$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json) Hash identifier: 7yaprZqcWxWUq/dGt6Qa0DW6KNh7U3SqGLmRqYk2C5Y= Subject key identifier: 92:CB:74:87:32:D9:B7:57:C2:EC:E5:AE:91:FA:D1:31:A6:95:CA:10 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft Manifest number: 050C Signing time: Mon 02 Jun 2025 16:34:09 +0000 Manifest this update: Mon 02 Jun 2025 16:34:09 +0000 Manifest next update: Mon 09 Jun 2025 16:34:09 +0000 Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: WRpuFdrsf6RajYCNqS0aORVWQTUQmvsqNXDrMP0zlO8=) 2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: yR/rS2v+MnuPsp4IAeWDDgPbPiNnjwU9wDh4QYZV4SU=) 3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: qkuJyiuag7r0VmHzzxIeNNPZvE1YemZEbkXs9TYwx5o=) 4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: YZwNutRVemyQTlte1eEv/AcDXWm1xtlx4204L/kTObo=) 5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: ACLXZnrak+BWFZVdvvziA50vZItebg8EqCvB342Th1I=) 6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: Cywfb2Rnt+MB9wFrcD0/BbNel0gnNnVhinHv2K8l9OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Jun 2 16:34:09 2025 GMT Not After : Jun 9 16:34:09 2025 GMT Subject: CN=683dd281-6559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:d6:b1:25:85:e2:13:73:c8:36:06:01:16: 18:69:85:51:20:59:64:e1:73:03:fb:ce:54:c8:8e: b3:a4:27:c3:5d:18:fb:ef:e3:2e:b5:c6:da:ea:ec: 59:ee:c8:50:63:50:c9:ef:8b:d8:28:18:c8:9d:94: b3:4b:a1:c5:08:f2:39:1b:1c:54:69:f0:64:a2:0c: 96:74:f0:5b:8a:71:e3:12:8f:ca:02:43:21:b7:6f: b2:2b:0d:6b:80:dd:7e:d7:44:cd:8e:db:cf:b3:c8: 65:25:82:e2:23:ed:26:de:8c:a4:01:fa:1d:15:c5: dc:77:5f:46:1d:92:e4:89:a9:97:3c:ae:8d:a5:24: ca:e9:5f:c5:fb:7f:f1:05:00:d0:57:63:4b:5c:8c: e2:7d:26:85:a3:7a:af:6a:2f:d9:54:e5:fa:e1:ec: d9:d4:d4:5f:61:dc:2a:ec:e7:d8:11:1c:c8:54:08: 64:39:85:53:51:ee:b4:c3:01:86:08:c3:3f:5f:ca: 65:50:f3:95:fe:ee:b7:36:3b:1c:05:f0:bd:64:37: ec:28:b8:94:ab:49:e2:9e:d0:84:fc:81:c5:1b:a2: 09:0d:4f:5c:ad:9c:d9:8b:3f:aa:19:bb:b0:b9:77: cd:fd:e2:43:d7:7f:35:48:d6:3e:f1:4b:be:ee:47: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CB:74:87:32:D9:B7:57:C2:EC:E5:AE:91:FA:D1:31:A6:95:CA:10 X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:cb:30:5d:ba:f5:50:be:84:04:d7:46:48:40:06:df:73:3b: dc:54:ae:d6:21:9f:99:0d:0c:60:5c:e3:53:f6:37:f7:7e:be: fd:96:95:cb:fc:48:7e:07:10:a2:9f:31:05:90:87:1b:fd:6c: a6:0d:9e:05:54:a6:07:40:15:46:f1:c9:97:da:7d:7f:e0:db: 89:f2:e2:24:4e:ca:d5:b8:4e:8d:0c:ef:70:2c:3a:b1:ca:7d: a0:8f:78:53:75:f3:ab:51:37:e6:a9:fd:38:05:61:66:16:1f: bf:68:d0:cb:03:99:f5:4a:bb:51:16:40:82:50:b0:38:4e:23: e3:9c:f0:1d:a9:6e:10:8d:b2:84:79:e0:6c:7c:2b:71:8b:ce: 03:ab:be:1f:ff:06:1d:93:62:74:d9:92:a0:fa:44:8c:b4:9d: 66:4c:f1:08:55:56:62:1b:86:7e:95:0b:db:86:10:cb:1e:d1: 5a:10:b5:ff:4a:af:c1:03:fe:1c:4c:b1:2d:2f:30:13:ec:ad: f1:34:a6:4b:50:ee:be:a0:af:a9:d1:44:3b:08:55:db:8c:91: 3d:63:03:80:fc:07:36:a0:92:6e:c7:37:07:87:79:62:4f:cc: 8a:53:e3:55:f4:47:00:b5:a3:d8:92:ad:c0:e0:58:d6:eb:f6: e8:79:29:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUwNjAyMTYzNDA5WhcNMjUwNjA5MTYzNDA5WjAYMRYwFAYD VQQDEw02ODNkZDI4MS02NTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsDWsSWF4hNzyDYGARYYaYVRIFlk4XMD+85UyI6zpCfDXRj77+Mutcba6uxZ 7shQY1DJ74vYKBjInZSzS6HFCPI5GxxUafBkogyWdPBbinHjEo/KAkMht2+yKw1r gN1+10TNjtvPs8hlJYLiI+0m3oykAfodFcXcd19GHZLkiamXPK6NpSTK6V/F+3/x BQDQV2NLXIzifSaFo3qvai/ZVOX64ezZ1NRfYdwq7OfYERzIVAhkOYVTUe60wwGG CMM/X8plUPOV/u63NjscBfC9ZDfsKLiUq0nintCE/IHFG6IJDU9crZzZiz+qGbuw uXfN/eJD1381SNY+8Uu+7kdb/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLLdIcy 2bdXwuzlrpH60TGmlcoQMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1 blpxT3NxNXkwOERGVUVVNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2yzBduvVQvoQE10ZIQAbfczvcVK7WIZ+ZDQxgXONT9jf3fr79lpXL /Eh+BxCinzEFkIcb/WymDZ4FVKYHQBVG8cmX2n1/4NuJ8uIkTsrVuE6NDO9wLDqx yn2gj3hTdfOrUTfmqf04BWFmFh+/aNDLA5n1SrtRFkCCULA4TiPjnPAdqW4QjbKE eeBsfCtxi84Dq74f/wYdk2J02ZKg+kSMtJ1mTPEIVVZiG4Z+lQvbhhDLHtFaELX/ Sq/BA/4cTLEtLzAT7K3xNKZLUO6+oK+p0UQ7CFXbjJE9YwOA/Ac2oJJuxzcHh3li T8yKU+NV9EcAtaPYkq3A4FjW6/boeSkC -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:38 2025 by rpki-client