$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: CrdVbOgj0WIx5tNC2DhsaTXecOTwZ+qNpiWCvkGa5Zw= Subject key identifier: 57:24:1C:CC:90:1A:4F:5C:7C:DE:ED:F4:D7:8D:49:5B:9A:DD:6F:C3 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 16F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 150F Signing time: Mon 12 May 2025 17:07:48 +0000 Manifest this update: Mon 12 May 2025 17:07:48 +0000 Manifest next update: Mon 19 May 2025 17:07:48 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: JflCcU2aRvrR55fiqvJCwigwvTKfbnxRLHHQ6CxqtBU=) 2: 8D19F1388B3511EF99F24263C4F9AE02.roa (hash: 715JR4CaO0KHAxJBoo8dK7QsmdG6jLihUmsAUbbaNRw=) 3: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: Lx5JMDz+euSwXfN2bBhbtzFpbOuwQ+UGzdRfQfwqwmg=) 4: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: jFWx3yosTM6Ngdos0+GDHNaOyAPdPCLeZtZ1sRgMYug=) 5: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: 3K7qEYTTRPaMHZTJiAeJCFj5NoW5czqKHLINeQfDKgQ=) 6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: p079JhzkV3DHxp4PDPvrbepGD7tngZQCKWLeyg6QpnQ=) 7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: RebgKyJksyOZ81MvXdSqU2+YhiYMH5u4/gRDqOR0Mug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5880 (0x16f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: May 12 17:07:48 2025 GMT Not After : May 19 17:07:48 2025 GMT Subject: CN=68222ae4-a0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:23:03:c8:34:2e:0b:80:cf:39:ab:4b:57: d4:ea:5e:ec:1c:24:9c:f5:33:ed:8f:2d:98:81:7d: a7:ba:52:a8:5d:88:77:b9:a9:d3:d3:e8:a5:10:bc: 3a:68:64:8b:1d:53:48:2d:50:60:2c:ae:2d:e4:07: 3d:ee:2a:3a:6d:fd:5c:ea:f6:cd:e6:aa:90:c7:59: f3:9e:ac:ef:54:2c:00:45:80:2e:fb:3d:13:7d:7a: fb:9d:cd:3f:e3:9a:dd:56:4f:89:da:60:91:81:04: b8:8d:c0:ed:68:ef:6b:72:32:66:a8:74:ae:51:d2: c4:57:b1:ce:8b:ed:e8:0c:26:e3:dd:3d:36:4f:78: d8:ed:c9:ff:57:3e:ae:b2:62:aa:29:e7:56:25:22: 37:de:b6:18:fa:b7:8a:f7:94:ef:41:2c:37:6c:9c: 69:16:0f:73:8f:98:46:fe:3d:3e:96:cc:3c:a8:85: d6:c9:5f:61:84:8f:35:4a:3a:ee:03:7d:fa:ca:c4: f6:da:ed:15:1d:c4:c9:9c:d3:18:ee:39:7c:80:b0: 0c:7e:59:83:33:c6:7c:82:0c:e8:3c:f0:26:cf:d3: 6a:93:cf:d7:f9:fb:37:6d:5f:0d:84:bc:6c:7c:0f: 3f:1d:c2:21:b5:d2:cf:41:17:b1:f4:6f:5b:07:ac: 44:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:24:1C:CC:90:1A:4F:5C:7C:DE:ED:F4:D7:8D:49:5B:9A:DD:6F:C3 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:58:3a:07:14:c2:5c:5a:95:80:bf:63:36:ad:f9:bd:5d:55: c7:b9:3a:7a:80:eb:0f:7f:a8:dd:60:7f:8e:02:69:39:ef:2a: 23:07:aa:88:8a:b2:b7:e2:8f:cd:db:ee:16:d4:87:16:29:ae: d9:49:2d:4d:2a:a0:17:91:65:a3:9a:56:39:fe:64:96:de:d7: b1:79:5a:97:ef:48:33:be:e9:f4:8f:38:f6:d4:44:71:50:c7: f9:9e:06:68:cc:66:c1:83:c0:d0:7d:98:a6:e5:4c:ef:4a:1d: 87:06:b3:6c:66:7d:8b:4f:63:01:9f:23:b7:43:2b:82:aa:55: 0e:5d:8c:49:39:bb:5b:78:67:31:07:a1:f1:c1:cd:49:17:84: b0:29:6e:ca:d1:0d:f8:e9:c4:09:0b:ca:ed:2c:e1:ce:f0:06: 95:87:15:74:7f:6d:01:50:da:76:63:c6:ed:db:25:0e:b4:de: ce:46:c2:2e:6c:51:67:c1:b0:53:96:db:da:41:6e:1e:86:b7: c4:88:cb:f3:04:b3:d4:98:77:0e:70:d8:9c:92:70:f0:35:83: 10:8a:35:1c:fc:5e:d7:3a:16:8b:61:a6:65:d7:f8:73:78:9e: e2:e5:8b:6d:28:6e:07:04:ab:f9:b7:3a:5d:3a:fd:c9:51:fa: b1:68:11:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwNTEyMTcwNzQ4WhcNMjUwNTE5MTcwNzQ4WjAYMRYwFAYD VQQDEw02ODIyMmFlNC1hMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9gjA8g0LguAzzmrS1fU6l7sHCSc9TPtjy2YgX2nulKoXYh3uanT0+ilELw6 aGSLHVNILVBgLK4t5Ac97io6bf1c6vbN5qqQx1nznqzvVCwARYAu+z0TfXr7nc0/ 45rdVk+J2mCRgQS4jcDtaO9rcjJmqHSuUdLEV7HOi+3oDCbj3T02T3jY7cn/Vz6u smKqKedWJSI33rYY+reK95TvQSw3bJxpFg9zj5hG/j0+lsw8qIXWyV9hhI81Sjru A336ysT22u0VHcTJnNMY7jl8gLAMflmDM8Z8ggzoPPAmz9Nqk8/X+fs3bV8NhLxs fA8/HcIhtdLPQRex9G9bB6xEiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFckHMyQ Gk9cfN7t9NeNSVua3W/DMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTWDoHFMJcWpWAv2M2rfm9XVXHuTp6gOsPf6jdYH+OAmk57yojB6qI irK34o/N2+4W1IcWKa7ZSS1NKqAXkWWjmlY5/mSW3texeVqX70gzvun0jzj21ERx UMf5ngZozGbBg8DQfZim5UzvSh2HBrNsZn2LT2MBnyO3QyuCqlUOXYxJObtbeGcx B6Hxwc1JF4SwKW7K0Q346cQJC8rtLOHO8AaVhxV0f20BUNp2Y8bt2yUOtN7ORsIu bFFnwbBTltvaQW4ehrfEiMvzBLPUmHcOcNicknDwNYMQijUc/F7XOhaLYaZl1/hz eJ7i5YttKG4HBKv5tzpdOv3JUfqxaBGG -----END CERTIFICATE-----Generated at Wed May 14 08:04:55 2025 by rpki-client