$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft File: f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json) Hash identifier: 7nIQ8cNWFj3Q3bPrBtbzYEMSZb1GqsnCoXGzLuiZ59o= Subject key identifier: 86:0D:5A:CB:4F:CD:5F:A5:E7:6C:3D:2B:35:25:D4:E5:31:0C:ED:65 Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D Certificate issuer: /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft Manifest number: 05E1 Signing time: Mon 12 May 2025 22:46:47 +0000 Manifest this update: Mon 12 May 2025 22:46:47 +0000 Manifest next update: Mon 19 May 2025 22:46:47 +0000 Files and hashes: 1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: ZAGc24Xut+D2ai7ytehwyoqjVTEbYLZZxfC3L5LvwFc=) 2: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: cm0YB5uH01fcy9KoTmPs0S4MdfKYnPhYE5csvx6cWLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Validity Not Before: May 12 22:46:47 2025 GMT Not After : May 19 22:46:47 2025 GMT Subject: CN=68227a57-e102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1d:a8:db:ef:8b:05:99:09:a5:bf:06:06:04: 08:d2:b3:92:e5:bb:1f:3e:27:ab:fa:48:64:a3:69: df:4c:4a:c8:90:3f:34:9e:10:aa:b6:24:26:5d:d6: 5f:e1:26:64:14:15:4d:08:cd:e4:68:ae:da:f3:6e: 1f:ee:70:e4:50:e6:97:31:81:a7:66:ed:0a:7a:6f: 1a:de:f4:13:6b:67:2c:e3:bd:12:32:8c:f1:a5:89: f1:3f:c2:1a:cb:94:16:a5:81:10:f3:e5:38:86:7c: 10:6d:d2:07:90:52:bc:e8:d0:2d:6c:dc:ba:73:ab: 28:e6:b5:66:e9:d7:53:dd:60:e8:91:9e:d8:b6:54: 3b:12:d8:b8:e9:47:cd:e9:9a:e0:83:e1:df:20:5b: a9:78:af:a7:08:ad:43:01:ca:a6:81:50:de:f3:5a: 3b:30:28:07:31:19:de:f8:f7:3c:b8:24:22:5a:90: df:32:e0:a9:69:21:28:ff:96:57:25:93:86:45:b0: 6d:db:26:25:59:9b:ef:b9:fc:82:88:9a:be:02:73: cb:17:8e:b2:f0:06:d9:f3:4c:85:bf:e3:a7:94:d8: 34:6a:14:76:49:56:62:22:63:71:a4:f3:1f:42:5f: c3:b7:21:7b:41:f9:7a:1a:6a:8d:8a:cc:10:e2:b3: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0D:5A:CB:4F:CD:5F:A5:E7:6C:3D:2B:35:25:D4:E5:31:0C:ED:65 X509v3 Authority Key Identifier: keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:07:a2:c6:73:06:5b:29:5f:e1:11:87:70:b4:d8:43:98:10: b6:4e:57:27:77:38:6c:4f:a4:b0:3b:bf:77:da:1e:f6:e4:d8: 3b:3c:71:04:94:aa:a2:f9:22:56:fa:4b:03:86:be:f5:50:9e: 07:17:63:e8:b9:68:87:85:53:21:d1:7e:fc:86:97:17:aa:38: 83:7f:65:00:d7:cd:69:ca:d8:5c:c8:b6:f6:c1:62:7c:6c:e8: 9e:a6:01:15:ad:98:fb:d9:01:4b:77:c3:22:3e:ac:73:6a:cc: de:76:77:a8:66:4e:7f:7a:19:0c:1e:3f:61:d0:f5:73:9a:23: 0c:4e:8d:bd:80:a4:b8:d7:ea:4d:99:1c:c1:a9:6f:75:80:93: 10:96:a1:df:71:86:11:55:cc:7f:06:bb:a2:7c:f8:d9:59:d1: fa:f0:47:6a:47:84:25:89:d0:42:7d:57:2f:22:40:21:05:42: 10:d3:91:3c:8b:86:08:2c:88:27:b6:47:18:6c:ad:6d:c2:13: d3:cc:4a:53:22:ee:a2:95:12:e7:0d:2a:c7:23:cd:a1:80:c6: d9:c7:08:ee:3c:47:da:e8:68:71:5d:ee:b9:50:86:2d:40:21: a3:31:de:de:ea:46:b8:23:83:69:8d:67:39:e1:c2:f6:8d:3e: d2:c6:81:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBM0YxMTAvBgNVBAUTKDdGRjNFQTlBQzA4MzI1MUY1RDMwQjAxRDA1NkJDQkNE RTFBN0VFMkQwHhcNMjUwNTEyMjI0NjQ3WhcNMjUwNTE5MjI0NjQ3WjAYMRYwFAYD VQQDEw02ODIyN2E1Ny1lMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9x2o2++LBZkJpb8GBgQI0rOS5bsfPier+khko2nfTErIkD80nhCqtiQmXdZf 4SZkFBVNCM3kaK7a824f7nDkUOaXMYGnZu0Kem8a3vQTa2cs470SMozxpYnxP8Ia y5QWpYEQ8+U4hnwQbdIHkFK86NAtbNy6c6so5rVm6ddT3WDokZ7YtlQ7Eti46UfN 6Zrgg+HfIFupeK+nCK1DAcqmgVDe81o7MCgHMRne+Pc8uCQiWpDfMuCpaSEo/5ZX JZOGRbBt2yYlWZvvufyCiJq+AnPLF46y8AbZ80yFv+OnlNg0ahR2SVZiImNxpPMf Ql/DtyF7Qfl6GmqNiswQ4rMjAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYNWstP zV+l52w9KzUl1OUxDO1lMB8GA1UdIwQYMBaAFH/z6prAgyUfXTCwHQVry83hp+4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REEzRi8wNEZGODlEOEI2 Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpSOWRNTEFkQld2THplR243 aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfUHFtc0NESlI5ZE1MQWRCV3ZMemVHbjdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REEzRi8wNEZGODlEOEI2Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpS OWRNTEFkQld2THplR243aTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVB6LGcwZbKV/hEYdwtNhDmBC2TlcndzhsT6SwO7932h725Ng7PHEE lKqi+SJW+ksDhr71UJ4HF2PouWiHhVMh0X78hpcXqjiDf2UA181pythcyLb2wWJ8 bOiepgEVrZj72QFLd8MiPqxzaszedneoZk5/ehkMHj9h0PVzmiMMTo29gKS41+pN mRzBqW91gJMQlqHfcYYRVcx/BruifPjZWdH68EdqR4QlidBCfVcvIkAhBUIQ05E8 i4YILIgntkcYbK1twhPTzEpTIu6ilRLnDSrHI82hgMbZxwjuPEfa6GhxXe65UIYt QCGjMd7e6ka4I4NpjWc54cL2jT7SxoHQ -----END CERTIFICATE-----Generated at Tue May 13 22:20:57 2025 by rpki-client