$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json) Hash identifier: g2ltIdVQgH/miOylmb8OqvBo87YBFZjDxFcnpxl/+xk= Subject key identifier: 11:8F:E3:65:6F:CA:D3:5E:07:AB:99:F3:A1:DF:EC:E5:B3:F1:0A:EC Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0516 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft Manifest number: 0500 Signing time: Sat 10 May 2025 16:18:16 +0000 Manifest this update: Sat 10 May 2025 16:18:15 +0000 Manifest next update: Sat 17 May 2025 16:18:15 +0000 Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: 3e+luct1HzV9D0vYBKivaMZLuYzcq62jQPVBr1C3hkI=) 2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: yR/rS2v+MnuPsp4IAeWDDgPbPiNnjwU9wDh4QYZV4SU=) 3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: qkuJyiuag7r0VmHzzxIeNNPZvE1YemZEbkXs9TYwx5o=) 4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: YZwNutRVemyQTlte1eEv/AcDXWm1xtlx4204L/kTObo=) 5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: ACLXZnrak+BWFZVdvvziA50vZItebg8EqCvB342Th1I=) 6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: Cywfb2Rnt+MB9wFrcD0/BbNel0gnNnVhinHv2K8l9OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1302 (0x516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: May 10 16:18:15 2025 GMT Not After : May 17 16:18:15 2025 GMT Subject: CN=681f7c48-a789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:7b:76:48:57:39:03:af:de:f6:5f:67:22: fa:3e:cb:8f:17:c7:9d:cf:84:a2:ad:54:2d:0d:c3: 70:c2:05:3a:81:50:86:3a:5a:c4:67:6e:5a:c4:b8: 0a:0c:08:78:8d:6a:b8:55:dc:22:c8:62:6f:fc:e1: c9:6d:ad:f4:2e:3e:88:1c:f0:8a:71:e2:17:20:71: 95:8c:6d:5f:fb:55:13:91:53:13:e5:3d:8f:d1:1f: f3:21:05:3a:e7:c2:e4:0f:ee:56:8b:a0:0e:14:3c: b7:ca:a4:36:58:0e:74:a9:29:3e:1e:98:a6:67:b5: 98:87:ae:19:9f:5d:19:e6:02:3e:64:6a:c4:8c:a3: ff:30:04:ba:d3:5e:54:84:c5:ee:94:7e:f8:24:10: 2a:29:79:25:f9:21:05:0e:63:3b:2f:3e:46:89:92: 6e:4f:f0:a0:0e:39:12:88:e3:cd:ed:fe:59:0c:cf: ac:d1:13:0f:1b:a4:7e:06:b1:15:03:98:a8:55:08: e1:da:57:00:db:6b:1a:df:f6:71:63:e9:a6:c3:b5: 60:c7:c1:58:62:63:d9:9a:3d:fd:1b:dd:84:7d:18: f2:d0:56:05:98:cd:db:99:ef:23:97:65:09:34:55: 75:ff:ea:db:7a:ea:6b:44:1d:be:12:19:b1:b8:af: 84:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8F:E3:65:6F:CA:D3:5E:07:AB:99:F3:A1:DF:EC:E5:B3:F1:0A:EC X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:6b:41:8f:0c:93:31:d4:72:7c:5d:39:fa:d7:3b:c0:62:4e: fd:b2:ed:ce:6d:84:01:7c:cf:39:4a:f9:d2:3b:b7:9c:53:08: e7:07:ad:bf:b1:b5:ee:07:df:79:71:20:9b:5d:83:5c:bc:fc: aa:fc:63:ba:7b:32:32:97:96:bd:9d:98:1e:b7:a8:56:f0:20: 43:a9:a1:01:97:a2:89:51:6e:a6:57:da:4d:ee:92:13:da:d4: 6f:3d:8f:14:48:60:0d:7a:40:81:56:f0:33:ed:76:f0:03:61: f9:4d:8f:a5:0f:52:3a:00:82:9b:06:f3:81:26:23:18:c4:e3: 05:a0:3e:35:18:1d:6f:51:0a:a5:08:a2:ce:3c:28:a8:e7:1d: d9:2a:5f:9d:48:fa:43:da:d8:b6:11:49:36:25:9c:36:51:58: cc:f5:13:1c:14:82:8c:5e:ab:c3:e9:34:3f:0f:21:79:7b:50: e3:74:c6:3f:89:ad:22:e0:a5:73:ad:7a:57:7c:ba:a9:c2:c5: 06:c1:91:23:4b:ec:8b:e1:da:73:86:1a:06:82:3a:87:a0:8f: df:86:7f:f7:c7:2f:1d:95:96:33:48:cd:af:ff:bd:dc:5b:fd: 98:49:bd:08:fa:2f:35:ca:2f:4f:fc:29:83:c4:70:03:f6:8e: 30:1a:c2:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUwNTEwMTYxODE1WhcNMjUwNTE3MTYxODE1WjAYMRYwFAYD VQQDEw02ODFmN2M0OC1hNzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/17dkhXOQOv3vZfZyL6PsuPF8edz4SirVQtDcNwwgU6gVCGOlrEZ25axLgK DAh4jWq4VdwiyGJv/OHJba30Lj6IHPCKceIXIHGVjG1f+1UTkVMT5T2P0R/zIQU6 58LkD+5Wi6AOFDy3yqQ2WA50qSk+HpimZ7WYh64Zn10Z5gI+ZGrEjKP/MAS6015U hMXulH74JBAqKXkl+SEFDmM7Lz5GiZJuT/CgDjkSiOPN7f5ZDM+s0RMPG6R+BrEV A5ioVQjh2lcA22sa3/ZxY+mmw7Vgx8FYYmPZmj39G92EfRjy0FYFmM3bme8jl2UJ NFV1/+rbeuprRB2+EhmxuK+EWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGP42Vv ytNeB6uZ86Hf7OWz8QrsMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1 blpxT3NxNXkwOERGVUVVNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXa0GPDJMx1HJ8XTn61zvAYk79su3ObYQBfM85SvnSO7ecUwjnB62/ sbXuB995cSCbXYNcvPyq/GO6ezIyl5a9nZget6hW8CBDqaEBl6KJUW6mV9pN7pIT 2tRvPY8USGANekCBVvAz7XbwA2H5TY+lD1I6AIKbBvOBJiMYxOMFoD41GB1vUQql CKLOPCio5x3ZKl+dSPpD2ti2EUk2JZw2UVjM9RMcFIKMXqvD6TQ/DyF5e1DjdMY/ ia0i4KVzrXpXfLqpwsUGwZEjS+yL4dpzhhoGgjqHoI/fhn/3xy8dlZYzSM2v/73c W/2YSb0I+i81yi9P/CmDxHAD9o4wGsJf -----END CERTIFICATE-----Generated at Sun May 11 01:08:35 2025 by rpki-client