWv9QwrGAbx6NlfzwL2exSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7IMxFJ F6kjlyIFo4B5MHVPX74YMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7v516txMdY5eYFpXzcyoFuyvLa9iAK2z6I/bciW6KXLJvhOeMABwy ey9WBsRzOemEH6CIFXIiphDof/EXSTAaqDIQOjHxlLeQMM5VbUtPjPLLDYnfHTpY Hgf2KT56q+a+EajWvpPp9GpKguSuRhSXdgegYkTvaZ1JuIhhYhvxlMCS6dEyrn0p nw9kA+fFCG3tWT4h5S8F96NoN5QBbz9EqQT4cDIe7lNwwRWF/UxrNmyctH/bTeFP drPXr/SEcqbNpe7D+/6qkuBWa7uSlYXUt+tiQEX4M1sIo0bLrl8biKhTItIi53/7 WXxixUNiVJYesOAWM11AdDcd5W5xpaDw -----END CERTIFICATE-----Generated at Wed May 14 00:30:18 2025 by rpki-client