$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: +61qEdRP5wRSaaDS/odyAyoQ2ulnHfDx/LLGuFAG8xc= Subject key identifier: 82:E5:08:36:ED:4C:C3:EF:92:D6:BC:68:35:C3:A0:BD:56:D0:F0:6B Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1B51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1B0F Signing time: Mon 12 May 2025 16:15:16 +0000 Manifest this update: Mon 12 May 2025 16:15:16 +0000 Manifest next update: Mon 19 May 2025 16:15:16 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: YBKI8LHeGnNiTEdhgtl9Sf7SCEbvOBPrv8mxpIYEJOk=) 2: 65486DA81F8411E79BCB6D54C4F9AE02.roa (hash: 4xV+J3CmmdCpDaEFPGjRsDGwUIL2Vy4kSy5m15MGfXg=) 3: 634556A61F8411E79BCB6D54C4F9AE02.roa (hash: 4IDng3Lrs8lhaOUdN7yvdIjmCJWMny3fPwZTXINqHBU=) 4: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: UVvEuCytrfCrphts5UpSNqcuRE3wm/rQR1W1CXxy/Rw=) 5: A842EEAA880E11ED9BE52B17C4F9AE02.roa (hash: 4Q6EmcPQKZH/+9z09btDyZRmVTuV1a4n3djNOV7Om64=) 6: A93E93C2880E11ED9BE52B17C4F9AE02.roa (hash: KB78mB/+BtWr5xn0d2YgdyzOTI8fLFM20j2nckGLtwU=) 7: 66914122CEAB11E796AC671AC4F9AE02.roa (hash: 9nJsdnxbQLzrLx2EZCka7q5S0FAqMVpfxB+cnZiwYyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6993 (0x1b51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: May 12 16:15:16 2025 GMT Not After : May 19 16:15:16 2025 GMT Subject: CN=68221e94-0dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:a3:52:ab:ac:5e:41:e0:2d:2b:07:f8:1e: 93:ab:bd:8c:52:3a:85:c6:71:23:01:8a:4e:4b:bd: de:24:18:1e:59:9f:c6:e9:df:57:34:8e:00:83:aa: ab:89:64:75:f7:c6:97:b8:81:9a:2f:d0:c3:7e:e8: 0f:e4:e7:16:0b:4c:9a:58:3e:da:fc:e6:55:c7:4e: d7:8f:17:d1:3e:6a:5a:d7:7e:09:2b:a8:e4:4f:c7: 06:1c:31:90:f7:b3:ad:c8:3b:cb:0e:58:5a:15:49: e9:25:0d:b0:43:a5:0f:17:2f:53:b3:17:c3:e1:c8: f2:69:f5:96:23:bf:18:1f:b8:22:79:46:b3:15:52: df:75:cc:4d:16:e2:56:87:9f:1a:0c:0c:70:28:4e: 6f:09:b8:eb:b9:81:26:e9:ee:4c:19:09:23:f7:f6: 78:17:ba:1f:2c:f2:d6:33:4e:21:8e:5f:46:57:38: 58:48:af:81:f6:88:bf:cc:5a:71:2f:1a:bd:8a:23: ef:ab:bb:cc:7d:28:82:8e:04:26:b1:25:34:99:8e: 4d:cb:ef:02:24:7a:b5:92:47:10:b8:cc:cd:9a:cc: d9:a0:8b:aa:a6:9c:78:b9:62:e2:80:68:58:3b:3a: a3:87:bb:c9:73:0c:c1:a9:0f:12:d0:9a:c2:3c:a5: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E5:08:36:ED:4C:C3:EF:92:D6:BC:68:35:C3:A0:BD:56:D0:F0:6B X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ab:7b:12:05:7f:eb:71:fe:4c:7b:c5:53:2a:05:ed:92:e2: 4e:cc:8c:7c:42:c0:87:5c:a1:10:dd:49:ca:3a:8c:83:ee:f9: e4:0b:cd:35:05:4f:55:3d:94:62:23:47:5b:70:69:75:16:98: d7:43:47:3c:20:0a:81:df:cc:5c:35:ff:2c:d0:eb:51:9e:11: f2:3b:d3:cb:18:2b:24:45:eb:dc:9e:60:bd:3f:02:ab:46:2b: bf:f0:21:e7:87:6b:04:f6:cd:93:58:ae:08:e8:cc:8d:a3:67: 3d:10:7f:7c:dd:0a:3a:52:04:b3:1a:b9:04:6a:1c:b4:e9:f3: 58:75:78:56:d6:65:b1:0b:67:d7:e4:58:eb:84:bc:15:b7:94: 32:48:ec:a8:26:83:d7:43:2e:18:43:0f:b7:43:bd:f9:19:3a: d2:77:d4:17:ee:e4:c9:fa:8f:cd:4d:1a:ae:d2:a6:ea:2f:6e: 8e:cc:99:c1:d9:eb:7f:66:57:9a:e6:b7:07:d6:a3:ed:db:03: 02:66:92:c0:18:ea:77:2b:63:fc:ef:21:3f:e1:9a:20:c1:ca: 1a:9a:21:a2:cf:f4:6e:5a:85:e3:4b:eb:bc:2e:75:aa:7a:6e: 31:6b:e0:1b:96:7a:5d:84:4f:6c:d7:62:44:49:2e:01:02:1b: 07:cd:c6:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjUwNTEyMTYxNTE2WhcNMjUwNTE5MTYxNTE2WjAYMRYwFAYD VQQDEw02ODIyMWU5NC0wZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1mjUqusXkHgLSsH+B6Tq72MUjqFxnEjAYpOS73eJBgeWZ/G6d9XNI4Ag6qr iWR198aXuIGaL9DDfugP5OcWC0yaWD7a/OZVx07XjxfRPmpa134JK6jkT8cGHDGQ 97OtyDvLDlhaFUnpJQ2wQ6UPFy9TsxfD4cjyafWWI78YH7gieUazFVLfdcxNFuJW h58aDAxwKE5vCbjruYEm6e5MGQkj9/Z4F7ofLPLWM04hjl9GVzhYSK+B9oi/zFpx Lxq9iiPvq7vMfSiCjgQmsSU0mY5Ny+8CJHq1kkcQuMzNmszZoIuqppx4uWLigGhY Ozqjh7vJcwzBqQ8S0JrCPKWI4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILlCDbt TMPvkta8aDXDoL1W0PBrMB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyq3sSBX/rcf5Me8VTKgXtkuJOzIx8QsCHXKEQ3UnKOoyD7vnkC801 BU9VPZRiI0dbcGl1FpjXQ0c8IAqB38xcNf8s0OtRnhHyO9PLGCskRevcnmC9PwKr Riu/8CHnh2sE9s2TWK4I6MyNo2c9EH983Qo6UgSzGrkEahy06fNYdXhW1mWxC2fX 5FjrhLwVt5QySOyoJoPXQy4YQw+3Q735GTrSd9QX7uTJ+o/NTRqu0qbqL26OzJnB 2et/Zlea5rcH1qPt2wMCZpLAGOp3K2P87yE/4ZogwcoamiGiz/RuWoXjS+u8LnWq em4xa+AblnpdhE9s12JESS4BAhsHzcaI -----END CERTIFICATE-----Generated at Wed May 14 04:57:16 2025 by rpki-client