$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft File: -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json) Hash identifier: i8HiAym9s9utFDxpJR2MYEv6RCPY8n43zzjwemawmog= Subject key identifier: 30:31:1D:50:28:95:F5:E2:DC:B9:F5:83:25:7C:B5:8B:F0:C3:AF:24 Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB Certificate issuer: /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft Manifest number: 91 Signing time: Thu 03 Apr 2025 05:44:50 +0000 Manifest this update: Thu 03 Apr 2025 05:44:49 +0000 Manifest next update: Thu 10 Apr 2025 05:44:49 +0000 Files and hashes: 1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: u8D8aBjwt74b2/4lXu+g0Q7HJ7GEOrt3nAmgaTO2r+8=) 2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: 8zOiXd3kRlQoiz32Gjahx1aoeuvy3cZGr/aU3t8eEp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F11EE Validity Not Before: Apr 3 05:44:49 2025 GMT Not After : Apr 10 05:44:49 2025 GMT Subject: CN=67ee2051-deb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:00:2a:2a:56:55:18:6a:f9:10:5b:19:61: 66:61:70:28:a7:57:01:c8:74:ee:dd:95:d1:dc:32: d3:1e:c5:d8:10:32:1e:c5:19:0f:9d:1e:2f:41:3b: 35:32:f6:59:37:03:59:14:c7:15:7e:9e:cf:a1:96: 3a:cc:f2:1e:4a:ff:53:5e:eb:46:87:bf:64:bc:9e: fa:35:70:64:be:c3:a3:f9:dc:48:4a:e2:70:ba:ea: e9:a2:0a:0c:f0:ee:ca:3e:d6:96:f9:47:bf:63:c7: b5:90:2b:b2:d7:d1:3d:3e:82:67:70:46:fc:5d:07: 4e:0d:7c:5f:67:d5:7f:08:ba:5d:12:9f:c6:f5:77: 0e:a9:d8:3d:a8:7b:75:d8:22:7f:37:4f:fd:9d:23: 0d:6b:52:ee:23:ee:c3:56:aa:6f:b8:e3:d8:23:e3: a1:53:5c:20:1d:ce:84:5e:51:df:60:73:aa:5d:6b: 83:ec:d7:4c:86:e4:4d:10:94:ab:e4:5a:4e:45:38: ff:a3:9f:d1:f2:19:77:06:4e:4a:08:aa:d7:f3:ea: f9:c7:d5:ed:a3:eb:6f:5a:24:22:99:2a:53:fa:c7: f2:b9:bc:26:d0:a5:8e:92:50:5f:b5:75:14:44:45: 3b:bc:d0:8e:79:35:37:c7:a9:02:fc:df:bd:e0:83: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:31:1D:50:28:95:F5:E2:DC:B9:F5:83:25:7C:B5:8B:F0:C3:AF:24 X509v3 Authority Key Identifier: keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:43:f2:3e:d8:b8:d9:46:27:61:b2:c1:7a:f0:b8:77:a1:1e: 0a:93:88:0f:ff:2c:84:71:e9:75:44:18:ec:39:96:f0:a5:29: e0:4b:f1:7e:76:31:db:9c:7e:ed:40:79:8c:57:72:56:f9:eb: 37:97:0a:51:06:41:74:0d:41:d0:6e:85:4d:ff:94:68:bf:cd: ea:33:de:e8:da:1b:c7:e8:47:a8:31:21:ec:86:ac:74:12:bd: 15:5f:d6:9e:1d:24:df:e3:7e:d7:00:13:3a:05:c8:08:5f:60: a5:be:3b:05:87:5c:90:8e:3e:55:ba:da:c6:f1:c2:f0:8d:05: 03:07:31:88:07:93:e4:b6:0b:c1:b0:7e:00:32:3a:97:7d:d0: 6d:11:a3:54:ac:f9:e5:cd:76:8a:31:49:3d:1a:55:4a:d2:2c: 3d:0b:b5:8e:44:29:a1:a0:2d:b2:dc:80:33:73:3d:ac:27:8e: 48:5c:d7:80:14:91:83:16:b6:48:f4:96:b3:fc:6b:27:7d:d6: 4a:d5:e4:96:48:fe:70:47:4f:3f:a2:fb:57:71:82:3f:6f:31: 45:1f:ac:df:91:0d:5e:7c:52:62:61:e2:71:ab:88:3d:c6:11: 14:ea:ee:7b:27:b6:49:17:90:5e:91:64:93:98:73:82:0d:5a: 53:70:69:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjExRUUxMTAvBgNVBAUTKEZBQzJCMkU1NDE0NDVCNUI0N0M1OURBRTFERTJEREU4 ODc5QUI4QkIwHhcNMjUwNDAzMDU0NDQ5WhcNMjUwNDEwMDU0NDQ5WjAYMRYwFAYD VQQDEw02N2VlMjA1MS1kZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RsAKipWVRhq+RBbGWFmYXAop1cByHTu3ZXR3DLTHsXYEDIexRkPnR4vQTs1 MvZZNwNZFMcVfp7PoZY6zPIeSv9TXutGh79kvJ76NXBkvsOj+dxISuJwuurpogoM 8O7KPtaW+Ue/Y8e1kCuy19E9PoJncEb8XQdODXxfZ9V/CLpdEp/G9XcOqdg9qHt1 2CJ/N0/9nSMNa1LuI+7DVqpvuOPYI+OhU1wgHc6EXlHfYHOqXWuD7NdMhuRNEJSr 5FpORTj/o5/R8hl3Bk5KCKrX8+r5x9Xto+tvWiQimSpT+sfyubwm0KWOklBftXUU REU7vNCOeTU3x6kC/N+94IMdpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAxHVAo lfXi3Ln1gyV8tYvww68kMB8GA1UdIwQYMBaAFPrCsuVBRFtbR8Wdrh3i3eiHmri7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTFFRS9FOThBNDY1MjNF ODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcxdEh4WjJ1SGVMZDZJZWF1 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1zS3k1VUZFVzF0SHhaMnVIZUxkNkllYXVMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTFFRS9FOThBNDY1MjNFODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcx dEh4WjJ1SGVMZDZJZWF1THMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwQ/I+2LjZRidhssF68Lh3oR4Kk4gP/yyEcel1RBjsOZbwpSngS/F+ djHbnH7tQHmMV3JW+es3lwpRBkF0DUHQboVN/5Rov83qM97o2hvH6EeoMSHshqx0 Er0VX9aeHSTf437XABM6BcgIX2ClvjsFh1yQjj5VutrG8cLwjQUDBzGIB5PktgvB sH4AMjqXfdBtEaNUrPnlzXaKMUk9GlVK0iw9C7WORCmhoC2y3IAzcz2sJ45IXNeA FJGDFrZI9Jaz/GsnfdZK1eSWSP5wR08/ovtXcYI/bzFFH6zfkQ1efFJiYeJxq4g9 xhEU6u57J7ZJF5BekWSTmHOCDVpTcGm2 -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:02 2025 by rpki-client