$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: SdPauHyVnz8Tz5N9yh77lYkm5TD3d6z95D7UqtHHBTI= Subject key identifier: C3:83:8C:EA:37:85:BB:EE:A2:07:3F:51:AD:71:B5:D2:FB:DA:51:D5 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0341 Signing time: Fri 25 Apr 2025 00:50:41 +0000 Manifest this update: Fri 25 Apr 2025 00:50:41 +0000 Manifest next update: Fri 02 May 2025 00:50:41 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: qq+E18Hbm4c9xdTyw6KNYqvKZBLsfPHd7eSQqYXo4wI=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Apr 25 00:50:41 2025 GMT Not After : May 2 00:50:41 2025 GMT Subject: CN=680adc61-8f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:e2:c7:af:07:4d:26:bd:c7:b8:5a:15:b3: 86:b0:a7:eb:c2:41:ff:ee:09:89:8c:2f:eb:15:1c: 32:50:ed:ba:3e:ab:75:5f:89:df:87:1f:8c:7d:28: a5:20:0b:b3:8e:13:fb:cf:5f:79:5f:1f:6e:50:cd: c7:cc:d9:54:69:9f:10:d6:5f:61:b6:ef:ee:25:f6: 1b:7f:b1:8a:81:ad:bd:2c:2b:ae:65:d0:f3:54:33: 18:e7:4f:5a:03:74:3a:9b:3f:11:00:24:32:6a:ae: 74:c5:6e:1e:51:7c:af:d4:d1:da:41:9e:61:b4:95: 88:13:29:db:ae:99:a1:cc:e6:1a:d5:c5:a8:4e:9c: 82:73:e2:a5:51:b9:e7:2f:53:e3:3c:79:dc:52:97: ae:93:56:0a:56:29:a4:21:51:09:72:07:df:8a:20: 78:9e:33:a4:8b:b1:10:c7:3e:01:9a:c9:31:dc:92: 55:01:c6:96:51:01:6e:c4:06:34:c6:ba:ee:6c:10: 3f:03:96:e0:e1:9e:33:7f:ee:30:67:f0:6d:cd:68: 49:13:0b:dc:29:bc:ba:e4:0a:20:34:55:49:fa:77: 97:19:0d:3c:2d:03:bb:8a:f3:a6:ad:f9:77:2b:b5: 31:3e:d4:76:ec:2b:14:44:0b:ff:4f:58:8d:17:ea: fe:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:83:8C:EA:37:85:BB:EE:A2:07:3F:51:AD:71:B5:D2:FB:DA:51:D5 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:28:fd:f8:e9:03:0e:2f:f7:2d:9b:33:ea:92:ce:ea:78:93: 1c:d3:71:b5:26:bc:f5:e4:13:bb:15:dd:f6:19:4c:6a:cb:0d: 81:51:cc:30:73:89:ae:2d:02:b5:dd:a4:3f:26:dd:3e:54:51: 20:05:de:36:08:a2:e4:86:f1:90:39:ed:3d:99:c9:c1:67:d2: 51:ed:f5:71:4a:2c:68:3b:12:e7:f8:0e:87:0c:ac:da:7b:24: da:ec:b9:c6:f5:c5:89:ba:7f:02:c9:4f:be:a4:43:39:0f:ca: 0d:5e:87:71:93:1b:c1:d3:e0:89:68:a0:35:f3:cc:2c:a0:e1: 69:68:57:58:c5:91:ef:e8:60:c3:e3:2e:03:6a:1b:e3:ee:70: 71:6c:54:2e:6a:e8:e5:da:68:1b:58:b9:fe:a6:f8:e1:fc:76: d1:96:94:24:1a:2f:55:ed:c1:75:9d:ac:b9:0d:45:60:57:ae: a6:47:d5:b2:d9:1b:41:93:1f:f4:a0:bf:4c:31:26:40:7f:1f: 48:65:68:17:53:b5:b9:53:7b:cb:2e:a6:7d:a6:bc:98:bc:aa: 97:d4:66:d8:3e:88:0c:b9:8c:92:8d:41:98:c0:56:b2:13:1c: 4e:8c:6c:f6:0c:b9:a8:3a:79:28:bb:f0:4d:57:ea:31:17:56: ea:70:d1:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUwNDI1MDA1MDQxWhcNMjUwNTAyMDA1MDQxWjAYMRYwFAYD VQQDEw02ODBhZGM2MS04ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6bix68HTSa9x7haFbOGsKfrwkH/7gmJjC/rFRwyUO26Pqt1X4nfhx+MfSil IAuzjhP7z195Xx9uUM3HzNlUaZ8Q1l9htu/uJfYbf7GKga29LCuuZdDzVDMY509a A3Q6mz8RACQyaq50xW4eUXyv1NHaQZ5htJWIEynbrpmhzOYa1cWoTpyCc+KlUbnn L1PjPHncUpeuk1YKVimkIVEJcgffiiB4njOki7EQxz4Bmskx3JJVAcaWUQFuxAY0 xrrubBA/A5bg4Z4zf+4wZ/BtzWhJEwvcKby65AogNFVJ+neXGQ08LQO7ivOmrfl3 K7UxPtR27CsURAv/T1iNF+r+AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMODjOo3 hbvuogc/Ua1xtdL72lHVMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEKP346QMOL/ctmzPqks7qeJMc03G1Jrz15BO7Fd32GUxqyw2BUcww c4muLQK13aQ/Jt0+VFEgBd42CKLkhvGQOe09mcnBZ9JR7fVxSixoOxLn+A6HDKza eyTa7LnG9cWJun8CyU++pEM5D8oNXodxkxvB0+CJaKA188wsoOFpaFdYxZHv6GDD 4y4Dahvj7nBxbFQuaujl2mgbWLn+pvjh/HbRlpQkGi9V7cF1nay5DUVgV66mR9Wy 2RtBkx/0oL9MMSZAfx9IZWgXU7W5U3vLLqZ9pryYvKqX1GbYPogMuYySjUGYwFay ExxOjGz2DLmoOnkou/BNV+oxF1bqcNFn -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:43 2025 by rpki-client