$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: NlELqX6EChjdUYJpp/Bwmog5jd3eaDOdRTzFeTFzMBA= Subject key identifier: 0B:23:EA:B0:9A:5F:46:1B:E2:D6:34:A5:B8:71:D6:85:8E:A5:4B:41 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 0510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 04ED Signing time: Sat 10 May 2025 23:23:53 +0000 Manifest this update: Sat 10 May 2025 23:23:52 +0000 Manifest next update: Sat 17 May 2025 23:23:52 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: Fs44L8RLF/75jt4z+qBNKdN2XUILA6FRaNxJMXMHZWA=) 2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: /oWh6sDf6JMhXVQFfiBK5T8ylerkJmv9WJJdVtYkSIU=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: hF9MKD/FwgF9cY8hvh9m1ZRU6ZbNvnTiLbcgCIT5wPc=) 4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: 9aBOau/kR05/ZlK4Ctxtvv3XFrOvJ/VU5zNEft0SiRE=) 5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: M9HaGHa7pI3ilHdh1OGWp/+WvUY2NRFrgXm0KqnYXRc=) 6: B9DEB77E654411EFACBF7956C4F9AE02.roa (hash: xYaxgWyzwtexyE7NeRo7CnQ16cP15TpfRCg28S5nmVo=) 7: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: ERqr4ZgITrZRkOwS3AN4CJTqd2fIDLE15f/P4/QlBUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1296 (0x510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: May 10 23:23:52 2025 GMT Not After : May 17 23:23:52 2025 GMT Subject: CN=681fe008-2d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:13:21:19:18:7e:91:9f:17:f8:38:58:91: 73:38:00:db:02:32:e4:70:00:1f:c1:dd:e2:51:d9: 05:70:a3:67:bf:f0:15:10:d6:4b:3f:9e:28:d4:4e: 4d:1a:10:4e:71:5d:d9:ae:33:a3:b6:ad:cc:69:72: 0c:bc:65:e5:90:f2:ed:0e:58:73:9c:8b:b0:c7:30: 9d:2b:7c:fc:ff:56:b5:cf:46:be:0e:45:f6:e2:3d: 2c:c0:f6:b9:c1:45:2b:cb:14:fc:0e:e6:fe:b1:12: b6:61:e1:dc:60:a3:31:9d:6b:87:be:aa:19:0f:3b: fd:ae:e5:65:6f:59:f4:86:33:c0:00:e8:d9:5e:f3: fa:9b:ad:8e:a8:8c:70:5a:d5:91:33:b9:fc:10:7c: e4:37:42:42:82:5a:8e:3d:04:8b:d9:9a:2c:a7:94: 8a:36:23:70:46:16:6a:b2:e5:fb:d7:93:5e:77:79: 6c:ed:60:ca:da:1c:3e:cc:64:82:30:74:1e:08:db: 1e:11:22:23:b4:6f:27:be:e8:d1:56:53:22:f3:83: bb:ed:09:a3:82:2d:15:df:3f:67:ee:4c:f7:7a:51: 32:55:18:a5:60:57:2d:10:f9:66:36:10:7c:a3:60: 0a:59:8b:31:b2:75:09:44:1d:68:2a:d6:e9:59:5e: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:23:EA:B0:9A:5F:46:1B:E2:D6:34:A5:B8:71:D6:85:8E:A5:4B:41 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:c4:b2:de:34:3d:01:aa:45:ff:39:09:14:37:40:20:f0:7c: 9c:63:63:9a:8c:d6:f1:b7:37:38:a4:f5:8a:77:5a:43:e7:de: 67:bd:9f:2d:42:54:4a:a9:fa:e8:69:07:06:9d:19:4b:8a:7c: bd:64:df:7c:12:ac:ee:c3:84:42:4d:c7:a1:f3:2c:60:6b:cc: 13:a4:c2:0f:b2:14:af:8e:ea:6b:46:02:23:81:c0:33:93:30: 19:d7:de:a9:02:0c:a9:5a:d7:8c:7b:f0:71:3f:4b:14:08:5a: 89:72:f0:6c:dd:c3:04:d7:f5:29:a3:d9:15:c3:7a:8b:97:d3: ba:4a:6d:8c:84:fd:4c:9c:2c:cc:30:aa:1e:c1:8a:5a:fa:ab: 0c:4a:70:a6:6f:9f:a3:cc:8d:f2:b9:f0:8c:ec:64:1b:f5:0b: 5f:0f:c6:52:08:27:e1:57:14:cd:02:08:22:68:45:fd:28:5c: 53:eb:19:bb:a2:56:d2:8a:3e:94:fd:5e:6e:a9:eb:92:6f:b5: 6b:20:2a:be:78:66:2e:d8:43:66:81:f6:92:21:d4:21:42:8c: 8f:01:8d:b0:0d:96:75:ca:83:37:05:e3:33:ec:83:2b:10:1f: 2a:28:c2:eb:2d:66:fd:00:eb:03:62:b8:b3:fc:cb:1d:5a:a2: 4b:80:ac:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUwNTEwMjMyMzUyWhcNMjUwNTE3MjMyMzUyWjAYMRYwFAYD VQQDEw02ODFmZTAwOC0yZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5gTIRkYfpGfF/g4WJFzOADbAjLkcAAfwd3iUdkFcKNnv/AVENZLP54o1E5N GhBOcV3ZrjOjtq3MaXIMvGXlkPLtDlhznIuwxzCdK3z8/1a1z0a+DkX24j0swPa5 wUUryxT8Dub+sRK2YeHcYKMxnWuHvqoZDzv9ruVlb1n0hjPAAOjZXvP6m62OqIxw WtWRM7n8EHzkN0JCglqOPQSL2Zosp5SKNiNwRhZqsuX715Ned3ls7WDK2hw+zGSC MHQeCNseESIjtG8nvujRVlMi84O77Qmjgi0V3z9n7kz3elEyVRilYFctEPlmNhB8 o2AKWYsxsnUJRB1oKtbpWV6yPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsj6rCa X0Yb4tY0pbhx1oWOpUtBMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgxLLeND0BqkX/OQkUN0Ag8HycY2OajNbxtzc4pPWKd1pD595nvZ8t QlRKqfroaQcGnRlLiny9ZN98Eqzuw4RCTceh8yxga8wTpMIPshSvjuprRgIjgcAz kzAZ196pAgypWteMe/BxP0sUCFqJcvBs3cME1/Upo9kVw3qLl9O6Sm2MhP1MnCzM MKoewYpa+qsMSnCmb5+jzI3yufCM7GQb9QtfD8ZSCCfhVxTNAggiaEX9KFxT6xm7 olbSij6U/V5uqeuSb7VrICq+eGYu2ENmgfaSIdQhQoyPAY2wDZZ1yoM3BeMz7IMr EB8qKMLrLWb9AOsDYriz/MsdWqJLgKwV -----END CERTIFICATE-----Generated at Mon May 12 22:41:01 2025 by rpki-client