$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: R1/bmZjmMCddoBR+rgdHhxvbYyGeLOX8v8dRjlW7UPI= Subject key identifier: 7C:E1:BC:7A:C8:0B:7E:38:BD:8A:39:F4:68:FC:71:0E:AD:DD:20:1F Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 0519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 04F6 Signing time: Fri 30 May 2025 23:58:49 +0000 Manifest this update: Fri 30 May 2025 23:58:49 +0000 Manifest next update: Fri 06 Jun 2025 23:58:49 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: lJSNtdluijei/rS+hJ7+6apV0/nrIwRTmgrY7BT+k+Q=) 2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: /oWh6sDf6JMhXVQFfiBK5T8ylerkJmv9WJJdVtYkSIU=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: hF9MKD/FwgF9cY8hvh9m1ZRU6ZbNvnTiLbcgCIT5wPc=) 4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: 9aBOau/kR05/ZlK4Ctxtvv3XFrOvJ/VU5zNEft0SiRE=) 5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: M9HaGHa7pI3ilHdh1OGWp/+WvUY2NRFrgXm0KqnYXRc=) 6: B9DEB77E654411EFACBF7956C4F9AE02.roa (hash: xYaxgWyzwtexyE7NeRo7CnQ16cP15TpfRCg28S5nmVo=) 7: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: ERqr4ZgITrZRkOwS3AN4CJTqd2fIDLE15f/P4/QlBUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1305 (0x519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: May 30 23:58:49 2025 GMT Not After : Jun 6 23:58:49 2025 GMT Subject: CN=683a4639-ca89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:e4:76:d8:c7:1e:bf:ff:5e:a7:40:04:dc: ed:e1:05:46:50:f3:38:62:4b:6e:9d:50:cd:04:26: c4:30:85:93:76:48:ee:f1:92:97:0d:6d:a9:02:ae: f2:ad:45:d6:2e:45:44:e4:6c:40:ec:24:54:43:ad: bf:f5:b8:56:02:59:a7:41:07:15:1e:17:88:5c:27: 09:6d:aa:4d:b6:cc:ea:39:5c:35:22:04:24:38:8b: c6:11:d8:65:e5:d7:88:c6:e9:f9:db:c4:fa:73:b6: e7:5f:c4:5d:c8:7d:ab:01:61:f5:2c:33:7b:32:b0: 16:a8:c2:0e:3e:b2:5c:4c:bb:c7:f4:46:8d:36:9f: 98:5c:48:73:ba:8e:0c:4a:39:eb:92:d5:78:be:70: 54:6d:98:53:e0:dc:14:48:24:7c:c5:d3:06:97:04: a8:56:19:4c:79:9e:02:90:4f:eb:73:b9:9b:52:ef: ec:ce:87:1f:68:f7:20:df:58:8f:7e:bf:42:10:d6: 8b:05:1b:ab:03:79:18:24:cc:bd:32:59:ce:22:2c: 5a:f4:25:40:c5:c8:eb:b2:77:45:50:df:e0:3d:3f: c0:02:8a:19:9f:3a:21:f7:89:b2:81:ea:11:49:29: 08:eb:2a:43:9d:4d:07:05:59:57:de:d6:1d:95:3c: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E1:BC:7A:C8:0B:7E:38:BD:8A:39:F4:68:FC:71:0E:AD:DD:20:1F X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:77:59:7c:db:bd:34:0e:bf:68:06:25:eb:be:33:a1:5b:9b: a9:00:98:6d:f1:60:0e:2d:f5:7f:85:d3:cd:b8:2b:08:bd:fc: 90:7d:80:38:c3:90:30:d5:8a:23:dd:9f:2d:01:38:ac:3a:78: e5:b8:6e:15:39:9a:c2:ef:62:78:0d:3c:22:1c:ce:24:59:e8: 20:9b:76:58:de:ce:a5:dd:80:03:1b:dd:e0:11:a9:ae:e7:18: 94:3f:b6:4c:8e:e9:df:fc:18:87:3d:ec:dc:33:f9:6d:37:18: ce:10:e4:be:5b:df:68:a6:40:49:fe:98:8a:33:6c:0c:9e:88: 36:41:9d:4e:b4:f0:49:35:04:a0:5a:86:2c:52:cf:11:49:51: 00:4b:8f:5d:84:49:60:05:9c:f8:b0:23:7d:51:8f:4f:9b:b7: dd:69:36:a0:e4:a5:6f:e7:f1:6e:3c:e2:1f:76:e3:99:a0:00: 21:56:d6:9e:53:e6:c3:d1:d2:cb:97:34:0e:de:1d:64:f6:a3: 5e:95:68:01:18:19:e2:f3:6b:ee:a9:30:3b:14:5b:28:db:58: d8:04:dc:e0:c8:3d:5a:2f:4f:0b:f6:2d:43:dd:2a:07:f3:c9: 9f:40:71:31:6d:87:f4:6e:5d:76:57:02:b4:01:de:7e:8a:03: 5f:1f:a1:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUwNTMwMjM1ODQ5WhcNMjUwNjA2MjM1ODQ5WjAYMRYwFAYD VQQDEw02ODNhNDYzOS1jYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPPkdtjHHr//XqdABNzt4QVGUPM4YktunVDNBCbEMIWTdkju8ZKXDW2pAq7y rUXWLkVE5GxA7CRUQ62/9bhWAlmnQQcVHheIXCcJbapNtszqOVw1IgQkOIvGEdhl 5deIxun528T6c7bnX8RdyH2rAWH1LDN7MrAWqMIOPrJcTLvH9EaNNp+YXEhzuo4M SjnrktV4vnBUbZhT4NwUSCR8xdMGlwSoVhlMeZ4CkE/rc7mbUu/szocfaPcg31iP fr9CENaLBRurA3kYJMy9MlnOIixa9CVAxcjrsndFUN/gPT/AAooZnzoh94mygeoR SSkI6ypDnU0HBVlX3tYdlTyflQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzhvHrI C344vYo59Gj8cQ6t3SAfMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMd1l82700Dr9oBiXrvjOhW5upAJht8WAOLfV/hdPNuCsIvfyQfYA4 w5Aw1Yoj3Z8tATisOnjluG4VOZrC72J4DTwiHM4kWeggm3ZY3s6l3YADG93gEamu 5xiUP7ZMjunf/BiHPezcM/ltNxjOEOS+W99opkBJ/piKM2wMnog2QZ1OtPBJNQSg WoYsUs8RSVEAS49dhElgBZz4sCN9UY9Pm7fdaTag5KVv5/FuPOIfduOZoAAhVtae U+bD0dLLlzQO3h1k9qNelWgBGBni82vuqTA7FFso21jYBNzgyD1aL08L9i1D3SoH 88mfQHExbYf0bl12VwK0Ad5+igNfH6Ho -----END CERTIFICATE-----Generated at Sat May 31 16:59:25 2025 by rpki-client