$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json) Hash identifier: YCCvmpHNyqCAr22+wR1a7x7EJFS0BIpE5mFIomtwhmI= Subject key identifier: 63:86:92:38:85:61:8E:9D:DA:C7:59:D8:B1:2E:F9:5B:DA:C2:09:2C Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Certificate serial: 0527 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft Manifest number: 051F Signing time: Tue 08 Apr 2025 23:16:52 +0000 Manifest this update: Tue 08 Apr 2025 23:16:51 +0000 Manifest next update: Tue 15 Apr 2025 23:16:51 +0000 Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: fRXFqOjwpGx+DT+4I3zDFU5WOTKLIYqMB4F/aW9P7sw=) 2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: IJTuUd/n8OCJ5dJ8YqUV7DdTVdb9JOIyqBQaxiAGn2k=) 3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: ZpRAboF0Zy0eld2L5SbNx4a1RdCdtnze/MEYgH64xko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 23:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1319 (0x527) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA251 Validity Not Before: Apr 8 23:16:51 2025 GMT Not After : Apr 15 23:16:51 2025 GMT Subject: CN=67f5ae64-8d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:60:9d:bd:e3:0b:07:dc:e8:08:66:5f:e7: 8c:39:e7:01:4f:c0:8b:56:b8:29:fd:e6:f1:8c:53: db:8a:ea:45:e2:59:60:51:9b:02:41:33:8b:6e:5e: b4:0b:f1:a8:88:26:78:0d:8b:7c:57:03:64:eb:17: 9f:6b:84:ae:9d:1c:b4:36:3c:c3:af:3b:88:0a:f8: 23:c1:a6:53:ab:cb:af:e7:fd:71:f8:72:7b:73:cd: d8:13:78:74:ce:02:3d:b4:a0:eb:21:58:72:ee:07: 0c:29:96:57:31:0c:1d:13:12:61:d9:88:e2:6b:c6: ed:da:26:f2:85:a8:3f:f4:39:48:ed:c1:4f:30:ca: 41:c0:5e:89:1b:d8:cb:68:89:27:2d:b0:c0:3e:37: 7c:98:f4:a0:5a:f4:fa:27:4a:2e:fd:4f:e1:b4:c4: a6:03:00:5b:b1:79:fd:79:3c:53:4d:d7:09:e6:53: 8c:9f:c3:18:16:e3:6f:fb:79:27:fd:b8:14:db:ad: 27:af:43:5e:14:b4:ba:1f:20:6e:6e:06:95:64:95: 38:38:c8:d8:c8:c8:60:ab:6f:83:3b:95:9f:7f:ec: 52:fe:50:2d:32:1e:02:04:88:33:90:96:10:75:d9: 3f:8b:bc:11:4d:bc:3f:4f:19:4d:ce:d8:86:b6:9b: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:86:92:38:85:61:8E:9D:DA:C7:59:D8:B1:2E:F9:5B:DA:C2:09:2C X509v3 Authority Key Identifier: keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5c:9c:d4:d1:57:f2:7e:47:2c:50:06:c4:99:53:01:44:53: 84:26:45:da:a1:0f:90:e9:88:5e:9d:12:79:e5:27:21:91:2f: 8c:69:bc:de:33:2e:c8:33:2e:e3:19:07:1b:8e:ce:12:a7:f9: ad:15:03:41:3a:e3:02:65:ac:c3:2c:ca:2f:84:f8:2a:e1:68: f2:92:63:3b:2d:27:b8:f1:97:cc:fe:3b:7e:a5:b2:4d:5f:65: d1:d0:dc:f1:84:b8:bd:71:3c:b6:56:af:38:97:2b:6d:b1:5c: 87:9f:cc:ed:97:d3:c2:70:89:c8:85:be:6c:80:50:64:10:24: 08:95:cc:65:9c:f2:f6:7f:90:93:b7:60:2f:28:d6:42:e2:ff: 8d:d2:1c:06:2a:88:60:c6:95:fe:f6:a4:18:0b:93:9b:6c:7f: 18:20:99:99:36:a5:35:58:fa:dc:51:5b:21:dc:d8:f9:c6:cf: 1c:85:12:29:5f:a3:0f:06:36:77:19:fa:a2:3a:e8:1d:8e:db: 01:42:4d:96:69:02:42:c6:0d:46:7f:96:53:75:a2:e5:22:e1: 1f:9e:ab:9b:49:e1:00:7a:a8:95:18:3c:16:10:66:3d:5d:21: 22:f2:c5:35:88:6b:c9:02:0a:bd:e9:c8:9b:c6:14:48:d4:8f: d4:af:c1:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyNTExMTAvBgNVBAUTKDUzRDVEQjg3MEU1Q0NENDhFOThENzM1NjBEQkQ1RTY1 OTQ2QzJERDQwHhcNMjUwNDA4MjMxNjUxWhcNMjUwNDE1MjMxNjUxWjAYMRYwFAYD VQQDEw02N2Y1YWU2NC04ZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8Jgnb3jCwfc6AhmX+eMOecBT8CLVrgp/ebxjFPbiupF4llgUZsCQTOLbl60 C/GoiCZ4DYt8VwNk6xefa4SunRy0NjzDrzuICvgjwaZTq8uv5/1x+HJ7c83YE3h0 zgI9tKDrIVhy7gcMKZZXMQwdExJh2Yjia8bt2ibyhag/9DlI7cFPMMpBwF6JG9jL aIknLbDAPjd8mPSgWvT6J0ou/U/htMSmAwBbsXn9eTxTTdcJ5lOMn8MYFuNv+3kn /bgU260nr0NeFLS6HyBubgaVZJU4OMjYyMhgq2+DO5Wff+xS/lAtMh4CBIgzkJYQ ddk/i7wRTbw/TxlNztiGtptMAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOGkjiF YY6d2sdZ2LEu+VvawgksMB8GA1UdIwQYMBaAFFPV24cOXM1I6Y1zVg29XmWUbC3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTI1MS9EOTNENzk2MEY3 NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pVanBqWE5XRGIxZVpaUnNM ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U5WGJodzVjelVqcGpYTldEYjFlWlpSc0xkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTI1MS9EOTNENzk2MEY3NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pV anBqWE5XRGIxZVpaUnNMZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8XJzU0VfyfkcsUAbEmVMBRFOEJkXaoQ+Q6YhenRJ55SchkS+Mabze My7IMy7jGQcbjs4Sp/mtFQNBOuMCZazDLMovhPgq4WjykmM7LSe48ZfM/jt+pbJN X2XR0NzxhLi9cTy2Vq84lyttsVyHn8ztl9PCcInIhb5sgFBkECQIlcxlnPL2f5CT t2AvKNZC4v+N0hwGKohgxpX+9qQYC5ObbH8YIJmZNqU1WPrcUVsh3Nj5xs8chRIp X6MPBjZ3GfqiOugdjtsBQk2WaQJCxg1Gf5ZTdaLlIuEfnqubSeEAeqiVGDwWEGY9 XSEi8sU1iGvJAgq96cibxhRI1I/Ur8HC -----END CERTIFICATE-----Generated at Fri Apr 11 16:04:25 2025 by rpki-client