$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: S+ruT19cPwDP0sVSCBCCleZAaJ150X7vf7JPR7j8agE= Subject key identifier: 88:AF:71:63:56:70:14:D0:AF:F5:BA:57:B5:D5:49:A7:C3:65:28:CE Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 2496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 2453 Signing time: Mon 12 May 2025 15:45:58 +0000 Manifest this update: Mon 12 May 2025 15:45:58 +0000 Manifest next update: Mon 19 May 2025 15:45:58 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: lCophJGzv2aHrSXu6eOwhZWJJgYUoOr+pQ0t1OSZeyw=) 2: 83684F548DF411E7A230506DC4F9AE02.roa (hash: 7rwSXJvv/HshNFddgboHnncSidkclYa/NvGMbxx8LFA=) 3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: nq0Uzk8SuEDu3ZbDp3B41hYz4SbibvM9axOdjGoUmDE=) 4: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: 4MVhPeL89L4iqif2jjx8A1Zl5rTPkTTCl8RIrLHaD+o=) 5: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: aaC6AltbMVKLhQjXZ7dpspAxhJD3m7klJ08VK8NpfEI=) 6: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: RYNGA3H5ydUqwQnOMshPikkHHM7bQr9sFSWMotIy4S0=) 7: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: +cU9ydF4cWSQqI/mYS8fYBUIoo4803uhA7oc0s3jgaU=) 8: 027532E6385F11EAA879692AC4F9AE02.roa (hash: CM6RIxM9JHHGhZC10urcCuophC6TNcTlTYu0C+8d5wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9366 (0x2496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: May 12 15:45:58 2025 GMT Not After : May 19 15:45:58 2025 GMT Subject: CN=682217b6-fecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c2:96:ed:56:70:73:30:aa:6c:2b:dd:cb:e6: 94:ef:8d:1e:3c:d4:0d:a4:1a:22:d3:cb:97:9d:ed: a2:a7:0b:5b:3f:69:44:27:d1:b5:6b:4e:06:85:98: 46:8a:a0:7b:16:a9:38:91:b5:33:cb:de:26:c4:c6: ea:4d:79:45:11:8e:1e:c0:61:75:e8:15:ff:6f:55: 5e:6a:17:cc:34:56:81:6b:83:e2:8d:d6:b6:c1:ee: 30:f4:ec:34:29:75:ab:44:fe:7c:c5:e4:1a:1f:96: 3c:ea:53:53:d2:9d:d3:cb:db:45:43:a9:67:13:fc: 98:8f:5a:32:c4:76:a0:d0:38:05:f9:a4:96:3b:9b: 08:dc:e1:12:ab:da:b5:65:37:75:70:b6:d5:6b:c6: a0:f8:a0:86:dd:f1:29:6e:98:d0:8b:75:d2:e0:6e: b9:e2:cb:b0:b1:c4:ba:9f:3a:8d:69:39:b9:19:21: 9c:5a:5b:e4:03:cf:5b:e1:a4:99:25:51:1f:92:dd: c4:a6:58:a0:23:d1:ed:6e:a9:49:30:f7:25:e8:6d: c4:bc:0e:9a:a8:9c:ea:7b:a3:b4:3d:10:48:b5:b0: 62:4f:e0:b9:d3:2a:41:66:30:80:b0:17:b1:9d:80: f1:20:91:e6:89:36:1c:b9:f7:c4:f4:99:e9:c1:75: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AF:71:63:56:70:14:D0:AF:F5:BA:57:B5:D5:49:A7:C3:65:28:CE X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2f:cf:cd:8d:41:39:ad:97:ac:2e:18:83:7b:d2:c5:ab:5f: 88:24:a2:cb:3b:5a:83:c1:f0:d4:20:41:57:a2:f8:43:f6:20: e7:14:f9:f7:6a:ad:9f:c9:67:fb:cb:9a:f5:cd:54:2c:74:f6: 38:63:86:2e:8e:33:75:b2:1b:4c:ed:a6:5d:0a:1a:da:df:b9: 87:02:14:50:47:9f:a5:c2:57:41:dd:92:cb:48:c5:10:44:97: 52:0c:b1:1b:ed:6f:b2:42:2b:01:d6:49:be:72:a6:0b:fa:2c: 9b:8a:d5:1a:15:06:c4:2b:1f:f1:98:94:fd:4d:da:df:11:d0: cd:10:88:ec:e7:c4:e0:d6:f5:9c:bd:9c:e1:7b:10:c3:6d:01: b2:6b:fe:10:ed:5f:2f:94:be:2a:6e:78:c9:c8:e9:4a:38:f7: 4a:42:4e:fd:e6:15:36:53:3b:cd:61:8d:8e:59:11:14:b0:96: 9c:63:30:0f:83:ad:8f:78:96:97:94:ed:c7:7d:b3:27:3c:81: 3b:c0:a1:68:77:88:1c:bc:c8:26:b3:5e:9e:8c:2d:cf:b3:7f: 5e:22:63:b1:19:a9:1a:e8:43:93:e4:48:59:ad:ca:64:0d:b4: 38:87:31:ff:d9:07:6c:55:50:5f:bf:40:23:39:e5:eb:54:42: 81:8b:b1:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjUwNTEyMTU0NTU4WhcNMjUwNTE5MTU0NTU4WjAYMRYwFAYD VQQDEw02ODIyMTdiNi1mZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8KW7VZwczCqbCvdy+aU740ePNQNpBoi08uXne2ipwtbP2lEJ9G1a04GhZhG iqB7Fqk4kbUzy94mxMbqTXlFEY4ewGF16BX/b1VeahfMNFaBa4Pijda2we4w9Ow0 KXWrRP58xeQaH5Y86lNT0p3Ty9tFQ6lnE/yYj1oyxHag0DgF+aSWO5sI3OESq9q1 ZTd1cLbVa8ag+KCG3fEpbpjQi3XS4G654suwscS6nzqNaTm5GSGcWlvkA89b4aSZ JVEfkt3EpligI9HtbqlJMPcl6G3EvA6aqJzqe6O0PRBItbBiT+C50ypBZjCAsBex nYDxIJHmiTYcuffE9JnpwXX/TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIivcWNW cBTQr/W6V7XVSafDZSjOMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArL8/NjUE5rZesLhiDe9LFq1+IJKLLO1qDwfDUIEFXovhD9iDnFPn3 aq2fyWf7y5r1zVQsdPY4Y4YujjN1shtM7aZdChra37mHAhRQR5+lwldB3ZLLSMUQ RJdSDLEb7W+yQisB1km+cqYL+iybitUaFQbEKx/xmJT9TdrfEdDNEIjs58Tg1vWc vZzhexDDbQGya/4Q7V8vlL4qbnjJyOlKOPdKQk795hU2UzvNYY2OWREUsJacYzAP g62PeJaXlO3HfbMnPIE7wKFod4gcvMgms16ejC3Ps39eImOxGaka6EOT5EhZrcpk DbQ4hzH/2QdsVVBfv0AjOeXrVEKBi7Hx -----END CERTIFICATE-----Generated at Wed May 14 10:37:51 2025 by rpki-client