$ rpki-client -vvf rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft File: F_RkaDqcrP_uOS3atV7AQQwpaqE.mft (raw, json) Hash identifier: EfYI/7TyXVIzAB8vYmzZt+xk8Nra9pZ2CBIFLlfljB0= Subject key identifier: 7C:12:C5:18:53:58:53:11:61:81:09:1E:C2:45:90:92:78:19:D8:1B Authority key identifier: 17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1 Certificate issuer: /CN=A911549E/serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft Manifest number: 01CF Signing time: Sat 31 May 2025 02:38:18 +0000 Manifest this update: Sat 31 May 2025 02:38:17 +0000 Manifest next update: Sat 07 Jun 2025 02:38:17 +0000 Files and hashes: 1: F_RkaDqcrP_uOS3atV7AQQwpaqE.crl (hash: Et3UqXHfx9CGwhdNVVHKmeq34mTKoz2xj9y6UFxbmxA=) 2: 6F873B3A7CD211EDA61A1836C4F9AE02.roa (hash: elMEoeZr1kMxHEzZvAxYI3biX1cRxKVaLlWrHacBWyE=) 3: 6EFEE12C7CD211EDA61A1836C4F9AE02.roa (hash: mnezjCyzKusiAqMtaUmdzOLSoLAbXHzaPhqGAX/1w/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911549E, serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1 Validity Not Before: May 31 02:38:17 2025 GMT Not After : Jun 7 02:38:17 2025 GMT Subject: CN=683a6b99-0ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:fc:9e:25:27:84:7f:3d:7b:49:09:0e:f4: 3e:6d:83:12:a0:26:8f:ca:bb:78:4f:fd:63:a0:f5: 05:20:8a:2b:d9:d1:3e:96:6f:63:2a:30:23:28:1b: cc:e8:7e:0f:75:f7:f9:3f:8e:d8:a5:2d:5b:0e:62: 40:e8:75:f3:1f:e1:a4:17:c2:4f:97:96:1a:bb:29: 6e:fe:07:5e:c4:95:5c:b6:4a:cb:e1:35:df:84:3b: e9:e6:77:c0:a7:0f:3c:4e:fe:fa:af:7f:a2:05:3d: d6:9e:e9:6b:7f:69:74:33:91:5a:79:03:bb:2c:91: 7a:e6:8c:4d:cb:36:cd:f0:5a:6a:d3:a4:a3:88:f4: 29:bc:39:0a:d2:ff:80:42:d0:1d:35:99:a2:0d:a8: ce:69:07:2f:95:7a:0a:96:8a:ee:e2:bb:6f:be:40: 5e:fb:f7:66:31:93:61:dc:34:fb:34:85:32:aa:40: 62:a1:7a:93:bf:57:ee:1d:17:90:6e:3b:ea:64:a1: f1:4d:a7:be:57:5c:e2:15:78:13:a5:9b:09:11:1e: c7:aa:2b:ee:37:37:fe:2f:3f:8f:88:3b:9b:33:74: 68:cc:12:c4:1d:98:86:de:aa:9c:8c:0d:42:09:44: 31:17:29:ae:13:f1:e8:6b:b2:2d:cb:27:65:46:8c: 57:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:12:C5:18:53:58:53:11:61:81:09:1E:C2:45:90:92:78:19:D8:1B X509v3 Authority Key Identifier: keyid:17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4c:e2:28:69:98:d5:01:4b:27:22:3e:84:2d:ba:4b:1d:bc: 97:89:70:c6:d8:27:9a:12:80:76:41:b7:e6:3a:51:fb:05:08: b0:33:4b:64:3f:e2:22:3a:97:b9:7d:67:7b:d5:11:3a:8e:12: a2:c0:70:2e:8f:fb:9b:99:ce:a2:75:29:39:9d:e5:6a:90:b9: d9:aa:91:33:d3:ab:3f:5f:3b:61:16:d4:03:86:93:07:f4:aa: 49:75:8d:df:ea:e7:0b:99:ef:d6:fc:5a:7a:78:ec:ad:d4:cd: 12:6e:f6:4e:e1:75:4a:66:9e:ba:f6:a0:8d:3f:22:0f:c1:9f: 8e:9d:d8:3e:d8:e7:fd:85:05:94:c1:22:1f:82:46:28:79:5c: 2c:bf:8c:bd:f5:72:34:b0:c8:93:82:c1:d0:7b:90:2c:8f:d1: 07:eb:8a:38:24:35:4a:73:2c:a6:44:e2:72:f7:0f:da:8a:08: 72:8e:df:42:a4:ea:44:90:c7:c2:92:91:7f:d5:5a:35:db:9e: 8e:08:e4:6d:48:c8:7e:f5:a1:47:05:cb:b4:89:8a:e7:f7:20: 49:35:a5:30:40:87:d3:29:c8:b0:f9:d9:b9:01:fa:9e:ee:20: a5:8e:c0:65:78:1a:db:ce:50:48:53:dc:de:28:17:6f:e7:04: e8:8b:54:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0OUUxMTAvBgNVBAUTKDE3RjQ2NDY4M0E5Q0FDRkZFRTM5MkREQUI1NUVDMDQx MEMyOTZBQTEwHhcNMjUwNTMxMDIzODE3WhcNMjUwNjA3MDIzODE3WjAYMRYwFAYD VQQDEw02ODNhNmI5OS0wZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xH8niUnhH89e0kJDvQ+bYMSoCaPyrt4T/1joPUFIIor2dE+lm9jKjAjKBvM 6H4Pdff5P47YpS1bDmJA6HXzH+GkF8JPl5Yauylu/gdexJVctkrL4TXfhDvp5nfA pw88Tv76r3+iBT3Wnulrf2l0M5FaeQO7LJF65oxNyzbN8Fpq06SjiPQpvDkK0v+A QtAdNZmiDajOaQcvlXoKloru4rtvvkBe+/dmMZNh3DT7NIUyqkBioXqTv1fuHReQ bjvqZKHxTae+V1ziFXgTpZsJER7HqivuNzf+Lz+PiDubM3RozBLEHZiG3qqcjA1C CUQxFymuE/Hoa7ItyydlRoxX/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwSxRhT WFMRYYEJHsJFkJJ4GdgbMB8GA1UdIwQYMBaAFBf0ZGg6nKz/7jkt2rVewEEMKWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ5RS9CMjI1QjE5QzdD Q0QxMUVEOUY4RTBCMkZDNEY5QUUwMi9GX1JrYURxY3JQX3VPUzNhdFY3QVFRd3Bh cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfUmthRHFjclBfdU9TM2F0VjdBUVF3cGFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTQ5RS9CMjI1QjE5QzdDQ0QxMUVEOUY4RTBCMkZDNEY5QUUwMi9GX1JrYURxY3JQ X3VPUzNhdFY3QVFRd3BhcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtTOIoaZjVAUsnIj6ELbpLHbyXiXDG2CeaEoB2QbfmOlH7BQiwM0tk P+IiOpe5fWd71RE6jhKiwHAuj/ubmc6idSk5neVqkLnZqpEz06s/XzthFtQDhpMH 9KpJdY3f6ucLme/W/Fp6eOyt1M0SbvZO4XVKZp669qCNPyIPwZ+Ondg+2Of9hQWU wSIfgkYoeVwsv4y99XI0sMiTgsHQe5Asj9EH64o4JDVKcyymROJy9w/aighyjt9C pOpEkMfCkpF/1Vo1256OCORtSMh+9aFHBcu0iYrn9yBJNaUwQIfTKciw+dm5Afqe 7iCljsBleBrbzlBIU9zeKBdv5wToi1Sj -----END CERTIFICATE-----Generated at Sat May 31 17:30:14 2025 by rpki-client