$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json) Hash identifier: 1qR8Z/1R4WpPgtaonHwjx39lz+mufItADmx1W3LFyLk= Subject key identifier: 42:1B:15:D5:29:CB:DA:3C:66:37:49:BB:0F:41:03:D2:5D:AD:43:B9 Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft Manifest number: 01BE Signing time: Sat 31 May 2025 02:57:56 +0000 Manifest this update: Sat 31 May 2025 02:57:56 +0000 Manifest next update: Sat 07 Jun 2025 02:57:56 +0000 Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: fiZY+5YGPn6cADsAlUv7tFfEy2uWQ0CXwXw67VC1J2U=) 2: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: feDA48MiXXJctKT3eZvp/d1nnsUlAcYOaj9wGQ7J2ec=) 3: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: qqBFkEJNiWCb2cCDSNMAUnOoY6M5apd24HqIJ4T1rMk=) 4: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: UdSNL+M5bhbjwAkTjKkIwiTAoopRDA15sbVDq+xd/Mo=) 5: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: UYQj695a2OmzGWejM8q0zjVy0UfE2w5YDuGLHHyUkKE=) 6: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: 0osuZSPKtRbkTEe2rjpJx0+V/IP2FJnFJRtn1br7+ws=) 7: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: wWTFLfND3EADAPn3/677/3gOc92RXHanLyJ2ZQO9E5Y=) 8: E98F15362B3811EF926F1555C4F9AE02.roa (hash: huhcBlB6kInuEcW0eyepHJy04Qrnm/zwE5F/lbsIg4U=) 9: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: K7ih6dZEP7tPsDE029yQg9J9G2EoOjYxEh23BSXqdx4=) 10: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: xEdof+9upKEPJ5nZ8zJI+L9OfNurTTcojEoj01Jch2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: May 31 02:57:56 2025 GMT Not After : Jun 7 02:57:56 2025 GMT Subject: CN=683a7034-4840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:64:dd:27:2b:65:2e:3c:cd:79:4d:75:34:3a: 93:56:33:92:11:a8:b3:53:3a:18:52:de:de:df:84: a3:3a:63:0c:48:eb:9a:f0:4e:33:53:72:f2:00:ce: 3c:fd:58:c0:d3:d6:87:34:74:f4:f8:ff:4a:00:76: 8b:f1:38:2b:e3:c1:7b:1a:bf:31:16:f7:4f:e2:c1: f0:ef:b3:cc:ee:cb:b0:ef:5f:f6:e8:63:56:48:b6: d3:d7:6a:93:ae:9b:92:a3:ac:7f:6c:a2:51:4c:31: 7f:b7:24:79:7f:85:fe:9d:28:ea:86:9e:d3:92:4f: 6a:36:f8:65:02:b6:83:a3:94:d9:9e:8e:6f:56:64: 3c:42:1d:33:51:7e:0f:43:a9:95:d2:57:b1:90:10: 9e:1b:cc:28:8d:b7:2a:4c:df:a5:5a:82:9d:a7:89: c2:b1:f0:b3:68:e4:25:14:89:f1:99:9c:0d:c5:fc: fd:de:fb:1d:bf:a2:02:66:69:21:eb:bc:4f:ef:af: 43:fc:be:fa:f9:05:ab:71:6f:9c:8e:76:60:95:1c: 54:12:55:96:e7:97:72:91:41:63:d8:e5:e0:c8:43: e4:55:d7:3c:60:01:51:5b:5e:46:14:0d:af:a0:b1: 89:f2:57:db:fb:3d:61:49:0f:5b:28:61:9b:a8:4c: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1B:15:D5:29:CB:DA:3C:66:37:49:BB:0F:41:03:D2:5D:AD:43:B9 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:c2:9a:e9:ab:2a:38:cb:fe:9b:33:c6:11:be:36:6a:aa:77: 33:a6:cc:62:13:1c:50:bd:b3:1d:ec:5b:11:cc:a4:5a:4c:0c: bb:a5:7f:2b:ab:ad:d1:6c:12:a5:86:bd:63:82:db:2e:dd:13: 1b:cb:74:b4:a0:13:5e:1f:68:c0:2f:ae:97:21:9e:2f:6e:c7: 11:35:df:bb:ab:a5:81:cb:6c:84:43:6d:48:e0:26:47:53:a7: 79:da:36:6a:ea:b4:44:42:ab:17:d7:d8:6d:99:41:b5:69:0e: 76:ed:9b:e6:d3:2a:3e:e9:e4:ca:ba:5b:16:24:2f:93:e4:d6: 9b:04:aa:15:5d:8c:5a:10:f2:2d:ae:fc:68:8e:3e:a5:98:57: 4f:0a:f6:4b:42:ea:f7:12:da:13:93:8d:ff:6f:05:0f:92:0e: b1:7c:19:96:79:90:46:9a:7f:9f:07:93:1c:8c:84:df:9e:20: 06:d3:47:73:73:5a:63:57:ea:b8:15:bc:56:56:28:5f:42:a6: 3b:e4:4c:ac:b2:9b:63:b4:16:16:9e:26:b6:76:0d:20:37:fc: b7:2a:bd:d7:59:50:8a:4f:ff:01:fd:d9:03:e5:42:9d:62:f2: d0:fa:a4:71:1c:d9:e4:52:50:db:c7:ed:8f:db:55:d6:a2:e6: 5e:8b:28:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNTMxMDI1NzU2WhcNMjUwNjA3MDI1NzU2WjAYMRYwFAYD VQQDEw02ODNhNzAzNC00ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WTdJytlLjzNeU11NDqTVjOSEaizUzoYUt7e34SjOmMMSOua8E4zU3LyAM48 /VjA09aHNHT0+P9KAHaL8Tgr48F7Gr8xFvdP4sHw77PM7suw71/26GNWSLbT12qT rpuSo6x/bKJRTDF/tyR5f4X+nSjqhp7Tkk9qNvhlAraDo5TZno5vVmQ8Qh0zUX4P Q6mV0lexkBCeG8wojbcqTN+lWoKdp4nCsfCzaOQlFInxmZwNxfz93vsdv6ICZmkh 67xP769D/L76+QWrcW+cjnZglRxUElWW55dykUFj2OXgyEPkVdc8YAFRW15GFA2v oLGJ8lfb+z1hSQ9bKGGbqExzSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIbFdUp y9o8ZjdJuw9BA9JdrUO5MB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkU5QS84RkExRjU2RUI4NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJC bVFzWTBhQmZuaWNlZm51T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1wprpqyo4y/6bM8YRvjZqqnczpsxiExxQvbMd7FsRzKRaTAy7pX8r q63RbBKlhr1jgtsu3RMby3S0oBNeH2jAL66XIZ4vbscRNd+7q6WBy2yEQ21I4CZH U6d52jZq6rREQqsX19htmUG1aQ527Zvm0yo+6eTKulsWJC+T5NabBKoVXYxaEPIt rvxojj6lmFdPCvZLQur3EtoTk43/bwUPkg6xfBmWeZBGmn+fB5McjITfniAG00dz c1pjV+q4FbxWVihfQqY75EyssptjtBYWnia2dg0gN/y3Kr3XWVCKT/8B/dkD5UKd YvLQ+qRxHNnkUlDbx+2P21XWouZeiyj9 -----END CERTIFICATE-----Generated at Sat May 31 17:41:06 2025 by rpki-client