$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft File: _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json) Hash identifier: Wc75XBUs5+Gb6T00uxCmuFptX675eUdTUMmV8HviwIg= Subject key identifier: 0B:6E:C1:C8:FE:2F:00:78:94:76:68:0B:29:56:7D:01:53:CD:98:68 Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 Certificate issuer: /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Certificate serial: 0959 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft Manifest number: 0952 Signing time: Sun 06 Apr 2025 19:58:28 +0000 Manifest this update: Sun 06 Apr 2025 19:58:27 +0000 Manifest next update: Sun 13 Apr 2025 19:58:27 +0000 Files and hashes: 1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: QtZeIFlUpUC2p6jhxWkRlqF9VQvF5jDS617nI6ep6oc=) 2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: xa2e2Chwv4yeL7fHM+A196uDscfEXGZLiMt2MCiQxb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 19:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2393 (0x959) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251EF Validity Not Before: Apr 6 19:58:27 2025 GMT Not After : Apr 13 19:58:27 2025 GMT Subject: CN=67f2dce3-7694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:61:44:dc:97:ec:83:4a:76:b0:3e:a5:fd: e8:1b:72:69:07:f2:5b:5f:9c:99:4e:96:bb:e8:8a: 6d:94:0c:31:de:da:d9:fb:7d:c4:93:2d:88:a8:28: 63:8f:24:f8:a2:ea:09:a5:bc:3b:2d:f7:39:87:39: 54:e4:6a:be:07:ea:70:37:70:0c:cf:81:52:d7:24: 7b:bd:85:6d:dc:6b:98:0a:9d:94:b9:5c:4e:72:82: 5d:ac:11:d3:2b:72:0b:df:37:c5:c9:f1:72:ba:93: 90:cd:6b:5a:fd:aa:fb:b1:d6:6e:46:3f:b4:24:7f: 61:76:3a:81:49:8a:20:72:b0:e0:76:1c:75:8c:47: da:1b:b7:e0:db:e1:e3:f3:60:e5:6c:e9:32:88:cb: 91:6d:d1:4e:c4:fb:28:55:38:7d:cd:5c:58:c5:51: 4f:a0:66:e7:90:08:fe:c6:a0:5f:b4:0f:6d:1b:24: cb:8f:55:fb:f7:b0:a0:65:14:04:ff:1c:65:de:ee: a6:75:39:70:56:01:81:a3:f1:56:e4:a4:f2:47:0f: d5:7e:1e:05:9a:55:e3:22:d9:61:f4:4f:61:b8:b5: 72:96:62:1d:57:10:4e:fa:39:1d:aa:e0:13:53:fa: 5c:d1:d8:f5:44:f6:59:d8:b5:b2:0e:78:56:2e:45: b5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6E:C1:C8:FE:2F:00:78:94:76:68:0B:29:56:7D:01:53:CD:98:68 X509v3 Authority Key Identifier: keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:14:7f:74:f1:73:d1:8e:01:ba:0f:0d:9e:64:99:53:4a:99: 63:0a:4d:e6:91:a7:59:da:08:89:84:e9:12:d1:cd:03:61:f8: 76:ea:3b:bd:98:4f:aa:16:5f:6b:c5:d0:7b:c2:a6:97:21:0d: 0a:fb:a5:b0:f4:b2:03:09:c0:12:02:da:ba:8e:00:a0:02:06: 98:c4:d8:ff:ed:0f:42:d0:2b:06:d5:47:75:8f:58:72:c0:76: b8:d3:31:cd:f0:06:bf:f4:f9:34:43:08:ed:d3:a5:73:ed:67: d8:fd:a5:4b:f6:d5:d4:cc:c0:e9:80:1e:c3:be:a4:35:69:57: 5b:cb:1f:b3:7f:28:d0:0e:f0:5f:25:5c:bd:eb:9a:d0:7f:dd: ed:b4:21:f4:d9:dd:63:35:17:94:d0:80:d9:0a:76:e6:54:1b: be:22:62:73:17:37:19:85:9b:37:4d:ba:2b:5b:7a:a8:e0:a8: 5c:a0:65:db:a0:ef:ba:84:4a:d9:26:78:bc:0b:f2:7b:59:23: 5b:73:fa:0a:ec:42:08:5a:1a:71:4d:3c:c0:63:69:26:22:ad: 01:0b:fb:b7:32:cb:8f:f4:fc:c1:1b:cb:e3:a1:84:5b:77:f3: 5f:71:55:49:d3:a4:bd:ff:e3:37:49:c8:40:ee:ad:0c:2c:fd: f8:36:0b:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxRUYxMTAvBgNVBAUTKEZDQzUwNERBNEIzOThDNjZEREJGMkMzOTJCNzUxOUND OTBDMUExMDkwHhcNMjUwNDA2MTk1ODI3WhcNMjUwNDEzMTk1ODI3WjAYMRYwFAYD VQQDEw02N2YyZGNlMy03Njk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6dhRNyX7INKdrA+pf3oG3JpB/JbX5yZTpa76IptlAwx3trZ+33Eky2IqChj jyT4ouoJpbw7Lfc5hzlU5Gq+B+pwN3AMz4FS1yR7vYVt3GuYCp2UuVxOcoJdrBHT K3IL3zfFyfFyupOQzWta/ar7sdZuRj+0JH9hdjqBSYogcrDgdhx1jEfaG7fg2+Hj 82DlbOkyiMuRbdFOxPsoVTh9zVxYxVFPoGbnkAj+xqBftA9tGyTLj1X797CgZRQE /xxl3u6mdTlwVgGBo/FW5KTyRw/Vfh4FmlXjItlh9E9huLVylmIdVxBO+jkdquAT U/pc0dj1RPZZ2LWyDnhWLkW1VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtuwcj+ LwB4lHZoCylWfQFTzZhoMB8GA1UdIwQYMBaAFPzFBNpLOYxm3b8sOSt1GcyQwaEJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFFRi8yRTk0ODc0RTkx REExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpHYmR2eXc1SzNVWnpKREJv UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NVUUya3M1akdiZHZ5dzVLM1VaekpEQm9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFFRi8yRTk0ODc0RTkxREExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpH YmR2eXc1SzNVWnpKREJvUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARFH908XPRjgG6Dw2eZJlTSpljCk3mkadZ2giJhOkS0c0DYfh26ju9 mE+qFl9rxdB7wqaXIQ0K+6Ww9LIDCcASAtq6jgCgAgaYxNj/7Q9C0CsG1Ud1j1hy wHa40zHN8Aa/9Pk0Qwjt06Vz7WfY/aVL9tXUzMDpgB7DvqQ1aVdbyx+zfyjQDvBf JVy965rQf93ttCH02d1jNReU0IDZCnbmVBu+ImJzFzcZhZs3TborW3qo4KhcoGXb oO+6hErZJni8C/J7WSNbc/oK7EIIWhpxTTzAY2kmIq0BC/u3MsuP9PzBG8vjoYRb d/NfcVVJ06S9/+M3SchA7q0MLP34Ngs8 -----END CERTIFICATE-----Generated at Mon Apr 7 08:49:05 2025 by rpki-client