$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft File: MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json) Hash identifier: d98WHn+z1kf/CwZg3wOi2QfcA7UNKNPECnbQd2jybqk= Subject key identifier: B5:A8:7D:BC:75:2C:D2:AE:BB:7B:13:62:FE:8E:4B:75:1D:7E:55:92 Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC Certificate issuer: /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft Manifest number: 43 Signing time: Sat 31 May 2025 07:01:18 +0000 Manifest this update: Sat 31 May 2025 07:01:18 +0000 Manifest next update: Sat 07 Jun 2025 07:01:18 +0000 Files and hashes: 1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: JcyKvMDNLBCNtHQ32raTgqzGmbDwCjZUPUHnRyA3Hus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Validity Not Before: May 31 07:01:18 2025 GMT Not After : Jun 7 07:01:18 2025 GMT Subject: CN=683aa93e-cc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:c3:4a:50:e5:dc:64:66:1b:8f:b0:db:18: 1e:c3:c8:b4:17:f0:72:ec:8c:90:cc:cf:6e:91:8d: 82:44:b6:5e:78:dc:76:d0:62:7e:c2:9d:a9:f0:3c: 4e:c9:dc:a9:30:e1:cc:0f:5d:a4:21:9f:79:99:d9: 20:04:a5:99:b8:e3:e6:fa:6d:9f:07:87:c0:50:e5: cd:3f:6f:3a:7d:16:43:aa:90:6b:6d:b9:be:f5:59: db:fd:32:80:43:56:20:53:92:7b:9f:4d:96:c7:fb: 4e:c0:01:e7:20:88:18:6c:ce:46:fe:06:90:be:ed: 91:1b:29:87:35:76:83:16:8b:94:a1:f7:9b:b7:1d: 00:cf:34:1f:89:fe:7e:d8:7f:3a:55:2b:ce:a8:4d: 67:26:29:d4:80:1c:1b:08:59:75:ec:31:3d:da:01: 73:e6:7d:92:25:f7:64:e8:af:ee:ba:0b:a3:5c:e6: df:53:88:e3:f9:58:56:fa:f7:a8:16:8f:37:d1:07: 7b:05:70:86:b9:03:65:77:21:a5:f1:c6:20:44:f6: 87:0c:af:ac:41:8c:4a:71:10:c4:4e:67:40:2f:23: 8c:f6:c4:a4:74:7a:24:75:d5:05:87:6c:bc:d7:79: 10:43:78:c1:fb:1d:76:ea:24:f8:f0:84:b3:80:c8: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A8:7D:BC:75:2C:D2:AE:BB:7B:13:62:FE:8E:4B:75:1D:7E:55:92 X509v3 Authority Key Identifier: keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:63:01:7f:ac:67:38:98:74:39:7a:f1:3e:34:55:e7:46:f6: 7f:e9:c5:a5:db:da:f3:da:a8:84:f0:31:91:43:ab:c9:09:f0: f6:d0:cc:48:cf:f2:e5:bd:08:49:7e:a0:3a:f1:59:9f:5a:d7: a8:73:04:3f:bb:7c:34:08:66:84:4d:6d:40:d5:49:50:34:a9: 0c:d6:b8:03:46:07:1d:9f:61:a8:50:88:71:b9:58:21:93:f4: 45:50:0d:d4:73:56:51:ab:5a:fd:eb:cb:00:49:15:d3:f6:2b: 9b:95:a5:ec:fa:34:65:28:5a:e2:12:d3:81:0f:d0:81:e5:1c: f8:e8:78:fc:f1:f4:4d:a0:92:43:64:32:66:6e:b1:8e:8b:49: c0:06:dc:26:0e:a7:ca:24:16:c9:13:40:b9:b4:7b:72:fc:b9: 5a:3a:1f:cf:41:31:6c:4c:58:0a:ee:64:93:13:fb:5d:34:ce: 82:22:74:48:6a:e1:55:c8:68:3c:89:14:01:59:c1:04:b9:8e: 1a:12:b5:57:62:b0:8b:a6:32:d7:7e:dd:b5:a5:eb:68:a6:72: f0:75:b2:bf:3d:9c:bc:c1:ef:9e:c6:b1:b3:30:02:a1:28:41: ea:53:03:2f:1a:dc:fa:19:ca:71:4e:18:8b:e8:f0:35:51:c1: 1d:5f:32:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoMzFGQUVDNUUzMDJDMTgyMjlGOTlGQjQ3QTcyM0YyQTQ3 OTg3MTdBQzAeFw0yNTA1MzEwNzAxMThaFw0yNTA2MDcwNzAxMThaMBgxFjAUBgNV BAMTDTY4M2FhOTNlLWNjNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaWMNKUOXcZGYbj7DbGB7DyLQX8HLsjJDMz26RjYJEtl543HbQYn7CnanwPE7J 3Kkw4cwPXaQhn3mZ2SAEpZm44+b6bZ8Hh8BQ5c0/bzp9FkOqkGttub71Wdv9MoBD ViBTknufTZbH+07AAecgiBhszkb+BpC+7ZEbKYc1doMWi5Sh95u3HQDPNB+J/n7Y fzpVK86oTWcmKdSAHBsIWXXsMT3aAXPmfZIl92Tor+66C6Nc5t9TiOP5WFb696gW jzfRB3sFcIa5A2V3IaXxxiBE9ocMr6xBjEpxEMROZ0AvI4z2xKR0eiR11QWHbLzX eRBDeMH7HXbqJPjwhLOAyHthAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtah9vHUs 0q67exNi/o5LdR1+VZIwHwYDVR0jBBgwFoAUMfrsXjAsGCKfmftHpyPypHmHF6ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0VCMDgyNDcyRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NLZm1mdEhweVB5cEhtSEY2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWZyc1hqQXNHQ0tmbWZ0SHB5UHlwSG1IRjZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0VCMDgyNDcyRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL01mcnNYakFzR0NL Zm1mdEhweVB5cEhtSEY2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK5jAX+sZziYdDl68T40VedG9n/pxaXb2vPaqITwMZFDq8kJ8PbQzEjP 8uW9CEl+oDrxWZ9a16hzBD+7fDQIZoRNbUDVSVA0qQzWuANGBx2fYahQiHG5WCGT 9EVQDdRzVlGrWv3rywBJFdP2K5uVpez6NGUoWuIS04EP0IHlHPjoePzx9E2gkkNk MmZusY6LScAG3CYOp8okFskTQLm0e3L8uVo6H89BMWxMWAruZJMT+100zoIidEhq 4VXIaDyJFAFZwQS5jhoStVdisIumMtd+3bWl62imcvB1sr89nLzB757GsbMwAqEo QepTAy8a3PoZynFOGIvo8DVRwR1fMkQ= -----END CERTIFICATE-----Generated at Sat May 31 17:36:05 2025 by rpki-client