$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft File: Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json) Hash identifier: UQNXaLBQDD/SHc7RVg44nHeejpqlaUwd2rMRMTXoUpY= Subject key identifier: D1:25:C9:D8:E0:CE:9C:D6:26:7D:7B:CB:C9:B2:1B:28:FB:2C:4A:E0 Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Certificate serial: 081E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft Manifest number: 142F Signing time: Fri 16 May 2025 18:51:06 +0000 Manifest this update: Fri 16 May 2025 18:51:06 +0000 Manifest next update: Fri 23 May 2025 18:51:06 +0000 Files and hashes: 1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: af1ZnBypLUCDZPRR2RgQpYEsG7FKBZeoxSs4psX/D6Y=) 2: 687DF56A8E2211EEB23A0C6CC4F9AE02.roa (hash: 8hNFjt6860Ps194YD3tqqE18VQShBpsbalp5nYV8/mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2078 (0x81e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Validity Not Before: May 16 18:51:06 2025 GMT Not After : May 23 18:51:06 2025 GMT Subject: CN=6827891a-e218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:ca:cf:4a:91:a8:e8:14:02:7d:1a:28:71: cf:91:54:91:be:24:34:f7:c6:e4:1a:3a:aa:52:f1: 18:fc:ee:d4:2c:93:fe:82:c5:82:a1:e1:45:cd:79: 4e:b2:4a:2a:12:ae:d8:46:d5:51:48:4c:83:5f:48: 5b:49:53:68:63:bf:82:b0:c3:45:4f:69:9d:d9:7e: 00:70:b2:23:a2:df:8c:f5:92:49:d9:4b:ba:b5:87: 48:91:e5:28:34:9d:6e:0a:28:a5:c0:4e:08:83:3f: bb:4b:c9:53:a7:61:2e:f4:cf:a9:07:ae:18:29:fb: 62:ba:d5:6b:1b:9b:f6:55:fe:b1:7f:a4:4b:8b:c7: 0c:38:05:de:dd:b1:23:1d:69:37:7c:c7:70:c8:7e: 80:61:5b:db:47:74:56:fb:e4:2d:e8:84:a7:53:68: be:70:cd:eb:c7:4a:dc:da:1e:53:24:6e:be:cb:3b: f1:82:bf:89:b1:34:47:79:b4:46:78:a2:43:7f:be: 63:ff:f3:0e:d5:41:90:c3:db:44:8b:cb:93:39:0e: 1b:1c:97:a0:4d:f6:f2:64:94:f9:ae:b5:39:84:33: 48:f9:77:53:47:71:c3:78:71:fb:06:d6:b7:eb:ee: 56:fb:0f:4a:f9:f5:93:7c:c4:32:68:11:4e:19:da: 0e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:25:C9:D8:E0:CE:9C:D6:26:7D:7B:CB:C9:B2:1B:28:FB:2C:4A:E0 X509v3 Authority Key Identifier: keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:4a:af:6b:1c:29:87:54:b1:91:bb:a6:4b:96:7b:e3:c7:ff: 89:68:10:6c:cc:43:96:3a:2f:16:1d:66:8c:cf:c5:b3:ce:17: f9:04:32:11:3f:55:1e:12:48:0d:df:ac:d1:34:14:e4:01:60: 6f:d5:4b:a1:45:4d:0e:cc:9d:ef:72:d4:5c:66:04:d4:7d:5c: c0:d9:d2:bd:dd:fc:3b:b9:fa:f2:07:9a:e7:ba:d1:9d:03:65: ad:5b:00:73:33:3b:2a:d7:43:46:32:2d:9d:af:d7:fd:2a:d8: d0:65:c6:2e:63:e3:b8:9e:62:5a:81:18:7d:f7:6a:e9:60:a7: 56:45:9c:1a:8e:e5:a5:9a:ae:70:dd:e3:28:44:28:da:10:a2: c0:ae:8b:7c:ca:6f:84:b2:31:e4:07:d9:cf:be:9f:46:c7:fa: 46:15:a2:aa:38:10:ff:24:ef:a0:f3:b6:1e:16:58:cb:3e:e9: 06:b5:28:75:29:a6:31:10:9a:f4:b8:f5:cb:b0:cf:13:c3:ca: 3e:1f:71:ac:ba:10:da:3e:53:ca:5b:59:78:35:47:70:ac:20: d1:2a:ac:ac:34:fb:72:4a:bd:db:d8:84:e7:7c:c0:24:c2:cb: 10:ea:cc:45:bb:79:af:ba:ac:cd:9b:d1:c6:6f:e6:f1:a3:f8: 22:30:42:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5 OUJFMDBENDIwHhcNMjUwNTE2MTg1MTA2WhcNMjUwNTIzMTg1MTA2WjAYMRYwFAYD VQQDEw02ODI3ODkxYS1lMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvM7Kz0qRqOgUAn0aKHHPkVSRviQ098bkGjqqUvEY/O7ULJP+gsWCoeFFzXlO skoqEq7YRtVRSEyDX0hbSVNoY7+CsMNFT2md2X4AcLIjot+M9ZJJ2Uu6tYdIkeUo NJ1uCiilwE4Igz+7S8lTp2Eu9M+pB64YKftiutVrG5v2Vf6xf6RLi8cMOAXe3bEj HWk3fMdwyH6AYVvbR3RW++Qt6ISnU2i+cM3rx0rc2h5TJG6+yzvxgr+JsTRHebRG eKJDf75j//MO1UGQw9tEi8uTOQ4bHJegTfbyZJT5rrU5hDNI+XdTR3HDeHH7Bta3 6+5W+w9K+fWTfMQyaBFOGdoOsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNElydjg zpzWJn17y8myGyj7LErgMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZE bTNGNGtsbFkzLTZadmdEVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6Sq9rHCmHVLGRu6ZLlnvjx/+JaBBszEOWOi8WHWaMz8Wzzhf5BDIR P1UeEkgN36zRNBTkAWBv1UuhRU0OzJ3vctRcZgTUfVzA2dK93fw7ufryB5rnutGd A2WtWwBzMzsq10NGMi2dr9f9KtjQZcYuY+O4nmJagRh992rpYKdWRZwajuWlmq5w 3eMoRCjaEKLArot8ym+EsjHkB9nPvp9Gx/pGFaKqOBD/JO+g87YeFljLPukGtSh1 KaYxEJr0uPXLsM8Tw8o+H3GsuhDaPlPKW1l4NUdwrCDRKqysNPtySr3b2ITnfMAk wssQ6sxFu3mvuqzNm9HGb+bxo/giMELX -----END CERTIFICATE-----Generated at Fri May 16 22:30:03 2025 by rpki-client