$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: rWgooYmE805QmWEhRxN8+QkSGBR5gh+atWiL3ai9UKM= Subject key identifier: 78:5F:2A:D7:84:2E:A4:78:8C:52:70:39:9E:96:96:90:D4:05:04:97 Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 080D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 07FF Signing time: Wed 30 Apr 2025 20:38:01 +0000 Manifest this update: Wed 30 Apr 2025 20:38:01 +0000 Manifest next update: Wed 07 May 2025 20:38:01 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: ELFNO2xCfmDcLz3/B0TItfTchpw1eWEDVvj9HhrJfhg=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: tgiKpA5/VOirxpzZclo5SCNNUmu09Z28SHd+MFyd0UE=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: n8qFcHxdOC/HNtBruhuEeiEtGy0dZxWyfWu4yIA24vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 20:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2061 (0x80d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Apr 30 20:38:01 2025 GMT Not After : May 7 20:38:01 2025 GMT Subject: CN=68128a29-e4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a8:83:ca:2d:44:ce:64:f0:80:12:a1:c2:0c: 0d:cf:93:2f:54:b9:a5:dc:f4:ed:a7:73:f5:79:34: bd:29:f7:12:0b:d2:3c:0a:82:bc:6f:14:44:dd:e1: 93:ad:b4:e6:51:d7:ab:9b:29:03:bc:d3:8e:45:1f: d0:4a:b3:e7:17:2c:7a:0e:5d:9e:a6:d1:57:df:d5: fa:bf:d0:63:68:05:55:ac:5e:2f:d5:27:05:40:ab: 56:29:3a:02:eb:67:9c:14:4a:97:e2:4a:d4:08:b1: 68:e3:b2:29:5f:33:86:69:b9:6b:09:74:5b:26:9a: fc:25:08:1e:00:0b:ee:21:2d:41:f1:e0:9f:70:d9: 35:2f:3f:c4:9f:97:c8:e8:bd:2d:16:64:d2:37:a0: 1c:70:60:e9:3b:b6:9d:ee:9c:31:4e:8c:4f:71:d5: c9:13:51:43:e2:28:fe:4f:9c:c7:b2:72:89:a9:24: 50:42:58:0a:ff:55:52:39:15:3f:ab:c0:65:98:e7: 2a:3e:23:a0:af:00:bf:32:bd:24:d0:8a:e5:b2:c3: 77:60:80:4e:83:dc:15:37:0e:12:99:a5:8a:f7:85: 5d:c2:6d:6b:1b:b4:60:51:db:e7:d2:e7:e1:8e:3f: af:80:8c:c0:a4:20:bb:20:b9:1d:5c:3c:be:fa:81: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5F:2A:D7:84:2E:A4:78:8C:52:70:39:9E:96:96:90:D4:05:04:97 X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3e:6e:a5:ec:f1:e3:9b:a2:95:1d:da:af:97:65:60:ad:c2: b7:3c:ab:7c:bf:cf:80:c1:a8:07:f0:77:37:12:d6:2b:c7:a9: b2:1e:4d:1d:50:a4:94:82:37:c2:4c:12:59:7d:38:41:b6:19: 25:85:5e:bd:79:02:d4:3c:70:f0:71:2d:4d:82:92:b0:a5:14: 16:a5:70:45:31:94:71:33:43:49:bd:37:bb:30:c2:d1:d6:d3: 4a:d5:7c:7d:e1:7c:3f:b4:bd:db:33:2c:b5:b4:1d:96:46:a1: 56:b6:bc:95:22:97:b8:37:26:0f:81:f1:23:24:ec:40:1f:31: 5e:4a:fa:96:ba:59:c5:33:fe:a6:57:7d:8e:26:89:8e:4f:13: ab:75:3f:47:11:59:b6:46:59:ef:bb:30:18:93:7a:44:51:b1: 49:42:67:da:9d:c8:c8:a1:fd:42:8e:67:1c:b6:90:54:c0:c8: 7a:b4:66:66:d6:03:8d:c3:eb:13:04:47:ac:79:dc:2a:0c:be: c7:88:79:1a:c3:71:a0:81:87:78:73:40:23:d5:9c:ac:ae:da: 69:97:31:d2:9c:a0:cb:07:fd:ff:f6:92:2f:05:ef:66:83:96: 16:c5:4c:c1:2e:10:68:b2:95:1f:76:0f:97:8c:23:32:66:cf: 9e:f2:70:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUwNDMwMjAzODAxWhcNMjUwNTA3MjAzODAxWjAYMRYwFAYD VQQDEw02ODEyOGEyOS1lNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9aiDyi1EzmTwgBKhwgwNz5MvVLml3PTtp3P1eTS9KfcSC9I8CoK8bxRE3eGT rbTmUdermykDvNOORR/QSrPnFyx6Dl2eptFX39X6v9BjaAVVrF4v1ScFQKtWKToC 62ecFEqX4krUCLFo47IpXzOGablrCXRbJpr8JQgeAAvuIS1B8eCfcNk1Lz/En5fI 6L0tFmTSN6AccGDpO7ad7pwxToxPcdXJE1FD4ij+T5zHsnKJqSRQQlgK/1VSORU/ q8BlmOcqPiOgrwC/Mr0k0IrlssN3YIBOg9wVNw4SmaWK94Vdwm1rG7RgUdvn0ufh jj+vgIzApCC7ILkdXDy++oE4dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhfKteE LqR4jFJwOZ6WlpDUBQSXMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFPm6l7PHjm6KVHdqvl2VgrcK3PKt8v8+AwagH8Hc3EtYrx6myHk0d UKSUgjfCTBJZfThBthklhV69eQLUPHDwcS1NgpKwpRQWpXBFMZRxM0NJvTe7MMLR 1tNK1Xx94Xw/tL3bMyy1tB2WRqFWtryVIpe4NyYPgfEjJOxAHzFeSvqWulnFM/6m V32OJomOTxOrdT9HEVm2RlnvuzAYk3pEUbFJQmfancjIof1CjmcctpBUwMh6tGZm 1gONw+sTBEesedwqDL7HiHkaw3GggYd4c0Aj1ZysrtpplzHSnKDLB/3/9pIvBe9m g5YWxUzBLhBospUfdg+XjCMyZs+e8nAU -----END CERTIFICATE-----Generated at Thu May 1 08:26:19 2025 by rpki-client