$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: FbgL3kqfZi33KMooUy+4LVxdJ7/tjmzDQ7d/tJ4IIqg= Subject key identifier: C3:8B:E2:E0:E3:B5:29:93:CC:08:37:64:C2:AB:09:38:65:A7:42:35 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 01EB Signing time: Tue 13 May 2025 01:57:22 +0000 Manifest this update: Tue 13 May 2025 01:57:22 +0000 Manifest next update: Tue 20 May 2025 01:57:22 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: DNMTlGeXTeU4IDCwVoYDF0Ok9YfWDt6yayD6m66DIc0=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: GEtYiWLknMjIUtasCLz3xO+Z9HJ/gkoudL4BFK8Uyb8=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: JJtIODUU0vxeCd16MdkVxGe00rno7Fl7ALBMI2DvnXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: May 13 01:57:22 2025 GMT Not After : May 20 01:57:22 2025 GMT Subject: CN=6822a702-e828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:56:46:4e:d9:03:11:22:e0:be:51:52:6d: 6e:e7:d1:b2:ca:4e:d6:2e:47:b5:b5:26:0b:10:97: 35:6b:03:02:fc:1d:3e:bd:25:63:7e:f4:ad:1e:ee: f2:0b:3f:0d:1a:ec:ec:64:22:5a:62:f9:64:11:7a: 51:8e:be:1d:88:3c:03:3a:e1:39:27:23:f8:46:ab: f4:36:7b:32:de:9e:e9:e5:64:43:40:77:7b:23:1c: 4d:07:0c:8b:91:be:c6:67:7d:12:98:48:b4:7b:c4: e9:9c:d2:ea:04:1d:98:69:96:43:09:a7:42:e3:84: 3e:af:e5:05:88:b7:1b:9f:d0:75:59:49:61:67:ea: 61:a2:f4:c1:b2:79:fe:85:b3:6e:0c:36:06:36:f2: 1b:18:b3:50:dc:7b:09:ab:cc:d7:3a:bd:51:2f:41: b7:52:c7:a8:90:e0:f2:e9:d8:da:32:3f:04:f9:db: d1:fa:80:0e:0b:57:87:a0:af:a2:24:b5:4d:29:f5: 32:ca:da:77:24:12:dd:50:da:8d:f7:c7:42:d1:3c: f5:16:b3:b5:38:bc:8d:6c:e8:da:61:1b:57:3a:75: 30:b4:5a:72:b6:57:c0:10:59:16:e4:ee:68:14:d3: d6:81:19:80:fa:32:68:9e:46:12:b0:3e:d0:f0:ac: 2c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8B:E2:E0:E3:B5:29:93:CC:08:37:64:C2:AB:09:38:65:A7:42:35 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8b:64:9c:27:fb:05:19:bc:7c:c9:69:f3:23:7f:ac:be:82: e4:8d:f8:fb:b2:de:59:a3:6d:64:42:3b:07:76:00:fe:59:e8: cb:f8:ee:26:9c:f4:ad:77:37:50:cf:d5:04:63:93:ca:46:fd: 0f:47:2e:28:eb:a9:f7:24:8f:a7:f3:9a:fc:e6:49:1b:75:32: 30:af:d8:ac:d0:e4:52:59:e7:6b:72:57:fd:7c:72:94:e1:34: 58:d9:72:0b:48:fc:30:01:82:ad:b9:0f:db:17:11:63:f6:73: 49:07:ef:c7:de:44:d4:c7:47:0d:bb:96:91:06:aa:0f:ed:2f: 26:62:98:ac:e9:7e:c0:73:64:eb:83:4a:d0:27:43:36:1d:1e: 1c:d4:73:4a:6e:ed:f8:1e:f8:62:50:89:25:16:76:f1:1d:e8: 33:76:81:db:97:50:05:ae:ce:f6:7d:c8:a0:eb:24:fb:81:fc: a9:8f:ed:7f:a7:ea:8c:4f:3c:99:8a:7d:a8:a6:92:a3:fe:dd: 12:38:0a:09:f1:df:54:79:e0:60:80:c5:74:ec:95:91:56:0a: f0:5d:1c:b7:95:4e:25:84:04:c8:89:b3:1a:84:cf:67:c5:e4: 7b:05:79:5f:f4:8f:6f:e2:db:39:43:51:71:b1:54:af:66:a6: a5:0c:0d:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjUwNTEzMDE1NzIyWhcNMjUwNTIwMDE1NzIyWjAYMRYwFAYD VQQDEw02ODIyYTcwMi1lODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJZWRk7ZAxEi4L5RUm1u59Gyyk7WLke1tSYLEJc1awMC/B0+vSVjfvStHu7y Cz8NGuzsZCJaYvlkEXpRjr4diDwDOuE5JyP4Rqv0Nnsy3p7p5WRDQHd7IxxNBwyL kb7GZ30SmEi0e8TpnNLqBB2YaZZDCadC44Q+r+UFiLcbn9B1WUlhZ+phovTBsnn+ hbNuDDYGNvIbGLNQ3HsJq8zXOr1RL0G3UseokODy6djaMj8E+dvR+oAOC1eHoK+i JLVNKfUyytp3JBLdUNqN98dC0Tz1FrO1OLyNbOjaYRtXOnUwtFpytlfAEFkW5O5o FNPWgRmA+jJonkYSsD7Q8Kws2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOL4uDj tSmTzAg3ZMKrCThlp0I1MB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAei2ScJ/sFGbx8yWnzI3+svoLkjfj7st5Zo21kQjsHdgD+WejL+O4m nPStdzdQz9UEY5PKRv0PRy4o66n3JI+n85r85kkbdTIwr9is0ORSWedrclf9fHKU 4TRY2XILSPwwAYKtuQ/bFxFj9nNJB+/H3kTUx0cNu5aRBqoP7S8mYpis6X7Ac2Tr g0rQJ0M2HR4c1HNKbu34HvhiUIklFnbxHegzdoHbl1AFrs72fcig6yT7gfypj+1/ p+qMTzyZin2oppKj/t0SOAoJ8d9UeeBggMV07JWRVgrwXRy3lU4lhATIibMahM9n xeR7BXlf9I9v4ts5Q1FxsVSvZqalDA2W -----END CERTIFICATE-----Generated at Tue May 13 15:37:12 2025 by rpki-client