$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: xUWJjXDlTjf0+gx6TVK6ZtLTuCXmkPjtXwo+FU30v7U= Subject key identifier: 34:43:20:FA:17:6F:E7:57:A5:67:69:69:C6:D7:08:A3:94:DD:09:99 Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 0473 Signing time: Sat 31 May 2025 00:19:38 +0000 Manifest this update: Sat 31 May 2025 00:19:38 +0000 Manifest next update: Sat 07 Jun 2025 00:19:38 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: mXLN+sBc2nifVHWZn/C73bHoLUf1f9uVpOR0k+ovNoc=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: May 31 00:19:38 2025 GMT Not After : Jun 7 00:19:38 2025 GMT Subject: CN=683a4b1a-8cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:ed:12:0d:59:0b:a3:8c:79:78:a2:03:32: 95:ca:72:a0:3a:bc:89:27:8e:4d:b2:90:92:da:f0: c4:f1:a5:7b:e1:1c:7f:b1:eb:01:00:74:01:ed:3c: 60:4b:20:b1:39:45:93:3d:0c:67:54:45:e2:8d:55: 15:a5:31:79:6f:4e:4f:d2:c5:ac:dd:24:be:b8:31: 2e:2d:ab:f7:93:e4:c8:07:73:1b:6f:27:be:2c:6e: 6f:70:cd:ed:38:3f:c6:c8:18:11:61:8b:05:cc:98: 7e:22:f0:44:01:bb:70:e6:d3:4e:b3:36:31:0b:46: 36:5b:7c:ac:99:64:3f:a1:e3:f0:80:a7:9a:26:cc: 2a:f8:dd:4e:cd:c8:9c:2f:34:15:6a:a0:22:ae:4b: 70:d8:c3:13:64:fc:3e:34:6a:9a:b8:73:33:bc:88: bb:47:c9:2f:98:77:de:6a:29:e5:bf:7c:fe:64:85: 63:97:2d:dd:02:d0:1c:25:9f:80:1e:04:1d:21:9d: c8:75:6f:f0:ec:76:53:38:4d:04:02:4a:67:e6:51: f6:16:d9:26:3f:9a:2b:df:32:e6:66:1b:03:73:c9: 8c:52:10:fa:ef:73:20:80:8d:33:9d:01:3b:3d:2e: 41:28:cd:8f:20:50:ef:44:a0:f5:05:3c:5f:1d:7f: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:43:20:FA:17:6F:E7:57:A5:67:69:69:C6:D7:08:A3:94:DD:09:99 X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2e:af:41:9b:28:b3:71:5f:c3:7a:65:c2:b5:7e:05:ac:1b: 00:3d:f0:7b:4d:a8:27:6c:28:d3:0b:48:3e:36:66:09:ac:b1: 98:2c:11:ba:14:de:1c:39:d0:28:7d:d1:1e:b3:d7:b8:c9:d9: bc:7f:63:68:21:fa:3d:3b:e6:f4:dd:9e:fd:6e:54:2a:44:cc: 3b:c9:f8:41:e6:2f:22:25:76:6e:f2:d3:63:82:a3:53:18:63: 1c:30:5d:9c:de:53:b9:2b:0e:6c:56:a4:a5:8f:09:0d:d7:93: 42:f3:4e:1f:9a:66:d2:b5:6d:10:e0:ad:57:35:ec:81:59:38: 1a:df:9e:8b:29:80:8c:68:7b:60:a7:6f:5d:a3:60:3d:e5:9b: 53:1b:4d:b4:7a:0c:0b:9c:52:95:95:c4:b0:52:3c:74:27:08: ef:c9:1e:8c:d7:d3:55:01:01:af:7d:15:67:b2:e9:88:a5:10: 94:c9:94:e9:04:6b:f6:ad:91:5c:13:4a:88:94:bf:f8:19:20: e8:cd:3e:0e:69:84:64:6f:e2:a5:fb:8b:b9:ae:70:16:ac:a4: 19:4c:4e:9d:b7:38:5a:67:a2:82:31:be:38:ef:99:12:69:eb: 6b:12:c4:a6:59:84:fe:1c:e7:ff:5e:5b:4d:ce:f5:41:06:86: 0d:60:51:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjUwNTMxMDAxOTM4WhcNMjUwNjA3MDAxOTM4WjAYMRYwFAYD VQQDEw02ODNhNGIxYS04Y2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZHtEg1ZC6OMeXiiAzKVynKgOryJJ45NspCS2vDE8aV74Rx/sesBAHQB7Txg SyCxOUWTPQxnVEXijVUVpTF5b05P0sWs3SS+uDEuLav3k+TIB3Mbbye+LG5vcM3t OD/GyBgRYYsFzJh+IvBEAbtw5tNOszYxC0Y2W3ysmWQ/oePwgKeaJswq+N1Ozcic LzQVaqAirktw2MMTZPw+NGqauHMzvIi7R8kvmHfeainlv3z+ZIVjly3dAtAcJZ+A HgQdIZ3IdW/w7HZTOE0EAkpn5lH2FtkmP5or3zLmZhsDc8mMUhD673MggI0znQE7 PS5BKM2PIFDvRKD1BTxfHX+2ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRDIPoX b+dXpWdpacbXCKOU3QmZMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABLq9BmyizcV/DemXCtX4FrBsAPfB7TagnbCjTC0g+NmYJrLGYLBG6 FN4cOdAofdEes9e4ydm8f2NoIfo9O+b03Z79blQqRMw7yfhB5i8iJXZu8tNjgqNT GGMcMF2c3lO5Kw5sVqSljwkN15NC804fmmbStW0Q4K1XNeyBWTga356LKYCMaHtg p29do2A95ZtTG020egwLnFKVlcSwUjx0JwjvyR6M19NVAQGvfRVnsumIpRCUyZTp BGv2rZFcE0qIlL/4GSDozT4OaYRkb+Kl+4u5rnAWrKQZTE6dtzhaZ6KCMb4475kS aetrEsSmWYT+HOf/XltNzvVBBoYNYFH2 -----END CERTIFICATE-----Generated at Sat May 31 16:25:51 2025 by rpki-client