$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft File: _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json) Hash identifier: 9WvVnXNGN3Ou45jy4vTwtr9pEMBixL9kdL1MjPBudTg= Subject key identifier: 09:4B:FB:36:72:41:98:89:95:61:AA:96:D6:4A:B8:FB:60:1D:92:F1 Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E Certificate issuer: /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft Manifest number: 020C Signing time: Tue 13 May 2025 01:48:08 +0000 Manifest this update: Tue 13 May 2025 01:48:08 +0000 Manifest next update: Tue 20 May 2025 01:48:08 +0000 Files and hashes: 1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: amb60cNidH1G4exxhJ5G+R4rgxoOQiCapaSPU4LtiCs=) 2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: nwv4OnHIeiaOuT9R5A9U+o0snvNWMEn4+NiK+Y5blsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E Validity Not Before: May 13 01:48:08 2025 GMT Not After : May 20 01:48:08 2025 GMT Subject: CN=6822a4d8-46c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:59:72:12:13:c9:66:3e:ef:20:54:98:4c:c4: d1:27:73:69:69:90:0b:3b:fb:31:06:1e:d4:f6:5a: 84:b3:29:f2:da:f8:c4:ba:49:5a:33:eb:cc:b2:93: ec:1a:bb:36:fa:e5:42:13:a6:d8:57:a7:f9:da:6f: c8:4b:ae:c4:fd:9e:e9:a1:f1:20:f3:e6:c2:f0:f3: e1:08:d0:28:2e:09:94:0f:14:e0:49:0c:0c:4a:91: d6:9e:c9:6e:0c:5a:8b:60:76:15:36:b3:57:b2:7c: 06:39:01:ce:8b:70:74:97:b3:41:e4:1e:1a:78:e1: 32:0b:20:4e:f5:e4:02:ab:2d:d4:7d:a7:bb:ef:fd: e9:76:45:57:b5:08:45:1a:7e:c7:61:62:18:c2:ba: 25:3a:4e:4a:c5:5b:23:6a:dc:be:a6:92:d6:94:d7: 54:9d:f1:f5:06:17:bc:bb:18:b8:fc:d2:2c:3e:7a: 96:2c:01:ab:e5:97:1d:cc:cd:d7:76:88:c0:e9:bb: 78:1b:af:fe:8b:56:a0:bc:2e:d6:ae:3f:d4:ca:f9: 6b:b0:f4:ff:9f:1e:11:45:e8:fe:a5:42:2c:b5:99: 29:ed:f0:eb:09:3a:7f:67:14:05:05:6a:bf:a2:6e: 31:24:07:96:40:4f:33:cb:34:26:fd:c8:fc:12:0a: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4B:FB:36:72:41:98:89:95:61:AA:96:D6:4A:B8:FB:60:1D:92:F1 X509v3 Authority Key Identifier: keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:61:41:5c:6d:4f:ad:af:99:c7:6b:d5:43:df:b5:a2:17:73: 62:3c:4f:4c:41:a6:78:04:69:40:b6:c3:10:f0:a7:2f:09:49: d8:da:bf:20:b1:d9:69:a7:e5:cf:7f:0f:d0:d1:d8:1f:72:84: 29:2c:b4:2c:4a:31:70:d3:17:87:78:26:71:22:60:b4:9e:7e: b4:a4:40:24:fb:2a:c8:30:a0:ba:24:30:30:47:67:62:73:d7: 51:14:33:17:ed:12:dd:c9:51:a0:04:65:9b:e4:77:5a:1e:3c: 27:79:14:c5:23:c5:1f:c8:40:08:08:91:e0:dc:1c:ac:59:2f: 19:c6:f6:5c:9a:dd:c7:f4:82:2f:0c:53:b1:38:73:93:3a:28: ef:38:3d:0d:6a:a2:24:a1:90:f5:8a:1b:c7:3a:a3:ed:13:24: 46:b6:13:e5:10:3e:7c:ed:b9:53:dd:be:92:5b:92:1f:09:c1: ff:01:eb:c0:c1:67:b6:22:db:84:11:a4:d7:70:fb:2f:7c:bc: 35:1e:fd:aa:c7:02:32:5f:66:a2:58:b7:f1:68:32:68:0a:8e: ba:fb:70:18:7d:ce:5b:a9:18:29:2d:74:0a:38:ba:e3:62:09: 66:21:6e:c9:7a:2f:7a:5d:2e:e3:a3:fe:ab:27:50:8d:f6:91: de:78:94:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxRjUxMTAvBgNVBAUTKEZGM0UwRTBGQTdGRjI1N0RCRDg2RTYyQjEyOUE5OTRE OEE0OUQ4NEUwHhcNMjUwNTEzMDE0ODA4WhcNMjUwNTIwMDE0ODA4WjAYMRYwFAYD VQQDEw02ODIyYTRkOC00NmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1lyEhPJZj7vIFSYTMTRJ3NpaZALO/sxBh7U9lqEsyny2vjEuklaM+vMspPs Grs2+uVCE6bYV6f52m/IS67E/Z7pofEg8+bC8PPhCNAoLgmUDxTgSQwMSpHWnslu DFqLYHYVNrNXsnwGOQHOi3B0l7NB5B4aeOEyCyBO9eQCqy3Ufae77/3pdkVXtQhF Gn7HYWIYwrolOk5KxVsjaty+ppLWlNdUnfH1Bhe8uxi4/NIsPnqWLAGr5ZcdzM3X dojA6bt4G6/+i1agvC7Wrj/UyvlrsPT/nx4RRej+pUIstZkp7fDrCTp/ZxQFBWq/ om4xJAeWQE8zyzQm/cj8Egr9TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlL+zZy QZiJlWGqltZKuPtgHZLxMB8GA1UdIwQYMBaAFP8+Dg+n/yV9vYbmKxKamU2KSdhO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjFGNS8wRDIxM0VEQzMz RkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pYMjlodVlyRXBxWlRZcEoy RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196NE9ENmZfSlgyOWh1WXJFcHFaVFlwSjJFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjFGNS8wRDIxM0VEQzMzRkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pY MjlodVlyRXBxWlRZcEoyRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0YUFcbU+tr5nHa9VD37WiF3NiPE9MQaZ4BGlAtsMQ8KcvCUnY2r8g sdlpp+XPfw/Q0dgfcoQpLLQsSjFw0xeHeCZxImC0nn60pEAk+yrIMKC6JDAwR2di c9dRFDMX7RLdyVGgBGWb5HdaHjwneRTFI8UfyEAICJHg3BysWS8ZxvZcmt3H9IIv DFOxOHOTOijvOD0NaqIkoZD1ihvHOqPtEyRGthPlED587blT3b6SW5IfCcH/AevA wWe2ItuEEaTXcPsvfLw1Hv2qxwIyX2aiWLfxaDJoCo66+3AYfc5bqRgpLXQKOLrj YglmIW7Jei96XS7jo/6rJ1CN9pHeeJRd -----END CERTIFICATE-----Generated at Wed May 14 15:19:43 2025 by rpki-client