$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json) Hash identifier: PJrVcr0mz846mIuUQkXY1ybiN6Ptdy+Y0zPU0ca5qzY= Subject key identifier: F0:02:0B:1B:BC:19:94:0C:8C:0C:FA:66:5E:0C:68:45:66:5F:F0:20 Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Certificate serial: 12EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft Manifest number: 12E5 Signing time: Fri 30 May 2025 17:14:15 +0000 Manifest this update: Fri 30 May 2025 17:14:15 +0000 Manifest next update: Fri 06 Jun 2025 17:14:15 +0000 Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: e9s7fmEfRKbJfPwgBki+lP60igEIZBp3dBZcbYHoS2c=) 2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: rzftRMPtJ5B6XfKei48LV2pqboch+DlK8AP2NtHbsfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4844 (0x12ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Validity Not Before: May 30 17:14:15 2025 GMT Not After : Jun 6 17:14:15 2025 GMT Subject: CN=6839e767-9423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:e2:9f:e9:57:30:16:ac:f7:0b:6f:8e:d9: 5b:14:77:60:fb:a6:eb:f8:d3:1d:04:56:34:9b:aa: f6:9e:d8:3e:2c:80:0e:00:08:b4:db:df:23:51:95: 77:eb:42:25:d6:4c:c0:45:b7:59:20:79:59:03:59: 9e:72:de:26:b8:ee:97:22:16:bf:57:c5:59:b3:dd: aa:a9:28:d6:8d:4f:41:f7:26:4a:bc:df:6c:41:0a: 54:8d:6e:78:4c:a9:c0:70:bc:ff:0d:be:05:cf:04: a1:4d:7c:ef:d1:4e:13:7f:ce:64:7e:9a:df:07:fc: 9f:54:d6:de:23:be:c8:0b:c0:62:0f:37:94:94:30: a1:a2:eb:11:c9:4d:1b:85:81:58:ca:49:55:67:1e: fb:7a:5f:42:85:a5:f0:25:89:02:64:ca:97:1f:b2: f1:db:a7:57:ad:e2:ee:2a:7e:d3:76:27:2e:d1:18: 01:24:7f:f7:86:af:89:14:3d:46:80:c3:6b:59:37: f9:93:92:e2:be:58:a1:20:59:f2:27:aa:d7:d4:55: a2:11:19:32:68:05:b5:a9:27:00:0d:92:f2:76:ef: e5:b4:32:07:7f:a4:fd:82:fc:10:76:00:0a:f9:df: a4:38:a6:89:28:bd:26:a0:d7:f1:de:7e:f8:ae:cb: f1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:02:0B:1B:BC:19:94:0C:8C:0C:FA:66:5E:0C:68:45:66:5F:F0:20 X509v3 Authority Key Identifier: keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:51:e9:ca:b5:bb:36:e4:d6:d3:d9:a7:d7:50:0c:47:3b:3c: 5e:3a:52:41:b0:cd:ef:da:a9:54:69:27:b7:b7:81:bc:5e:85: 8f:b6:2c:6d:4a:17:9e:83:a8:ec:2e:be:89:83:bc:b2:bd:1d: 31:a9:5d:f1:62:3c:e2:8c:33:8a:42:8f:3f:98:ef:6d:a3:ac: cb:6a:2f:7d:24:41:1e:41:5a:89:45:12:72:52:29:2d:32:77: b4:56:d5:5f:b9:31:62:f6:e7:8e:86:9f:50:2e:a7:04:b3:6c: 58:a7:ea:3a:4f:12:06:f7:cc:19:cd:90:91:7c:0a:ec:84:c2: dc:15:38:19:5d:dd:6a:8f:64:9c:47:d2:c2:dd:ac:74:29:97: 18:6e:b4:b8:3e:4e:91:5b:ce:b5:47:f3:f5:17:7e:dd:1f:15: 7b:c1:c9:e6:b7:c4:b4:1c:6e:50:ff:9a:f5:10:76:71:f6:7d: 0a:fb:02:c3:cd:ea:6c:80:28:82:f7:28:34:48:41:2f:26:e8: 88:94:03:14:02:96:1c:33:2f:8d:67:91:11:b2:f3:3a:f7:9d: 17:01:8c:62:39:b4:8b:6c:48:f6:4c:57:67:c8:aa:a1:6a:96: a6:c2:1d:ed:c5:d9:68:b6:a3:b2:32:18:70:4f:5b:99:69:7f: aa:24:14:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC QkJFNzQxQkMwHhcNMjUwNTMwMTcxNDE1WhcNMjUwNjA2MTcxNDE1WjAYMRYwFAYD VQQDEw02ODM5ZTc2Ny05NDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowHin+lXMBas9wtvjtlbFHdg+6br+NMdBFY0m6r2ntg+LIAOAAi0298jUZV3 60Il1kzARbdZIHlZA1mect4muO6XIha/V8VZs92qqSjWjU9B9yZKvN9sQQpUjW54 TKnAcLz/Db4FzwShTXzv0U4Tf85kfprfB/yfVNbeI77IC8BiDzeUlDChousRyU0b hYFYyklVZx77el9ChaXwJYkCZMqXH7Lx26dXreLuKn7Tdicu0RgBJH/3hq+JFD1G gMNrWTf5k5LivlihIFnyJ6rX1FWiERkyaAW1qScADZLydu/ltDIHf6T9gvwQdgAK +d+kOKaJKL0moNfx3n74rsvxswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPACCxu8 GZQMjAz6Zl4MaEVmX/AgMB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2 NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx anJsbEtsS3p1Yy03dm5RYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYUenKtbs25NbT2afXUAxHOzxeOlJBsM3v2qlUaSe3t4G8XoWPtixt Sheeg6jsLr6Jg7yyvR0xqV3xYjzijDOKQo8/mO9to6zLai99JEEeQVqJRRJyUikt Mne0VtVfuTFi9ueOhp9QLqcEs2xYp+o6TxIG98wZzZCRfArshMLcFTgZXd1qj2Sc R9LC3ax0KZcYbrS4Pk6RW861R/P1F37dHxV7wcnmt8S0HG5Q/5r1EHZx9n0K+wLD zepsgCiC9yg0SEEvJuiIlAMUApYcMy+NZ5ERsvM6950XAYxiObSLbEj2TFdnyKqh apamwh3txdlotqOyMhhwT1uZaX+qJBRU -----END CERTIFICATE-----Generated at Sat May 31 17:58:49 2025 by rpki-client