$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json) Hash identifier: 6EHqmnCr1MFbdTiERFADuQShDFKLMzvANPWUsHU6loE= Subject key identifier: F0:D8:24:55:9A:70:CF:D5:3C:AC:F0:90:25:75:9F:E3:5E:2D:D3:22 Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft Manifest number: 0642 Signing time: Mon 12 May 2025 22:04:35 +0000 Manifest this update: Mon 12 May 2025 22:04:35 +0000 Manifest next update: Mon 19 May 2025 22:04:35 +0000 Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: jnN8MsOKCmozo7BheYhOBsXOW2TuueqKiAy2FwLwLAE=) 2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: Ps44UQPvNI+l6dnKBZUyTUvHvKmwO+RBPeKzPiMeBfw=) 3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: gsfWGtMmL+dpa9EjzvC9HprHiy8q0yGq8k/h26d5iH8=) 4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: myGu3py2MJoX+9pcsdAEfeXFlVuZbTSedA0MlFyQwmI=) 5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: IRx8YlQZD3iZNO8ZkV5fm0YkjEB3fazq27IMfHjcxDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Validity Not Before: May 12 22:04:35 2025 GMT Not After : May 19 22:04:35 2025 GMT Subject: CN=68227073-5a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:a1:f0:8d:34:9a:19:e8:7b:27:97:fd:a0: 37:4b:2d:c6:58:5b:74:35:c4:23:ff:af:47:35:57: 72:b7:73:ec:f0:9c:40:8d:f6:91:20:b2:fc:0e:9e: f7:5f:06:80:f7:56:81:36:92:34:c9:c7:ad:68:06: 8a:9e:08:aa:57:fe:3d:5d:34:77:3b:b0:c3:c4:d2: f4:a4:ac:3d:c9:33:ec:9b:37:72:c3:e4:38:e5:73: ec:bd:e4:02:4f:52:99:2e:3b:b1:3e:73:0e:ad:07: 3e:11:2e:08:3a:42:7f:f1:67:f5:42:85:fe:72:48: 81:8d:a1:a2:dd:ff:e7:99:e7:aa:cb:fe:c5:5a:a6: 8b:af:76:1d:dc:66:1b:17:87:3a:09:52:18:54:03: 70:db:8b:44:62:f8:25:c7:7d:7b:5a:da:bf:a0:eb: dd:d1:b8:cf:de:be:42:e3:97:c9:98:32:6f:8c:3e: 66:b9:fb:5c:77:c2:35:26:d2:7d:ae:d7:9e:5e:be: 60:93:8c:ee:2d:99:55:b6:3b:87:b6:31:28:10:ec: 48:f3:0d:59:59:6d:b0:75:c1:88:c0:8d:b5:83:31: 36:77:14:57:cf:55:ea:c3:77:d1:94:37:a5:26:a9: ae:7c:fa:16:15:0a:8f:64:7f:9a:de:9b:14:9b:1f: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D8:24:55:9A:70:CF:D5:3C:AC:F0:90:25:75:9F:E3:5E:2D:D3:22 X509v3 Authority Key Identifier: keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ae:b8:30:0d:e0:42:08:65:43:ca:5f:10:1a:6d:b7:a9:58: 5b:c2:d7:e6:b9:b2:9b:96:87:0c:c9:d6:64:2a:85:d8:73:0e: f3:d2:d5:d6:e2:50:ef:12:8d:00:95:f5:1f:47:46:ce:9a:06: 7e:76:85:a5:e5:4b:71:c2:f6:f9:cb:56:3e:36:50:10:ec:38: 6f:9b:ae:7a:0b:2e:58:75:24:9f:e4:bc:1a:3a:cd:56:d9:9f: e7:31:45:79:cc:24:e7:b5:20:88:48:62:34:f6:9c:f4:73:f0: c0:ff:8a:89:56:6d:08:8b:61:9e:b4:0c:d4:08:77:55:56:41: 61:05:04:8a:72:18:ca:fc:b4:a4:60:82:9c:4f:42:1f:50:bd: 63:41:a8:a5:af:f8:05:13:1f:72:d6:c2:f6:c2:84:87:59:0a: 81:96:d8:d6:b6:28:77:4f:ef:a6:5b:c4:58:82:ac:e6:d4:ce: 65:e7:66:5c:8b:1d:64:16:96:3f:d1:bb:e1:e5:dc:52:83:5c: d5:43:85:63:f3:7e:1f:e1:76:ae:9d:e6:78:e3:a6:ed:eb:1e: a2:56:bb:47:3d:f4:1b:95:34:18:15:b3:60:95:cd:47:7d:13: 80:68:05:2d:f1:69:6b:26:30:69:11:68:be:e4:0d:c2:af:46: 2b:b6:53:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD MkE0RTI5Q0UwHhcNMjUwNTEyMjIwNDM1WhcNMjUwNTE5MjIwNDM1WjAYMRYwFAYD VQQDEw02ODIyNzA3My01YTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxeh8I00mhnoeyeX/aA3Sy3GWFt0NcQj/69HNVdyt3Ps8JxAjfaRILL8Dp73 XwaA91aBNpI0ycetaAaKngiqV/49XTR3O7DDxNL0pKw9yTPsmzdyw+Q45XPsveQC T1KZLjuxPnMOrQc+ES4IOkJ/8Wf1QoX+ckiBjaGi3f/nmeeqy/7FWqaLr3Yd3GYb F4c6CVIYVANw24tEYvglx317Wtq/oOvd0bjP3r5C45fJmDJvjD5muftcd8I1JtJ9 rteeXr5gk4zuLZlVtjuHtjEoEOxI8w1ZWW2wdcGIwI21gzE2dxRXz1Xqw3fRlDel JqmufPoWFQqPZH+a3psUmx8Y+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDYJFWa cM/VPKzwkCV1n+NeLdMiMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw TURiUnh5M1V3S2ZDcE9LYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOrrgwDeBCCGVDyl8QGm23qVhbwtfmubKblocMydZkKoXYcw7z0tXW 4lDvEo0AlfUfR0bOmgZ+doWl5Utxwvb5y1Y+NlAQ7Dhvm656Cy5YdSSf5LwaOs1W 2Z/nMUV5zCTntSCISGI09pz0c/DA/4qJVm0Ii2GetAzUCHdVVkFhBQSKchjK/LSk YIKcT0IfUL1jQailr/gFEx9y1sL2woSHWQqBltjWtih3T++mW8RYgqzm1M5l52Zc ix1kFpY/0bvh5dxSg1zVQ4Vj834f4XauneZ446bt6x6iVrtHPfQblTQYFbNglc1H fROAaAUt8WlrJjBpEWi+5A3Cr0YrtlMr -----END CERTIFICATE-----Generated at Wed May 14 23:37:26 2025 by rpki-client