$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json) Hash identifier: jLDp6xMTPIukWvr5adk38+v9nsl5IAtPVpOXPM6l1Qg= Subject key identifier: 58:8E:A3:D7:34:86:C9:04:58:80:9D:0A:5B:A1:D1:BB:2B:87:84:F6 Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft Manifest number: 07A9 Signing time: Fri 16 May 2025 21:37:52 +0000 Manifest this update: Fri 16 May 2025 21:37:51 +0000 Manifest next update: Fri 23 May 2025 21:37:51 +0000 Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: /xahVJlk1GOXZyj6AN+6U99yLYOnnTH/Lvku8fpSyWk=) 2: B0425744D7E211ECBD1D447FC4F9AE02.roa (hash: OdlMqUDNtGzAyirklP55vsYTOSuUBKJCfr9lvqlqHYg=) 3: 308C5012BE4C11ED9598AC4EC4F9AE02.roa (hash: P7lzuIcT4OJPq2KVjR4hbm4014N8PEGkbXpO5IhqpWQ=) 4: 067B1AAA70C611EF8080566DC4F9AE02.roa (hash: ap536R4mDpEQmVBUvi08sdQ4AGgP2k0XYVc0G1WQzN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 21:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: May 16 21:37:51 2025 GMT Not After : May 23 21:37:51 2025 GMT Subject: CN=6827b02f-150d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:2a:f6:8d:a4:94:b7:92:cf:7c:41:bd:f0: d9:35:3d:47:6e:cd:a0:a1:0a:ce:88:7f:56:1a:60: 44:1c:8d:a7:4a:b5:ed:86:9c:ba:9c:8e:f8:ff:8d: 03:49:b6:e3:4d:74:6e:24:24:df:40:67:7f:3a:c2: 74:f3:7f:af:7d:dd:02:be:6c:a6:ae:e5:dd:db:0c: 43:66:eb:47:9d:39:ec:2e:38:2c:f2:6a:5e:c0:ca: 04:11:03:65:44:2b:ec:c1:f7:ba:4c:2a:58:13:81: fd:87:01:9d:e5:61:50:6b:d5:16:82:f6:9d:96:5b: 01:9c:00:22:a5:dc:e3:83:a3:d5:a4:32:30:b4:db: c2:7c:a9:08:ca:2d:38:9f:56:99:d8:fd:01:f4:02: f4:a3:96:d0:f9:77:d6:e6:47:d8:28:7f:f8:dc:49: 27:5a:4f:67:c1:bc:70:bf:48:0a:4a:c8:fc:56:bf: 1c:dc:ab:be:58:86:a3:7e:75:fd:ed:0a:60:d5:2b: 68:bf:e9:22:9a:35:f7:c9:51:15:89:24:d2:fb:5f: 73:80:63:19:1b:c7:ef:26:00:6d:21:b1:8f:06:75: d5:0b:e8:a2:10:d6:92:f4:2c:07:2e:18:83:e5:cf: 4f:1a:e6:03:13:15:74:59:23:25:0c:54:27:4f:2c: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8E:A3:D7:34:86:C9:04:58:80:9D:0A:5B:A1:D1:BB:2B:87:84:F6 X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:00:16:e9:68:6b:06:18:ee:7c:e6:ce:2c:b7:f4:5b:fb:ad: 7e:2c:82:4f:56:40:58:19:24:ba:1d:e3:f4:e6:26:d8:c7:d9: 23:c3:3d:c8:6e:12:29:ac:01:73:af:99:16:85:c3:bb:e1:79: c5:1c:02:6e:ec:71:3d:cd:ac:18:4e:6b:4e:99:4d:49:4b:b1: 2d:25:e8:9d:a8:26:e7:04:80:7d:5b:88:ab:7d:00:31:5c:85: 6f:f7:86:63:84:28:19:ef:13:27:8b:9d:31:55:d2:1b:bc:33: d4:e2:7b:ba:3c:eb:78:f1:c8:7c:e6:8b:5a:ab:5d:ee:c5:ed: b3:f6:e8:5d:a3:e3:5a:4b:22:17:a5:b0:8b:e0:5f:b4:2b:f2: a9:dd:c9:2f:a2:4a:95:bb:60:a6:bd:95:5f:2c:8b:59:41:92: 64:45:13:ed:8a:f2:c1:40:19:01:ec:55:ab:6c:d3:79:13:8d: c9:11:24:82:35:f9:ce:32:da:da:50:6a:bc:d8:25:a3:bd:09: 71:2c:45:d0:bd:d0:74:7a:a9:cc:5a:51:34:6c:09:b2:31:f8: b3:7d:cf:2c:c3:f1:f7:43:28:83:37:93:35:23:4d:1d:ff:01: a2:37:ee:19:00:6c:33:a4:82:1b:21:24:af:7e:ff:c1:1d:04: 09:1e:0e:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjUwNTE2MjEzNzUxWhcNMjUwNTIzMjEzNzUxWjAYMRYwFAYD VQQDEw02ODI3YjAyZi0xNTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkMq9o2klLeSz3xBvfDZNT1Hbs2goQrOiH9WGmBEHI2nSrXthpy6nI74/40D SbbjTXRuJCTfQGd/OsJ083+vfd0CvmymruXd2wxDZutHnTnsLjgs8mpewMoEEQNl RCvswfe6TCpYE4H9hwGd5WFQa9UWgvadllsBnAAipdzjg6PVpDIwtNvCfKkIyi04 n1aZ2P0B9AL0o5bQ+XfW5kfYKH/43EknWk9nwbxwv0gKSsj8Vr8c3Ku+WIajfnX9 7Qpg1Stov+kimjX3yVEViSTS+19zgGMZG8fvJgBtIbGPBnXVC+iiENaS9CwHLhiD 5c9PGuYDExV0WSMlDFQnTyzrQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiOo9c0 hskEWICdCluh0bsrh4T2MB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDFFOS9EQUQ4RkI4MDA3OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2 ZnN2Z0tUVnlYQ1hOSnIxcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5ABbpaGsGGO585s4st/Rb+61+LIJPVkBYGSS6HeP05ibYx9kjwz3I bhIprAFzr5kWhcO74XnFHAJu7HE9zawYTmtOmU1JS7EtJeidqCbnBIB9W4irfQAx XIVv94ZjhCgZ7xMni50xVdIbvDPU4nu6POt48ch85otaq13uxe2z9uhdo+NaSyIX pbCL4F+0K/Kp3ckvokqVu2CmvZVfLItZQZJkRRPtivLBQBkB7FWrbNN5E43JESSC NfnOMtraUGq82CWjvQlxLEXQvdB0eqnMWlE0bAmyMfizfc8sw/H3QyiDN5M1I00d /wGiN+4ZAGwzpIIbISSvfv/BHQQJHg77 -----END CERTIFICATE-----Generated at Sat May 17 03:24:25 2025 by rpki-client