$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: tt5Y1jpFx+nqgJTqP9BjpFbgx3rsWYbxfg81KeWfVPI= Subject key identifier: D1:BC:B7:D0:39:91:ED:84:13:04:25:AD:0F:70:B1:81:52:FE:E6:45 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 0387 Signing time: Sat 31 May 2025 01:03:53 +0000 Manifest this update: Sat 31 May 2025 01:03:52 +0000 Manifest next update: Sat 07 Jun 2025 01:03:52 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: KNPDt9BqEXs7KSYTS6/tcmIbHmEojh64l5IBM2ypnuQ=) 2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: ycFGkMxe7h4Ku30iu/P421qHyOaZ/lm2w5Y03BcYNz8=) 3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: DbGKbMecwcykqDAfU21+x6Kvm9Z6g5WTzg4SdqXRisc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: May 31 01:03:52 2025 GMT Not After : Jun 7 01:03:52 2025 GMT Subject: CN=683a5579-f626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:c5:e5:d6:01:da:55:4c:8a:a1:0e:b5:96: 2a:3e:1c:f1:65:4a:50:f9:d1:09:1d:87:a4:78:7b: de:d1:31:d8:b6:c1:9b:14:11:07:00:6b:2d:c8:8d: 79:ee:69:25:f0:0a:00:e7:06:31:02:c7:78:fb:58: 03:fb:ef:a3:5e:06:90:bb:9c:8c:29:c8:e3:b8:23: 2a:b0:14:82:4a:6a:48:2c:07:82:49:fa:e8:6b:80: 60:38:28:f6:3e:17:b4:ef:94:78:22:d4:2c:bf:5e: 3b:64:3a:00:18:4e:a9:21:29:a9:4d:38:24:6f:9d: df:4f:b6:bb:92:36:d1:2b:3c:5b:90:72:ea:13:77: 5e:b5:ea:4e:51:f8:82:15:50:81:66:30:ea:7e:ae: 02:d3:d7:2b:85:74:ee:83:11:1d:bc:d3:2e:22:2f: 02:86:36:b3:ff:16:b8:6d:95:ba:f0:38:6c:d5:53: 24:8e:1f:71:fc:f1:2c:a8:59:55:76:4e:37:b8:60: 21:8b:f3:86:19:83:56:64:77:25:fc:ef:01:87:7b: 0f:f0:b9:78:29:3c:23:d6:2f:20:ae:fa:98:7a:e4: 8b:59:0a:4b:4e:ec:f1:92:1b:3b:f5:14:eb:d4:57: ff:31:68:51:c1:60:ac:80:ae:f5:77:7c:5b:2e:7a: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BC:B7:D0:39:91:ED:84:13:04:25:AD:0F:70:B1:81:52:FE:E6:45 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:a9:d4:dc:ff:0b:59:b2:a6:ee:e5:69:53:44:33:cd:70:08: 99:29:91:26:6e:4b:7d:67:22:53:34:72:86:ec:0a:ec:12:c6: 7a:11:65:03:68:ed:30:42:5a:6d:06:8f:35:d5:2b:d7:64:15: 16:8a:2d:db:2c:61:c4:26:2a:e7:06:59:70:cc:38:5f:8f:39: 77:b8:4e:9e:d3:d5:b2:33:89:1d:19:5b:c5:fb:f2:03:23:e8: 6b:ae:bf:38:8b:55:d2:88:d8:c8:eb:73:d8:db:b8:9c:a7:17: 40:66:0a:90:ba:cf:05:5d:b1:31:a9:a7:af:39:b0:62:5e:2a: 20:7b:b0:0a:67:46:45:c0:ec:ec:1c:43:25:25:fa:86:7c:52: cd:24:cb:0c:9e:2d:a6:ea:2d:c7:19:1a:e5:75:86:86:05:5b: a5:cd:97:b3:f4:ef:d0:67:8a:72:46:e2:ab:d0:22:62:85:b9: 79:a6:1e:78:44:ec:6d:79:24:a0:ae:7a:b3:a0:ad:60:19:f3: 51:86:6a:33:bf:6e:e8:a0:d0:26:bc:9b:6d:33:c1:8e:f8:6d: 53:6e:1c:d3:84:a5:3b:18:f8:5a:7e:41:dd:8c:55:9d:fc:ae: 66:80:27:61:84:75:fd:e5:2f:1e:e7:d2:dc:dd:b6:e5:06:8f: 4e:87:28:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjUwNTMxMDEwMzUyWhcNMjUwNjA3MDEwMzUyWjAYMRYwFAYD VQQDEw02ODNhNTU3OS1mNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZDF5dYB2lVMiqEOtZYqPhzxZUpQ+dEJHYekeHve0THYtsGbFBEHAGstyI15 7mkl8AoA5wYxAsd4+1gD+++jXgaQu5yMKcjjuCMqsBSCSmpILAeCSfroa4BgOCj2 Phe075R4ItQsv147ZDoAGE6pISmpTTgkb53fT7a7kjbRKzxbkHLqE3detepOUfiC FVCBZjDqfq4C09crhXTugxEdvNMuIi8Chjaz/xa4bZW68Dhs1VMkjh9x/PEsqFlV dk43uGAhi/OGGYNWZHcl/O8Bh3sP8Ll4KTwj1i8grvqYeuSLWQpLTuzxkhs79RTr 1Ff/MWhRwWCsgK71d3xbLnrzgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNG8t9A5 ke2EEwQlrQ9wsYFS/uZFMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChqdTc/wtZsqbu5WlTRDPNcAiZKZEmbkt9ZyJTNHKG7ArsEsZ6EWUD aO0wQlptBo811SvXZBUWii3bLGHEJirnBllwzDhfjzl3uE6e09WyM4kdGVvF+/ID I+hrrr84i1XSiNjI63PY27icpxdAZgqQus8FXbExqaevObBiXioge7AKZ0ZFwOzs HEMlJfqGfFLNJMsMni2m6i3HGRrldYaGBVulzZez9O/QZ4pyRuKr0CJihbl5ph54 ROxteSSgrnqzoK1gGfNRhmozv27ooNAmvJttM8GO+G1TbhzThKU7GPhafkHdjFWd /K5mgCdhhHX95S8e59Lc3bblBo9OhyjA -----END CERTIFICATE-----Generated at Sat May 31 15:04:31 2025 by rpki-client