$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft File: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json) Hash identifier: v9y4hImXObzXxKGLNJvNVJHnqa7qhrkBMDB20v8OS70= Subject key identifier: FC:76:A6:9F:44:3A:57:3D:10:54:45:F0:E6:6C:FF:B7:26:60:4C:15 Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4 Certificate issuer: /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft Manifest number: 1B Signing time: Sat 31 May 2025 07:29:28 +0000 Manifest this update: Sat 31 May 2025 07:29:27 +0000 Manifest next update: Sat 07 Jun 2025 07:29:27 +0000 Files and hashes: 1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: nm3dhja7UBvNtn12LB/LNvpCHED+6TTWfmpJMQLKUkQ=) 2: 28BBA728141411F08D862A74C4F9AE02.roa (hash: bM0rHlFCkCxESty36KKICwvwa1HEG8pgqoXnhaZGbjI=) 3: 2857C712141411F08D862A74C4F9AE02.roa (hash: q/LJ7SPvTkUYwfSCfg1Hilqw1bbJVMWb831qXikLEmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4 Validity Not Before: May 31 07:29:27 2025 GMT Not After : Jun 7 07:29:27 2025 GMT Subject: CN=683aafd8-969f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:1b:07:6d:54:57:56:0d:bf:6f:32:1a:d6: f6:ac:d0:cb:2a:2b:7e:c2:98:20:a6:29:55:8f:05: bf:fe:76:73:b2:8d:ff:3b:91:a1:3d:4f:71:ec:89: 2c:ae:d6:c2:f8:22:f8:b3:66:6c:bb:f8:12:67:a8: dc:df:7f:aa:d5:51:42:05:02:19:74:54:19:17:c2: b3:05:21:43:86:59:0a:38:c6:c1:98:f2:17:bf:89: 89:2b:10:96:43:0e:9d:1b:93:56:7a:69:43:8c:cd: a0:2a:82:e9:d0:a4:df:c9:70:46:a5:5b:7e:78:7f: f7:6e:ba:5b:ed:c5:dc:71:77:ba:e8:63:70:ff:8b: 61:23:68:9f:d4:99:96:cb:7c:dc:41:29:df:8f:32: d5:f6:fd:98:52:e2:c1:7e:0b:3a:e2:82:8c:54:a9: 48:06:51:a2:f3:94:6f:55:c6:24:ee:a0:60:bf:4d: 97:06:88:60:e2:fe:7a:4c:b5:dd:15:11:66:6c:1c: e1:83:5a:8d:d4:c7:1c:52:38:d6:7c:3d:32:b9:ff: fa:84:32:f0:e6:34:3f:1c:78:43:a0:7a:f9:51:d3: c6:41:cb:a0:ba:ef:be:c8:6a:b0:d4:8c:41:89:88: df:1f:ce:c2:1c:b1:33:d8:ad:1b:05:8a:e2:3a:a4: 5e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:76:A6:9F:44:3A:57:3D:10:54:45:F0:E6:6C:FF:B7:26:60:4C:15 X509v3 Authority Key Identifier: keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:16:c7:1d:7a:f0:63:94:73:98:b6:f1:95:34:3a:e9:f0:a8: 43:49:79:b6:b2:04:41:b7:df:a1:ac:ab:6e:c4:c5:1e:89:b6: 91:7e:3e:44:b0:64:12:a0:06:a3:fe:1f:f9:4c:33:b8:96:43: 0b:7b:5e:9c:c0:c6:e9:a4:37:aa:0c:7c:7d:a2:c5:d6:19:3c: 2d:77:34:de:d5:60:85:c8:26:18:bf:5f:8f:be:57:e5:50:fd: a8:50:45:49:c7:3a:8b:7d:1f:44:d5:aa:57:7b:ce:b7:71:90: 68:26:05:63:41:9e:a5:be:25:46:c7:5a:9b:22:c6:ea:6e:b3: b7:01:69:5b:c2:75:c5:ae:95:e1:5c:41:43:d3:06:bc:02:6e: 2b:c4:f2:d0:05:80:1e:be:c5:07:d8:9f:1b:53:96:f0:43:4d: bb:ec:d0:bc:e2:35:23:d5:66:43:7f:f8:aa:a6:26:db:49:12: e4:b1:31:a3:aa:73:ba:aa:c6:4d:62:71:63:b4:92:c3:de:7b: b1:ad:f3:b9:3d:22:17:75:41:75:c2:79:e9:73:2c:24:4e:be: 8a:5f:89:40:2f:66:6e:4b:8d:72:c3:de:2a:99:20:c4:d5:d1: d2:9c:83:cf:ee:81:10:ea:8d:1b:7f:67:0a:19:e2:75:4b:d0: d4:f7:96:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTAxMjExMC8GA1UEBRMoRjlCNDAyMkMwMjlFN0Q5RTVBNjM0OTY4RkRCQTRBMEU5 Q0Q2MjRFNDAeFw0yNTA1MzEwNzI5MjdaFw0yNTA2MDcwNzI5MjdaMBgxFjAUBgNV BAMTDTY4M2FhZmQ4LTk2OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9tRsHbVRXVg2/bzIa1vas0MsqK37CmCCmKVWPBb/+dnOyjf87kaE9T3HsiSyu 1sL4IvizZmy7+BJnqNzff6rVUUIFAhl0VBkXwrMFIUOGWQo4xsGY8he/iYkrEJZD Dp0bk1Z6aUOMzaAqgunQpN/JcEalW354f/duulvtxdxxd7roY3D/i2EjaJ/UmZbL fNxBKd+PMtX2/ZhS4sF+CzrigoxUqUgGUaLzlG9VxiTuoGC/TZcGiGDi/npMtd0V EWZsHOGDWo3UxxxSONZ8PTK5//qEMvDmND8ceEOgevlR08ZBy6C6777IarDUjEGJ iN8fzsIcsTPYrRsFiuI6pF6PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/Hamn0Q6 Vz0QVEXw5mz/tyZgTBUwHwYDVR0jBBgwFoAU+bQCLAKefZ5aY0lo/bpKDpzWJOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMDEyL0I4MUFBMjU4MTQx MzExRjBCNjhFNzM3M0M0RjlBRTAyLy1iUUNMQUtlZlo1YVkwbG9fYnBLRHB6V0pP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWJRQ0xBS2VmWjVhWTBsb19icEtEcHpXSk9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MDEyL0I4MUFBMjU4MTQxMzExRjBCNjhFNzM3M0M0RjlBRTAyLy1iUUNMQUtlZlo1 YVkwbG9fYnBLRHB6V0pPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB0Wxx168GOUc5i28ZU0OunwqENJebayBEG336Gsq27ExR6JtpF+PkSw ZBKgBqP+H/lMM7iWQwt7XpzAxumkN6oMfH2ixdYZPC13NN7VYIXIJhi/X4++V+VQ /ahQRUnHOot9H0TVqld7zrdxkGgmBWNBnqW+JUbHWpsixupus7cBaVvCdcWuleFc QUPTBrwCbivE8tAFgB6+xQfYnxtTlvBDTbvs0LziNSPVZkN/+KqmJttJEuSxMaOq c7qqxk1icWO0ksPee7Gt87k9Ihd1QXXCeelzLCROvopfiUAvZm5LjXLD3iqZIMTV 0dKcg8/ugRDqjRt/ZwoZ4nVL0NT3lkY= -----END CERTIFICATE-----Generated at Sat May 31 17:47:19 2025 by rpki-client