$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft File: j6aYZRx6wk24J9I50PyLLI2jZrg.mft (raw, json) Hash identifier: FmgffvFh+dL4BkUpOg6il9Gnmyo2JayCSESqxxEz7g0= Subject key identifier: F2:5B:0F:2A:80:30:AB:34:00:FE:08:E5:72:9A:3A:C4:80:22:A8:34 Authority key identifier: 8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 Certificate issuer: /CN=A918C3B7/serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft Manifest number: 010D Signing time: Tue 13 May 2025 04:08:44 +0000 Manifest this update: Tue 13 May 2025 04:08:43 +0000 Manifest next update: Tue 20 May 2025 04:08:43 +0000 Files and hashes: 1: j6aYZRx6wk24J9I50PyLLI2jZrg.crl (hash: VGm0w524/Wdw3FT6lBovNTQhwwq6sk2YlZfVJs97oN4=) 2: 756EDE70611611EF83B51C41C4F9AE02.roa (hash: 0voBvvYJ1FOla9h6paRdef89XemcSYIiMH4ggu9oHRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C3B7, serialNumber=8FA698651C7AC24DB827D239D0FC8B2C8DA366B8 Validity Not Before: May 13 04:08:43 2025 GMT Not After : May 20 04:08:43 2025 GMT Subject: CN=6822c5cc-1ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ad:3c:40:3c:98:5a:a2:1b:c4:17:86:af:75: 97:88:ab:30:12:fe:48:f7:ea:d3:ac:3a:d0:c8:41: 2c:6a:c1:91:08:79:82:9f:c5:44:60:e2:2a:5d:62: 2c:d3:a6:ce:36:76:16:de:02:2e:5f:36:e5:57:03: 68:7e:fd:32:0b:3a:35:db:bf:c1:44:1b:7c:92:a6: 16:65:19:9e:06:73:22:1a:46:e6:1e:c8:bf:de:a0: 1f:40:0f:d6:06:21:e3:58:af:23:7d:97:89:8a:e7: 61:4e:de:ca:57:c8:ba:ee:dc:13:c2:aa:d5:8e:9c: 31:79:b8:77:f5:f2:77:1d:02:d1:8f:5e:ee:9f:75: c6:de:df:d4:79:3b:89:67:1a:49:b3:b1:e1:4f:b2: 6b:a6:27:44:e2:6b:f5:de:c1:27:4a:36:f7:91:9f: 84:6c:85:23:9f:15:a8:bb:36:e0:d1:3e:0d:db:06: 3f:50:da:89:2b:98:42:c8:67:29:52:5d:d4:2e:37: 3a:65:00:0c:53:b3:91:da:ad:d6:10:4a:7c:39:91: e4:6b:53:70:d8:75:32:50:49:b4:e5:f3:88:8f:0b: 65:81:9b:83:f3:b4:c3:02:69:f3:2c:53:3b:73:6d: 92:6d:d4:19:34:c9:95:dc:8d:a2:3b:4a:1a:14:2b: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5B:0F:2A:80:30:AB:34:00:FE:08:E5:72:9A:3A:C4:80:22:A8:34 X509v3 Authority Key Identifier: keyid:8F:A6:98:65:1C:7A:C2:4D:B8:27:D2:39:D0:FC:8B:2C:8D:A3:66:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6aYZRx6wk24J9I50PyLLI2jZrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/1E6777AA932511EEBE987F60C4F9AE02/j6aYZRx6wk24J9I50PyLLI2jZrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fc:80:1b:c1:85:8c:b9:ac:ef:a9:fa:e9:eb:ef:8a:90:ab: bd:38:7e:e2:7f:1f:ec:96:65:88:85:78:cf:e8:7a:ff:9b:2b: 69:ee:3e:5e:ca:54:53:4c:b3:d4:dd:f8:ea:3f:05:3c:a4:46: 10:20:25:85:3a:0d:6d:71:65:ee:78:43:c0:9c:cd:97:c8:23: bd:f9:0c:86:6b:a4:0d:75:16:5f:84:29:8d:27:0d:09:80:d2: db:9d:8c:6f:fc:8e:e5:6b:19:cd:f2:0c:1a:9d:e2:a9:08:ab: aa:d7:a4:16:bb:f9:41:13:ab:23:84:a0:f9:8b:de:69:b9:a9: 07:29:22:bd:36:da:e7:97:ba:6b:6c:5d:93:77:29:11:fe:0e: e9:9a:a9:8e:67:2a:4f:85:13:2a:6f:4a:c2:95:e9:74:0c:e3: 44:09:14:89:c1:c2:fd:ab:cc:ae:f4:6a:8e:85:53:fa:d6:b7: 9f:02:4d:09:24:86:47:c0:23:6c:28:42:a0:b5:90:dc:69:4c: 63:7f:bb:3f:31:f0:d7:ab:24:4e:fc:78:45:ed:46:d0:9b:bd: 4a:a3:40:55:2e:2b:d7:10:ce:4f:29:d9:e4:1a:70:45:85:9b: d3:81:6f:62:d0:72:6d:b6:83:82:f6:7e:1e:70:8f:d0:ec:97: b8:0a:e7:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMzQjcxMTAvBgNVBAUTKDhGQTY5ODY1MUM3QUMyNERCODI3RDIzOUQwRkM4QjJD OERBMzY2QjgwHhcNMjUwNTEzMDQwODQzWhcNMjUwNTIwMDQwODQzWjAYMRYwFAYD VQQDEw02ODIyYzVjYy0xY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8608QDyYWqIbxBeGr3WXiKswEv5I9+rTrDrQyEEsasGRCHmCn8VEYOIqXWIs 06bONnYW3gIuXzblVwNofv0yCzo127/BRBt8kqYWZRmeBnMiGkbmHsi/3qAfQA/W BiHjWK8jfZeJiudhTt7KV8i67twTwqrVjpwxebh39fJ3HQLRj17un3XG3t/UeTuJ ZxpJs7HhT7JrpidE4mv13sEnSjb3kZ+EbIUjnxWouzbg0T4N2wY/UNqJK5hCyGcp Ul3ULjc6ZQAMU7OR2q3WEEp8OZHka1Nw2HUyUEm05fOIjwtlgZuD87TDAmnzLFM7 c22SbdQZNMmV3I2iO0oaFCvQQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJbDyqA MKs0AP4I5XKaOsSAIqg0MB8GA1UdIwQYMBaAFI+mmGUcesJNuCfSOdD8iyyNo2a4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzNCNy8xRTY3NzdBQTkz MjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4NndrMjRKOUk1MFB5TExJMmpa cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o2YVlaUng2d2syNEo5STUwUHlMTEkyalpyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzNCNy8xRTY3NzdBQTkzMjUxMUVFQkU5ODdGNjBDNEY5QUUwMi9qNmFZWlJ4Nndr MjRKOUk1MFB5TExJMmpacmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb/IAbwYWMuazvqfrp6++KkKu9OH7ifx/slmWIhXjP6Hr/mytp7j5e ylRTTLPU3fjqPwU8pEYQICWFOg1tcWXueEPAnM2XyCO9+QyGa6QNdRZfhCmNJw0J gNLbnYxv/I7laxnN8gwaneKpCKuq16QWu/lBE6sjhKD5i95puakHKSK9Ntrnl7pr bF2TdykR/g7pmqmOZypPhRMqb0rClel0DONECRSJwcL9q8yu9GqOhVP61refAk0J JIZHwCNsKEKgtZDcaUxjf7s/MfDXqyRO/HhF7UbQm71Ko0BVLivXEM5PKdnkGnBF hZvTgW9i0HJttoOC9n4ecI/Q7Je4Cud/ -----END CERTIFICATE-----Generated at Tue May 13 18:38:35 2025 by rpki-client