$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: nIeT/yFp7shYk5GMolBQ+1QaO/92gMeUGHi+YHbjxrE= Subject key identifier: B3:B6:3D:71:A1:5A:9B:62:93:29:C4:AA:6F:92:D4:6B:6C:04:2F:E4 Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 03E5 Signing time: Sun 11 May 2025 00:12:20 +0000 Manifest this update: Sun 11 May 2025 00:12:19 +0000 Manifest next update: Sun 18 May 2025 00:12:19 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: kTbN6QEes3l47hVBAEvTDDMiDgATk1IfkPt1Tq75MOc=) 2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: nTBaw0rGVih7H0eMNeUxYSZWJEjBLwFwXSTskNS1M34=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: dOvAjf7RAVetavYFS5Luk51Mj5sbART3WqfDlwnlFcs=) 4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: 4nZdHogouXv845c2l3vfkGTuWxNMa8pAfMwGWm9kiHw=) 5: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: auW4UnHxJ31+muxSOzUSAXH6xyqbP7eemMf3Mu9GQdY=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: lojbrXlAbJoktTwfX33XLdufJ12kkKQ5GKXYlfuRCPs=) 7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: T8SCzZDhPByBJIpznoraQVY/oHtUVPl/FFL0kEBzTiU=) 8: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: vx+toULPOCZ0nASP5Ye7Mi6PO9RJnf/5+aW7CpW+qSo=) 9: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: OgDcSpfZCaRldmBrtsqxGYkV57RYdOEs5Zd3oOYd/XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: May 11 00:12:19 2025 GMT Not After : May 18 00:12:19 2025 GMT Subject: CN=681feb63-fc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:da:8c:25:86:2b:fa:f6:c5:30:7a:3a:3b: 83:7a:ae:0c:fb:c2:9d:2b:39:17:31:8d:f2:5a:74: 76:f6:aa:04:84:79:f9:d3:a2:90:87:ca:90:0d:8e: 1a:56:47:51:fd:0a:8b:97:82:a3:c4:20:98:1c:66: d0:57:07:2d:65:23:30:bd:f0:30:7a:5f:39:19:37: 7d:2d:99:26:7e:9b:c3:f3:c0:99:f6:7d:08:cc:73: 80:89:f9:63:fd:d0:ef:45:f4:a1:d5:37:13:1d:9f: 34:95:8e:98:59:11:34:19:ce:1e:f8:d3:4f:ce:cc: 91:df:0d:81:8c:da:0f:fc:86:eb:c2:5b:da:35:a9: 35:2f:5e:be:0d:09:bc:46:ed:24:92:78:03:59:10: b9:09:03:f2:df:1c:c3:94:88:57:90:38:b8:84:15: 69:86:8f:7f:c4:aa:a0:db:d0:ba:6b:e2:c8:d3:70: 13:3b:6d:b8:b1:3f:78:ca:43:dc:6e:99:d5:a5:b6: d0:d1:a1:19:a2:e8:de:2d:6c:db:58:5f:f7:d1:32: 19:d1:80:c1:d2:ac:a8:c5:3a:aa:b7:f5:f1:0f:29: 78:83:e7:a2:62:e6:d7:29:9b:11:36:81:06:5e:fd: 00:eb:63:2f:5d:00:6f:d3:17:16:26:fb:4d:12:15: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B6:3D:71:A1:5A:9B:62:93:29:C4:AA:6F:92:D4:6B:6C:04:2F:E4 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:06:48:08:c3:51:27:e9:f7:77:2a:1a:bb:80:63:d6:22:14: d4:29:92:03:97:98:82:0c:9e:82:5e:bf:e5:a0:dd:76:0a:7f: 89:3d:28:08:3a:ef:db:45:28:da:7d:7d:3a:83:1f:8b:32:2a: 20:fa:d1:d3:ff:e6:cf:f7:4c:01:6c:e9:15:f8:ca:e7:ae:73: 8e:ca:ae:91:57:61:cd:7d:65:77:3e:cf:6a:74:70:46:6f:f2: 9b:62:2b:9a:ea:43:bf:91:0f:5b:09:bf:b1:ca:fb:2d:e4:c3: e6:83:88:e9:f7:0f:2b:db:ac:f5:b4:1c:7b:6a:0f:59:ec:c1: 3e:34:b6:52:69:27:72:bc:11:ee:d2:d9:3d:a8:30:db:6e:24: 64:0d:98:96:a8:81:d8:78:92:ae:e4:57:b5:8b:2b:87:7e:95: bf:ad:a8:c0:eb:d9:fe:33:96:09:69:21:5e:64:ba:33:9f:ff: e9:9d:41:9f:c7:86:6e:41:0c:0b:55:a2:44:62:84:06:84:72: 12:24:d7:05:70:8b:06:a9:43:0d:68:fe:40:b1:c6:52:82:1f: 4d:af:16:ab:82:e2:4f:75:bc:f9:5e:9e:25:ca:f6:c9:04:78: c3:37:d3:8e:d6:71:2a:93:46:ec:2d:39:90:4a:52:25:dc:f3: b6:53:c9:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjUwNTExMDAxMjE5WhcNMjUwNTE4MDAxMjE5WjAYMRYwFAYD VQQDEw02ODFmZWI2My1mYzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEjajCWGK/r2xTB6OjuDeq4M+8KdKzkXMY3yWnR29qoEhHn506KQh8qQDY4a VkdR/QqLl4KjxCCYHGbQVwctZSMwvfAwel85GTd9LZkmfpvD88CZ9n0IzHOAiflj /dDvRfSh1TcTHZ80lY6YWRE0Gc4e+NNPzsyR3w2BjNoP/IbrwlvaNak1L16+DQm8 Ru0kkngDWRC5CQPy3xzDlIhXkDi4hBVpho9/xKqg29C6a+LI03ATO224sT94ykPc bpnVpbbQ0aEZoujeLWzbWF/30TIZ0YDB0qyoxTqqt/XxDyl4g+eiYubXKZsRNoEG Xv0A62MvXQBv0xcWJvtNEhWu3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO2PXGh WptikynEqm+S1GtsBC/kMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXBkgIw1En6fd3Khq7gGPWIhTUKZIDl5iCDJ6CXr/loN12Cn+JPSgI Ou/bRSjafX06gx+LMiog+tHT/+bP90wBbOkV+MrnrnOOyq6RV2HNfWV3Ps9qdHBG b/KbYiua6kO/kQ9bCb+xyvst5MPmg4jp9w8r26z1tBx7ag9Z7ME+NLZSaSdyvBHu 0tk9qDDbbiRkDZiWqIHYeJKu5Fe1iyuHfpW/rajA69n+M5YJaSFeZLozn//pnUGf x4ZuQQwLVaJEYoQGhHISJNcFcIsGqUMNaP5AscZSgh9NrxarguJPdbz5Xp4lyvbJ BHjDN9OO1nEqk0bsLTmQSlIl3PO2U8lU -----END CERTIFICATE-----Generated at Sun May 11 12:39:32 2025 by rpki-client