$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: wCF8q8CcQ3ojvPOUWWC/RUFIpPE9rUJgZ+MTOxa424M= Subject key identifier: 5A:E4:A6:64:CE:A9:19:D3:5C:5E:AE:03:47:87:69:F3:80:95:3B:2D Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 03DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 03C5 Signing time: Sat 31 May 2025 00:51:57 +0000 Manifest this update: Sat 31 May 2025 00:51:56 +0000 Manifest next update: Sat 07 Jun 2025 00:51:56 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: 4FqYMgyTt/sux7zjSxo34mK8yIrar+u2knybTF8C490=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: sKV1Z0cYRUE+VWc2YxnGxIUnhyBPTtnJSFk2o11IcBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 987 (0x3db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: May 31 00:51:56 2025 GMT Not After : Jun 7 00:51:56 2025 GMT Subject: CN=683a52ad-a92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:22:ce:88:5f:d8:40:74:6b:58:72:6b:fa: d0:e8:48:f9:24:c2:26:05:27:74:a1:cd:e0:1d:67: e9:c8:08:18:3b:c3:b0:28:fb:d0:da:77:a1:2c:e5: e0:3d:b9:45:2b:03:6b:63:30:48:ee:31:34:b9:40: f2:b0:98:01:47:2c:a5:28:6a:06:56:5d:6b:ac:8d: 1d:4f:07:d0:a8:e3:7f:09:5f:8a:71:fb:1b:14:f1: 4e:8f:53:bc:8d:93:53:14:d5:f2:27:d7:02:84:d8: 36:67:b3:d9:ae:22:ab:2a:34:98:d2:19:20:2e:78: 38:fd:22:78:d0:17:29:e4:d7:a5:94:79:02:ec:ff: a6:00:a1:f7:8a:71:18:27:63:04:f4:0f:ad:95:92: 47:ba:a9:6e:17:3d:1b:f4:b1:6b:85:df:80:1f:a3: f3:52:bd:1a:dd:c8:59:fd:0a:2e:00:d6:d8:98:31: 98:6b:d9:9b:36:26:e4:bd:79:e5:4b:5c:0d:75:a9: d9:67:e2:04:06:82:c3:db:5e:04:29:2e:c6:dc:37: 3f:52:14:48:3d:77:46:fd:d2:f9:64:b2:ba:a8:5a: 80:9a:78:73:c1:69:c7:5c:76:a3:6d:51:b1:3b:97: 04:a4:76:a3:bb:15:bf:8b:f2:d6:bd:a9:c7:4c:95: 3c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E4:A6:64:CE:A9:19:D3:5C:5E:AE:03:47:87:69:F3:80:95:3B:2D X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:15:43:85:50:ae:c3:bf:b3:f6:fc:67:db:38:19:75:00:c2: 65:0b:c1:66:b7:59:2c:82:38:06:13:c1:91:8f:26:95:e4:d7: 0f:8f:d6:1b:82:96:13:8a:1b:3a:fe:e5:af:d4:32:77:b6:3c: f3:5d:8f:cb:73:b6:b2:c0:ff:d7:28:61:0d:f6:28:74:c0:fe: ce:e0:19:52:9b:3b:bb:35:ca:24:2f:6a:58:df:7f:53:fb:ec: 65:02:e0:ff:99:d7:49:7f:ae:dd:61:ac:90:72:ca:6a:82:f8: d3:19:90:3e:b8:ea:0c:05:d1:df:79:51:72:fa:49:55:a6:e2: b3:b2:a0:d5:fe:0c:26:fa:bf:da:d6:01:4b:0e:26:e8:45:e7: 51:69:d2:fc:3f:46:03:6e:75:0f:86:54:26:6c:9b:8d:82:be: ac:3d:19:cb:83:7c:08:94:ac:5b:d3:17:1d:83:92:7d:31:00: 26:4e:ce:69:26:7e:ba:6a:f6:64:ac:98:73:b2:37:d0:f8:9f: a2:07:90:b1:26:62:95:34:df:3b:30:21:d3:15:fe:b0:f3:66: 83:9b:cf:ed:e5:f7:75:fd:d5:ae:37:6a:d5:21:9e:9a:06:cf: 8d:23:95:a0:d1:4b:ae:86:1e:bc:92:c5:97:48:fa:8d:df:82: 3d:c6:4b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUwNTMxMDA1MTU2WhcNMjUwNjA3MDA1MTU2WjAYMRYwFAYD VQQDEw02ODNhNTJhZC1hOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0w8izohf2EB0a1hya/rQ6Ej5JMImBSd0oc3gHWfpyAgYO8OwKPvQ2nehLOXg PblFKwNrYzBI7jE0uUDysJgBRyylKGoGVl1rrI0dTwfQqON/CV+KcfsbFPFOj1O8 jZNTFNXyJ9cChNg2Z7PZriKrKjSY0hkgLng4/SJ40Bcp5NellHkC7P+mAKH3inEY J2ME9A+tlZJHuqluFz0b9LFrhd+AH6PzUr0a3chZ/QouANbYmDGYa9mbNibkvXnl S1wNdanZZ+IEBoLD214EKS7G3Dc/UhRIPXdG/dL5ZLK6qFqAmnhzwWnHXHajbVGx O5cEpHajuxW/i/LWvanHTJU8jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrkpmTO qRnTXF6uA0eHafOAlTstMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFFUOFUK7Dv7P2/GfbOBl1AMJlC8Fmt1ksgjgGE8GRjyaV5NcPj9Yb gpYTihs6/uWv1DJ3tjzzXY/Lc7aywP/XKGEN9ih0wP7O4BlSmzu7NcokL2pY339T ++xlAuD/mddJf67dYayQcspqgvjTGZA+uOoMBdHfeVFy+klVpuKzsqDV/gwm+r/a 1gFLDiboRedRadL8P0YDbnUPhlQmbJuNgr6sPRnLg3wIlKxb0xcdg5J9MQAmTs5p Jn66avZkrJhzsjfQ+J+iB5CxJmKVNN87MCHTFf6w82aDm8/t5fd1/dWuN2rVIZ6a Bs+NI5Wg0Uuuhh68ksWXSPqN34I9xkvk -----END CERTIFICATE-----Generated at Sat May 31 17:29:02 2025 by rpki-client