$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft File: B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft (raw, json) Hash identifier: x3nkds2H3oR9FDLIcdaXx6+eloOScvrfd9vL+3BWIxg= Subject key identifier: A3:48:4E:EE:FA:7F:0A:87:92:63:DF:38:97:3B:F9:CB:C5:7E:A6:42 Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B Certificate issuer: /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft Manifest number: 86 Signing time: Fri 25 Apr 2025 05:32:20 +0000 Manifest this update: Fri 25 Apr 2025 05:32:19 +0000 Manifest next update: Fri 02 May 2025 05:32:19 +0000 Files and hashes: 1: B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl (hash: tbC+VcqeFeF7WmXDC85FhKQPDcJI80bkvUfj4Q8t71c=) 2: 335E880A5A1811EFB08E4F38C4F9AE02.roa (hash: uB7Em80PKGY4uO2oMYJtskRF61M8oMXLAmFb1PjEp7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C5E0, serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Validity Not Before: Apr 25 05:32:19 2025 GMT Not After : May 2 05:32:19 2025 GMT Subject: CN=680b1e64-b25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:6e:72:b4:d3:cc:a4:20:b0:30:52:1c:a3: 21:c8:c2:ba:d9:79:f1:32:fd:eb:5e:43:b0:c2:ba: e4:c9:5f:df:5e:b5:f5:aa:a6:a1:53:03:5c:82:b6: dc:77:d9:25:b3:35:fe:39:fd:7c:64:61:b7:31:75: 98:4e:a9:7d:55:c6:8c:fe:6b:18:60:cb:18:d8:1b: 6e:0c:12:40:a9:58:81:e3:49:99:2b:30:39:e5:ad: ce:10:c4:36:59:9f:f0:35:a1:52:b3:75:46:c9:52: d3:21:8a:bf:f9:c7:80:89:90:77:bb:4b:ef:6e:eb: 94:ed:7b:7b:6d:a3:ca:74:1f:8c:54:9a:76:9a:3e: 4a:16:a0:9e:8c:f0:62:97:67:00:5b:15:e6:d5:82: f3:1c:a9:fd:42:58:6b:f2:29:cc:f4:f3:2c:dc:3a: a3:a9:0d:ef:1c:42:5d:a2:77:7d:b8:be:d8:86:a4: b0:86:d7:35:23:d7:ac:ad:91:ef:61:2c:65:54:90: ff:5c:3b:23:5f:84:bd:07:49:d4:c1:d0:95:17:d0: 33:bf:32:bd:f0:a9:37:13:15:5a:13:a4:86:77:35: a2:ef:7b:c6:a3:16:11:39:9a:ae:03:35:ae:fd:62: 25:1a:a5:7f:0d:5c:00:78:82:e7:70:86:76:0e:5e: dc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:48:4E:EE:FA:7F:0A:87:92:63:DF:38:97:3B:F9:CB:C5:7E:A6:42 X509v3 Authority Key Identifier: keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:87:89:e9:9f:27:1a:56:20:1b:36:1b:c7:89:6e:61:82:fd: 73:18:90:8d:42:4a:47:3f:65:32:82:4b:6b:00:af:c0:bb:53: dd:69:00:60:78:65:d1:e0:6c:21:a9:50:4d:4b:80:ce:92:2d: 18:e7:d6:47:00:ea:f8:bc:d2:c2:e4:5f:0e:75:30:b1:e3:94: 93:c6:51:32:41:cf:d4:64:01:63:13:0d:11:27:3f:ab:a8:ee: 57:b4:5f:2b:fb:81:c7:3a:84:77:47:62:7c:6f:65:6e:5e:fe: 68:89:0e:89:ae:73:3f:73:51:7f:e0:fd:e9:f2:bf:2c:f9:9b: 45:9e:d5:a2:51:c7:84:61:96:85:80:de:0f:cb:f6:cc:0a:57: 28:d6:59:ae:9c:4f:01:76:16:54:0f:f9:09:dc:79:c3:8e:16: d5:a6:aa:1b:ae:39:81:db:0d:7f:52:e0:e7:84:25:c2:62:65: cc:d3:b3:8b:49:d7:9b:4d:5a:b5:a9:59:bb:77:f4:c1:c4:b3: 72:a5:1d:2c:b0:ae:1e:27:59:4a:4b:a8:50:09:d6:ff:23:d5: 18:19:4d:8a:aa:46:f5:23:99:5e:28:f0:cd:9f:0c:a3:72:06: 23:e4:23:e0:47:76:fe:c0:77:c1:b5:6f:11:b8:16:f8:59:22: ba:08:2c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M1RTAxMTAvBgNVBAUTKDA3OEI0QTgwRDFERkU2QzA1MjUzM0FBREIxOTUzNEFD NTlBMzk1NEIwHhcNMjUwNDI1MDUzMjE5WhcNMjUwNTAyMDUzMjE5WjAYMRYwFAYD VQQDEw02ODBiMWU2NC1iMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/pucrTTzKQgsDBSHKMhyMK62XnxMv3rXkOwwrrkyV/fXrX1qqahUwNcgrbc d9klszX+Of18ZGG3MXWYTql9VcaM/msYYMsY2BtuDBJAqViB40mZKzA55a3OEMQ2 WZ/wNaFSs3VGyVLTIYq/+ceAiZB3u0vvbuuU7Xt7baPKdB+MVJp2mj5KFqCejPBi l2cAWxXm1YLzHKn9Qlhr8inM9PMs3DqjqQ3vHEJdond9uL7YhqSwhtc1I9esrZHv YSxlVJD/XDsjX4S9B0nUwdCVF9AzvzK98Kk3ExVaE6SGdzWi73vGoxYROZquAzWu /WIlGqV/DVwAeILncIZ2Dl7cSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNITu76 fwqHkmPfOJc7+cvFfqZCMB8GA1UdIwQYMBaAFAeLSoDR3+bAUlM6rbGVNKxZo5VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzVFMC84NzIwQUIxODVB MTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVzQlNVenF0c1pVMHJGbWps VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0dEtnTkhmNXNCU1V6cXRzWlUwckZtamxVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzVFMC84NzIwQUIxODVBMTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVz QlNVenF0c1pVMHJGbWpsVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdh4npnycaViAbNhvHiW5hgv1zGJCNQkpHP2UygktrAK/Au1PdaQBg eGXR4GwhqVBNS4DOki0Y59ZHAOr4vNLC5F8OdTCx45STxlEyQc/UZAFjEw0RJz+r qO5XtF8r+4HHOoR3R2J8b2VuXv5oiQ6JrnM/c1F/4P3p8r8s+ZtFntWiUceEYZaF gN4Py/bMClco1lmunE8BdhZUD/kJ3HnDjhbVpqobrjmB2w1/UuDnhCXCYmXM07OL SdebTVq1qVm7d/TBxLNypR0ssK4eJ1lKS6hQCdb/I9UYGU2Kqkb1I5leKPDNnwyj cgYj5CPgR3b+wHfBtW8RuBb4WSK6CCxw -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:37 2025 by rpki-client