$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft File: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json) Hash identifier: OAEM6iEgPGWsjJeJr0ZTIiXwshkXU8yHaAnHVW3Vmj0= Subject key identifier: DB:75:C4:5C:82:7F:13:90:EB:88:98:01:DA:1E:B8:11:49:89:91:D6 Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 Certificate issuer: /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Certificate serial: 13C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft Manifest number: 13BE Signing time: Wed 14 May 2025 17:02:15 +0000 Manifest this update: Wed 14 May 2025 17:02:15 +0000 Manifest next update: Wed 21 May 2025 17:02:15 +0000 Files and hashes: 1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: pGrsHNj7tS8zNnOhBzug0pPNzHbW84mMidva7mGMe1k=) 2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: 4zJ9/i0D6qT42odGNdGTQH8LvSwP3oB1L9xGXSlqgko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5062 (0x13c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BACE, serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04 Validity Not Before: May 14 17:02:15 2025 GMT Not After : May 21 17:02:15 2025 GMT Subject: CN=6824cc97-4dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:d6:22:e9:4d:c9:68:af:c8:26:e5:6d:a7: dc:0e:2f:3e:64:5d:e4:ba:7c:45:ee:54:cb:59:82: cc:b4:ca:3c:df:31:ca:d3:d8:60:e9:32:07:99:68: 7d:0b:fd:93:37:be:27:ea:40:50:3d:e6:9a:37:65: 0f:40:dd:dc:3e:c6:40:b4:8c:d9:40:ee:50:97:88: 9a:f7:98:a4:3a:f6:3d:53:0e:0f:c3:72:a2:06:64: 34:9a:2e:cf:27:d5:ec:32:ee:0f:f5:cf:1e:c7:65: 7c:57:33:be:13:53:7d:7c:f9:81:8b:da:3a:0e:13: 85:fd:43:8b:6a:91:46:d6:49:94:0b:13:28:63:97: 01:76:e8:74:2c:4e:7d:8e:6b:88:87:97:a2:71:92: a5:ce:12:1e:16:5f:0b:1e:ec:a2:62:36:31:17:88: bc:3c:06:15:10:7d:d0:d8:99:38:9e:93:23:6b:c5: 7f:53:c0:b3:94:26:e6:1d:bf:77:86:69:4b:e9:ca: e6:a2:5a:91:d0:73:4a:86:43:ce:fc:d4:40:c0:e2: c6:8d:83:88:08:4d:31:fb:bb:07:eb:db:94:86:0b: 6e:7b:f2:9d:5a:99:95:ec:a2:74:7f:cb:21:5a:79: 5a:9d:10:a3:e7:8f:24:a0:d3:7d:53:44:f8:b9:1c: 33:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:75:C4:5C:82:7F:13:90:EB:88:98:01:DA:1E:B8:11:49:89:91:D6 X509v3 Authority Key Identifier: keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:97:7e:a0:7f:7f:bd:ad:45:03:41:39:97:5f:6b:74:02:eb: be:b8:74:12:10:95:73:7c:f0:b4:9f:55:27:3f:94:b3:6a:e8: 7a:52:12:ef:51:a7:a7:e7:4b:7e:ef:b7:ff:f6:8e:18:50:6a: 98:03:44:22:e8:54:34:20:13:ff:5b:14:1d:5b:bf:69:d7:64: 84:a8:70:84:77:97:a6:cc:6b:4a:2a:d1:0b:db:c5:32:65:be: 79:4e:2d:04:7d:c1:c6:a7:c4:81:34:b4:52:c6:5b:6d:6f:15: af:02:ab:05:d2:8e:67:08:6b:c0:f8:cd:69:c6:ed:2f:82:53: 26:ef:2d:06:2a:03:fb:81:1c:46:95:bd:dd:2e:c7:52:39:84: 0b:4e:bf:db:c8:92:50:c8:e7:35:57:cc:15:79:1b:4b:6d:0e: 2f:e7:b0:d7:60:95:1d:e3:d9:a6:23:e1:0c:6c:e5:13:c7:e0: 21:01:b8:d1:b2:7e:36:a9:65:f8:29:a6:ad:8d:8f:dd:ad:8c: 95:21:0d:9e:fd:a4:62:13:2e:50:75:fc:6b:df:f7:ca:5c:f6: b9:e2:b6:54:24:3c:f7:67:e6:de:6d:38:16:b0:d7:5f:cf:92: 40:df:47:55:51:e2:e3:47:df:42:67:7c:3c:49:a5:9c:74:11: bb:ff:ff:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBQ0UxMTAvBgNVBAUTKEY4OTMyMTUwMUMwNzY1RTM1MTQ3QTU1QzdFN0RBNUNC MDZDMjlDMDQwHhcNMjUwNTE0MTcwMjE1WhcNMjUwNTIxMTcwMjE1WjAYMRYwFAYD VQQDEw02ODI0Y2M5Ny00ZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6jWIulNyWivyCblbafcDi8+ZF3kunxF7lTLWYLMtMo83zHK09hg6TIHmWh9 C/2TN74n6kBQPeaaN2UPQN3cPsZAtIzZQO5Ql4ia95ikOvY9Uw4Pw3KiBmQ0mi7P J9XsMu4P9c8ex2V8VzO+E1N9fPmBi9o6DhOF/UOLapFG1kmUCxMoY5cBduh0LE59 jmuIh5eicZKlzhIeFl8LHuyiYjYxF4i8PAYVEH3Q2Jk4npMja8V/U8CzlCbmHb93 hmlL6crmolqR0HNKhkPO/NRAwOLGjYOICE0x+7sH69uUhgtue/KdWpmV7KJ0f8sh WnlanRCj548koNN9U0T4uRwzAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNt1xFyC fxOQ64iYAdoeuBFJiZHWMB8GA1UdIwQYMBaAFPiTIVAcB2XjUUelXH59pcsGwpwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkFDRS9BNjYyNzIzQzhB RjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFplTlJSNlZjZm4ybHl3YkNu QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KTWhVQndIWmVOUlI2VmNmbjJseXdiQ25BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkFDRS9BNjYyNzIzQzhBRjExMUU4OTlBN0NFNkRDNEY5QUUwMi8tSk1oVUJ3SFpl TlJSNlZjZm4ybHl3YkNuQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJl36gf3+9rUUDQTmXX2t0Auu+uHQSEJVzfPC0n1UnP5Szauh6UhLv Uaen50t+77f/9o4YUGqYA0Qi6FQ0IBP/WxQdW79p12SEqHCEd5emzGtKKtEL28Uy Zb55Ti0EfcHGp8SBNLRSxlttbxWvAqsF0o5nCGvA+M1pxu0vglMm7y0GKgP7gRxG lb3dLsdSOYQLTr/byJJQyOc1V8wVeRtLbQ4v57DXYJUd49mmI+EMbOUTx+AhAbjR sn42qWX4KaatjY/drYyVIQ2e/aRiEy5Qdfxr3/fKXPa54rZUJDz3Z+bebTgWsNdf z5JA30dVUeLjR99CZ3w8SaWcdBG7///s -----END CERTIFICATE-----Generated at Wed May 14 23:18:01 2025 by rpki-client