$ rpki-client -vvf rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft File: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft (raw, json) Hash identifier: diZ0mCseBEXEZIlpswr6IDoHK6p97oas+jM3J/3cGCk= Subject key identifier: 55:C1:EF:21:C6:33:6D:01:EF:E2:A4:A7:D9:2E:55:B2:B7:67:78:C4 Authority key identifier: E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84 Certificate issuer: /CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484 Certificate serial: 21F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft Manifest number: 21E9 Signing time: Mon 12 May 2025 15:51:08 +0000 Manifest this update: Mon 12 May 2025 15:51:07 +0000 Manifest next update: Mon 19 May 2025 15:51:07 +0000 Files and hashes: 1: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl (hash: FZVLPK0ni8shmTfqsnwwEMY44XJe0MzlagurAjTLvD0=) 2: CD4CD0B654F311E7AC64ED3AC4F9AE02.roa (hash: iH2xmS1GVsSNNCZWscwdxJt8FMGLF9Yh7e5xIVsXSm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8697 (0x21f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E005, serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484 Validity Not Before: May 12 15:51:07 2025 GMT Not After : May 19 15:51:07 2025 GMT Subject: CN=682218eb-4fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:f4:27:29:a3:e2:bc:b0:d6:3c:0c:3f:36: c6:b9:40:ff:67:87:43:18:90:9d:ef:d2:ce:08:3d: 06:aa:28:49:d9:51:ac:07:45:dd:b7:2f:56:c4:51: f0:12:00:aa:b5:cf:3c:ad:e0:36:05:56:c1:54:2a: d0:f6:a7:3a:83:09:0b:bb:2c:d8:27:61:46:2c:e1: bb:42:a1:b2:c6:14:63:84:32:cb:fe:11:c0:f8:1d: ef:96:c4:c7:42:72:d3:7e:8f:fc:8e:6a:3d:04:65: cf:56:44:ca:a4:89:0a:d2:5e:41:06:de:35:ad:88: aa:f7:98:13:f6:f8:15:6a:48:ca:6d:65:cf:cf:66: 4b:88:e5:08:eb:ef:ae:24:58:84:6e:70:ba:2b:6d: 06:08:6e:dd:42:25:5e:cc:53:34:40:86:b4:b0:35: 36:83:89:86:3e:0e:a8:09:d4:5d:34:dc:55:a7:a7: 3e:a8:0a:11:1e:cb:92:40:f7:33:d8:50:0f:47:38: c5:4b:08:08:b0:6d:59:6f:04:84:32:0d:42:42:b0: 60:6b:5b:ef:c9:b1:ff:70:1f:d3:d4:f1:0d:64:1c: de:20:c7:bf:95:4a:54:a2:2b:b0:a6:8f:78:71:66: cf:0e:0c:6d:37:12:80:08:70:b3:18:c1:08:ef:2d: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C1:EF:21:C6:33:6D:01:EF:E2:A4:A7:D9:2E:55:B2:B7:67:78:C4 X509v3 Authority Key Identifier: keyid:E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:21:73:5a:6e:b5:31:8d:ea:56:88:49:70:9d:ce:36:6f:29: 44:73:19:94:db:a6:44:ae:be:2b:49:28:80:88:ba:42:21:02: 5c:30:8e:a8:7c:36:9f:3a:0b:f0:9b:5c:f2:84:f8:b7:f2:b6: 32:60:30:03:d2:ac:2d:e4:58:77:5c:7c:a8:6c:e2:27:f2:a9: c7:db:ad:5d:a3:e2:18:b7:34:ea:22:ba:48:d2:67:d8:64:5a: 78:f9:60:36:83:c0:32:05:ad:ea:ca:8a:40:6e:c2:af:9d:55: 78:6f:65:1a:65:3a:ca:61:5b:bd:85:1d:30:71:20:61:74:bc: 99:ef:af:22:1a:11:d7:b1:af:ea:63:3a:7f:05:18:4d:25:de: b7:8b:5b:5a:8c:5e:c2:21:34:3a:43:40:71:67:c7:bc:11:c2: 68:b6:17:34:41:b9:61:66:df:cd:fb:f8:b6:f8:13:e9:7a:1f: 05:a9:78:8e:a7:27:78:61:4e:27:7e:37:bf:84:57:5c:0d:8b: 95:d7:1b:4b:fb:5c:2c:d2:a6:28:4b:30:4c:00:df:0a:aa:bf: 70:64:4c:7d:bc:35:f7:ff:a0:55:e2:f1:d7:8b:01:8d:7b:4b: e7:ed:5c:63:d2:b5:c3:ab:f9:a5:64:6f:71:51:c1:37:c1:02: 81:77:78:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUwMDUxMTAvBgNVBAUTKEUwMkJFRUU4OEQ4MzVCRDBFNDI1NENBMDhEN0MwM0JD NTcxOTc0ODQwHhcNMjUwNTEyMTU1MTA3WhcNMjUwNTE5MTU1MTA3WjAYMRYwFAYD VQQDEw02ODIyMThlYi00ZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYT0Jymj4ryw1jwMPzbGuUD/Z4dDGJCd79LOCD0GqihJ2VGsB0Xdty9WxFHw EgCqtc88reA2BVbBVCrQ9qc6gwkLuyzYJ2FGLOG7QqGyxhRjhDLL/hHA+B3vlsTH QnLTfo/8jmo9BGXPVkTKpIkK0l5BBt41rYiq95gT9vgVakjKbWXPz2ZLiOUI6++u JFiEbnC6K20GCG7dQiVezFM0QIa0sDU2g4mGPg6oCdRdNNxVp6c+qAoRHsuSQPcz 2FAPRzjFSwgIsG1ZbwSEMg1CQrBga1vvybH/cB/T1PENZBzeIMe/lUpUoiuwpo94 cWbPDgxtNxKACHCzGMEI7y1CWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXB7yHG M20B7+Kkp9kuVbK3Z3jEMB8GA1UdIwQYMBaAFOAr7uiNg1vQ5CVMoI18A7xXGXSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTAwNS85QkU3ODFGRUM2 OTkxMUU1QjBBRkU1NEVDNEY5QUUwMi80Q3Z1NkkyRFc5RGtKVXlnalh3RHZGY1pk SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDdnU2STJEVzlEa0pVeWdqWHdEdkZjWmRJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTAwNS85QkU3ODFGRUM2OTkxMUU1QjBBRkU1NEVDNEY5QUUwMi80Q3Z1NkkyRFc5 RGtKVXlnalh3RHZGY1pkSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcIXNabrUxjepWiElwnc42bylEcxmU26ZErr4rSSiAiLpCIQJcMI6o fDafOgvwm1zyhPi38rYyYDAD0qwt5Fh3XHyobOIn8qnH261do+IYtzTqIrpI0mfY ZFp4+WA2g8AyBa3qyopAbsKvnVV4b2UaZTrKYVu9hR0wcSBhdLyZ768iGhHXsa/q Yzp/BRhNJd63i1tajF7CITQ6Q0BxZ8e8EcJothc0QblhZt/N+/i2+BPpeh8FqXiO pyd4YU4nfje/hFdcDYuV1xtL+1ws0qYoSzBMAN8Kqr9wZEx9vDX3/6BV4vHXiwGN e0vn7Vxj0rXDq/mlZG9xUcE3wQKBd3jt -----END CERTIFICATE-----Generated at Mon May 12 19:10:14 2025 by rpki-client