$ rpki-client -vvf rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft File: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft (raw, json) Hash identifier: 9rk0LsAttn6O6M1qL7aTBRucbXGMtIrMNOIOGo6tuwg= Subject key identifier: 6B:1C:B4:B7:01:A4:82:BE:F1:19:3F:AD:0F:F9:D9:55:87:50:58:A3 Authority key identifier: AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76 Certificate issuer: /CN=A915EB0B/serialNumber=AE3FA65349551660DFF48C497E8378A630B98376 Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft Manifest number: 052D Signing time: Wed 14 May 2025 23:33:06 +0000 Manifest this update: Wed 14 May 2025 23:33:06 +0000 Manifest next update: Wed 21 May 2025 23:33:06 +0000 Files and hashes: 1: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl (hash: uwNPsCdCjUwPJ5YesxhtUtrO6nIg25e1+d+cXD01www=) 2: D7AD2B6AF90311EBBB71C076C4F9AE02.roa (hash: VL9J48E6mKHF8lb44rgcasmZ+ef6A3tiZtXM0iIEHSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EB0B, serialNumber=AE3FA65349551660DFF48C497E8378A630B98376 Validity Not Before: May 14 23:33:06 2025 GMT Not After : May 21 23:33:06 2025 GMT Subject: CN=68252832-28f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:73:23:84:29:9c:34:c2:f2:79:8e:fc:1e: fb:43:ee:20:08:4e:00:11:f6:37:f2:cd:7d:da:ec: 31:7b:59:07:93:3e:93:f2:c1:ed:4b:0a:95:8c:97: 7a:a5:b4:58:32:53:09:fb:95:5e:f5:e3:a8:18:51: ef:b8:30:f0:bc:9c:00:91:99:27:b9:55:a3:56:6c: 49:59:9d:a8:31:1a:72:92:e3:a4:fc:6b:18:dd:21: 6f:53:b1:89:56:6f:4c:57:e6:1c:3b:4e:01:c8:b5: 48:42:09:59:ab:24:50:65:0f:8e:37:e3:92:5d:8b: f0:c4:1f:c2:20:de:8d:52:2d:21:7e:20:b0:1a:2c: 48:7c:09:fa:32:c0:10:78:17:7d:ef:5d:a7:ef:53: 77:fd:70:91:19:5e:f5:11:12:0e:ec:77:22:d4:67: 40:a8:e9:de:c7:93:7d:8f:d7:81:05:95:6a:5e:2f: 8f:58:d6:db:95:cc:9f:dc:15:f9:75:be:80:ba:f8: fb:a8:70:64:a0:c6:45:85:c8:a6:3c:25:23:f9:60: 10:53:55:b2:77:63:86:34:4e:78:74:94:c8:28:fe: b4:23:9d:33:a0:e1:c6:c7:f1:86:2b:a3:dd:7b:d3: 70:bb:d2:33:f5:3f:7a:9a:cc:9a:80:eb:fd:38:0f: e9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1C:B4:B7:01:A4:82:BE:F1:19:3F:AD:0F:F9:D9:55:87:50:58:A3 X509v3 Authority Key Identifier: keyid:AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:28:d0:07:7c:d0:0d:70:2b:ee:c4:50:1c:7e:b6:7a:11:62: db:54:43:e7:87:c2:d4:7a:d0:71:d0:72:b1:9b:8a:09:0f:14: 69:09:09:8f:b6:25:cf:da:b8:c5:06:4a:27:c2:f3:46:f0:b8: ce:20:15:2d:1e:0e:ca:ac:89:75:50:71:2c:88:5c:ef:5b:97: bc:6d:9b:90:47:a1:d5:de:56:52:8e:0e:28:f9:95:8d:65:42: 1f:80:70:50:60:c4:b6:0f:29:25:d8:4a:12:3d:5d:b7:95:a0: f7:5e:52:33:cb:b4:e7:bc:7e:96:1d:11:9e:20:5c:6b:8f:ed: 1b:c5:ca:51:34:f2:58:8a:e6:e7:f9:87:72:8d:30:15:74:7f: 61:50:94:75:74:ec:ae:b1:46:d8:3d:60:88:87:ec:fb:18:bf: a4:35:13:89:d3:ca:8d:b4:78:94:ea:27:f0:88:bd:d9:1b:91: a3:24:52:48:63:a9:d1:7c:bb:19:a8:71:08:e2:fb:07:27:25: 84:85:d2:37:8c:5f:ac:22:bc:f3:6d:72:47:78:e7:07:fa:37: b1:ac:65:ef:d6:a2:79:3d:c4:63:6a:5f:dc:45:2c:9e:ea:2f: 6e:af:7e:18:2e:fc:03:82:2a:b0:72:8c:73:31:d9:23:a1:1d: f6:61:39:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCMEIxMTAvBgNVBAUTKEFFM0ZBNjUzNDk1NTE2NjBERkY0OEM0OTdFODM3OEE2 MzBCOTgzNzYwHhcNMjUwNTE0MjMzMzA2WhcNMjUwNTIxMjMzMzA2WjAYMRYwFAYD VQQDEw02ODI1MjgzMi0yOGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WBzI4QpnDTC8nmO/B77Q+4gCE4AEfY38s192uwxe1kHkz6T8sHtSwqVjJd6 pbRYMlMJ+5Ve9eOoGFHvuDDwvJwAkZknuVWjVmxJWZ2oMRpykuOk/GsY3SFvU7GJ Vm9MV+YcO04ByLVIQglZqyRQZQ+ON+OSXYvwxB/CIN6NUi0hfiCwGixIfAn6MsAQ eBd9712n71N3/XCRGV71ERIO7Hci1GdAqOnex5N9j9eBBZVqXi+PWNbblcyf3BX5 db6Auvj7qHBkoMZFhcimPCUj+WAQU1Wyd2OGNE54dJTIKP60I50zoOHGx/GGK6Pd e9Nwu9Iz9T96msyagOv9OA/pjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsctLcB pIK+8Rk/rQ/52VWHUFijMB8GA1UdIwQYMBaAFK4/plNJVRZg3/SMSX6DeKYwuYN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUIwQi8zQTRDNDYwNkY5 MDAxMUVCQkExOUQ1MjhDNEY5QUUwMi9yai1tVTBsVkZtRGY5SXhKZm9ONHBqQzVn M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JqLW1VMGxWRm1EZjlJeEpmb040cGpDNWczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUIwQi8zQTRDNDYwNkY5MDAxMUVCQkExOUQ1MjhDNEY5QUUwMi9yai1tVTBsVkZt RGY5SXhKZm9ONHBqQzVnM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpKNAHfNANcCvuxFAcfrZ6EWLbVEPnh8LUetBx0HKxm4oJDxRpCQmP tiXP2rjFBkonwvNG8LjOIBUtHg7KrIl1UHEsiFzvW5e8bZuQR6HV3lZSjg4o+ZWN ZUIfgHBQYMS2Dykl2EoSPV23laD3XlIzy7TnvH6WHRGeIFxrj+0bxcpRNPJYiubn +YdyjTAVdH9hUJR1dOyusUbYPWCIh+z7GL+kNROJ08qNtHiU6ifwiL3ZG5GjJFJI Y6nRfLsZqHEI4vsHJyWEhdI3jF+sIrzzbXJHeOcH+jexrGXv1qJ5PcRjal/cRSye 6i9ur34YLvwDgiqwcoxzMdkjoR32YTmk -----END CERTIFICATE-----Generated at Fri May 16 11:33:39 2025 by rpki-client