$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft File: 55ST8wo-6fDuQFIv8Z1oXIBium4.mft (raw, json) Hash identifier: NTuaQbtyqH1FyxiB1ozEx9tGjf0ZF06OMl1BxvYsbtA= Subject key identifier: FA:CA:1C:7D:31:40:16:92:5B:77:6F:47:A3:5B:8C:FB:88:25:F0:32 Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E Certificate issuer: /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft Manifest number: 011A Signing time: Tue 13 May 2025 04:02:36 +0000 Manifest this update: Tue 13 May 2025 04:02:35 +0000 Manifest next update: Tue 20 May 2025 04:02:35 +0000 Files and hashes: 1: 55ST8wo-6fDuQFIv8Z1oXIBium4.crl (hash: tO4c/vgX1x/bnsbVxocrxtVo1ef4j+cFBvyLS6g/AJE=) 2: 54692EB02FB111EFAD1C6322C4F9AE02.roa (hash: keI95qCS2k4Lve5N7wDY/bHgpp8mJTarNaBOO1lqZJQ=) 3: 53F6AEC62FB111EFAD1C6322C4F9AE02.roa (hash: B6FxffQfLCkDnb0AjYYHgyj86lwe6hNFxc5bjeq/NIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E377, serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E Validity Not Before: May 13 04:02:35 2025 GMT Not After : May 20 04:02:35 2025 GMT Subject: CN=6822c45b-12e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:14:6d:7c:f8:a0:d6:9b:ab:a6:38:83:ec: d9:05:e2:cb:b4:86:c2:aa:51:e4:5d:81:a8:30:59: 8b:70:6e:e9:7b:bf:4f:9c:4a:21:50:55:a2:da:70: 83:87:77:07:ed:11:db:bf:13:13:65:1b:bb:28:4a: 78:29:ae:4b:41:b2:f1:f8:1e:1a:dd:78:73:f0:b8: 4c:1b:87:d9:d2:74:ee:97:e2:1a:fd:04:ca:72:e4: ae:90:07:4e:a3:95:08:71:ae:fd:5d:ef:be:be:de: dc:e6:75:da:f2:4c:ed:3e:c9:21:11:3e:2f:f3:7c: 63:df:d8:dc:81:56:98:11:86:d6:01:5e:0f:57:09: cc:34:40:8c:2b:1e:5f:23:1f:2e:47:75:c7:c4:b0: 00:09:8b:32:eb:5a:26:6c:0f:08:3b:87:3c:38:ab: 2e:df:fe:57:53:4a:5d:ff:26:5a:e7:78:24:8a:4f: 2f:86:0d:43:de:dc:68:5a:49:7b:28:fe:6c:3e:ca: 18:1d:5d:b3:be:d2:6c:e4:de:26:62:1e:69:18:cb: 1b:5a:57:c3:0c:85:90:5d:cc:70:5a:0c:ab:9c:13: 03:1c:16:8f:84:9f:b5:c1:eb:35:3c:3b:be:b1:53: 54:b9:db:0b:74:99:0f:1b:3b:50:23:12:fb:09:8b: 60:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CA:1C:7D:31:40:16:92:5B:77:6F:47:A3:5B:8C:FB:88:25:F0:32 X509v3 Authority Key Identifier: keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:53:4c:be:06:66:e8:e4:3c:85:27:4f:64:1e:81:b0:72:ed: 79:74:29:79:c3:c1:27:44:d0:cf:97:e9:d4:c9:db:a1:5c:4e: a2:11:2c:0a:60:b6:9f:90:5b:58:8a:92:c2:76:50:94:af:01: b5:c1:62:58:a1:30:c2:f8:a7:3b:0e:9d:80:29:c0:60:09:2b: 15:3c:ce:45:87:47:d9:3a:5d:f8:3f:7a:eb:bb:a7:6b:fe:cc: 83:56:52:06:41:3f:7e:58:6d:c2:48:98:76:e4:64:42:3e:26: af:d1:b4:2e:6b:4e:e2:b9:e7:03:9d:dc:b2:ed:f3:92:a2:47: 16:dc:a2:ab:87:ed:74:ea:a7:d6:3b:d4:03:4b:45:29:4a:ac: e5:92:9a:89:6d:ad:d4:0e:81:0d:bb:42:25:04:65:96:43:ef: 95:97:ad:31:f1:7b:49:12:5d:af:4f:ee:58:08:6b:05:b6:5a: 32:d0:67:76:14:93:a1:de:b3:b1:ae:c3:4c:cb:b9:65:a6:65: a6:48:2a:b4:c8:01:5e:90:43:9b:c2:15:7c:50:b2:4c:72:4d: 3f:70:86:a6:2e:bf:22:be:80:4d:5e:1b:61:5e:65:56:18:3b: a9:71:28:8f:4d:f0:c0:a0:8d:53:8c:8f:f5:e9:19:7e:84:97: 2a:b8:0f:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzNzcxMTAvBgNVBAUTKEU3OTQ5M0YzMEEzRUU5RjBFRTQwNTIyRkYxOUQ2ODVD ODA2MkJBNkUwHhcNMjUwNTEzMDQwMjM1WhcNMjUwNTIwMDQwMjM1WjAYMRYwFAYD VQQDEw02ODIyYzQ1Yi0xMmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFwUbXz4oNabq6Y4g+zZBeLLtIbCqlHkXYGoMFmLcG7pe79PnEohUFWi2nCD h3cH7RHbvxMTZRu7KEp4Ka5LQbLx+B4a3Xhz8LhMG4fZ0nTul+Ia/QTKcuSukAdO o5UIca79Xe++vt7c5nXa8kztPskhET4v83xj39jcgVaYEYbWAV4PVwnMNECMKx5f Ix8uR3XHxLAACYsy61ombA8IO4c8OKsu3/5XU0pd/yZa53gkik8vhg1D3txoWkl7 KP5sPsoYHV2zvtJs5N4mYh5pGMsbWlfDDIWQXcxwWgyrnBMDHBaPhJ+1wes1PDu+ sVNUudsLdJkPGztQIxL7CYtgKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrKHH0x QBaSW3dvR6NbjPuIJfAyMB8GA1UdIwQYMBaAFOeUk/MKPunw7kBSL/GdaFyAYrpu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM3Ny84QTZEMTBCNjg4 M0MxMUVFOTU1NkJCNkVDNEY5QUUwMi81NVNUOHdvLTZmRHVRRkl2OFoxb1hJQml1 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU1U1Q4d28tNmZEdVFGSXY4WjFvWElCaXVtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM3Ny84QTZEMTBCNjg4M0MxMUVFOTU1NkJCNkVDNEY5QUUwMi81NVNUOHdvLTZm RHVRRkl2OFoxb1hJQml1bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABU0y+Bmbo5DyFJ09kHoGwcu15dCl5w8EnRNDPl+nUyduhXE6iESwK YLafkFtYipLCdlCUrwG1wWJYoTDC+Kc7Dp2AKcBgCSsVPM5Fh0fZOl34P3rru6dr /syDVlIGQT9+WG3CSJh25GRCPiav0bQua07iuecDndyy7fOSokcW3KKrh+106qfW O9QDS0UpSqzlkpqJba3UDoENu0IlBGWWQ++Vl60x8XtJEl2vT+5YCGsFtloy0Gd2 FJOh3rOxrsNMy7llpmWmSCq0yAFekEObwhV8ULJMck0/cIamLr8ivoBNXhthXmVW GDupcSiPTfDAoI1TjI/16Rl+hJcquA+i -----END CERTIFICATE-----Generated at Wed May 14 18:33:54 2025 by rpki-client