$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json) Hash identifier: EnHVUAeKRFUjJiWXfO4m3rcqmUZ4ikgBxf+l3XdMs2s= Subject key identifier: 94:62:A6:EE:87:E1:4D:3B:9D:B3:E6:37:F4:17:51:3F:F3:7C:EF:BE Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 073A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft Manifest number: 06D5 Signing time: Thu 24 Apr 2025 21:57:35 +0000 Manifest this update: Thu 24 Apr 2025 21:57:35 +0000 Manifest next update: Thu 01 May 2025 21:57:35 +0000 Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: MClQHeTFzaNMdkN95fnO2OW96qXqShD511GGySibWjY=) 2: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: S6sSUQCmJtkaMtMbA1O0Mmg6DyeiEI+XUAJAroLQzw0=) 3: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: 3GgLx+CbNEwoDetwa0xclFosAF0ThnHDNkGy9hkBwHY=) 4: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: gFTQhXxxWg+vWFd9YUvmY8166bjE5yYi7F/AL03zQaU=) 5: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: e4/df1ZKDr4aEamOFlzJbyomY0cdDHsDrVrwwMv17eI=) 6: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 4feN6gwvjlguQsUZ0+vuacffttVLy9DJIXoMNN8hWOI=) 7: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: zplnnTYrDs6ATh1oYF/06orqoqHtQxFtplLwmc2mqPA=) 8: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: 53gHj/OrKFXtL8aMTpoTUjSuuGCGwdKOy6cQhgB55pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1850 (0x73a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Apr 24 21:57:35 2025 GMT Not After : May 1 21:57:35 2025 GMT Subject: CN=680ab3cf-ccec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:43:d4:42:ae:d2:13:24:77:64:b9:d8:de: aa:61:c9:07:38:3b:f5:d1:da:0d:a0:de:61:a7:80: 4a:a2:01:eb:41:bf:da:7c:fb:a8:d0:0e:43:28:59: 41:77:7f:5b:bf:b5:b3:b0:a3:39:46:87:06:ad:08: 32:07:f5:c5:3c:d9:a2:bf:a5:ef:61:08:27:4a:62: 38:eb:1a:01:dc:d2:41:b5:d0:9a:ab:de:94:b2:75: 4b:45:6b:a0:36:42:51:41:a8:50:e5:69:e5:0d:dd: 3d:35:21:d1:39:57:e8:2f:2c:0b:07:c0:ca:e0:dc: 92:5b:6e:bc:ed:48:82:d8:e3:cc:b9:80:bb:aa:b4: 92:5e:b9:37:d0:e7:c3:b2:0f:f4:35:17:d0:4f:20: 6f:b1:12:a9:4e:60:cd:b0:63:24:87:d0:10:6d:a8: bb:3c:60:98:25:03:cf:77:09:93:88:a3:82:5f:a3: 72:cf:f7:29:14:34:82:6b:b5:b3:6f:cf:3b:98:39: e5:89:be:80:85:e6:ec:4a:75:4c:76:08:ef:4f:f0: fb:fd:1f:26:6b:9b:5b:38:c3:b1:a3:86:76:0f:7b: 54:43:4e:25:6d:72:1f:47:b1:2a:f6:c8:c7:5a:8f: 22:ad:51:3f:c9:64:58:41:dd:91:3b:c1:39:87:54: 63:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:62:A6:EE:87:E1:4D:3B:9D:B3:E6:37:F4:17:51:3F:F3:7C:EF:BE X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:92:3e:91:53:de:76:a7:c6:b9:d2:cc:5f:51:72:9c:08:72: 32:15:bc:99:cb:49:79:fc:a1:ed:4a:70:19:e6:c8:90:48:e6: 54:aa:4f:32:69:f0:dd:94:16:95:be:4b:85:4b:ad:22:e4:3e: 30:6e:41:d2:fb:9b:38:7e:df:91:57:36:f1:40:12:1c:b8:6c: 34:5f:eb:57:35:18:c0:e4:62:be:b6:f4:10:60:4d:50:c1:7a: 44:d3:22:ca:d0:35:77:34:31:cc:7c:dc:92:29:22:87:6f:a1: 25:f4:ad:72:7f:8d:39:a0:26:b4:f4:8c:ac:75:6f:08:47:f3: 4f:9a:f1:73:73:36:25:c4:53:39:ed:c4:71:f3:2b:2c:2b:a4: 8d:45:88:a2:9a:f3:79:fa:95:28:3d:fe:25:a5:a7:92:eb:f1: 70:2f:97:18:a2:a5:ad:c0:25:1f:30:14:ee:33:7a:68:b0:93: ee:5e:42:92:29:4d:c2:55:17:b7:31:78:04:43:aa:94:13:7f: ee:91:b9:33:e0:fa:30:26:c7:c0:58:74:cb:93:2c:11:18:6d: 3b:4d:8b:ce:27:15:ca:21:ea:02:f0:fe:8e:ba:59:3b:9b:cb: 79:4a:31:5e:78:2e:44:9e:dc:8d:5e:b0:d1:c9:1d:42:9d:8b: c2:18:86:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjUwNDI0MjE1NzM1WhcNMjUwNTAxMjE1NzM1WjAYMRYwFAYD VQQDEw02ODBhYjNjZi1jY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ1D1EKu0hMkd2S52N6qYckHODv10doNoN5hp4BKogHrQb/afPuo0A5DKFlB d39bv7WzsKM5RocGrQgyB/XFPNmiv6XvYQgnSmI46xoB3NJBtdCaq96UsnVLRWug NkJRQahQ5WnlDd09NSHROVfoLywLB8DK4NySW2687UiC2OPMuYC7qrSSXrk30OfD sg/0NRfQTyBvsRKpTmDNsGMkh9AQbai7PGCYJQPPdwmTiKOCX6Nyz/cpFDSCa7Wz b887mDnlib6AhebsSnVMdgjvT/D7/R8ma5tbOMOxo4Z2D3tUQ04lbXIfR7Eq9sjH Wo8irVE/yWRYQd2RO8E5h1RjYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRipu6H 4U07nbPmN/QXUT/zfO++MB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REYxRi9GNUNCNkU2QTVDNTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFB NXFnTndTN2tJdjZMYmpZX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjkj6RU952p8a50sxfUXKcCHIyFbyZy0l5/KHtSnAZ5siQSOZUqk8y afDdlBaVvkuFS60i5D4wbkHS+5s4ft+RVzbxQBIcuGw0X+tXNRjA5GK+tvQQYE1Q wXpE0yLK0DV3NDHMfNySKSKHb6El9K1yf405oCa09IysdW8IR/NPmvFzczYlxFM5 7cRx8yssK6SNRYiimvN5+pUoPf4lpaeS6/FwL5cYoqWtwCUfMBTuM3posJPuXkKS KU3CVRe3MXgEQ6qUE3/ukbkz4PowJsfAWHTLkywRGG07TYvOJxXKIeoC8P6Oulk7 m8t5SjFeeC5EntyNXrDRyR1CnYvCGIYF -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:11 2025 by rpki-client