$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: o5dpzEEXlhroCpJ/B0286brPfRUZQhZlZ0ai53qhE9Y= Subject key identifier: 5B:7E:91:5C:C8:06:63:CB:56:11:8B:3B:F1:E7:8F:50:99:87:9F:5C Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 1313 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 1309 Signing time: Thu 24 Apr 2025 17:03:23 +0000 Manifest this update: Thu 24 Apr 2025 17:03:22 +0000 Manifest next update: Thu 01 May 2025 17:03:22 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: Z9igJxwADPWbGS7juXMHOgQxQR4MgVYntk+U0WBY0yU=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4883 (0x1313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Apr 24 17:03:22 2025 GMT Not After : May 1 17:03:22 2025 GMT Subject: CN=680a6edb-add5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fa:44:e0:09:1d:dd:fc:1f:c4:fe:51:68:49: ae:32:13:ca:fb:62:f5:31:13:48:17:d3:fb:14:14: fa:25:b1:86:31:bd:8d:58:b1:1c:b9:3b:24:f3:76: e5:39:00:da:4a:ad:73:6b:c0:5e:23:86:cf:07:62: 62:41:bb:f5:db:fc:be:63:65:86:3e:7e:7c:85:cb: 2d:d9:8f:6f:77:40:7b:51:09:5a:56:a1:f0:ea:6a: 79:5b:0c:51:5e:28:e5:44:8f:db:b9:cd:b4:b9:14: 5f:bd:13:ab:cb:60:bb:16:57:c9:78:15:b0:27:a6: 46:fc:d3:0c:39:dd:0d:52:c9:62:74:2d:b2:1d:f5: 4c:9c:5d:31:32:c4:87:8d:1f:11:13:ef:0c:d2:78: 72:9a:0d:26:88:f0:b9:3a:fd:ab:4e:b6:34:b0:64: fe:b2:36:d7:f0:2c:89:cc:3b:e9:e3:11:71:77:ba: ad:1e:7d:28:08:ad:c9:14:35:b2:1b:ba:80:b6:34: 1d:19:9a:c3:19:ad:8f:30:05:09:1f:a4:6e:c8:ef: c6:49:a0:04:d2:aa:9b:3e:1e:3e:27:25:a3:7a:da: 2d:ad:b1:92:1b:ce:b1:c9:c4:ce:63:62:dc:8e:ff: 40:bf:3a:86:df:f3:89:26:08:55:2d:c1:20:d8:c5: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7E:91:5C:C8:06:63:CB:56:11:8B:3B:F1:E7:8F:50:99:87:9F:5C X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3d:b1:58:e6:28:e8:92:50:c8:51:d3:33:13:da:66:02:5d: ba:52:7b:6a:4a:b0:44:55:9f:36:5f:6b:a3:98:a5:fc:a0:36: f9:df:2d:4b:f5:dd:6f:c2:60:43:80:c1:41:be:e2:55:9d:e5: e9:cb:5e:e4:21:84:a0:4b:4a:0b:cd:98:a5:32:95:93:0a:e6: 97:af:b8:cd:b0:9d:2f:d9:d6:c2:b4:54:f6:f7:d6:b0:ee:78: 5b:6e:04:72:65:a7:1d:12:4a:02:19:2a:c7:36:d7:7f:1e:8a: 62:0f:82:af:fb:1e:82:47:96:44:dc:98:89:38:78:a4:dc:9f: 5e:ec:fe:c4:c5:eb:6e:31:f9:59:02:8f:10:0b:4b:62:62:c9: 9d:61:9b:7d:0a:56:57:9b:73:d5:32:b1:51:b3:de:ce:45:b0: 45:bf:44:f1:ac:60:b8:03:88:0e:6d:cd:74:0f:11:d5:40:d7: 38:c1:b7:c4:f6:7c:17:d6:79:76:7f:92:51:89:f2:cb:aa:47: 90:f0:87:68:af:7d:44:78:ea:40:0a:95:15:03:fb:71:07:71: fc:bf:78:0e:be:1c:55:28:f1:64:5c:0c:a5:89:eb:23:d3:0b: b8:d4:6c:e5:2a:c2:a6:48:0f:fc:29:03:15:54:14:2b:09:7a: 32:33:ad:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUwNDI0MTcwMzIyWhcNMjUwNTAxMTcwMzIyWjAYMRYwFAYD VQQDEw02ODBhNmVkYi1hZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PpE4Akd3fwfxP5RaEmuMhPK+2L1MRNIF9P7FBT6JbGGMb2NWLEcuTsk83bl OQDaSq1za8BeI4bPB2JiQbv12/y+Y2WGPn58hcst2Y9vd0B7UQlaVqHw6mp5WwxR XijlRI/buc20uRRfvROry2C7FlfJeBWwJ6ZG/NMMOd0NUslidC2yHfVMnF0xMsSH jR8RE+8M0nhymg0miPC5Ov2rTrY0sGT+sjbX8CyJzDvp4xFxd7qtHn0oCK3JFDWy G7qAtjQdGZrDGa2PMAUJH6RuyO/GSaAE0qqbPh4+JyWjetotrbGSG86xycTOY2Lc jv9AvzqG3/OJJghVLcEg2MXAPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt+kVzI BmPLVhGLO/Hnj1CZh59cMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+PbFY5ijoklDIUdMzE9pmAl26UntqSrBEVZ82X2ujmKX8oDb53y1L 9d1vwmBDgMFBvuJVneXpy17kIYSgS0oLzZilMpWTCuaXr7jNsJ0v2dbCtFT299aw 7nhbbgRyZacdEkoCGSrHNtd/HopiD4Kv+x6CR5ZE3JiJOHik3J9e7P7ExetuMflZ Ao8QC0tiYsmdYZt9ClZXm3PVMrFRs97ORbBFv0TxrGC4A4gObc10DxHVQNc4wbfE 9nwX1nl2f5JRifLLqkeQ8Idor31EeOpACpUVA/txB3H8v3gOvhxVKPFkXAyliesj 0wu41GzlKsKmSA/8KQMVVBQrCXoyM616 -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:30 2025 by rpki-client