$ rpki-client -vvf rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft File: DeK2pi5UoKYbzzFLbi77jzoeOno.mft (raw, json) Hash identifier: BBieEFn4QX45CI1fmeQlKr3tiHBlaZWj/mum3dsNHIs= Subject key identifier: A5:B6:9B:01:A8:D5:1E:5C:CB:06:C3:6E:46:46:03:D5:CC:04:11:2D Authority key identifier: 0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A Certificate issuer: /CN=A916F8DB/serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft Manifest number: 012E Signing time: Fri 25 Apr 2025 03:39:20 +0000 Manifest this update: Fri 25 Apr 2025 03:39:20 +0000 Manifest next update: Fri 02 May 2025 03:39:20 +0000 Files and hashes: 1: DeK2pi5UoKYbzzFLbi77jzoeOno.crl (hash: Kx7IzVBs2jXjoSO72hGeJ29TVmixjh1ZAMyMwVhTvkE=) 2: 65A459FE54BD11EE8C958973C4F9AE02.roa (hash: iUnEHsfjN1jchtBZnX9gEs2PWdWpqrF2oKCzEFQT8+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F8DB, serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Validity Not Before: Apr 25 03:39:20 2025 GMT Not After : May 2 03:39:20 2025 GMT Subject: CN=680b03e8-4575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:3e:c0:88:47:80:1f:0a:3c:50:e4:f8:16: 21:c4:ac:5d:8b:1a:3d:af:86:5a:30:1e:52:3a:32: 0d:55:31:e9:46:39:87:72:24:45:ed:34:e6:b7:98: 6a:99:46:2f:f8:3d:f9:93:cf:2c:d6:f7:1f:74:96: fb:48:44:62:34:ee:b1:db:4e:04:6e:60:c9:0f:d1: 28:bb:a1:3e:f8:98:54:59:7b:f2:96:59:30:b8:78: 55:8f:1b:45:56:5e:59:2a:c1:86:43:31:a4:65:15: cb:30:ac:ef:56:80:f0:50:99:53:c6:f7:6d:fd:fd: 8a:0c:a8:c5:c3:92:1f:a9:05:72:de:c5:87:bc:de: 4b:11:92:86:70:b8:c7:a5:24:14:38:6b:b3:0a:b6: 9f:89:3a:f0:99:a7:72:c6:f8:e5:5a:bc:19:6a:1e: 2d:f1:f1:32:f8:d6:8b:b3:54:15:9f:f6:85:55:99: 63:18:ef:e5:69:67:77:7e:0c:d2:a4:d5:28:9a:be: 0a:76:69:ce:85:0e:c3:4b:94:67:34:5a:c3:41:f7: 82:b6:fb:fd:8a:5c:c2:30:a8:3f:f6:1f:e5:fb:23: ac:20:1f:ba:5c:44:79:85:a7:26:f8:10:39:73:fd: 41:12:e3:78:07:6c:5b:47:55:02:57:f7:bd:47:36: 52:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B6:9B:01:A8:D5:1E:5C:CB:06:C3:6E:46:46:03:D5:CC:04:11:2D X509v3 Authority Key Identifier: keyid:0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6e:d6:64:4f:77:12:c7:33:b6:a4:3d:c3:ef:ee:40:bb:14: 8b:8d:61:c6:c4:60:1a:f8:14:89:1f:cf:d4:6f:53:8c:9a:89: 4d:8d:63:ea:2b:fc:6b:3a:c3:21:77:09:f4:c8:7a:ec:82:90: 1c:c7:8b:0d:19:25:b5:eb:72:13:51:5d:b4:8a:79:e2:f4:2a: 43:ad:a7:85:71:da:fe:07:ee:dc:dd:71:ea:1b:3f:b6:04:64: da:85:2f:15:f4:5f:bc:f8:8e:ca:4e:e2:01:64:89:58:0d:65: 3e:d8:0a:4d:d6:b2:ac:7b:71:05:81:55:d1:8f:e3:1f:61:ab: 49:1e:3a:6e:03:ab:a7:43:64:4f:6e:ad:51:01:2e:04:de:4d: 6b:99:1b:7c:45:b5:cb:4b:06:b1:09:37:21:7b:49:5b:59:88: 9a:93:93:14:65:17:c0:ae:8a:8f:ff:a0:8c:bf:63:2f:d0:45: 60:7c:59:2a:c1:82:68:4c:2c:fd:8d:2b:fb:62:c7:a6:89:30: 1f:aa:79:49:56:95:55:05:a4:ec:6f:d6:18:71:4e:2b:bf:6a: 8f:bf:a6:b1:69:cd:98:ad:6b:99:93:2f:9f:78:d9:93:0d:dd: ee:a8:f6:55:2b:9f:87:95:43:04:2a:21:b6:f8:cf:78:d7:72: 1c:40:a3:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY4REIxMTAvBgNVBAUTKDBERTJCNkE2MkU1NEEwQTYxQkNGMzE0QjZFMkVGQjhG M0ExRTNBN0EwHhcNMjUwNDI1MDMzOTIwWhcNMjUwNTAyMDMzOTIwWjAYMRYwFAYD VQQDEw02ODBiMDNlOC00NTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCM+wIhHgB8KPFDk+BYhxKxdixo9r4ZaMB5SOjINVTHpRjmHciRF7TTmt5hq mUYv+D35k88s1vcfdJb7SERiNO6x204EbmDJD9Eou6E++JhUWXvyllkwuHhVjxtF Vl5ZKsGGQzGkZRXLMKzvVoDwUJlTxvdt/f2KDKjFw5IfqQVy3sWHvN5LEZKGcLjH pSQUOGuzCrafiTrwmadyxvjlWrwZah4t8fEy+NaLs1QVn/aFVZljGO/laWd3fgzS pNUomr4KdmnOhQ7DS5RnNFrDQfeCtvv9ilzCMKg/9h/l+yOsIB+6XER5hacm+BA5 c/1BEuN4B2xbR1UCV/e9RzZSDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKW2mwGo 1R5cywbDbkZGA9XMBBEtMB8GA1UdIwQYMBaAFA3itqYuVKCmG88xS24u+486Hjp6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjhEQi82QzhCQjg2MjU0 QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9LWWJ6ekZMYmk3N2p6b2VP bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlSzJwaTVVb0tZYnp6RkxiaTc3anpvZU9uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjhEQi82QzhCQjg2MjU0QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9L WWJ6ekZMYmk3N2p6b2VPbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+btZkT3cSxzO2pD3D7+5AuxSLjWHGxGAa+BSJH8/Ub1OMmolNjWPq K/xrOsMhdwn0yHrsgpAcx4sNGSW163ITUV20inni9CpDraeFcdr+B+7c3XHqGz+2 BGTahS8V9F+8+I7KTuIBZIlYDWU+2ApN1rKse3EFgVXRj+MfYatJHjpuA6unQ2RP bq1RAS4E3k1rmRt8RbXLSwaxCTche0lbWYiak5MUZRfAroqP/6CMv2Mv0EVgfFkq wYJoTCz9jSv7YsemiTAfqnlJVpVVBaTsb9YYcU4rv2qPv6axac2YrWuZky+feNmT Dd3uqPZVK5+HlUMEKiG2+M9413IcQKPU -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:56 2025 by rpki-client