$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: gYIvhfe3DGOoD+63IWpwPtwZXs+VnOcGCkDwXjzpT/k= Subject key identifier: 98:02:85:2B:18:8B:66:AB:06:65:A0:C4:2B:FA:2B:EE:99:0F:ED:4C Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 0333 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 032D Signing time: Sat 31 May 2025 01:18:53 +0000 Manifest this update: Sat 31 May 2025 01:18:52 +0000 Manifest next update: Sat 07 Jun 2025 01:18:52 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: DdsRZWIiUoAem45pbcjXGO0nrklYEibjnf+On1PvA00=) 2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: lFHgwGcK464NIp9pshKfZeaAiyOHIGVlEkjl7qvlWTc=) 3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: Z+nT9PoRzTDCsdNOaBI1d+PkQHDUifBiuJhBYkV5ETQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 819 (0x333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: May 31 01:18:52 2025 GMT Not After : Jun 7 01:18:52 2025 GMT Subject: CN=683a58fd-76a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c5:a5:89:a9:20:19:72:ac:63:2c:77:b7:7c: 14:cd:ca:48:30:fb:bf:a7:a9:91:2b:c1:3c:6e:ea: b7:1f:94:38:b3:99:2f:a6:34:c0:ce:bc:b6:83:31: 1a:18:0f:c5:f8:79:00:26:01:82:3b:45:ec:ab:8f: 54:1a:94:5d:dc:75:95:cc:a0:32:1e:6f:c1:5f:88: 73:7d:e6:ea:f3:11:f3:e1:4d:3b:3f:7d:0a:53:f5: 11:1b:dd:b4:96:35:cb:63:73:94:d1:9a:1e:26:01: f9:28:15:b4:dc:25:72:61:e7:5a:ee:3a:58:b7:6e: 28:1c:41:ff:6b:75:00:2d:61:b5:d3:63:f3:04:36: 75:42:55:26:59:b7:be:3f:63:15:d4:24:ad:89:7d: 02:1a:20:d6:fb:22:cd:2a:14:71:10:52:e4:26:e9: e9:7f:ac:3c:e3:00:07:c2:bb:0f:4d:39:5d:a6:65: 96:f2:ff:5b:c0:4d:cd:b7:04:04:5e:c5:a7:87:e3: 74:dc:5f:7c:e0:30:7a:ab:6e:82:be:24:19:f6:1e: 6e:6f:c0:8b:fa:62:f9:52:79:4e:16:1f:03:c4:ec: 6a:7b:6b:17:ea:d7:2a:fd:9d:9a:66:d8:6b:10:61: bd:78:c6:40:fb:76:d6:1c:93:c5:cf:4e:d2:49:eb: 39:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:02:85:2B:18:8B:66:AB:06:65:A0:C4:2B:FA:2B:EE:99:0F:ED:4C X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:2b:a9:7b:4e:d9:d1:83:5e:d8:49:3e:cb:02:a6:91:4f:12: 9f:25:3a:64:d8:56:e5:c3:6e:08:2e:3f:23:29:d8:af:21:e5: af:09:93:c1:10:03:85:00:a5:47:09:33:a9:19:bf:2b:8c:4a: 7b:25:41:cd:7f:17:56:94:86:80:b5:fc:ea:90:55:02:44:cb: cc:55:01:38:3d:18:86:91:15:15:a3:a0:73:ec:df:09:70:19: 33:d0:a8:fc:67:34:17:ca:00:5a:61:1e:ab:55:d1:b7:f3:fc: fb:69:9c:02:26:51:56:bf:8b:46:48:6c:71:c6:c6:06:5a:23: 9f:b9:84:d1:5a:23:46:70:6c:0e:8e:e8:37:c0:e9:28:9b:36: 51:85:64:ca:1a:fc:4e:3a:66:c3:0e:30:1a:76:25:dc:74:c3: 3a:ca:9f:dc:02:ed:40:7c:88:fd:b9:b3:64:33:b9:b8:05:b6: aa:aa:5e:74:44:6f:35:ee:cf:ea:b8:51:42:63:99:c1:21:67: b2:db:98:aa:61:e7:35:b3:81:1c:71:82:12:74:8b:7b:23:d5: fd:6c:ff:e9:21:24:8b:22:52:fc:a5:cc:45:90:d4:de:23:6b: 98:0d:a9:c0:c3:6c:77:0f:90:a3:b7:82:23:9b:32:54:dc:87: ca:50:2b:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUwNTMxMDExODUyWhcNMjUwNjA3MDExODUyWjAYMRYwFAYD VQQDEw02ODNhNThmZC03NmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6MWliakgGXKsYyx3t3wUzcpIMPu/p6mRK8E8buq3H5Q4s5kvpjTAzry2gzEa GA/F+HkAJgGCO0Xsq49UGpRd3HWVzKAyHm/BX4hzfebq8xHz4U07P30KU/URG920 ljXLY3OU0ZoeJgH5KBW03CVyYeda7jpYt24oHEH/a3UALWG102PzBDZ1QlUmWbe+ P2MV1CStiX0CGiDW+yLNKhRxEFLkJunpf6w84wAHwrsPTTldpmWW8v9bwE3NtwQE XsWnh+N03F984DB6q26CviQZ9h5ub8CL+mL5UnlOFh8DxOxqe2sX6tcq/Z2aZthr EGG9eMZA+3bWHJPFz07SSes5VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgChSsY i2arBmWgxCv6K+6ZD+1MMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRK6l7TtnRg17YST7LAqaRTxKfJTpk2Fblw24ILj8jKdivIeWvCZPB EAOFAKVHCTOpGb8rjEp7JUHNfxdWlIaAtfzqkFUCRMvMVQE4PRiGkRUVo6Bz7N8J cBkz0Kj8ZzQXygBaYR6rVdG38/z7aZwCJlFWv4tGSGxxxsYGWiOfuYTRWiNGcGwO jug3wOkomzZRhWTKGvxOOmbDDjAadiXcdMM6yp/cAu1AfIj9ubNkM7m4Bbaqql50 RG817s/quFFCY5nBIWey25iqYec1s4EccYISdIt7I9X9bP/pISSLIlL8pcxFkNTe I2uYDanAw2x3D5Cjt4IjmzJU3IfKUCvX -----END CERTIFICATE-----Generated at Sat May 31 15:07:54 2025 by rpki-client