$ rpki-client -vvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft File: 4W5PZeLjl-n84FeFomXGGXyCIMk.mft (raw, json) Hash identifier: InBSP5iGL/SeNad0Bb2iOfw7hKnBhkUbeE+iqVLvuBQ= Subject key identifier: 9A:E7:C9:36:59:6E:DA:76:05:89:06:01:69:C1:01:85:7D:4A:FD:9A Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9 Certificate issuer: /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft Manifest number: 011E Signing time: Sat 31 May 2025 04:22:15 +0000 Manifest this update: Sat 31 May 2025 04:22:15 +0000 Manifest next update: Sat 07 Jun 2025 04:22:15 +0000 Files and hashes: 1: 4W5PZeLjl-n84FeFomXGGXyCIMk.crl (hash: vpqZK4wrjAOC+BvlFGzrsZOL41nJ1a6vGJ8hAmypoDc=) 2: 880E53BC852A11EE8B988A85C4F9AE02.roa (hash: SuIwbjVFIiO//MYlkWAI7JLL+Gi6my0EIFtFpMkp/oM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DED9, serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9 Validity Not Before: May 31 04:22:15 2025 GMT Not After : Jun 7 04:22:15 2025 GMT Subject: CN=683a83f7-dc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:b4:c4:23:ae:e1:99:d7:55:33:b5:ac:f5: 45:5b:77:fe:4e:ec:be:8d:e7:26:f8:fa:3e:45:b4: e1:fb:e0:5c:eb:cf:44:a1:12:e8:38:ba:de:23:5f: f7:2b:40:48:14:2f:99:9e:76:98:9f:bd:f8:08:80: bb:6a:1e:d8:4f:c2:76:3a:eb:9e:a3:e5:40:84:51: f1:d5:ca:fe:67:e0:94:4e:64:57:fa:cb:a9:fa:26: 81:11:cd:9b:e6:8f:43:96:9e:8b:e9:b9:5f:c8:22: 00:09:9d:78:fb:80:f7:5d:55:02:ad:97:75:28:e1: e7:0b:89:ed:40:6f:ba:5f:0f:39:ae:ce:a1:a2:7e: c7:7e:f8:3a:b7:53:c5:2b:1f:07:35:4a:f8:04:ab: b5:04:e1:09:dd:dd:29:e3:af:32:b9:8f:d3:37:46: 4f:fc:db:13:91:3d:5e:c2:cd:95:b9:f1:ce:91:b2: 6b:32:91:80:66:f7:31:83:82:b2:8f:c9:e0:dd:b3: 07:de:8e:e3:e9:da:2a:60:1d:8e:35:67:c3:21:f9: 2b:1b:05:c4:61:f9:93:60:7a:04:46:30:5b:d0:84: b7:24:91:56:16:4c:1c:d7:48:fd:7f:da:2a:cb:8e: e4:cd:b5:cf:b3:f3:ea:ba:4d:16:c8:e4:ce:24:f7: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E7:C9:36:59:6E:DA:76:05:89:06:01:69:C1:01:85:7D:4A:FD:9A X509v3 Authority Key Identifier: keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ac:00:db:c8:a9:e8:8a:1c:ce:05:16:f4:d0:74:d1:4a:a2: a7:03:ba:33:e2:fd:f3:63:ec:1b:0d:74:6a:bc:69:d8:4e:1e: 65:63:7a:79:aa:39:84:21:3a:2d:c9:ea:6e:63:3a:eb:80:16: 42:5b:2a:bd:f1:a0:6e:3f:4c:d0:56:2b:32:86:a7:06:f1:4b: 39:24:55:2d:ee:78:2e:a7:1e:9e:a0:51:78:fd:bc:62:e7:9b: fe:b6:99:f7:0e:12:28:a3:32:f3:2d:cb:aa:c1:90:d2:9b:43: 2a:6e:3f:c1:06:36:32:77:b8:ee:e7:1f:cc:03:64:a7:bd:79: a8:20:28:6c:b4:0c:32:35:ef:f2:0e:e2:4d:cd:75:50:a3:f8: 86:b9:55:22:69:23:95:c3:91:f4:3b:cf:7d:53:ed:d8:ad:21: 8a:5a:c1:78:06:f4:d9:22:b2:92:22:ed:3b:cd:80:22:42:4e: 17:9b:d6:05:72:97:9b:7c:35:28:07:92:dc:26:bd:91:03:66: 32:23:2f:57:d7:76:f0:23:a9:e9:37:cd:89:1a:05:c8:68:5b: 53:74:d3:0e:e7:de:a6:49:05:64:85:ff:37:27:0f:ba:c0:f4: 86:ce:8e:87:31:b3:51:73:73:d4:dc:71:f5:96:5b:19:21:3d: e5:9a:3e:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRFRDkxMTAvBgNVBAUTKEUxNkU0RjY1RTJFMzk3RTlGQ0UwNTc4NUEyNjVDNjE5 N0M4MjIwQzkwHhcNMjUwNTMxMDQyMjE1WhcNMjUwNjA3MDQyMjE1WjAYMRYwFAYD VQQDEw02ODNhODNmNy1kYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgK0xCOu4ZnXVTO1rPVFW3f+Tuy+jecm+Po+RbTh++Bc689EoRLoOLreI1/3 K0BIFC+ZnnaYn734CIC7ah7YT8J2Ouueo+VAhFHx1cr+Z+CUTmRX+sup+iaBEc2b 5o9Dlp6L6blfyCIACZ14+4D3XVUCrZd1KOHnC4ntQG+6Xw85rs6hon7Hfvg6t1PF Kx8HNUr4BKu1BOEJ3d0p468yuY/TN0ZP/NsTkT1ews2VufHOkbJrMpGAZvcxg4Ky j8ng3bMH3o7j6doqYB2ONWfDIfkrGwXEYfmTYHoERjBb0IS3JJFWFkwc10j9f9oq y47kzbXPs/Pquk0WyOTOJPdTJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrnyTZZ btp2BYkGAWnBAYV9Sv2aMB8GA1UdIwQYMBaAFOFuT2Xi45fp/OBXhaJlxhl8giDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REVEOS9ERjE1QjNCODg1 MjkxMUVFQUZEMDRDODRDNEY5QUUwMi80VzVQWmVMamwtbjg0RmVGb21YR0dYeUNJ TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRXNVBaZUxqbC1uODRGZUZvbVhHR1h5Q0lNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REVEOS9ERjE1QjNCODg1MjkxMUVFQUZEMDRDODRDNEY5QUUwMi80VzVQWmVMamwt bjg0RmVGb21YR0dYeUNJTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyrADbyKnoihzOBRb00HTRSqKnA7oz4v3zY+wbDXRqvGnYTh5lY3p5 qjmEITotyepuYzrrgBZCWyq98aBuP0zQVisyhqcG8Us5JFUt7ngupx6eoFF4/bxi 55v+tpn3DhIoozLzLcuqwZDSm0Mqbj/BBjYyd7ju5x/MA2SnvXmoIChstAwyNe/y DuJNzXVQo/iGuVUiaSOVw5H0O899U+3YrSGKWsF4BvTZIrKSIu07zYAiQk4Xm9YF cpebfDUoB5LcJr2RA2YyIy9X13bwI6npN82JGgXIaFtTdNMO596mSQVkhf83Jw+6 wPSGzo6HMbNRc3PU3HH1llsZIT3lmj7d -----END CERTIFICATE-----Generated at Sat May 31 16:47:41 2025 by rpki-client