$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json) Hash identifier: xqfoDUXYT0d+KNWOsb4N3qsLJ1RnrLgJQCEoqBONv30= Subject key identifier: 2E:EE:5C:38:13:DF:56:50:5E:E2:95:7A:79:4D:6A:23:06:24:5D:E0 Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Certificate serial: 0569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft Manifest number: 054D Signing time: Fri 30 May 2025 23:41:18 +0000 Manifest this update: Fri 30 May 2025 23:41:18 +0000 Manifest next update: Fri 06 Jun 2025 23:41:18 +0000 Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: 6zxxKVf5x6qk0kKzrX7xpNti7pcjd4WVmQs4M5rZXCc=) 2: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: 3vGbgZeBX2ux3qD/sA/eOOnJkTBw50rlrCAjdQKlgEE=) 3: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: i9dMAMF25KUvras5KvDG1QM1xBWeYt+C+ALZFoy+wTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Validity Not Before: May 30 23:41:18 2025 GMT Not After : Jun 6 23:41:18 2025 GMT Subject: CN=683a421e-7f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:20:2b:91:ba:1b:c6:7b:ad:f3:c5:5a:dc:e7: 49:dd:fd:3a:cb:fc:60:45:aa:94:5e:0b:59:09:58: 50:a7:8e:1e:b2:4a:e7:4d:15:37:23:2a:33:16:33: 0d:92:37:99:ea:d2:46:c7:e6:30:42:b4:34:a9:c8: 17:65:8f:02:7b:b2:c0:e2:43:cd:56:33:20:bb:bd: af:ee:35:9e:4f:14:f3:7a:89:a8:e6:4e:fe:f4:14: 80:1b:8f:fe:e8:54:7a:81:02:27:57:4d:03:9a:08: 51:98:d0:64:9b:7e:a7:3c:f7:bc:f7:d8:71:6b:64: a4:88:ad:10:7b:df:81:72:07:df:1f:fb:51:e9:d1: 3d:29:f0:05:c6:32:52:3f:51:ee:25:9d:cd:72:45: 8d:33:f7:10:49:79:98:0d:c0:82:fd:76:a3:73:19: 7c:35:1b:72:46:0d:7d:1d:34:0c:16:94:45:53:e6: 4a:14:c5:ef:16:09:bb:1c:94:f0:ab:c5:74:fc:26: 93:ef:59:28:7c:f8:70:05:dc:80:79:59:38:3d:62: e0:d5:f6:53:f0:c8:04:fe:f1:a3:07:f8:06:a1:84: 04:07:2b:34:e4:b4:1d:55:a5:24:69:90:a9:f5:44: cf:b0:29:fd:da:52:57:1d:27:f3:42:6d:ef:5e:6a: 83:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EE:5C:38:13:DF:56:50:5E:E2:95:7A:79:4D:6A:23:06:24:5D:E0 X509v3 Authority Key Identifier: keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:00:2a:0e:66:2c:99:2c:b6:8b:a2:71:c7:08:d6:e7:6e:71: 05:c7:df:41:6f:71:3d:61:a5:74:a5:8e:1f:64:4a:95:dc:0b: 6b:6f:5d:ed:d1:ff:ad:db:10:4a:0e:dd:c5:a4:3e:26:33:6b: 57:ec:c5:1f:32:7f:fb:b9:54:2c:84:7a:42:21:de:9c:f0:97: cc:a2:6f:e1:80:0d:ed:cc:8a:18:dc:81:3a:6d:62:fe:e7:b0: da:3a:49:86:66:ac:34:f2:d5:39:94:12:78:1d:f6:29:f0:6e: 44:43:dc:08:92:79:b7:18:77:bc:b5:91:cf:60:08:71:ac:36: e1:d2:7d:dd:a2:a4:6b:60:27:83:6b:22:31:7d:f6:a8:80:9c: 9d:f5:79:80:91:ae:9d:c0:d5:a3:2d:65:e1:92:56:34:98:89: f8:98:ec:47:d2:a3:2f:07:ac:86:ff:86:f4:24:36:ac:9b:cd: 0b:6e:98:04:dc:1f:54:0b:ff:19:36:d7:e3:99:4a:5d:84:a9: f2:8c:d6:5c:98:85:45:f8:5c:f5:0c:7b:37:42:4c:2a:3b:a1: ff:8e:ff:33:c3:69:c0:9a:a4:65:ad:e1:32:5a:53:02:31:90: ec:b2:e2:1f:fa:86:c1:4e:ee:62:79:1d:b6:dc:83:cf:fd:ae: 9a:28:a4:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4 RjQ0RkI4ODEwHhcNMjUwNTMwMjM0MTE4WhcNMjUwNjA2MjM0MTE4WjAYMRYwFAYD VQQDEw02ODNhNDIxZS03ZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CArkbobxnut88Va3OdJ3f06y/xgRaqUXgtZCVhQp44eskrnTRU3IyozFjMN kjeZ6tJGx+YwQrQ0qcgXZY8Ce7LA4kPNVjMgu72v7jWeTxTzeomo5k7+9BSAG4/+ 6FR6gQInV00DmghRmNBkm36nPPe899hxa2SkiK0Qe9+BcgffH/tR6dE9KfAFxjJS P1HuJZ3NckWNM/cQSXmYDcCC/Xajcxl8NRtyRg19HTQMFpRFU+ZKFMXvFgm7HJTw q8V0/CaT71kofPhwBdyAeVk4PWLg1fZT8MgE/vGjB/gGoYQEBys05LQdVaUkaZCp 9UTPsCn92lJXHSfzQm3vXmqDHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7uXDgT 31ZQXuKVenlNaiMGJF3gMB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4 RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTVEQy9CQkUyQjUwMkY4RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMz NVZfUS1kdmQxQ2VQUlB1SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQACoOZiyZLLaLonHHCNbnbnEFx99Bb3E9YaV0pY4fZEqV3Atrb13t 0f+t2xBKDt3FpD4mM2tX7MUfMn/7uVQshHpCId6c8JfMom/hgA3tzIoY3IE6bWL+ 57DaOkmGZqw08tU5lBJ4HfYp8G5EQ9wIknm3GHe8tZHPYAhxrDbh0n3doqRrYCeD ayIxffaogJyd9XmAka6dwNWjLWXhklY0mIn4mOxH0qMvB6yG/4b0JDasm80LbpgE 3B9UC/8ZNtfjmUpdhKnyjNZcmIVF+Fz1DHs3QkwqO6H/jv8zw2nAmqRlreEyWlMC MZDssuIf+obBTu5ieR223IPP/a6aKKQy -----END CERTIFICATE-----Generated at Sat May 31 16:44:48 2025 by rpki-client