$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json) Hash identifier: WqsQ3GMQmKh5s0BpZEdnLZRo4OGdPsVBn+2AaFHjRrc= Subject key identifier: 2C:21:C5:0C:5F:0D:16:48:07:B7:7B:0F:50:BB:27:0E:F3:03:C7:D8 Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Certificate serial: 05F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft Manifest number: 05F2 Signing time: Thu 24 Apr 2025 22:42:41 +0000 Manifest this update: Thu 24 Apr 2025 22:42:41 +0000 Manifest next update: Thu 01 May 2025 22:42:41 +0000 Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: h8cfOS3gk/YzTjgH3KQKOWAnmgnqTAJ8h9PjDgGfTcY=) 2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: VQCVLpNqfWDjo91C5wVq3XZaJfc6UnpFTN8P8OxpyeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Validity Not Before: Apr 24 22:42:41 2025 GMT Not After : May 1 22:42:41 2025 GMT Subject: CN=680abe61-7bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:ca:98:16:42:44:25:ec:9d:7d:68:71:56: 42:05:ec:88:37:23:da:34:f7:a6:29:6c:3e:8d:40: fa:a8:4f:ce:ac:44:d7:ba:28:6d:ae:d4:74:8c:09: ae:24:ca:38:b5:0f:e3:4d:4d:f7:ce:3b:76:63:d2: 66:b1:5a:6a:ed:cd:ea:c2:c7:8b:f5:91:40:b1:aa: ec:aa:2e:a5:38:5d:4f:c1:97:be:e5:f8:b1:53:aa: 31:03:ae:05:44:41:7d:05:fd:b4:e7:81:58:a1:02: 80:f5:77:06:c7:88:fc:92:91:10:e1:67:d5:8b:6c: f0:81:36:e1:e8:7c:0f:e1:c6:26:2c:d4:29:26:c9: 8f:55:36:f9:41:bf:5f:f1:c8:aa:8e:1d:b7:b1:05: 7f:8e:42:7e:f8:0f:68:ef:b1:48:3a:45:56:7e:f1: 7e:06:61:0d:07:71:c7:d4:49:83:17:00:3f:0e:22: aa:12:64:a9:31:1d:85:83:9b:c7:d5:37:8c:04:cc: 6b:f0:fd:b4:bc:9a:2a:f6:fa:9d:79:25:0d:30:3f: 7f:ee:4a:20:2e:17:e6:b5:ab:02:24:ef:38:ef:05: 76:d9:53:d0:b8:78:92:9b:59:19:41:c9:8d:5e:96: c8:0d:5d:c5:bd:6a:43:c9:2c:8e:c0:9a:f5:23:eb: 8d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:21:C5:0C:5F:0D:16:48:07:B7:7B:0F:50:BB:27:0E:F3:03:C7:D8 X509v3 Authority Key Identifier: keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:8c:25:37:aa:97:38:d3:d6:ef:4e:52:cb:14:e8:7c:d4:67: 1e:32:24:dc:4c:38:bb:10:10:39:e2:38:0c:95:1f:c2:72:54: d8:1e:bd:c9:15:37:a5:31:95:06:77:e5:54:d1:5d:39:c2:5f: 1e:42:0b:0d:bd:a8:f9:cd:22:c8:33:11:0d:10:3a:b6:d1:8c: 97:04:32:c3:ef:39:a2:70:e9:d7:ee:c1:05:67:da:36:d8:3c: 4c:41:93:76:56:c6:dd:74:2f:25:56:2a:32:9a:5a:89:f5:35: bc:52:97:a3:31:fa:7f:6f:9d:38:03:b6:76:9b:5c:cb:46:ae: 34:bd:a9:28:22:3a:c5:f0:8d:bb:14:8f:df:aa:29:9e:04:16: 38:b7:be:98:65:5d:cb:38:8a:be:a2:4f:5b:fc:fe:ea:cd:78: 86:18:e6:e8:0f:ce:0b:65:bf:50:c5:fb:5d:79:23:22:7e:38: 1d:6e:76:35:4e:b9:b7:24:c7:fa:75:58:32:b8:84:78:8f:a7: ed:1e:6b:47:10:a4:c3:07:80:34:e1:15:94:2c:e4:ab:d7:46: f8:8d:d1:ae:90:43:37:62:9e:70:3b:e0:9e:71:49:e6:f0:4a: 0b:39:07:a3:ba:1d:14:c2:e7:be:cd:f5:a9:91:cb:f1:40:1e: f6:fc:f7:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1 MzIwNzM2NDgwHhcNMjUwNDI0MjI0MjQxWhcNMjUwNTAxMjI0MjQxWjAYMRYwFAYD VQQDEw02ODBhYmU2MS03YmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw//KmBZCRCXsnX1ocVZCBeyINyPaNPemKWw+jUD6qE/OrETXuihtrtR0jAmu JMo4tQ/jTU33zjt2Y9JmsVpq7c3qwseL9ZFAsarsqi6lOF1PwZe+5fixU6oxA64F REF9Bf2054FYoQKA9XcGx4j8kpEQ4WfVi2zwgTbh6HwP4cYmLNQpJsmPVTb5Qb9f 8ciqjh23sQV/jkJ++A9o77FIOkVWfvF+BmENB3HH1EmDFwA/DiKqEmSpMR2Fg5vH 1TeMBMxr8P20vJoq9vqdeSUNMD9/7kogLhfmtasCJO847wV22VPQuHiSm1kZQcmN XpbIDV3FvWpDySyOwJr1I+uN1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwhxQxf DRZIB7d7D1C7Jw7zA8fYMB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2 ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj TWxRZW1PVjFveHhUSUhOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzjCU3qpc409bvTlLLFOh81GceMiTcTDi7EBA54jgMlR/CclTYHr3J FTelMZUGd+VU0V05wl8eQgsNvaj5zSLIMxENEDq20YyXBDLD7zmicOnX7sEFZ9o2 2DxMQZN2VsbddC8lVioymlqJ9TW8UpejMfp/b504A7Z2m1zLRq40vakoIjrF8I27 FI/fqimeBBY4t76YZV3LOIq+ok9b/P7qzXiGGOboD84LZb9QxftdeSMifjgdbnY1 Trm3JMf6dVgyuIR4j6ftHmtHEKTDB4A04RWULOSr10b4jdGukEM3Yp5wO+CecUnm 8EoLOQejuh0Uwue+zfWpkcvxQB72/Pc2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:28 2025 by rpki-client