$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json) Hash identifier: KClD6fWSVQ9IavhUi/8pbJmMuCKkv6jEJMEXbAbKgbM= Subject key identifier: 56:2B:66:A7:3A:ED:C0:EF:0D:FD:71:BD:A2:52:5A:3E:09:FE:9D:26 Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft Manifest number: 0C43 Signing time: Sat 10 May 2025 18:12:52 +0000 Manifest this update: Sat 10 May 2025 18:12:52 +0000 Manifest next update: Sat 17 May 2025 18:12:52 +0000 Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: 4icRva79ruLr7rGJYRnivEQnaSTQ9goRFSaSHK6ETyY=) 2: 719728B803EF11EAB301F66FC4F9AE02.roa (hash: //Y9sRim1JuVKbuAKlrRjn3d7mdHR+lghtxL77FdfiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: May 10 18:12:52 2025 GMT Not After : May 17 18:12:52 2025 GMT Subject: CN=681f9724-3516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:98:fe:b0:79:63:ef:b0:c1:71:b9:83:dc:4c: 08:9e:1f:c2:4f:d1:99:4f:e9:e3:58:a6:d7:90:a9: fe:b5:78:74:57:e7:64:fd:1b:57:55:44:95:4b:0b: 17:0c:fa:04:4d:55:2a:fc:ad:c6:a1:be:51:c5:ad: f2:bd:f8:72:0a:f9:c2:97:95:31:8a:3e:36:57:4c: 5c:64:8b:a4:29:6e:ec:8d:eb:a4:5a:8d:42:c9:12: e8:fc:ba:2b:05:a5:8f:3a:ce:ce:89:ff:5a:a8:17: d9:da:5a:2c:93:aa:b2:cd:8c:a2:a7:8c:c1:31:42: 70:c7:0d:8a:08:ed:20:0c:6e:b8:7e:05:05:c5:30: e2:88:f6:64:ca:46:7f:c1:90:5f:d5:f4:9a:a0:84: 7b:0e:8c:9e:bc:eb:5d:7a:38:17:77:9e:af:d5:56: 80:dd:9a:68:c3:4b:37:72:c0:37:f1:25:2e:09:24: ea:90:dd:b0:23:49:da:7b:e3:8c:09:3f:a8:9b:05: ae:67:b1:a0:6d:ed:bb:3c:c2:fc:b1:6c:88:8f:e5: e3:7f:e9:7f:ee:9c:98:1f:5e:72:2d:44:21:bd:fc: f6:83:43:08:2e:72:94:d9:6d:a3:48:18:8d:14:7a: 4b:7b:3f:79:e3:e2:f4:e5:af:d7:55:45:ce:90:3b: 62:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2B:66:A7:3A:ED:C0:EF:0D:FD:71:BD:A2:52:5A:3E:09:FE:9D:26 X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6e:34:2a:46:5c:2b:15:02:97:6b:92:fa:46:61:d9:ae:5c: 2f:f5:8d:c7:7e:73:ef:ef:40:eb:92:a8:71:5d:6d:77:7c:83: 32:cf:53:9a:79:12:88:ff:f2:12:61:ec:ab:6a:98:1e:7a:17: b8:38:d4:f3:24:aa:6b:54:50:49:87:3c:09:e6:41:05:3e:27: 7f:ca:14:4e:a3:75:0c:d6:60:79:af:ca:dd:91:a7:fe:98:99: fc:7b:ce:5d:0d:2f:9e:80:fe:4b:ab:07:2a:a3:31:64:af:a4: 8f:b1:3f:85:0b:ce:2f:97:cd:3d:27:7e:b3:65:0c:74:8f:ed: bc:33:70:e3:95:0e:6b:fe:33:43:ce:5c:e5:65:fd:fd:a4:33: d5:4d:32:29:71:8f:87:d2:f9:bb:99:1e:1c:ba:6c:f4:71:a5: 64:dc:13:77:9b:8a:47:cb:f7:20:97:83:8b:91:e8:dd:8f:d1: a1:e5:a7:bb:e0:fd:68:1d:51:98:30:cd:88:aa:0f:87:a1:d7: 22:b1:e1:c1:ae:f5:8c:36:12:2f:79:fa:46:c3:d2:55:ac:89: 42:52:eb:de:40:a4:d6:97:e4:4a:98:71:08:2a:ea:db:03:0a: df:bf:5f:23:9b:51:5f:b6:c5:88:48:95:1a:c5:de:bb:ef:ff: af:4f:82:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjUwNTEwMTgxMjUyWhcNMjUwNTE3MTgxMjUyWjAYMRYwFAYD VQQDEw02ODFmOTcyNC0zNTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpj+sHlj77DBcbmD3EwInh/CT9GZT+njWKbXkKn+tXh0V+dk/RtXVUSVSwsX DPoETVUq/K3Gob5Rxa3yvfhyCvnCl5Uxij42V0xcZIukKW7sjeukWo1CyRLo/Lor BaWPOs7Oif9aqBfZ2losk6qyzYyip4zBMUJwxw2KCO0gDG64fgUFxTDiiPZkykZ/ wZBf1fSaoIR7DoyevOtdejgXd56v1VaA3Zpow0s3csA38SUuCSTqkN2wI0nae+OM CT+omwWuZ7Ggbe27PML8sWyIj+Xjf+l/7pyYH15yLUQhvfz2g0MILnKU2W2jSBiN FHpLez954+L05a/XVUXOkDticwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYrZqc6 7cDvDf1xvaJSWj4J/p0mMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M TUcwVXBrTUFjb2I0blduTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+bjQqRlwrFQKXa5L6RmHZrlwv9Y3HfnPv70DrkqhxXW13fIMyz1Oa eRKI//ISYeyrapgeehe4ONTzJKprVFBJhzwJ5kEFPid/yhROo3UM1mB5r8rdkaf+ mJn8e85dDS+egP5LqwcqozFkr6SPsT+FC84vl809J36zZQx0j+28M3DjlQ5r/jND zlzlZf39pDPVTTIpcY+H0vm7mR4cumz0caVk3BN3m4pHy/cgl4OLkejdj9Gh5ae7 4P1oHVGYMM2Iqg+HodciseHBrvWMNhIvefpGw9JVrIlCUuveQKTWl+RKmHEIKurb Awrfv18jm1FftsWISJUaxd677/+vT4JE -----END CERTIFICATE-----Generated at Sun May 11 01:27:35 2025 by rpki-client