$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: zmMb+FW4PcK6yANlSKWrR4lUK0YGaEqoIVy/RZHfK0Q= Subject key identifier: 9C:62:01:E0:E8:29:B1:4A:51:22:CC:EF:E0:B1:7C:7E:9B:95:DD:43 Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 032A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 0324 Signing time: Sun 11 May 2025 00:42:26 +0000 Manifest this update: Sun 11 May 2025 00:42:25 +0000 Manifest next update: Sun 18 May 2025 00:42:25 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: H5VsLeINDnvjb5QsBugID5SZQV15wXpHuhX5XNfSYy4=) 2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: lFHgwGcK464NIp9pshKfZeaAiyOHIGVlEkjl7qvlWTc=) 3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: Z+nT9PoRzTDCsdNOaBI1d+PkQHDUifBiuJhBYkV5ETQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 810 (0x32a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: May 11 00:42:25 2025 GMT Not After : May 18 00:42:25 2025 GMT Subject: CN=681ff272-8a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:15:90:50:3b:83:79:2b:04:f1:c7:7a:82: 0e:1f:61:09:ab:bc:84:ca:1b:3d:e7:75:37:ee:e9: 1f:4f:0f:38:47:39:f2:71:d9:18:df:c5:b1:08:5d: a2:6f:79:97:9a:85:2a:45:2a:27:5a:0b:8e:3d:fd: ad:d1:c3:81:7b:61:b3:58:fb:43:84:c1:8d:b3:14: c6:32:a5:e4:54:12:08:9e:e5:69:f4:87:92:14:71: 51:c7:24:ff:79:76:68:82:e5:22:96:58:38:ca:a1: e9:5c:4a:6b:41:71:65:e7:78:60:d9:07:92:82:bf: 0a:ff:b6:4d:07:f8:c3:dc:22:f8:77:c1:8a:9e:0d: 14:f4:66:6f:1b:fa:8f:0f:bb:1b:7b:c2:d3:72:f6: 91:ad:5a:b7:0d:b6:6d:8a:3e:e7:aa:84:12:14:27: 81:80:b6:0f:11:e2:49:89:87:4a:9b:ff:e6:ca:b8: 67:b9:da:1c:5a:2b:26:1a:9f:ce:5d:29:a3:71:42: 01:2f:20:58:1d:c8:ee:dd:ad:14:d9:37:f1:5b:f4: 58:ca:ec:71:1d:95:7c:46:cb:aa:ed:a8:4b:b7:e5: d7:b5:ed:84:7c:90:07:a1:ec:d8:89:d3:03:5b:c9: 07:3b:7b:9b:a0:a5:c4:04:05:29:b1:89:52:6b:f3: 28:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:62:01:E0:E8:29:B1:4A:51:22:CC:EF:E0:B1:7C:7E:9B:95:DD:43 X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0b:67:7c:00:49:f1:77:a0:09:5e:f8:1a:89:62:eb:ab:2f: b8:c2:d6:57:a7:86:9a:4c:12:49:71:97:01:57:ef:b9:f5:df: 8b:a3:8c:0a:7b:c3:0b:c1:57:f4:81:55:43:03:cf:a2:37:92: 0b:8b:3a:7c:76:bf:f7:eb:63:59:48:43:02:47:47:e3:75:10: 70:70:f0:ce:d7:32:29:b3:51:de:4c:d8:8a:f3:fc:83:9f:e7: bd:ff:00:88:a0:04:1a:c4:9b:c1:a2:d9:8a:a6:67:5d:8d:aa: aa:67:fd:58:24:3d:cc:b1:e2:77:42:bb:2b:0f:6e:7f:f3:ba: 05:fe:f0:d0:46:af:10:72:c2:e3:9e:72:9c:ad:71:8d:ce:92: 2a:44:7c:9d:6c:fc:04:57:af:09:55:11:b1:50:06:03:2e:3a: 7a:ae:76:31:b7:20:7e:4f:cd:e8:df:04:83:16:48:4f:7b:19: bb:45:55:b2:78:bb:d9:54:b5:d0:3a:ea:35:a0:10:1a:7f:01: 81:12:48:30:f9:ab:13:da:ec:91:3f:17:15:c5:80:92:5b:5b: cf:f8:15:a5:6d:86:ca:67:f2:0d:98:6d:3a:02:88:66:81:f2: 1d:86:f1:82:c1:5a:08:a0:4b:e2:6c:29:be:5c:5d:ec:31:3b: 73:36:ea:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUwNTExMDA0MjI1WhcNMjUwNTE4MDA0MjI1WjAYMRYwFAYD VQQDEw02ODFmZjI3Mi04YTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopIVkFA7g3krBPHHeoIOH2EJq7yEyhs953U37ukfTw84RznycdkY38WxCF2i b3mXmoUqRSonWguOPf2t0cOBe2GzWPtDhMGNsxTGMqXkVBIInuVp9IeSFHFRxyT/ eXZoguUillg4yqHpXEprQXFl53hg2QeSgr8K/7ZNB/jD3CL4d8GKng0U9GZvG/qP D7sbe8LTcvaRrVq3DbZtij7nqoQSFCeBgLYPEeJJiYdKm//myrhnudocWismGp/O XSmjcUIBLyBYHcju3a0U2TfxW/RYyuxxHZV8Rsuq7ahLt+XXte2EfJAHoezYidMD W8kHO3uboKXEBAUpsYlSa/MoRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxiAeDo KbFKUSLM7+CxfH6bld1DMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtC2d8AEnxd6AJXvgaiWLrqy+4wtZXp4aaTBJJcZcBV++59d+Lo4wK e8MLwVf0gVVDA8+iN5ILizp8dr/362NZSEMCR0fjdRBwcPDO1zIps1HeTNiK8/yD n+e9/wCIoAQaxJvBotmKpmddjaqqZ/1YJD3MseJ3QrsrD25/87oF/vDQRq8QcsLj nnKcrXGNzpIqRHydbPwEV68JVRGxUAYDLjp6rnYxtyB+T83o3wSDFkhPexm7RVWy eLvZVLXQOuo1oBAafwGBEkgw+asT2uyRPxcVxYCSW1vP+BWlbYbKZ/INmG06Aohm gfIdhvGCwVoIoEvibCm+XF3sMTtzNupG -----END CERTIFICATE-----Generated at Sun May 11 05:08:41 2025 by rpki-client