$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft File: I_DaaXyqHZJHpmnfh4G6MBN9elk.mft (raw, json) Hash identifier: GlCX3gyM3g5+qU+UvfCbQogQgRc/b+oXPNjg0I2wIiM= Subject key identifier: 90:78:11:BF:CB:B7:86:8B:25:21:F8:31:19:F4:DD:F9:06:5F:B6:FC Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 Certificate issuer: /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft Manifest number: 0187 Signing time: Sat 31 May 2025 03:18:14 +0000 Manifest this update: Sat 31 May 2025 03:18:14 +0000 Manifest next update: Sat 07 Jun 2025 03:18:14 +0000 Files and hashes: 1: I_DaaXyqHZJHpmnfh4G6MBN9elk.crl (hash: AuDsiUhMSQ3wxyWb1Ls5YaK4B9Rw4yVX91U5f8nL1mg=) 2: C662FB52399511EFA72CB43DC4F9AE02.roa (hash: n0lrvV9LdsTtg9FYUMIkAD1IjJU4/BMbBirBGY0gChs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8, serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Validity Not Before: May 31 03:18:14 2025 GMT Not After : Jun 7 03:18:14 2025 GMT Subject: CN=683a74f6-cdea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:0e:aa:ea:11:f8:a4:e1:e3:9f:17:cc:e6: 27:c4:91:1e:5c:1c:76:1d:f1:01:88:de:eb:a5:b3: 1b:96:32:fc:40:95:7d:9f:24:0f:cd:03:5a:43:b7: 91:68:f7:02:4e:0e:f5:9c:5b:33:d4:cd:89:ff:fe: eb:5e:f7:be:63:9b:42:d6:29:e3:8e:f6:9c:d4:46: f8:73:22:de:b8:00:cd:8a:74:6c:f8:46:3d:d5:71: 68:c5:53:5c:14:fa:b0:d7:ba:12:84:81:98:ff:91: 7e:6b:b8:62:b0:fe:8e:4d:c0:a2:75:2e:74:96:f5: 3a:1d:7f:38:c9:cb:cc:4f:02:0b:75:97:02:24:40: 99:61:b3:1d:ad:06:90:57:0a:d9:48:b3:d0:1a:cf: ad:1f:a8:95:1e:9c:7d:58:06:b1:cd:b7:82:b5:22: f4:5e:16:da:0b:34:94:ff:3f:d1:1a:d6:5e:9a:18: 35:2c:84:0a:3d:40:16:26:9a:fd:4a:4c:77:b3:bb: 0c:8f:a2:16:80:43:5f:e8:9b:15:4f:3a:57:32:c0: ca:a0:ea:aa:a3:05:bd:51:05:8d:c2:e3:0b:fd:e0: 75:4f:45:a5:8e:92:7b:6f:6b:fc:d8:11:f1:6e:d5: ca:71:34:78:73:e4:ab:2d:68:2a:5a:8c:2d:d7:2b: b2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:78:11:BF:CB:B7:86:8B:25:21:F8:31:19:F4:DD:F9:06:5F:B6:FC X509v3 Authority Key Identifier: keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:a7:b2:01:76:2b:de:11:3a:e1:dc:04:9f:bf:e6:9c:10:10: 1b:d2:32:64:8f:aa:43:14:04:14:f6:11:51:b4:19:27:91:78: c5:3c:b4:25:2c:83:08:28:0f:73:62:62:42:be:c5:47:5d:5b: 97:96:09:4a:6c:0f:56:83:e8:27:1b:26:e5:b4:4c:5d:37:85: 74:e3:42:9f:f1:59:79:05:8c:b2:61:ae:d1:4c:50:d8:56:e2: 90:02:d5:e3:5c:8d:12:62:49:35:6f:39:dd:8d:30:f4:e2:be: f3:29:a9:37:e5:cb:b2:2c:46:bc:7b:95:95:56:d5:fc:43:55: 49:fa:7c:82:f2:ff:d8:78:fd:31:68:1d:81:10:04:4a:64:a6: bf:3a:eb:f1:0a:df:a5:22:58:d8:fc:83:70:c6:88:30:f7:fb: 6b:16:02:15:9a:af:22:3e:5c:f3:26:cc:6f:44:2a:bf:b1:0f: 6e:6b:84:0d:13:b8:54:4d:43:c2:33:9c:a6:36:4f:92:82:d4: 29:8f:eb:c9:36:7e:47:c1:a6:52:74:44:8d:7f:63:20:71:43: 06:6b:42:1a:cb:e6:a7:22:5d:16:86:64:63:ef:61:9f:7f:1c: 39:38:7e:53:88:c9:79:0f:72:79:45:71:19:a1:ac:59:a5:c3: 0c:a1:c3:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKDIzRjBEQTY5N0NBQTFEOTI0N0E2NjlERjg3ODFCQTMw MTM3RDdBNTkwHhcNMjUwNTMxMDMxODE0WhcNMjUwNjA3MDMxODE0WjAYMRYwFAYD VQQDEw02ODNhNzRmNi1jZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAoOquoR+KTh458XzOYnxJEeXBx2HfEBiN7rpbMbljL8QJV9nyQPzQNaQ7eR aPcCTg71nFsz1M2J//7rXve+Y5tC1injjvac1Eb4cyLeuADNinRs+EY91XFoxVNc FPqw17oShIGY/5F+a7hisP6OTcCidS50lvU6HX84ycvMTwILdZcCJECZYbMdrQaQ VwrZSLPQGs+tH6iVHpx9WAaxzbeCtSL0XhbaCzSU/z/RGtZemhg1LIQKPUAWJpr9 Skx3s7sMj6IWgENf6JsVTzpXMsDKoOqqowW9UQWNwuML/eB1T0WljpJ7b2v82BHx btXKcTR4c+SrLWgqWowt1yuyCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJB4Eb/L t4aLJSH4MRn03fkGX7b8MB8GA1UdIwQYMBaAFCPw2ml8qh2SR6Zp34eBujATfXpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC82MjYyRjZENkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUhaSkhwbW5maDRHNk1CTjll bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfRGFhWHlxSFpKSHBtbmZoNEc2TUJOOWVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJDOC82MjYyRjZENkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUha SkhwbW5maDRHNk1CTjllbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4p7IBdiveETrh3ASfv+acEBAb0jJkj6pDFAQU9hFRtBknkXjFPLQl LIMIKA9zYmJCvsVHXVuXlglKbA9Wg+gnGybltExdN4V040Kf8Vl5BYyyYa7RTFDY VuKQAtXjXI0SYkk1bzndjTD04r7zKak35cuyLEa8e5WVVtX8Q1VJ+nyC8v/YeP0x aB2BEARKZKa/OuvxCt+lIljY/INwxogw9/trFgIVmq8iPlzzJsxvRCq/sQ9ua4QN E7hUTUPCM5ymNk+SgtQpj+vJNn5HwaZSdESNf2MgcUMGa0Iay+anIl0WhmRj72Gf fxw5OH5TiMl5D3J5RXEZoaxZpcMMocPo -----END CERTIFICATE-----Generated at Sat May 31 17:12:57 2025 by rpki-client