$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json) Hash identifier: YL+N78ja1liZNsAP2QUY86OCFlq2oFnSJoCS1CgAeI0= Subject key identifier: FD:14:10:01:10:7D:D7:2A:05:7D:A4:1F:05:EB:A5:5A:72:FA:58:B3 Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft Manifest number: 04B1 Signing time: Sat 31 May 2025 00:08:55 +0000 Manifest this update: Sat 31 May 2025 00:08:54 +0000 Manifest next update: Sat 07 Jun 2025 00:08:54 +0000 Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: gIgiIlOIP7/iUCAS7Pt1L3WKy+Rl7y8eHlcNIhs0vOI=) 2: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: BHc0YO4uerOV3pChxVjG7O544zd2LrVw+gOJhxCdrB0=) 3: 1295B5943FA611EF94664041C4F9AE02.roa (hash: FuWrvkmDIg3mxhyAWWbi/ukBRQacmBTwsE71FX0nX8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Validity Not Before: May 31 00:08:54 2025 GMT Not After : Jun 7 00:08:54 2025 GMT Subject: CN=683a4896-fd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:50:7f:bd:66:97:44:18:e9:df:2e:18:0a: 5e:1b:5f:45:d1:3a:e3:43:94:bc:49:8e:88:2b:9c: 31:95:8e:de:31:d8:cf:1f:ad:69:2e:69:31:38:2c: 0b:40:9e:b6:c5:f2:fd:78:55:81:1c:39:e0:0f:b4: 19:27:4f:36:3b:fa:9c:1b:da:5c:47:77:30:c7:c3: 5a:9d:21:cc:06:1b:9b:e9:a9:be:71:5e:81:d3:fc: 6d:5c:98:a8:c4:1b:7e:4d:6b:e7:99:32:b9:5d:cb: e4:be:b6:0b:50:d8:0d:60:46:53:7e:46:44:fa:49: 98:84:a2:e6:44:2d:e1:cb:ea:e6:61:ad:b8:74:24: 43:17:61:3f:20:c8:d1:10:c3:1b:b8:fc:8a:63:b2: ce:03:58:b7:d1:5e:9d:27:42:9e:e3:15:7b:d7:79: b5:b8:41:12:1d:9a:b3:64:77:39:d0:e7:c0:b5:99: c9:e6:a8:6e:64:73:48:c5:5a:ed:d5:96:c0:57:82: cf:cd:d8:8f:db:f6:37:6e:09:d0:b3:c3:67:1e:52: cb:5a:0b:97:9e:97:2c:db:05:75:0f:e1:2d:af:54: 78:f9:9f:ef:df:88:e5:95:ef:df:f1:94:f0:6e:d4: c3:dd:02:7d:2f:fa:14:15:e5:75:f1:f0:db:14:9f: a5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:14:10:01:10:7D:D7:2A:05:7D:A4:1F:05:EB:A5:5A:72:FA:58:B3 X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:4b:f2:3d:ef:d9:eb:aa:cd:ba:5d:0d:68:13:85:5e:f6:0d: 4b:56:4d:43:3b:0e:e7:d8:e3:2b:96:bd:af:1e:b2:aa:b0:eb: a6:38:a3:80:2e:ff:1f:bf:b4:f4:b9:93:72:1c:e9:c8:91:fd: f0:70:ae:eb:08:b5:c7:8b:68:02:18:7f:d5:ac:b5:e5:50:8a: 7d:cc:fa:c4:ce:55:fe:f9:33:fb:73:ef:fe:9a:4a:e3:33:68: 73:f6:cd:11:9a:8e:ac:77:66:1d:f8:b6:6a:88:7d:71:89:2d: 18:97:56:0f:69:46:77:06:82:ec:60:e3:16:da:b5:d6:27:e8: 26:97:64:a1:fb:fd:f1:aa:d5:e7:25:ca:96:01:1c:ab:84:b2: 73:63:55:27:27:35:e4:f1:0f:2c:d0:15:39:16:2e:16:f4:c0: b6:07:bc:0e:a5:83:e7:4d:ef:65:9e:8c:a5:b2:13:3b:86:cf: 47:8d:89:1c:fe:db:24:ee:26:06:4a:ec:a9:2d:73:29:0c:8f: 22:f2:54:bb:03:3b:d5:ed:97:70:c3:ec:85:57:8b:35:c6:36: 04:f9:53:c9:de:45:77:5e:c8:84:79:cf:33:44:3c:08:f6:d5: 09:28:59:7b:b5:f2:60:62:71:1a:87:0e:47:50:74:45:f3:58: c5:d9:f9:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjUwNTMxMDAwODU0WhcNMjUwNjA3MDAwODU0WjAYMRYwFAYD VQQDEw02ODNhNDg5Ni1mZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxxQf71ml0QY6d8uGApeG19F0TrjQ5S8SY6IK5wxlY7eMdjPH61pLmkxOCwL QJ62xfL9eFWBHDngD7QZJ082O/qcG9pcR3cwx8NanSHMBhub6am+cV6B0/xtXJio xBt+TWvnmTK5XcvkvrYLUNgNYEZTfkZE+kmYhKLmRC3hy+rmYa24dCRDF2E/IMjR EMMbuPyKY7LOA1i30V6dJ0Ke4xV713m1uEESHZqzZHc50OfAtZnJ5qhuZHNIxVrt 1ZbAV4LPzdiP2/Y3bgnQs8NnHlLLWguXnpcs2wV1D+Etr1R4+Z/v34jlle/f8ZTw btTD3QJ9L/oUFeV18fDbFJ+l6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0UEAEQ fdcqBX2kHwXrpVpy+lizMB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRK Si11MzVHSElCWURTT1RXU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqS/I979nrqs26XQ1oE4Ve9g1LVk1DOw7n2OMrlr2vHrKqsOumOKOA Lv8fv7T0uZNyHOnIkf3wcK7rCLXHi2gCGH/VrLXlUIp9zPrEzlX++TP7c+/+mkrj M2hz9s0Rmo6sd2Yd+LZqiH1xiS0Yl1YPaUZ3BoLsYOMW2rXWJ+gml2Sh+/3xqtXn JcqWARyrhLJzY1UnJzXk8Q8s0BU5Fi4W9MC2B7wOpYPnTe9lnoylshM7hs9HjYkc /tsk7iYGSuypLXMpDI8i8lS7AzvV7Zdww+yFV4s1xjYE+VPJ3kV3XsiEec8zRDwI 9tUJKFl7tfJgYnEahw5HUHRF81jF2fkk -----END CERTIFICATE-----Generated at Sat May 31 17:22:08 2025 by rpki-client