$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json) Hash identifier: M87bn+qIXBD31qtUqCXAT0+M2U3EIEPgthrPVsOwadM= Subject key identifier: 2D:6A:42:9E:88:91:15:17:1A:A5:18:64:4D:95:5B:CC:C3:08:E5:86 Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087 Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft Manifest number: 02AC Signing time: Fri 13 Jun 2025 01:01:11 +0000 Manifest this update: Fri 13 Jun 2025 01:01:11 +0000 Manifest next update: Fri 20 Jun 2025 01:01:10 +0000 Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: kDAZGiKY6qraTXLNG/vEXoW3VuW6/VQ5VvREUUa2G78=) 2: C79B240C249811EFABD23253C4F9AE02.roa (hash: vxN5ELpDSKeuKP/1PWPd9uK2hQBdf3IJCeKh68BuUKw=) 3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: 6c0Jw3077JWhUg1z+ONRU+S6jEOJ+qb2QR7rvXgZlpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087 Validity Not Before: Jun 13 01:01:11 2025 GMT Not After : Jun 20 01:01:10 2025 GMT Subject: CN=684b7857-195c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:0f:86:d1:16:04:d3:ff:67:57:87:55:90: 1a:34:ae:99:bb:62:7e:94:ff:df:aa:f9:b9:90:eb: 1a:f2:48:57:7e:55:1b:ae:74:f1:30:93:b1:0b:9b: 5b:bc:56:c2:f4:f3:cb:28:66:87:02:73:d7:75:9f: ad:f9:ce:fa:28:66:12:36:0c:da:56:60:27:5f:ea: 8a:34:09:56:f3:17:0e:f6:1c:cb:33:9e:75:b2:87: 4c:d0:b7:43:67:3a:bb:fd:42:ab:cd:71:7d:55:4a: 13:e6:59:4a:9f:50:8e:ef:99:32:f0:ac:24:5c:ee: af:24:17:4b:88:b0:b8:59:b4:5c:5e:ba:7e:5b:a0: 8a:2d:28:b0:ee:77:3a:1f:76:38:24:42:bd:34:31: 93:fc:ed:69:f1:2d:1e:21:66:0c:3b:4d:4d:24:1d: 9b:43:52:49:52:55:d5:29:4f:5e:13:bb:c8:25:42: 05:7d:f6:3d:19:3a:1d:d4:82:69:33:ae:3f:b2:fd: 26:5f:d8:84:56:71:ca:7e:15:b0:4a:5c:9b:e9:20: bd:47:c5:3a:cb:4a:dc:28:f0:e7:47:58:87:22:4e: 4e:9a:ef:55:c0:94:b9:31:3d:f4:5f:09:b0:c1:b9: 3e:5a:50:71:be:4e:6a:00:91:7b:c4:d1:f4:28:3c: 74:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6A:42:9E:88:91:15:17:1A:A5:18:64:4D:95:5B:CC:C3:08:E5:86 X509v3 Authority Key Identifier: keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:37:c5:bb:b7:75:cb:f4:8f:e7:69:21:ff:de:8d:d7:ff:ff: 97:11:e4:fb:d9:5c:96:e5:b1:96:bf:d0:55:64:99:94:a5:d3: e5:19:82:43:bd:11:a8:66:32:63:56:1d:d3:cc:b1:29:28:74: 6e:e3:b1:1c:a6:fa:eb:24:d6:dd:be:50:f3:3b:7a:6f:5c:1b: e6:48:9e:a7:6e:c4:c2:78:2d:a3:76:b1:b2:bb:71:bd:80:ce: e0:35:60:e6:d5:6e:05:cc:88:0a:9a:f9:a8:b8:35:51:9e:95: ec:e1:43:e4:7f:f7:15:b8:17:c6:42:8b:49:f1:bd:dd:ff:6c: 59:cc:b9:02:4d:9a:4c:52:0d:d1:75:6c:b5:8c:fb:7c:68:44: 92:7d:77:b4:26:3f:8d:ff:10:4b:f6:e5:61:05:fe:c9:fe:6a: d9:8d:c6:17:eb:0c:c2:12:f4:6f:b8:a4:48:4c:d9:ce:e6:1c: 4b:81:79:56:5b:41:11:e9:97:98:b1:d0:7d:ac:fd:04:ea:34: 29:06:31:0f:4f:59:2f:8c:fc:7d:4d:b8:46:3e:4b:f9:b5:4d: 7d:7b:c8:cc:4c:12:95:d1:e1:13:fb:74:33:61:35:55:78:65: 20:74:15:17:8e:45:b8:c5:0e:ff:54:b8:ee:8f:df:c3:c3:d1: 68:f7:cd:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCNDkxMTAvBgNVBAUTKEY4MzZERDMwQjYwNDI2MzYyMEQwNjFEMTA1ODRDOEYz MDExNjAwODcwHhcNMjUwNjEzMDEwMTExWhcNMjUwNjIwMDEwMTEwWjAYMRYwFAYD VQQDEw02ODRiNzg1Ny0xOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMsPhtEWBNP/Z1eHVZAaNK6Zu2J+lP/fqvm5kOsa8khXflUbrnTxMJOxC5tb vFbC9PPLKGaHAnPXdZ+t+c76KGYSNgzaVmAnX+qKNAlW8xcO9hzLM551sodM0LdD Zzq7/UKrzXF9VUoT5llKn1CO75ky8KwkXO6vJBdLiLC4WbRcXrp+W6CKLSiw7nc6 H3Y4JEK9NDGT/O1p8S0eIWYMO01NJB2bQ1JJUlXVKU9eE7vIJUIFffY9GTod1IJp M64/sv0mX9iEVnHKfhWwSlyb6SC9R8U6y0rcKPDnR1iHIk5Omu9VwJS5MT30Xwmw wbk+WlBxvk5qAJF7xNH0KDx0owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1qQp6I kRUXGqUYZE2VW8zDCOWGMB8GA1UdIwQYMBaAFPg23TC2BCY2INBh0QWEyPMBFgCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUI0OS81NTMyQjk2MEZG NUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpqWWcwR0hSQllUSTh3RVdB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EYmRNTFlFSmpZZzBHSFJCWVRJOHdFV0FJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUI0OS81NTMyQjk2MEZGNUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpq WWcwR0hSQllUSTh3RVdBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtN8W7t3XL9I/naSH/3o3X//+XEeT72VyW5bGWv9BVZJmUpdPlGYJD vRGoZjJjVh3TzLEpKHRu47EcpvrrJNbdvlDzO3pvXBvmSJ6nbsTCeC2jdrGyu3G9 gM7gNWDm1W4FzIgKmvmouDVRnpXs4UPkf/cVuBfGQotJ8b3d/2xZzLkCTZpMUg3R dWy1jPt8aESSfXe0Jj+N/xBL9uVhBf7J/mrZjcYX6wzCEvRvuKRITNnO5hxLgXlW W0ER6ZeYsdB9rP0E6jQpBjEPT1kvjPx9TbhGPkv5tU19e8jMTBKV0eET+3QzYTVV eGUgdBUXjkW4xQ7/VLjuj9/Dw9Fo980F -----END CERTIFICATE-----Generated at Sat Jun 14 17:56:21 2025 by rpki-client