$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft File: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json) Hash identifier: GiG9vQuJjfVB8rwd6+vk+P12UMmhrfyx9xHUV6iJNcA= Subject key identifier: EB:CA:85:FE:12:1C:FD:72:95:7A:1E:A0:C4:23:CC:23:AC:82:08:CB Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft Manifest number: 84 Signing time: Sat 17 May 2025 06:12:22 +0000 Manifest this update: Sat 17 May 2025 06:12:22 +0000 Manifest next update: Sat 24 May 2025 06:12:21 +0000 Files and hashes: 1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: 88sWXCwGHaD2uWJrAUvlzYU7yfC9JcdqLyb8ebwJ9Us=) 2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: naM1jWBBF1HgB1gzetomIgtwuH6iwO3twg6Wvbh3nCU=) 3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: HEoFn428OSrwoj9FY9UBG8roOsE7KCgrYxU/d2SrcQg=) 4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: LfnrEoRSy98kq5+Het7TGQh6Md9GIYKtrywQQ+4Cqlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 06:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Validity Not Before: May 17 06:12:22 2025 GMT Not After : May 24 06:12:21 2025 GMT Subject: CN=682828c6-479e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:59:33:ac:41:e9:d9:33:ef:6c:1b:e8:4b: 96:dc:a3:3c:be:c1:da:be:b4:e4:27:e0:c7:b6:49: 17:a2:f3:fa:9e:ea:1a:01:fd:90:33:08:9d:f1:28: bb:11:17:1d:fc:f2:f9:f4:b7:92:f6:15:40:40:8a: 14:23:b6:bc:3d:32:a1:b8:14:1d:8c:00:b0:51:da: 51:42:e4:74:b6:6b:41:66:9f:ca:74:13:36:70:50: b2:28:17:db:aa:2e:68:97:d9:44:de:fb:8c:31:83: 70:40:ae:e1:a4:d6:41:97:4b:23:83:80:9f:a4:58: ef:f8:e2:fa:60:e6:bb:e9:9f:c8:f1:87:1e:3a:bb: 64:61:ec:b7:ef:34:d8:22:a2:14:3b:b4:a2:9e:c1: 29:4a:0e:85:9e:71:d0:3a:47:39:4c:6c:c2:3e:b8: af:d7:8e:43:f2:05:e8:56:56:ea:da:1a:75:57:49: 28:1d:39:1d:81:cb:de:86:f7:4a:16:21:cd:78:29: 1b:d0:9b:81:ee:4d:57:3f:38:22:96:ad:1b:68:7d: 1d:19:e1:0f:e4:46:5c:fd:c6:da:cc:be:10:e3:38: 1e:c9:16:18:3c:e0:b2:8c:56:b6:6b:b7:3b:52:4b: 0f:46:ff:96:94:3d:ee:d7:4c:0a:0d:c6:fc:db:4f: f9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CA:85:FE:12:1C:FD:72:95:7A:1E:A0:C4:23:CC:23:AC:82:08:CB X509v3 Authority Key Identifier: keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3b:e6:e9:13:72:35:b5:b3:cd:9e:9b:5a:b3:de:8f:7b:86: 5c:4e:01:f0:39:45:9b:6c:dc:04:27:0e:6e:3e:24:db:9c:31: 98:ab:58:a6:d6:50:be:d6:70:95:c7:a5:0a:0e:64:b8:fa:6b: a7:e9:d0:60:3c:13:00:06:e4:8b:94:f9:41:1a:d5:7e:aa:04: 46:45:45:ff:88:6b:d2:05:a9:7d:02:24:94:d1:d9:9d:a8:a6: 5f:58:6e:9a:08:0e:0d:1a:b7:83:4c:06:69:13:63:84:19:5d: 80:36:5e:cb:3f:92:c7:79:64:63:36:d9:b0:d1:5c:39:bd:39: 33:db:0e:ff:d4:ba:73:31:e8:62:38:9c:e6:ec:1c:8d:2a:2c: ac:5e:d7:42:cc:c0:6d:ed:34:05:ab:b4:6b:9b:1b:4c:63:ba: 7f:72:1f:61:38:47:89:4d:c4:41:5a:fd:22:4c:8d:9d:49:8f: 57:70:7b:38:5d:ef:e4:ab:44:ef:8a:c1:3d:a8:44:3f:9c:5a: ec:13:76:5e:d7:ff:1f:cc:8c:94:b1:a4:e0:7e:66:c2:70:02: 34:46:f6:9e:6f:9b:f8:d3:7c:c1:7d:63:a4:8e:9e:63:42:a2: 79:b6:3c:c9:6d:1c:e5:2a:85:fb:ce:27:e3:ef:04:37:26:3e: 59:b7:74:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NTQxMTAvBgNVBAUTKEUxMUE0NzJGODQ5RkEzRDY2M0NBODdDQTY2MzNFQ0U3 RDhEMDA3NjIwHhcNMjUwNTE3MDYxMjIyWhcNMjUwNTI0MDYxMjIxWjAYMRYwFAYD VQQDEw02ODI4MjhjNi00NzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzlZM6xB6dkz72wb6EuW3KM8vsHavrTkJ+DHtkkXovP6nuoaAf2QMwid8Si7 ERcd/PL59LeS9hVAQIoUI7a8PTKhuBQdjACwUdpRQuR0tmtBZp/KdBM2cFCyKBfb qi5ol9lE3vuMMYNwQK7hpNZBl0sjg4CfpFjv+OL6YOa76Z/I8YceOrtkYey37zTY IqIUO7SinsEpSg6FnnHQOkc5TGzCPriv145D8gXoVlbq2hp1V0koHTkdgcvehvdK FiHNeCkb0JuB7k1XPzgilq0baH0dGeEP5EZc/cbazL4Q4zgeyRYYPOCyjFa2a7c7 UksPRv+WlD3u10wKDcb820/5XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvKhf4S HP1ylXoeoMQjzCOsggjLMB8GA1UdIwQYMBaAFOEaRy+En6PWY8qHymYz7OfY0Adi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg1NC9BODk2NDY2MDc5 OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85Wmp5b2ZLWmpQczU5alFC MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg1NC9BODk2NDY2MDc5OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85 Wmp5b2ZLWmpQczU5alFCMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOO+bpE3I1tbPNnptas96Pe4ZcTgHwOUWbbNwEJw5uPiTbnDGYq1im 1lC+1nCVx6UKDmS4+mun6dBgPBMABuSLlPlBGtV+qgRGRUX/iGvSBal9AiSU0dmd qKZfWG6aCA4NGreDTAZpE2OEGV2ANl7LP5LHeWRjNtmw0Vw5vTkz2w7/1LpzMehi OJzm7ByNKiysXtdCzMBt7TQFq7RrmxtMY7p/ch9hOEeJTcRBWv0iTI2dSY9XcHs4 Xe/kq0TvisE9qEQ/nFrsE3Ze1/8fzIyUsaTgfmbCcAI0Rvaeb5v403zBfWOkjp5j QqJ5tjzJbRzlKoX7zifj7wQ3Jj5Zt3Q3 -----END CERTIFICATE-----Generated at Sat May 17 19:23:14 2025 by rpki-client