$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft File: 5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json) Hash identifier: vDGlUH5QFw6Lx/z7bKHuU5SSNBvBEHzMQJl5ECThm+E= Subject key identifier: 4E:DE:AD:50:22:B9:8E:15:2A:A8:5B:8C:75:F9:DB:21:BF:48:1C:D1 Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 Certificate issuer: /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft Manifest number: 065C Signing time: Mon 12 May 2025 22:13:26 +0000 Manifest this update: Mon 12 May 2025 22:13:25 +0000 Manifest next update: Mon 19 May 2025 22:13:25 +0000 Files and hashes: 1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: jOHPXvrKRnPUbsLiGtL9Vhp3j6w263FgTJH24tPE4Q8=) 2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: 4dUVKwERkH/QTGoIXRLz0nS6ysGT9dt9/C/hSIpCKRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA0E, serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Validity Not Before: May 12 22:13:25 2025 GMT Not After : May 19 22:13:25 2025 GMT Subject: CN=68227285-c69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:a6:66:43:13:a6:88:52:84:14:72:09:6b: 30:01:60:a6:5a:7c:5d:51:cd:e1:13:cd:89:02:14: 67:f4:a6:f1:92:50:93:92:1a:8e:20:b2:d3:b0:b9: f9:ed:9d:72:61:20:61:33:c2:3a:b8:bf:0c:f0:74: b2:5a:df:b5:bd:4f:2f:66:cc:c2:1f:0d:ed:d6:5b: f6:70:74:3d:6b:f1:20:4c:de:20:b8:87:1f:72:b6: fa:1f:ab:a4:5d:ec:80:6a:87:fd:d4:85:c1:5e:c9: d4:65:cd:7f:af:b3:eb:e5:99:58:f6:2b:2d:c2:6f: b7:80:c4:0b:7c:e9:4d:42:be:c0:26:dd:8a:18:0e: 62:b4:a5:76:5b:7c:08:2a:d9:a4:3d:4e:d0:e5:e3: b6:65:3c:82:11:12:d1:4c:b7:ef:77:09:4f:4d:92: 31:cf:1e:73:9a:0a:66:ce:bc:bb:2e:80:6c:b2:f7: 46:5f:22:32:81:5e:5a:05:8a:4f:86:cf:5d:98:57: d7:9b:62:82:4c:ba:76:11:c6:57:4c:d0:90:97:ff: b2:11:ab:be:c7:4f:81:76:ac:a9:7f:24:8c:de:b1: 3e:73:d9:8c:a0:7f:65:25:f1:90:cf:de:b4:08:26: 2d:ed:54:81:ab:3d:66:07:70:f9:b5:de:a8:bd:11: 87:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DE:AD:50:22:B9:8E:15:2A:A8:5B:8C:75:F9:DB:21:BF:48:1C:D1 X509v3 Authority Key Identifier: keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7e:70:e9:34:0e:79:9f:47:de:ee:e3:18:f2:29:db:f3:ba: ff:b7:89:ac:08:8e:d2:e5:02:fc:71:c9:0b:3a:86:20:9a:73: ef:1c:7d:4b:de:c9:4f:82:4f:97:24:2c:bb:cd:ff:69:07:12: a8:98:0f:a9:4a:06:3e:1f:fd:00:d4:cd:18:d5:c3:37:d4:0f: 5b:f5:69:f9:5a:17:ca:3f:53:6d:8d:2e:f8:82:90:97:72:73: 44:b2:c9:25:ea:55:5a:62:aa:d7:83:9a:9f:e7:e2:dd:4d:b2: 65:3e:b6:f9:94:14:df:2b:29:d4:9c:5d:a8:ec:74:0d:44:0c: 2a:c3:1f:93:bf:38:af:d5:12:f9:3b:d4:e6:a0:90:e4:47:ce: c9:f7:24:ec:c5:c5:c9:38:64:82:c3:75:f2:14:2c:67:01:fc: 5d:dd:5e:b6:67:83:e0:b7:a4:ce:71:d9:ab:33:52:a4:31:54: 8c:91:00:6c:4d:77:bb:8a:f0:7e:b4:00:c7:a4:62:58:ca:6e: 02:4f:2c:2c:1d:f2:e8:75:20:ad:21:22:1d:71:33:74:82:35: 66:62:8b:1b:df:91:00:ef:e8:f5:fd:05:5a:2b:3a:4a:8f:44: f5:b1:3a:ec:96:55:dc:5b:52:f6:5d:d4:2c:a5:a1:d8:9b:e1: cc:d7:57:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMEUxMTAvBgNVBAUTKEU3MDJDNUFBNzREOEM5NkNDOEVFRjU2MThFNEZGRUVG RDUxRDM3RjkwHhcNMjUwNTEyMjIxMzI1WhcNMjUwNTE5MjIxMzI1WjAYMRYwFAYD VQQDEw02ODIyNzI4NS1jNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLCmZkMTpohShBRyCWswAWCmWnxdUc3hE82JAhRn9KbxklCTkhqOILLTsLn5 7Z1yYSBhM8I6uL8M8HSyWt+1vU8vZszCHw3t1lv2cHQ9a/EgTN4guIcfcrb6H6uk XeyAaof91IXBXsnUZc1/r7Pr5ZlY9istwm+3gMQLfOlNQr7AJt2KGA5itKV2W3wI KtmkPU7Q5eO2ZTyCERLRTLfvdwlPTZIxzx5zmgpmzry7LoBssvdGXyIygV5aBYpP hs9dmFfXm2KCTLp2EcZXTNCQl/+yEau+x0+BdqypfySM3rE+c9mMoH9lJfGQz960 CCYt7VSBqz1mB3D5td6ovRGHsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7erVAi uY4VKqhbjHX52yG/SBzRMB8GA1UdIwQYMBaAFOcCxap02MlsyO71YY5P/u/VHTf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0EwRS84QTExNjRDQTgw NzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlXekk3dlZoamtfLTc5VWRO X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3TEZxblRZeVd6STd2Vmhqa18tNzlVZE5fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0EwRS84QTExNjRDQTgwNzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlX ekk3dlZoamtfLTc5VWROX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzfnDpNA55n0fe7uMY8inb87r/t4msCI7S5QL8cckLOoYgmnPvHH1L 3slPgk+XJCy7zf9pBxKomA+pSgY+H/0A1M0Y1cM31A9b9Wn5WhfKP1NtjS74gpCX cnNEsskl6lVaYqrXg5qf5+LdTbJlPrb5lBTfKynUnF2o7HQNRAwqwx+Tvziv1RL5 O9TmoJDkR87J9yTsxcXJOGSCw3XyFCxnAfxd3V62Z4Pgt6TOcdmrM1KkMVSMkQBs TXe7ivB+tADHpGJYym4CTywsHfLodSCtISIdcTN0gjVmYosb35EA7+j1/QVaKzpK j0T1sTrsllXcW1L2XdQspaHYm+HM11d7 -----END CERTIFICATE-----Generated at Tue May 13 11:36:22 2025 by rpki-client