$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft File: 4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json) Hash identifier: JxLgC2b+f6IXouN62MtyyG6UC8PHDWbw7sj386y5m1U= Subject key identifier: 51:85:21:F8:C6:AA:C3:70:4F:08:11:76:55:92:DE:EF:09:C1:7C:86 Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Certificate serial: 17FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft Manifest number: 17C5 Signing time: Fri 30 May 2025 16:45:44 +0000 Manifest this update: Fri 30 May 2025 16:45:43 +0000 Manifest next update: Fri 06 Jun 2025 16:45:43 +0000 Files and hashes: 1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: a9Ku3FYvL1vFsisMVHMohF15w26LAKcNx7FA9V70DtY=) 2: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: wcQu6qDmYL8RSwTWQdHq8swDuqsLZ/b+WksTXiVZeUI=) 3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: ukI4z4ZMWUWet1XkTlAm00Pda4+ffxxraVEq+pStj8k=) 4: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: mm0VJeRGh/+0foB6ENfn+0Td2KUkG+rfML9gCL5EGhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6143 (0x17ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Validity Not Before: May 30 16:45:43 2025 GMT Not After : Jun 6 16:45:43 2025 GMT Subject: CN=6839e0b7-bca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:a8:7d:76:3e:ec:a3:63:d7:03:d1:1e:a6: a1:96:a1:3f:b1:66:08:ed:a7:86:ff:c9:2a:75:4a: 78:33:5e:e7:a5:f7:1f:21:59:e6:83:b1:33:14:5a: 78:16:f3:f4:28:81:21:c7:8d:24:7e:c9:78:53:0e: 79:2b:b5:68:94:4b:eb:bd:ed:f9:a5:8e:a3:01:98: b0:54:a8:d9:22:af:4b:1a:b2:9a:e6:1d:18:cb:68: ee:96:75:55:32:4b:8c:ba:da:ed:c9:f4:9e:5d:b1: ff:90:1c:d5:cc:28:55:9e:18:03:0d:81:f2:9b:05: 56:04:e3:37:8d:28:12:cc:c9:c6:11:56:aa:81:c1: 00:2b:d2:34:64:cb:d2:8b:48:0b:5e:5d:7b:2c:ca: 72:92:5b:1c:28:17:72:21:d9:43:9b:3c:da:42:20: a2:55:c1:1b:1f:dc:87:7e:22:24:b0:50:92:25:2c: 28:4e:4a:7f:e1:9b:35:65:85:ec:c8:af:25:9b:09: ab:6b:8c:92:08:e4:a7:dd:4c:c7:99:15:71:f5:46: bd:9d:3f:6f:f4:34:36:a5:bf:6a:17:a2:8e:7c:81: 8a:35:02:6c:57:de:e8:48:40:67:87:67:59:f1:ba: 0b:16:0a:91:e4:f7:94:8f:3d:1f:cc:fe:75:a8:45: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:85:21:F8:C6:AA:C3:70:4F:08:11:76:55:92:DE:EF:09:C1:7C:86 X509v3 Authority Key Identifier: keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:9e:0b:a3:74:85:67:94:b4:28:d3:cf:d2:00:29:5a:e9:8f: d3:cb:f6:dc:55:1d:3f:65:31:f8:c6:ef:bb:b0:93:f3:8d:93: a1:a4:20:b0:10:1e:e5:e1:b4:a0:b6:c6:73:d9:ef:33:57:50: e1:23:5e:2a:89:bb:6c:60:82:07:1f:5d:4f:bc:b3:da:ef:24: a6:23:aa:39:1b:c9:4c:ba:0b:35:ee:b1:6e:6e:16:77:59:7b: 17:bf:d1:a2:d4:76:61:59:e4:15:23:bf:84:79:ff:e1:5a:4e: 88:32:5e:e3:3d:48:22:ed:e6:72:70:58:09:78:84:25:fa:20: 79:d7:a4:c4:93:c5:fe:6e:91:17:fc:e5:9d:45:d6:20:8c:a5: 61:4f:20:42:e1:ab:73:68:22:c3:8b:3f:b0:33:9f:19:dc:25: 6f:04:97:a7:7c:bb:96:ed:1d:41:8e:c0:ce:d1:17:c4:19:e0: dc:ff:45:ec:34:94:44:5b:0a:b1:b1:73:84:21:7f:17:fe:67: 95:c2:fd:e9:0b:47:80:d9:7e:6d:5e:55:55:2c:a7:a2:82:97: b9:d1:80:74:09:1d:66:a3:73:40:55:e3:84:07:31:b2:84:77: e2:d1:8b:29:48:a8:87:f1:54:9f:87:9d:8b:96:be:36:22:d5: e1:56:97:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy Q0UyNDUxOTYwHhcNMjUwNTMwMTY0NTQzWhcNMjUwNjA2MTY0NTQzWjAYMRYwFAYD VQQDEw02ODM5ZTBiNy1iY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdSofXY+7KNj1wPRHqahlqE/sWYI7aeG/8kqdUp4M17npfcfIVnmg7EzFFp4 FvP0KIEhx40kfsl4Uw55K7VolEvrve35pY6jAZiwVKjZIq9LGrKa5h0Yy2julnVV MkuMutrtyfSeXbH/kBzVzChVnhgDDYHymwVWBOM3jSgSzMnGEVaqgcEAK9I0ZMvS i0gLXl17LMpyklscKBdyIdlDmzzaQiCiVcEbH9yHfiIksFCSJSwoTkp/4Zs1ZYXs yK8lmwmra4ySCOSn3UzHmRVx9Ua9nT9v9DQ2pb9qF6KOfIGKNQJsV97oSEBnh2dZ 8boLFgqR5PeUjz0fzP51qEVtXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGFIfjG qsNwTwgRdlWS3u8JwXyGMB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4 Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxRS9DMUZBMDgyQ0M4Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3 TWlEX2tqeldvUm9zNGtVWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCingujdIVnlLQo08/SACla6Y/Ty/bcVR0/ZTH4xu+7sJPzjZOhpCCw EB7l4bSgtsZz2e8zV1DhI14qibtsYIIHH11PvLPa7ySmI6o5G8lMugs17rFubhZ3 WXsXv9Gi1HZhWeQVI7+Eef/hWk6IMl7jPUgi7eZycFgJeIQl+iB516TEk8X+bpEX /OWdRdYgjKVhTyBC4atzaCLDiz+wM58Z3CVvBJenfLuW7R1BjsDO0RfEGeDc/0Xs NJREWwqxsXOEIX8X/meVwv3pC0eA2X5tXlVVLKeigpe50YB0CR1mo3NAVeOEBzGy hHfi0YspSKiH8VSfh52Llr42ItXhVpen -----END CERTIFICATE-----Generated at Sat May 31 17:58:49 2025 by rpki-client