$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: YE0lOCbBf1+2E6R2KRFnyjk8hWn3LDR2jDnF7jSVyRM= Subject key identifier: 4E:28:93:AB:96:2E:17:4B:D8:02:2F:0E:2A:D9:E0:EF:76:0E:FC:FB Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 34D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 34AA Signing time: Sat 31 May 2025 14:37:31 +0000 Manifest this update: Sat 31 May 2025 14:37:31 +0000 Manifest next update: Sat 07 Jun 2025 14:37:31 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: UfFjT9C/Y6BOyHyCkXYEDFOfMQmut5gKzXMvCuYalK8=) 2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: wvEIUxvlUFTH2qcHsopuAxq+KjN4ylNQUioBhK93yXg=) 3: 4A08F422F43211EBA188C86AC4F9AE02.roa (hash: 3Y7LHhfPoBb0WxabpgiKDHOJivLh/nfOe4OHRiwg/0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13522 (0x34d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: May 31 14:37:31 2025 GMT Not After : Jun 7 14:37:31 2025 GMT Subject: CN=683b142b-8c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ad:4f:69:d4:2a:97:3d:01:6d:27:4f:ac:64: e2:4b:ca:bc:93:14:3b:6f:af:b8:ce:49:e6:74:78: 5c:93:19:fa:18:54:08:25:5c:b2:c9:f5:5b:a7:89: e2:b5:6d:e7:19:58:f8:67:36:de:ec:a5:c4:84:a7: 06:11:98:f6:ec:ff:13:a6:62:37:fb:46:d5:c1:e8: c8:c0:3e:03:97:f3:09:aa:bb:56:2c:9d:97:b4:2f: 77:70:1a:d7:dd:84:20:94:91:9f:fc:20:c5:2b:57: f5:35:f7:1b:a6:66:9e:88:0e:4a:ef:d5:5a:fe:51: 8d:b8:de:38:e9:57:39:67:bd:c8:a6:e5:8f:56:66: b9:9a:d9:b0:b5:d9:2f:51:c1:50:37:2c:53:46:d2: 4b:d1:7d:ac:d1:eb:ae:de:5b:95:86:03:54:3b:96: 38:81:38:51:99:f4:3f:9f:71:60:b3:9b:be:dd:04: 87:eb:64:69:af:24:7b:f7:9a:3a:ed:71:1b:5f:66: ef:fd:07:96:3e:5b:d9:46:bd:09:07:2b:d8:d9:9f: 26:aa:55:65:5f:64:33:9d:4b:b7:f7:76:3d:42:23: b3:46:c3:09:76:db:b3:c9:db:b3:6f:13:e6:f7:e3: 42:d3:f2:99:af:6f:60:0a:7b:bd:fd:d2:a2:9d:ca: dc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:28:93:AB:96:2E:17:4B:D8:02:2F:0E:2A:D9:E0:EF:76:0E:FC:FB X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:af:55:b8:f5:3a:90:ae:81:4c:e5:2d:ed:5f:d1:d0:36:e8: 47:1a:44:bf:57:6c:99:de:d0:01:1d:da:7e:01:1e:91:3e:f8: de:4c:bc:a5:6b:6b:35:cb:74:e6:47:af:5b:bd:9d:1a:20:4e: 7c:0c:c0:97:34:0c:e8:50:0f:fb:9f:15:fe:c2:44:8f:28:8c: f4:fb:e4:1f:63:9b:7c:4c:48:da:93:9f:bc:77:8f:76:51:57: 9a:c0:0d:90:97:2a:0f:64:46:09:44:aa:61:3e:d8:84:eb:5b: eb:54:5b:77:ee:ba:12:30:76:4a:de:fb:5f:a4:f1:72:48:3c: 3c:ef:72:d3:ad:dd:7a:ca:b3:4a:4f:c5:81:66:5d:30:26:40: 13:1a:f1:d5:82:ec:14:f3:83:20:e3:1a:14:eb:1b:ab:43:d6: 7a:0b:17:48:24:24:47:ef:f0:99:86:fb:af:10:fd:02:59:b0: 1e:82:1a:5f:fa:e7:da:c0:c1:5d:a8:5a:b8:7c:84:1e:5e:18: 9e:33:96:fb:38:34:46:b5:61:ba:cf:e7:c2:7d:98:1f:11:7c: 02:9f:e9:46:ea:82:33:d0:73:59:7a:9e:8a:31:8d:5e:67:cc: 80:c3:f0:37:47:c0:fd:aa:ba:0e:62:84:6f:72:6c:01:49:67: 80:7f:ce:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjUwNTMxMTQzNzMxWhcNMjUwNjA3MTQzNzMxWjAYMRYwFAYD VQQDEw02ODNiMTQyYi04YzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6K1PadQqlz0BbSdPrGTiS8q8kxQ7b6+4zknmdHhckxn6GFQIJVyyyfVbp4ni tW3nGVj4Zzbe7KXEhKcGEZj27P8TpmI3+0bVwejIwD4Dl/MJqrtWLJ2XtC93cBrX 3YQglJGf/CDFK1f1NfcbpmaeiA5K79Va/lGNuN446Vc5Z73IpuWPVma5mtmwtdkv UcFQNyxTRtJL0X2s0euu3luVhgNUO5Y4gThRmfQ/n3Fgs5u+3QSH62RpryR795o6 7XEbX2bv/QeWPlvZRr0JByvY2Z8mqlVlX2QznUu393Y9QiOzRsMJdtuzyduzbxPm 9+NC0/KZr29gCnu9/dKincrc7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4ok6uW LhdL2AIvDirZ4O92Dvz7MB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtr1W49TqQroFM5S3tX9HQNuhHGkS/V2yZ3tABHdp+AR6RPvjeTLyl a2s1y3TmR69bvZ0aIE58DMCXNAzoUA/7nxX+wkSPKIz0++QfY5t8TEjak5+8d492 UVeawA2QlyoPZEYJRKphPtiE61vrVFt37roSMHZK3vtfpPFySDw873LTrd16yrNK T8WBZl0wJkATGvHVguwU84Mg4xoU6xurQ9Z6CxdIJCRH7/CZhvuvEP0CWbAeghpf +ufawMFdqFq4fIQeXhieM5b7ODRGtWG6z+fCfZgfEXwCn+lG6oIz0HNZep6KMY1e Z8yAw/A3R8D9qroOYoRvcmwBSWeAf84h -----END CERTIFICATE-----Generated at Sat May 31 16:29:31 2025 by rpki-client