$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json) Hash identifier: nX800OglGY1A+H+TisPFrRoVU0ZbVB4CAlaB8WJFIpc= Subject key identifier: 1E:3D:31:ED:D8:07:ED:B2:B5:8A:D1:F0:DF:FB:D7:C3:06:89:D6:DD Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Certificate serial: 05DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft Manifest number: 05D8 Signing time: Fri 30 May 2025 23:12:23 +0000 Manifest this update: Fri 30 May 2025 23:12:22 +0000 Manifest next update: Fri 06 Jun 2025 23:12:22 +0000 Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: L+KoYxSkaFEPsk/ky4Gi0cvaJ5QHAb0zGp87kQ/6/BQ=) 2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: IADvK+KgV5vnYxJ4wHU1Xtz8TSGee8Bm5ZckrfzrChM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1501 (0x5dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Validity Not Before: May 30 23:12:22 2025 GMT Not After : Jun 6 23:12:22 2025 GMT Subject: CN=683a3b57-3d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:a1:c8:94:19:52:69:a3:41:07:21:74:7f: 81:ac:a0:a4:34:45:aa:52:8f:48:ef:90:93:af:35: 5f:b7:c5:51:83:d0:c1:ec:12:67:53:d3:9f:d0:10: 9f:86:ae:9b:ad:94:c1:ba:e5:85:91:94:1d:06:e4: 43:fd:5d:a6:db:ce:ab:8e:7a:b1:95:76:e8:82:18: ce:64:f7:63:18:3d:09:45:bc:77:de:c7:13:75:44: ec:ac:a2:f3:57:3d:40:b7:fc:85:bc:3b:5b:69:7a: 9e:c0:94:dc:5f:37:63:18:55:89:30:f9:08:2f:7e: 9a:64:ff:4f:6e:55:44:b2:78:85:27:7d:19:ae:97: 3f:f3:72:ba:98:9c:ec:ab:43:13:67:5f:d2:0f:59: 45:ab:69:0c:be:f2:bd:b5:2b:83:fe:1e:ca:b0:81: 3b:93:a4:41:b5:ff:7a:40:14:a4:6d:bd:12:3f:f1: e3:cd:d0:79:e3:f5:8d:b6:f5:af:87:8e:40:0b:3e: 81:99:61:de:ae:ef:6e:4d:f3:90:45:65:25:5a:8c: 76:fa:eb:7b:34:9f:c4:28:44:f4:3f:5b:3b:a9:7c: 88:ce:1a:27:29:9a:79:05:8f:5a:fa:7a:5e:27:ba: e1:58:b1:57:c9:c7:31:89:1f:27:ec:66:f8:9f:1f: f4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3D:31:ED:D8:07:ED:B2:B5:8A:D1:F0:DF:FB:D7:C3:06:89:D6:DD X509v3 Authority Key Identifier: keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:81:59:83:d8:94:9d:07:4e:1d:4f:17:87:58:91:ce:7f:46: 2d:a1:ec:ab:4f:0e:b3:45:f3:3b:b4:e9:48:6b:21:26:1f:1e: 8a:43:3b:28:44:c7:09:62:42:a9:4b:54:2a:ec:fc:fd:1d:fb: 63:ea:e1:36:d2:a3:b1:6c:35:53:3c:d3:a9:55:a7:6e:04:af: ce:93:1e:c7:b6:ca:c4:22:38:c5:d2:88:7a:46:3c:27:bf:6e: 5a:88:68:92:0b:52:e3:48:ce:1b:93:e3:be:d5:7c:ba:02:1f: c6:e3:47:b4:6f:1e:ef:51:1c:58:50:bf:b7:57:0c:2c:d9:69: c0:98:aa:be:cd:ab:70:6c:42:8a:09:bc:bf:8b:7c:d1:51:8b: 12:94:df:46:97:4c:26:4d:ae:ef:be:bc:1d:c5:21:bb:f2:c8: bc:3d:6e:a3:ad:cd:c4:8e:7e:b8:df:30:76:13:f2:f9:0f:66: 0f:eb:fa:b4:2f:bf:9a:8e:67:3b:e4:34:c7:75:71:a7:41:a5: 01:10:04:f7:fc:0d:05:2c:32:68:c9:11:fe:ed:aa:f6:d5:5a: 07:18:86:b4:0d:4d:d9:7c:7e:4f:d1:17:12:38:0b:50:9b:8f: d9:71:a3:9b:94:05:81:b2:4c:aa:4a:a1:fa:e9:cd:c8:87:50: db:79:69:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz ODEyNkRDOUYwHhcNMjUwNTMwMjMxMjIyWhcNMjUwNjA2MjMxMjIyWjAYMRYwFAYD VQQDEw02ODNhM2I1Ny0zZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHyhyJQZUmmjQQchdH+BrKCkNEWqUo9I75CTrzVft8VRg9DB7BJnU9Of0BCf hq6brZTBuuWFkZQdBuRD/V2m286rjnqxlXboghjOZPdjGD0JRbx33scTdUTsrKLz Vz1At/yFvDtbaXqewJTcXzdjGFWJMPkIL36aZP9PblVEsniFJ30Zrpc/83K6mJzs q0MTZ1/SD1lFq2kMvvK9tSuD/h7KsIE7k6RBtf96QBSkbb0SP/HjzdB54/WNtvWv h45ACz6BmWHeru9uTfOQRWUlWox2+ut7NJ/EKET0P1s7qXyIzhonKZp5BY9a+npe J7rhWLFXyccxiR8n7Gb4nx/0iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB49Me3Y B+2ytYrR8N/718MGidbdMB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5 NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhCNS8zRUJDRDFEQUI5NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81 anRHemNqTkRGems0RW0zSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+gVmD2JSdB04dTxeHWJHOf0YtoeyrTw6zRfM7tOlIayEmHx6KQzso RMcJYkKpS1Qq7Pz9Hftj6uE20qOxbDVTPNOpVaduBK/Okx7HtsrEIjjF0oh6Rjwn v25aiGiSC1LjSM4bk+O+1Xy6Ah/G40e0bx7vURxYUL+3Vwws2WnAmKq+zatwbEKK Cby/i3zRUYsSlN9Gl0wmTa7vvrwdxSG78si8PW6jrc3Ejn643zB2E/L5D2YP6/q0 L7+ajmc75DTHdXGnQaUBEAT3/A0FLDJoyRH+7ar21VoHGIa0DU3ZfH5P0RcSOAtQ m4/ZcaOblAWBskyqSqH66c3Ih1DbeWnE -----END CERTIFICATE-----Generated at Sat May 31 16:45:47 2025 by rpki-client