$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: nX6zzRVPMvhfkl/mXFQCvwcE/8YQscg3EMGZeujbCgA= Subject key identifier: 54:E7:CF:68:8F:5A:01:8A:C5:B2:31:58:50:6A:3B:3A:ED:69:5D:AB Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 03BD Signing time: Tue 13 May 2025 00:29:47 +0000 Manifest this update: Tue 13 May 2025 00:29:47 +0000 Manifest next update: Tue 20 May 2025 00:29:47 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: qXgaQOS24VE9XHtjzbAG0zGtHbsPXrUJaIjSiPXBltw=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: sKV1Z0cYRUE+VWc2YxnGxIUnhyBPTtnJSFk2o11IcBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: May 13 00:29:47 2025 GMT Not After : May 20 00:29:47 2025 GMT Subject: CN=6822927b-2337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b1:ec:08:e6:fd:90:8d:7e:4e:41:10:f5:52: 21:7b:df:e9:cc:98:6c:a0:4b:ab:d4:0a:24:d1:5c: 62:3f:0f:7b:42:04:29:0d:2d:b8:0c:30:4a:22:ed: c2:2d:ce:56:8e:d3:1b:36:3c:25:92:c3:52:82:19: ec:1d:42:45:00:db:98:bc:70:f2:98:e4:32:b6:cd: b0:ae:80:98:5e:e7:c4:b8:b0:57:2f:3f:8f:3f:ea: 5b:b7:12:bd:e6:46:2c:37:84:b5:66:31:73:ad:6d: 65:c6:d5:8a:95:ef:4c:20:db:db:28:5c:72:96:0b: ce:31:d2:09:f5:31:9f:04:ca:0c:4b:1e:da:7a:c2: 7b:6c:da:96:eb:74:d3:e3:a0:a9:ba:bc:1a:7f:84: 4b:43:68:a7:e8:0d:36:b8:08:9f:1b:40:6b:06:62: 4e:e5:95:5e:7e:b6:ac:14:3a:fc:93:01:9b:75:26: 88:48:83:f8:90:c2:7c:12:18:75:f2:a0:1c:d3:d9: 58:48:a4:e4:d6:a6:fa:40:5d:0a:33:8a:d2:b4:2a: b7:15:3e:cf:83:b8:f8:61:0f:52:a6:28:c5:94:07: db:8a:3d:b9:5e:cb:5d:b5:70:00:8e:16:18:86:3e: 41:2f:b1:58:b9:93:a6:7b:94:4c:bd:6f:9d:9e:af: e7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E7:CF:68:8F:5A:01:8A:C5:B2:31:58:50:6A:3B:3A:ED:69:5D:AB X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:c1:6d:99:b6:0d:e9:f8:bf:50:c1:89:c3:7d:2f:06:f0:f4: 3c:5f:61:d1:c6:87:09:a7:ac:09:17:68:2d:e1:f8:e8:36:d8: 03:5d:cf:93:d4:04:1d:0f:c9:11:77:9a:05:72:f8:68:ad:9f: 88:26:05:e8:ae:9f:f1:3b:0f:c4:92:09:99:b6:bc:e1:06:61: 41:48:af:fc:44:4b:50:3d:87:0f:32:39:e8:ff:3f:65:f7:af: 44:e4:e1:bd:ae:0b:dc:e7:57:5d:cf:2d:bc:7d:e6:af:73:69: 4f:8f:02:60:30:a4:98:31:21:d9:3a:5e:ae:b2:d1:2e:fd:dd: 2b:61:e3:2f:e4:70:d7:02:6a:8f:60:06:dd:3e:1d:ef:d4:c3: 7a:ac:d8:8a:64:6d:28:c0:bb:dd:60:d5:9b:62:2d:d5:56:ff: 21:7a:00:b5:52:1b:15:23:6a:9f:52:3b:2e:10:87:ba:9d:63: ac:84:05:5d:43:a4:f7:1c:83:a7:b7:47:af:b9:b3:33:0e:dc: 69:86:7d:c4:65:1d:2f:9d:8c:c6:cd:57:74:fb:a8:88:19:f8: 66:7c:39:69:88:f5:f9:71:17:1a:ea:61:b2:27:d1:b1:84:55: 28:93:c0:d4:b4:85:4b:79:fa:78:58:89:85:df:73:99:78:71: 31:2c:d7:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUwNTEzMDAyOTQ3WhcNMjUwNTIwMDAyOTQ3WjAYMRYwFAYD VQQDEw02ODIyOTI3Yi0yMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybHsCOb9kI1+TkEQ9VIhe9/pzJhsoEur1Aok0VxiPw97QgQpDS24DDBKIu3C Lc5WjtMbNjwlksNSghnsHUJFANuYvHDymOQyts2wroCYXufEuLBXLz+PP+pbtxK9 5kYsN4S1ZjFzrW1lxtWKle9MINvbKFxylgvOMdIJ9TGfBMoMSx7aesJ7bNqW63TT 46Cpurwaf4RLQ2in6A02uAifG0BrBmJO5ZVefrasFDr8kwGbdSaISIP4kMJ8Ehh1 8qAc09lYSKTk1qb6QF0KM4rStCq3FT7Pg7j4YQ9SpijFlAfbij25XstdtXAAjhYY hj5BL7FYuZOme5RMvW+dnq/nMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTnz2iP WgGKxbIxWFBqOzrtaV2rMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCowW2Ztg3p+L9QwYnDfS8G8PQ8X2HRxocJp6wJF2gt4fjoNtgDXc+T 1AQdD8kRd5oFcvhorZ+IJgXorp/xOw/EkgmZtrzhBmFBSK/8REtQPYcPMjno/z9l 969E5OG9rgvc51ddzy28feavc2lPjwJgMKSYMSHZOl6ustEu/d0rYeMv5HDXAmqP YAbdPh3v1MN6rNiKZG0owLvdYNWbYi3VVv8hegC1UhsVI2qfUjsuEIe6nWOshAVd Q6T3HIOnt0evubMzDtxphn3EZR0vnYzGzVd0+6iIGfhmfDlpiPX5cRca6mGyJ9Gx hFUok8DUtIVLefp4WImF33OZeHExLNdV -----END CERTIFICATE-----Generated at Wed May 14 21:08:44 2025 by rpki-client