$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft File: _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json) Hash identifier: sNKbyF0MYIMINezpmhzMSDRbKiqda3Iq70uTSVlJ8rI= Subject key identifier: E4:B6:59:59:1A:5B:25:DB:55:46:70:B0:5B:28:A2:0D:E9:D3:54:B9 Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 Certificate issuer: /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Certificate serial: 0B08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft Manifest number: 0B00 Signing time: Fri 16 May 2025 19:32:27 +0000 Manifest this update: Fri 16 May 2025 19:32:27 +0000 Manifest next update: Fri 23 May 2025 19:32:27 +0000 Files and hashes: 1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: RB7X1dFz+ulSJsFnPdnR6nTMRNxw/vrD+q4AXSnnihc=) 2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: eJxhMumE24IdqZQ/I602N1y1cc9RwzoCVgJskzDB9CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2824 (0xb08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DF6F, serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Validity Not Before: May 16 19:32:27 2025 GMT Not After : May 23 19:32:27 2025 GMT Subject: CN=682792cb-f132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:3f:d6:b9:53:11:05:9c:17:f3:1c:3c:64: 41:36:e7:6d:a1:b4:d9:8e:eb:6c:80:85:e5:9e:6d: ec:28:9f:52:2b:82:30:67:65:c0:e5:1d:d9:de:a7: aa:95:e6:58:8a:69:64:68:21:89:b3:dd:b2:c1:fd: 4a:96:eb:21:1d:1f:73:9b:3c:01:e3:44:d7:56:14: 85:94:c8:5d:06:1e:86:b7:19:99:a9:42:57:f1:35: 4e:a5:90:61:5b:5a:48:2c:2d:cb:14:b8:72:48:a4: 62:d1:7b:4c:f5:10:dd:ea:98:1c:19:9e:f6:72:d9: 6b:88:dc:ed:81:2f:e6:f5:a8:08:f8:ab:14:1c:c1: fc:54:97:23:33:ed:4b:42:a4:e7:65:bc:30:1c:89: 42:3a:95:1a:c1:d1:e6:bf:68:7a:28:ce:db:fc:5c: c2:63:4b:ec:6e:ef:ec:d7:3e:f1:0d:76:77:14:9e: 02:5b:25:f6:ec:e8:d9:ea:3c:5d:aa:14:cf:6b:2b: 17:f9:97:d1:56:a5:f3:6c:ee:7c:a6:66:6c:3b:3a: b0:34:dc:e2:75:11:8a:0d:4c:de:16:8c:0f:31:e0: 85:05:b0:4c:54:0e:b0:25:91:29:d3:d9:9d:18:a2: 05:eb:13:9e:d2:73:17:c1:be:e4:fb:96:16:8b:06: c1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B6:59:59:1A:5B:25:DB:55:46:70:B0:5B:28:A2:0D:E9:D3:54:B9 X509v3 Authority Key Identifier: keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f9:6d:60:31:0b:6a:4e:1c:d9:33:ca:b9:5a:0a:53:5f:f4: 2b:48:36:71:33:cc:51:71:cf:e7:1d:71:f1:b1:a1:9c:f7:a9: 9c:db:c8:3e:78:46:6c:0d:6a:fa:2e:65:db:e5:75:00:d9:db: 1f:cd:94:d3:50:9e:91:14:6a:1d:8e:63:86:31:57:14:fa:d5: b4:ab:88:1b:e8:23:a7:03:0e:c3:1f:7e:4c:06:2f:5f:85:e4: dc:fa:ec:59:af:bc:79:fb:95:94:71:52:3b:26:17:63:d6:7c: b6:f9:15:fc:20:0c:f0:1f:64:fc:fd:08:4e:48:3b:8b:49:36: 6b:d5:b6:eb:47:c4:21:a8:1b:11:55:eb:61:00:93:22:9a:5f: 38:45:8c:3c:a1:c3:cf:65:a2:89:db:eb:05:37:3c:0f:d6:96: 33:91:3a:58:45:f6:93:d5:ac:cf:f7:56:eb:95:b0:16:06:df: 13:50:1e:9b:1b:59:51:5b:94:9b:47:48:68:b5:4b:8d:69:98: 9e:8e:88:92:4c:8d:85:f2:35:bc:bd:58:04:f8:6e:db:bd:ca: 7c:01:35:99:fd:91:47:9e:91:8f:06:93:09:e8:d7:e3:62:54: 08:c5:bb:2a:a6:f6:3b:fa:90:8a:40:e1:8b:88:51:1d:ef:4a: 47:73:92:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURGNkYxMTAvBgNVBAUTKEZEQzYxMzU1MTVENUQwMTVDOTQ0M0JCNEM1OUJDQkZC NkQwNjkzRDEwHhcNMjUwNTE2MTkzMjI3WhcNMjUwNTIzMTkzMjI3WjAYMRYwFAYD VQQDEw02ODI3OTJjYi1mMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF0/1rlTEQWcF/McPGRBNudtobTZjutsgIXlnm3sKJ9SK4IwZ2XA5R3Z3qeq leZYimlkaCGJs92ywf1KlushHR9zmzwB40TXVhSFlMhdBh6GtxmZqUJX8TVOpZBh W1pILC3LFLhySKRi0XtM9RDd6pgcGZ72ctlriNztgS/m9agI+KsUHMH8VJcjM+1L QqTnZbwwHIlCOpUawdHmv2h6KM7b/FzCY0vsbu/s1z7xDXZ3FJ4CWyX27OjZ6jxd qhTPaysX+ZfRVqXzbO58pmZsOzqwNNzidRGKDUzeFowPMeCFBbBMVA6wJZEp09md GKIF6xOe0nMXwb7k+5YWiwbBlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS2WVka WyXbVUZwsFsoog3p01S5MB8GA1UdIwQYMBaAFP3GE1UV1dAVyUQ7tMWby/ttBpPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REY2Ri9EQTQwQThFODQy OTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBCWEpSRHUweFp2TC0yMEdr OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19jWVRWUlhWMEJYSlJEdTB4WnZMLTIwR2s5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REY2Ri9EQTQwQThFODQyOTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBC WEpSRHUweFp2TC0yMEdrOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4+W1gMQtqThzZM8q5WgpTX/QrSDZxM8xRcc/nHXHxsaGc96mc28g+ eEZsDWr6LmXb5XUA2dsfzZTTUJ6RFGodjmOGMVcU+tW0q4gb6COnAw7DH35MBi9f heTc+uxZr7x5+5WUcVI7Jhdj1ny2+RX8IAzwH2T8/QhOSDuLSTZr1bbrR8QhqBsR VethAJMiml84RYw8ocPPZaKJ2+sFNzwP1pYzkTpYRfaT1azP91brlbAWBt8TUB6b G1lRW5SbR0hotUuNaZiejoiSTI2F8jW8vVgE+G7bvcp8ATWZ/ZFHnpGPBpMJ6Nfj YlQIxbsqpvY7+pCKQOGLiFEd70pHc5Lg -----END CERTIFICATE-----Generated at Sat May 17 01:16:21 2025 by rpki-client