$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: f9rUf40vRFZYEqfW1if79HA5V/sd8vRMXaGsZlIMQeA= Subject key identifier: 7F:07:41:F8:3A:2F:35:92:43:87:BE:96:E9:91:8C:5B:CF:4E:0E:8C Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 171A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1525 Signing time: Fri 30 May 2025 22:29:45 +0000 Manifest this update: Fri 30 May 2025 22:29:45 +0000 Manifest next update: Fri 06 Jun 2025 22:29:45 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: 8vOEbwGU6kJ1waQ+f6Eq2/jgxWzzhNjXfUKCmjZnMsw=) 2: 8D19F1388B3511EF99F24263C4F9AE02.roa (hash: 0KsNFJkiBpEv0QmBDue9SZDREZj9NZNJ8FxtlWGXq3A=) 3: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: vcJweEpuC7NNxaBhmTy2xwoTWrT/UiEQDd+Y5zN4QIc=) 4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=) 5: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=) 6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: 01GRE88klqRtpUQjt3HlR4NOfDaQxEKnYlzo//41TJA=) 7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: +tASM1DYkwX/+xUea6kyerySpW2PmjdXvmrb5qzV+gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5914 (0x171a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: May 30 22:29:45 2025 GMT Not After : Jun 6 22:29:45 2025 GMT Subject: CN=683a3159-a3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:6e:26:14:21:96:a9:4b:19:e1:7a:b6:34: 72:09:21:91:76:c2:6d:3a:48:1d:bc:80:80:31:96: 34:39:0a:82:38:fc:3c:3f:4f:1e:10:f1:d6:c2:a2: 79:2e:da:98:85:a3:84:67:0d:67:5d:8a:70:91:60: 47:15:ef:f6:c1:27:84:cb:d7:c3:fb:97:ba:3b:d1: b7:56:07:fe:d8:dd:87:4b:3c:e6:e4:ce:34:ad:3a: 05:b6:ff:58:cf:25:a1:bc:1d:25:05:97:9a:58:8d: 40:66:cc:34:de:1b:22:ce:4c:a2:9c:4b:e0:c3:8e: 45:5a:f5:68:8c:60:e8:d0:3d:2c:cf:da:3d:43:e9: d0:d4:29:f4:a1:fb:59:92:de:c3:95:86:5e:bc:c5: 1b:ba:08:fe:c7:d6:4d:48:99:c0:f8:28:c1:50:33: 7e:cf:d0:7e:5a:c5:79:56:26:28:ec:89:4b:4b:38: 1b:06:f7:fb:f9:9b:5c:39:00:61:67:ab:bf:f4:9f: 19:ed:f6:b8:e2:a4:d3:23:a5:18:e1:a4:2c:87:23: 1e:9a:47:c6:59:2f:db:8b:a2:25:6c:77:3c:a5:be: bf:1e:dd:35:a0:10:1f:05:51:27:a9:38:21:c5:d6: 29:7e:31:ba:e2:ac:5b:d5:2f:5b:fd:9f:e9:3e:cd: 39:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:07:41:F8:3A:2F:35:92:43:87:BE:96:E9:91:8C:5B:CF:4E:0E:8C X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:95:b8:3c:6c:a4:e6:f4:af:3e:6a:e8:24:80:17:86:f7:1b: 3f:18:90:90:56:b9:42:c5:63:f3:77:8d:00:f3:1f:48:20:19: c2:1b:b5:d0:09:3a:3e:18:c4:c1:bf:bc:af:01:ec:0f:4c:31: d0:0f:b4:5d:24:af:42:44:5e:6d:f6:73:cf:5e:30:5e:23:b7: 9d:8e:95:5d:89:dd:4b:2c:db:8e:2b:1d:9d:49:84:8d:d3:f9: 31:c5:ad:40:a9:12:d3:98:fe:fb:aa:6b:96:f6:5e:35:a3:17: 5f:37:e3:3e:f2:71:fc:66:d7:5d:90:85:43:ce:1e:cf:aa:d9: 66:f6:99:e1:01:fc:2c:e5:48:0f:b6:a3:ca:10:46:20:76:5c: 8c:ad:e6:e4:ad:1b:5a:99:a4:21:3f:ff:88:84:42:3f:35:d2: 98:69:03:1c:01:94:2c:d2:85:94:dd:eb:fd:27:ac:57:70:6d: 20:bf:78:97:38:db:f8:15:6b:47:18:d8:4a:59:7d:82:7a:ba: 62:5f:9c:6d:33:57:d1:a5:7c:9f:e1:c1:5b:aa:4b:88:bc:28: 04:8a:73:98:44:39:16:84:7c:39:f8:08:af:50:18:5d:a1:4e: 61:09:71:25:1f:aa:0c:fb:98:6a:3b:54:67:7a:0c:00:01:ad: 80:6f:07:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwNTMwMjIyOTQ1WhcNMjUwNjA2MjIyOTQ1WjAYMRYwFAYD VQQDEw02ODNhMzE1OS1hM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLtuJhQhlqlLGeF6tjRyCSGRdsJtOkgdvICAMZY0OQqCOPw8P08eEPHWwqJ5 LtqYhaOEZw1nXYpwkWBHFe/2wSeEy9fD+5e6O9G3Vgf+2N2HSzzm5M40rToFtv9Y zyWhvB0lBZeaWI1AZsw03hsizkyinEvgw45FWvVojGDo0D0sz9o9Q+nQ1Cn0oftZ kt7DlYZevMUbugj+x9ZNSJnA+CjBUDN+z9B+WsV5ViYo7IlLSzgbBvf7+ZtcOQBh Z6u/9J8Z7fa44qTTI6UY4aQshyMemkfGWS/bi6IlbHc8pb6/Ht01oBAfBVEnqTgh xdYpfjG64qxb1S9b/Z/pPs05aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8HQfg6 LzWSQ4e+lumRjFvPTg6MMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAolbg8bKTm9K8+augkgBeG9xs/GJCQVrlCxWPzd40A8x9IIBnCG7XQ CTo+GMTBv7yvAewPTDHQD7RdJK9CRF5t9nPPXjBeI7edjpVdid1LLNuOKx2dSYSN 0/kxxa1AqRLTmP77qmuW9l41oxdfN+M+8nH8ZtddkIVDzh7Pqtlm9pnhAfws5UgP tqPKEEYgdlyMrebkrRtamaQhP/+IhEI/NdKYaQMcAZQs0oWU3ev9J6xXcG0gv3iX ONv4FWtHGNhKWX2CerpiX5xtM1fRpXyf4cFbqkuIvCgEinOYRDkWhHw5+AivUBhd oU5hCXElH6oM+5hqO1RnegwAAa2Abwdt -----END CERTIFICATE-----Generated at Sat May 31 17:16:12 2025 by rpki-client