$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: mqmx5OeS7lsMWumHwJF7OoebQjK/ZsLyPZWFFwJpbr8= Subject key identifier: B0:AE:2F:CE:CE:71:24:0A:12:62:7B:99:49:8D:52:94:BA:8C:54:A0 Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 05E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 05D5 Signing time: Fri 30 May 2025 23:13:42 +0000 Manifest this update: Fri 30 May 2025 23:13:41 +0000 Manifest next update: Fri 06 Jun 2025 23:13:41 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: X8cKN/PtNn5oPOA3LmneXDvqQURKYNoM7WPR2XC/9UY=) 2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: 4+8EOl0IVC0WYPREjgU4SQ2gBQ7SWbeC1nS8R2xM7hU=) 3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: Jks+wAurz0A89wXrN9oPKVJZcdKUluPelZM2Gsz3YvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: May 30 23:13:41 2025 GMT Not After : Jun 6 23:13:41 2025 GMT Subject: CN=683a3ba5-f608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:20:12:4b:db:32:e3:e2:06:9a:6e:50:45: 6d:df:f0:c3:04:aa:1f:75:97:ee:aa:50:8e:ef:de: d4:4a:ec:b1:f3:cd:99:c6:7a:c1:a8:10:1f:d1:66: 46:55:70:e6:1c:1d:39:b7:b9:b7:d5:d4:23:54:7c: f2:22:d0:fb:3d:98:c1:e9:cb:83:6e:f9:f2:62:43: f5:bd:94:c8:51:d6:0c:67:5d:0b:43:94:ec:26:df: 79:a2:d1:9c:00:05:52:ee:4b:00:7c:3b:79:d0:8c: ee:00:8d:1f:f4:40:9b:76:c5:f6:99:5c:35:60:9b: df:b7:34:9c:82:5c:53:d3:c0:6e:3c:c9:26:f3:b4: 0a:f1:22:31:78:c1:36:31:28:26:a1:83:06:09:d2: 41:59:00:d7:32:ef:1a:a4:a6:c8:f5:7e:85:e2:03: eb:3b:4f:73:ef:94:c0:ff:e3:4b:93:a4:bb:99:69: db:85:13:e6:90:35:36:c0:c8:e5:86:4f:3a:e2:a0: 63:ef:23:56:f6:0c:bf:bb:b3:35:dd:9f:2b:e5:f5: 0e:fb:0e:97:ec:fb:d7:1f:8e:d7:68:c7:4a:fc:a1: 9a:4e:53:29:d7:85:ea:33:90:bf:56:4a:85:17:d3: 91:f3:c9:0b:ac:ff:2d:db:df:23:e9:7a:be:19:89: c2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AE:2F:CE:CE:71:24:0A:12:62:7B:99:49:8D:52:94:BA:8C:54:A0 X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:66:2b:89:66:19:74:8b:5d:9d:65:e4:c2:2e:4a:b1:67:82: 1e:f2:57:1c:a2:f6:55:72:82:9e:cc:b9:f0:db:f0:3c:e8:c2: f4:c7:e4:51:79:71:e9:24:7d:2d:b2:2d:4c:50:8f:2e:9c:bf: c4:f4:fb:5c:4c:2f:5a:47:07:29:8a:61:c9:f7:95:4d:45:46: e4:a5:22:f6:af:cb:32:51:e7:6b:4b:38:11:c8:13:db:5b:98: 7b:e8:7c:d4:c9:a0:ca:d3:28:91:2c:be:6b:19:ad:d3:93:cc: a1:94:bc:89:9a:1a:f7:77:9b:cb:f3:16:64:c2:92:76:f4:08: 62:cb:74:e4:1e:be:49:ea:cd:c1:b5:71:cf:50:73:18:f6:28: ac:c9:f7:1d:e8:ef:fe:10:43:fd:42:44:d8:32:e7:70:0a:a7: 81:e4:6a:68:6c:6b:e6:8a:7f:78:cd:9b:54:d5:ba:f9:6f:49: 5b:d2:22:4b:92:04:02:d3:75:7b:85:b2:cf:ad:9b:42:9c:32: 1a:f6:1b:bc:db:08:e5:a1:74:59:c2:68:1e:42:2b:3f:ee:68: ab:86:16:e8:eb:61:9d:68:08:b9:da:b9:f5:c1:1b:b2:93:67: 39:d4:b7:54:52:f3:72:e2:71:96:9d:6b:13:62:b8:5b:58:45: 6d:87:3f:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjUwNTMwMjMxMzQxWhcNMjUwNjA2MjMxMzQxWjAYMRYwFAYD VQQDEw02ODNhM2JhNS1mNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLkgEkvbMuPiBppuUEVt3/DDBKofdZfuqlCO797USuyx882ZxnrBqBAf0WZG VXDmHB05t7m31dQjVHzyItD7PZjB6cuDbvnyYkP1vZTIUdYMZ10LQ5TsJt95otGc AAVS7ksAfDt50IzuAI0f9ECbdsX2mVw1YJvftzScglxT08BuPMkm87QK8SIxeME2 MSgmoYMGCdJBWQDXMu8apKbI9X6F4gPrO09z75TA/+NLk6S7mWnbhRPmkDU2wMjl hk864qBj7yNW9gy/u7M13Z8r5fUO+w6X7PvXH47XaMdK/KGaTlMp14XqM5C/VkqF F9OR88kLrP8t298j6Xq+GYnC0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCuL87O cSQKEmJ7mUmNUpS6jFSgMB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdZiuJZhl0i12dZeTCLkqxZ4Ie8lccovZVcoKezLnw2/A86ML0x+RR eXHpJH0tsi1MUI8unL/E9PtcTC9aRwcpimHJ95VNRUbkpSL2r8syUedrSzgRyBPb W5h76HzUyaDK0yiRLL5rGa3Tk8yhlLyJmhr3d5vL8xZkwpJ29Ahiy3TkHr5J6s3B tXHPUHMY9iisyfcd6O/+EEP9QkTYMudwCqeB5GpobGvmin94zZtU1br5b0lb0iJL kgQC03V7hbLPrZtCnDIa9hu82wjloXRZwmgeQis/7mirhhbo62GdaAi52rn1wRuy k2c51LdUUvNy4nGWnWsTYrhbWEVthz+I -----END CERTIFICATE-----Generated at Sat May 31 16:30:30 2025 by rpki-client