$ rpki-client -vvf rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft File: A43gleg_bKbmOl8jbnsi8v-ZG74.mft (raw, json) Hash identifier: Yk0vMrAi6ijl/NDVTSVsH7csC+sJ0lspKXFdR7+21I8= Subject key identifier: 55:65:5E:8D:1C:9E:B1:6F:6D:34:39:8B:4A:51:AE:AC:49:21:89:3B Authority key identifier: 03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE Certificate issuer: /CN=A913384E/serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft Manifest number: 064A Signing time: Fri 30 May 2025 22:49:22 +0000 Manifest this update: Fri 30 May 2025 22:49:22 +0000 Manifest next update: Fri 06 Jun 2025 22:49:22 +0000 Files and hashes: 1: A43gleg_bKbmOl8jbnsi8v-ZG74.crl (hash: zNkeAvumOhzl4FDEXZRK1u3lIh+tx6fgffd4+xXMAVA=) 2: FCB378AC8EF411EBAE4DC623C4F9AE02.roa (hash: NEghmZK6SR0tR3ZI4129y+/95/Ec7cMoQlur8P+TYRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913384E, serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE Validity Not Before: May 30 22:49:22 2025 GMT Not After : Jun 6 22:49:22 2025 GMT Subject: CN=683a35f2-ab56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:48:c6:1e:c5:47:58:48:14:4f:79:cb:1c: 32:92:ce:e0:b9:7a:b5:79:31:ab:8d:11:94:aa:ed: 32:20:98:b0:ce:c5:63:b1:1e:3e:d7:24:04:fd:d5: e3:09:53:6d:0a:a1:b0:35:ae:2a:60:be:7b:f7:38: e0:68:e6:4f:2b:2b:7e:ea:c1:06:7e:1c:97:97:ac: b0:43:ae:dc:4b:b4:9f:e1:c3:74:5e:9a:b6:27:8d: da:37:1e:44:c4:1e:2c:ce:a4:b1:3c:d4:d9:f5:84: 8a:4c:8c:60:4e:c1:c1:d9:df:c8:90:3d:d6:9f:29: 81:d6:1a:ea:10:78:1b:9a:91:3a:7b:92:25:9a:64: a1:c0:64:73:87:8e:8e:71:c2:f6:d6:cb:72:61:c5: 57:82:49:06:32:8a:bc:a6:fb:da:10:c1:ef:15:21: 2f:20:ab:04:6d:03:55:a8:7b:62:32:f5:5c:cc:b4: 36:d4:6a:4c:f0:7d:81:5b:82:de:8b:82:2e:85:34: 6a:8c:26:e1:6a:3b:69:ea:a5:5a:b4:ec:c8:6f:97: 7d:18:83:80:69:94:c2:ca:f3:55:29:cb:65:9b:05: 1c:96:36:24:38:8b:3a:56:10:fb:6d:63:4c:2a:e2: 8f:58:c7:7d:0e:fc:37:1a:94:33:72:d1:4d:4d:87: 1b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:65:5E:8D:1C:9E:B1:6F:6D:34:39:8B:4A:51:AE:AC:49:21:89:3B X509v3 Authority Key Identifier: keyid:03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:5a:92:fd:64:68:74:c1:a1:2e:20:7e:0a:9b:a3:b3:a6:6e: cd:f6:23:bb:56:67:4f:bf:2a:e3:b4:3a:de:b1:20:2e:b0:61: ff:7b:2e:91:13:cc:03:8e:2f:78:b3:19:bb:c9:ef:80:65:b9: da:75:05:d2:d5:5e:34:43:09:00:1e:c8:fb:ac:3e:85:2b:3e: d7:de:62:02:1d:ec:40:55:d9:d6:1d:bd:39:64:d9:21:da:f9: 67:ed:41:68:89:b7:21:6f:bf:61:81:a9:2e:46:10:6b:d4:8d: 96:68:07:0e:dd:42:97:ab:f3:7a:98:3e:c3:86:f7:4d:c8:05: e7:36:e6:97:d5:1f:c1:ca:54:2d:0e:1d:a9:f2:aa:81:f0:2b: d3:de:8c:56:28:c1:67:82:d4:27:75:0e:50:e1:39:00:ba:89: e2:e9:18:fa:78:f8:ca:31:be:fb:22:62:43:cd:ba:11:88:48: 3b:db:be:19:bf:a2:1a:07:b9:13:05:a3:4d:7a:28:69:9b:c7: 13:bc:99:26:1b:d3:13:b2:e2:6e:af:28:c2:c4:df:92:71:91: 65:8b:3d:8e:7a:e5:53:62:d8:c1:60:1f:c3:9e:8f:b8:50:6e: 2d:13:6a:96:cb:72:b9:0f:8f:73:ff:77:83:33:a8:0a:f1:7c: 7a:7f:90:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4NEUxMTAvBgNVBAUTKDAzOERFMDk1RTgzRjZDQTZFNjNBNUYyMzZFN0IyMkYy RkY5OTFCQkUwHhcNMjUwNTMwMjI0OTIyWhcNMjUwNjA2MjI0OTIyWjAYMRYwFAYD VQQDEw02ODNhMzVmMi1hYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+hIxh7FR1hIFE95yxwyks7guXq1eTGrjRGUqu0yIJiwzsVjsR4+1yQE/dXj CVNtCqGwNa4qYL579zjgaOZPKyt+6sEGfhyXl6ywQ67cS7Sf4cN0Xpq2J43aNx5E xB4szqSxPNTZ9YSKTIxgTsHB2d/IkD3WnymB1hrqEHgbmpE6e5IlmmShwGRzh46O ccL21styYcVXgkkGMoq8pvvaEMHvFSEvIKsEbQNVqHtiMvVczLQ21GpM8H2BW4Le i4IuhTRqjCbhajtp6qVatOzIb5d9GIOAaZTCyvNVKctlmwUcljYkOIs6VhD7bWNM KuKPWMd9Dvw3GpQzctFNTYcbeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVlXo0c nrFvbTQ5i0pRrqxJIYk7MB8GA1UdIwQYMBaAFAON4JXoP2ym5jpfI257IvL/mRu+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg0RS9CMzU4MTM2NDhF REQxMUVCQkU2NzY0MkVDNEY5QUUwMi9BNDNnbGVnX2JLYm1PbDhqYm5zaTh2LVpH NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0M2dsZWdfYktibU9sOGpibnNpOHYtWkc3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzg0RS9CMzU4MTM2NDhFREQxMUVCQkU2NzY0MkVDNEY5QUUwMi9BNDNnbGVnX2JL Ym1PbDhqYm5zaTh2LVpHNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5WpL9ZGh0waEuIH4Km6Ozpm7N9iO7VmdPvyrjtDresSAusGH/ey6R E8wDji94sxm7ye+AZbnadQXS1V40QwkAHsj7rD6FKz7X3mICHexAVdnWHb05ZNkh 2vln7UFoibchb79hgakuRhBr1I2WaAcO3UKXq/N6mD7DhvdNyAXnNuaX1R/BylQt Dh2p8qqB8CvT3oxWKMFngtQndQ5Q4TkAuoni6Rj6ePjKMb77ImJDzboRiEg7274Z v6IaB7kTBaNNeihpm8cTvJkmG9MTsuJuryjCxN+ScZFliz2OeuVTYtjBYB/Dno+4 UG4tE2qWy3K5D49z/3eDM6gK8Xx6f5Cr -----END CERTIFICATE-----Generated at Sat May 31 17:44:10 2025 by rpki-client