$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json) Hash identifier: NdJxBbVCb8kM4+dlbwuY6baigd6UiK+uiqUupry19T0= Subject key identifier: F3:AA:54:74:5B:53:EF:89:68:0A:1F:3F:DA:08:2F:FB:1D:07:E5:57 Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Certificate serial: 0BC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft Manifest number: 0BA4 Signing time: Fri 30 May 2025 19:11:20 +0000 Manifest this update: Fri 30 May 2025 19:11:20 +0000 Manifest next update: Fri 06 Jun 2025 19:11:20 +0000 Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: OsM9AzQIg1L1Uas/IBRGNFiv3cwKMVPXKsjaUnO2kg0=) 2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: PsugJWGM5ONkTT/QKBNZcGT+Fx1Ca8/gO0JC72FJj/U=) 3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: DqyU+6nXvs6HOFMKI16Emo+flYs9ktEh2tA31OF4Cw4=) 4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: re/IaJHi711uC7kt/qe355ZQkGdlvPCAcW6M1Vv6a/M=) 5: 4CC6B77C0A9111EEB13EAF44C4F9AE02.roa (hash: PDvCAZx5hVOPcyfQ4LwOi2hSUYUbvW/tgd4X2jQj+2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3016 (0xbc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Validity Not Before: May 30 19:11:20 2025 GMT Not After : Jun 6 19:11:20 2025 GMT Subject: CN=683a02d8-e5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:76:e8:cf:cc:9c:fa:43:84:f6:9e:76:2b: 7d:ef:a3:65:a0:5a:b9:fa:ad:ad:a8:7f:2a:72:cc: 6a:77:dc:d0:98:21:31:0b:7d:e0:e2:a8:09:66:f1: 15:9b:1d:f8:f5:aa:ad:96:d8:a0:5d:4e:24:e3:98: 0b:e1:ff:85:4a:3e:70:4f:94:ce:05:3f:25:fd:1f: 52:84:9e:6f:0c:35:ae:f1:dc:c1:22:cb:1d:c2:3e: 48:58:4f:42:9e:78:e7:ea:f7:c1:8c:f7:e3:ed:24: 22:d2:bc:e9:7e:e7:0e:61:94:f9:1f:7f:bc:ec:b5: 4e:64:cc:19:5e:5a:4d:b9:64:01:ef:e8:3c:41:bb: 7a:95:73:5e:83:28:2f:6c:68:c1:d5:72:c7:a8:99: bd:b4:c0:8b:14:a3:55:63:3f:8b:02:d2:46:09:bd: d7:98:89:6e:7f:4d:83:91:c3:2b:c8:48:8d:4b:ae: 3f:2b:de:ba:01:2f:0d:7b:f2:0b:c6:b7:b2:ca:92: b8:77:7c:4c:7a:09:ac:ee:ca:c5:b5:b5:9e:2a:dd: 03:94:13:00:f5:1c:1c:0d:7a:b8:3b:1e:44:43:de: 65:75:d0:4e:01:d9:e7:7d:aa:5b:69:7e:64:70:60: 58:42:53:7d:ae:9a:34:7a:fa:62:c6:a0:a5:1e:77: c6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AA:54:74:5B:53:EF:89:68:0A:1F:3F:DA:08:2F:FB:1D:07:E5:57 X509v3 Authority Key Identifier: keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:9f:10:4e:2a:ab:87:0b:06:23:33:6a:4a:0a:cc:5c:5d:30: f3:12:6a:e7:cc:cc:dd:49:0e:aa:b5:48:65:5d:a2:c8:1e:e8: 22:e5:f0:5a:0d:1b:5a:26:92:6b:17:78:54:f0:56:44:d9:cd: 89:5f:31:c4:f6:17:eb:5f:8f:00:3e:69:4f:85:01:74:76:23: 61:8c:c5:f1:33:59:60:5b:4e:61:c1:71:fb:f2:92:97:7d:f4: a6:56:8b:cb:35:bc:6f:5d:c8:19:e1:23:56:28:e6:cc:8d:36: 66:55:71:f6:7c:db:07:d4:6e:38:64:f3:20:3d:45:43:ad:45: f8:ce:73:21:c1:91:29:cf:ad:f9:56:a8:f1:cf:01:33:3b:88: 58:f6:17:96:5c:7f:43:eb:c3:1a:ca:65:38:58:07:22:3d:99: ff:69:ba:4d:d8:a6:ce:9d:1b:41:82:1e:2c:e2:56:1d:9b:91: 52:2d:39:e3:5d:aa:aa:98:0a:91:e8:97:91:3e:00:bd:8e:e3: 0c:8d:de:0f:11:93:2f:dd:7b:10:9c:e1:f5:86:4b:35:04:bb: 43:2b:07:a1:b6:5f:aa:e8:45:a2:1c:3b:70:b4:de:f9:87:42: 7a:fb:b9:5b:d4:94:f1:5f:4a:50:9f:20:e3:e7:43:59:61:d7: 1c:a2:6b:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD QTE2RDlDRDUwHhcNMjUwNTMwMTkxMTIwWhcNMjUwNjA2MTkxMTIwWjAYMRYwFAYD VQQDEw02ODNhMDJkOC1lNWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4t26M/MnPpDhPaedit976NloFq5+q2tqH8qcsxqd9zQmCExC33g4qgJZvEV mx349aqtltigXU4k45gL4f+FSj5wT5TOBT8l/R9ShJ5vDDWu8dzBIssdwj5IWE9C nnjn6vfBjPfj7SQi0rzpfucOYZT5H3+87LVOZMwZXlpNuWQB7+g8Qbt6lXNegygv bGjB1XLHqJm9tMCLFKNVYz+LAtJGCb3XmIluf02DkcMryEiNS64/K966AS8Ne/IL xreyypK4d3xMegms7srFtbWeKt0DlBMA9RwcDXq4Ox5EQ95lddBOAdnnfapbaX5k cGBYQlN9rpo0evpixqClHnfGoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOqVHRb U++JaAofP9oIL/sdB+VXMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2 MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs cTAtYjlOcFN0dFhLRnRuTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3nxBOKquHCwYjM2pKCsxcXTDzEmrnzMzdSQ6qtUhlXaLIHugi5fBa DRtaJpJrF3hU8FZE2c2JXzHE9hfrX48APmlPhQF0diNhjMXxM1lgW05hwXH78pKX ffSmVovLNbxvXcgZ4SNWKObMjTZmVXH2fNsH1G44ZPMgPUVDrUX4znMhwZEpz635 VqjxzwEzO4hY9heWXH9D68MaymU4WAciPZn/abpN2KbOnRtBgh4s4lYdm5FSLTnj XaqqmAqR6JeRPgC9juMMjd4PEZMv3XsQnOH1hks1BLtDKwehtl+q6EWiHDtwtN75 h0J6+7lb1JTxX0pQnyDj50NZYdccomtY -----END CERTIFICATE-----Generated at Sat May 31 17:32:58 2025 by rpki-client