$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: 5tPFC4GopnIAf3osFerUtHbEzWN27MBM1Zt8vBUHsXk= Subject key identifier: F6:A7:A6:F9:F2:CA:EC:49:88:93:BC:5B:36:13:17:25:37:8E:47:99 Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 1325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 131B Signing time: Fri 30 May 2025 17:12:49 +0000 Manifest this update: Fri 30 May 2025 17:12:49 +0000 Manifest next update: Fri 06 Jun 2025 17:12:49 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: IDZR+wQ7+3YjRTl96glxVq//E1+P3LbaXdQpHjy+gJc=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4901 (0x1325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: May 30 17:12:49 2025 GMT Not After : Jun 6 17:12:49 2025 GMT Subject: CN=6839e711-0457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:65:1d:ab:fb:28:36:36:c0:6c:9a:f2:86: a8:59:a6:d0:b3:a1:e9:cd:34:9d:a1:ac:ad:c7:c8: 4a:54:bb:4f:a9:c9:0f:90:96:c9:b0:93:05:4f:fe: 62:e4:28:ed:13:c7:0a:bb:d0:52:73:75:84:f1:80: 6f:35:a0:20:82:75:fd:a5:ab:6f:bd:f0:dd:3e:17: 34:85:3a:de:3f:37:e0:5a:e9:88:17:c3:bb:b7:56: 4e:13:32:d7:b4:da:c0:2d:06:bf:e3:38:92:c1:3a: 23:7d:70:b7:67:b0:ac:25:45:c2:a2:09:d9:32:bd: b1:44:88:df:40:0b:4c:fc:56:98:5b:f2:b0:87:0f: 05:c9:65:ca:38:ab:6c:45:65:24:84:45:0a:2c:19: 1d:0a:c5:dc:d8:0a:8f:70:87:85:f9:4d:21:4e:71: 2c:c0:b2:4f:46:6e:08:1c:b6:df:6a:27:15:de:a0: 7c:b5:61:da:01:80:69:30:be:5d:15:4b:99:7d:33: 87:2e:fb:40:11:3e:db:4e:17:dd:71:62:59:56:9c: 45:40:b5:dd:da:e8:5b:6e:cf:7f:6e:72:20:11:55: 25:9c:c2:0f:e2:b1:bc:9c:88:3f:f7:e6:20:e4:c3: aa:48:3e:1a:a6:74:20:c9:54:61:8f:d3:81:8b:7e: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A7:A6:F9:F2:CA:EC:49:88:93:BC:5B:36:13:17:25:37:8E:47:99 X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:12:56:02:14:8a:14:7e:9f:9f:22:14:3d:a5:bf:ba:be:51: ba:27:af:4d:70:89:26:f8:88:f6:9e:1e:76:e7:4b:a1:2f:e5: 1c:62:57:dc:73:7b:d0:df:8e:b8:a2:d1:5d:ab:6e:8f:32:84: f4:bc:47:03:37:fc:ea:bc:50:86:47:a1:42:c4:fc:aa:0e:2b: b5:b1:57:7a:84:86:00:14:c1:03:a8:88:51:ad:39:e9:c0:cd: 17:1c:9c:a7:a4:37:11:55:01:42:bb:07:fe:8f:2b:88:b5:e6: e9:19:36:e7:cd:aa:d2:ae:4c:14:93:32:3d:fd:c0:e9:85:e7: 81:4d:9a:d1:8c:3d:38:73:88:b2:db:d0:74:e3:cc:61:3d:33: e9:c7:72:6d:d9:92:3e:6b:a2:85:82:ae:ee:be:f2:33:fd:c2: 2d:41:50:3d:d6:4b:8a:66:d7:9f:4a:78:62:99:42:cf:11:d3: 26:30:2b:31:96:1b:50:02:ab:64:8c:df:27:c0:13:af:50:82: ff:54:50:80:9d:06:ea:8f:84:a9:46:64:a7:17:67:5e:9d:f6: 8d:40:49:80:20:62:3d:71:da:8d:30:de:b0:e0:ba:fb:cd:2e: 87:2f:f7:c5:5b:39:06:aa:48:f4:97:0d:2c:4f:b1:e3:a0:1b: d7:3c:41:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUwNTMwMTcxMjQ5WhcNMjUwNjA2MTcxMjQ5WjAYMRYwFAYD VQQDEw02ODM5ZTcxMS0wNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApT5lHav7KDY2wGya8oaoWabQs6HpzTSdoaytx8hKVLtPqckPkJbJsJMFT/5i 5CjtE8cKu9BSc3WE8YBvNaAggnX9patvvfDdPhc0hTrePzfgWumIF8O7t1ZOEzLX tNrALQa/4ziSwTojfXC3Z7CsJUXCognZMr2xRIjfQAtM/FaYW/Kwhw8FyWXKOKts RWUkhEUKLBkdCsXc2AqPcIeF+U0hTnEswLJPRm4IHLbfaicV3qB8tWHaAYBpML5d FUuZfTOHLvtAET7bThfdcWJZVpxFQLXd2uhbbs9/bnIgEVUlnMIP4rG8nIg/9+Yg 5MOqSD4apnQgyVRhj9OBi36/ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPanpvny yuxJiJO8WzYTFyU3jkeZMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2ElYCFIoUfp+fIhQ9pb+6vlG6J69NcIkm+Ij2nh5250uhL+UcYlfc c3vQ3464otFdq26PMoT0vEcDN/zqvFCGR6FCxPyqDiu1sVd6hIYAFMEDqIhRrTnp wM0XHJynpDcRVQFCuwf+jyuItebpGTbnzarSrkwUkzI9/cDpheeBTZrRjD04c4iy 29B048xhPTPpx3Jt2ZI+a6KFgq7uvvIz/cItQVA91kuKZtefSnhimULPEdMmMCsx lhtQAqtkjN8nwBOvUIL/VFCAnQbqj4SpRmSnF2denfaNQEmAIGI9cdqNMN6w4Lr7 zS6HL/fFWzkGqkj0lw0sT7HjoBvXPEFY -----END CERTIFICATE-----Generated at Sat May 31 17:26:13 2025 by rpki-client