$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft File: PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json) Hash identifier: 8Qcdzzrn5tYxcIXbVa5w8FGLA2nL2txcE6ohhXV/YDY= Subject key identifier: 02:5E:F9:16:B7:32:30:94:75:BE:3D:2C:36:BB:B1:34:D6:2D:48:DD Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Certificate serial: 0822 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft Manifest number: 07D5 Signing time: Fri 30 May 2025 21:35:00 +0000 Manifest this update: Fri 30 May 2025 21:35:00 +0000 Manifest next update: Fri 06 Jun 2025 21:35:00 +0000 Files and hashes: 1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: chQVtwHXG6mkcooDXqKr4iJC3M8MG4on38r5JARzGJg=) 2: CD1E94321A7D11F09A63C576C4F9AE02.roa (hash: vVJ4ZPcH3lbEogl2hIa71k4678GTw2JTT698EnTX0sk=) 3: C597607628F711F087AC6985C4F9AE02.roa (hash: 73mTLcezdboIlDJbkedCr3eiAJip+rCVW9e5+L5FgdI=) 4: 206D4F4C28F811F0B56A5686C4F9AE02.roa (hash: UXHVHg7kDbBQVdK+MUKPvXF3V6iz5PHH/pNqHyWft9I=) 5: DD8B40E41A7E11F098A37378C4F9AE02.roa (hash: L6v9N1lps3HT+4hWevJV8kUzpnpP386yo30tBD8aoeQ=) 6: 0ACEF76441DC11ECBDB44C82C4F9AE02.roa (hash: yYpvf9p+wsM6J9X86nR8OoM5Locu4ULTbYADmSrh3ns=) 7: 50379A94992611EC94DB646EC4F9AE02.roa (hash: UQSilDbz/hE2pQQ6qsVZpBDsORWehlq7xmMJwgsCEF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Validity Not Before: May 30 21:35:00 2025 GMT Not After : Jun 6 21:35:00 2025 GMT Subject: CN=683a2484-53dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:18:cd:06:97:bb:22:7b:4f:51:28:b2:12: 8b:ef:09:47:a2:d8:54:27:1f:19:67:9b:e9:63:b7: f3:62:db:bb:51:14:43:d1:4d:28:0a:05:b4:af:87: 27:4b:78:77:e0:82:f0:95:37:8e:48:8b:f4:fd:f6: 2c:b8:e4:01:58:b7:85:44:0c:39:92:91:62:cb:75: 45:ea:91:83:c8:de:e4:f3:56:58:00:f3:52:e5:0b: 20:1a:4b:e4:f0:2d:ff:41:57:19:48:bf:53:1b:4a: 10:fe:4a:8a:e8:e5:a0:77:4f:af:14:62:c4:81:50: ff:aa:61:10:54:fe:1a:ae:83:73:ae:b1:01:46:73: 12:7a:0a:51:f0:4a:78:c0:3b:7f:8c:0d:d6:a2:3b: d0:7f:56:d7:98:66:f6:89:3e:b2:46:9f:cc:49:e0: 03:9a:e9:32:ca:a4:09:d3:72:c2:5f:ba:6e:94:76: ed:35:ee:d5:02:f1:d8:6b:f8:45:8a:43:73:1d:1d: 32:13:40:3f:07:12:2a:a9:39:23:57:5a:1b:7c:cf: f7:78:fd:1c:af:59:6f:44:82:33:07:c4:2f:87:0f: ad:76:21:4b:93:6f:e3:79:59:ba:e4:ff:63:65:68: bb:3b:85:83:04:74:a1:db:a2:e5:75:2d:a8:a5:d2: 7d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5E:F9:16:B7:32:30:94:75:BE:3D:2C:36:BB:B1:34:D6:2D:48:DD X509v3 Authority Key Identifier: keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0e:9c:c0:03:f2:36:04:50:05:cd:17:a0:3f:fd:10:22:b9: 3b:d5:1a:2d:fc:9e:fa:ff:6c:ba:2e:c0:63:ab:90:60:28:1a: 0a:cf:da:42:7d:d8:09:e6:d7:64:68:4f:c2:f8:a7:a5:17:99: 8c:d5:6c:ff:20:06:5c:ee:f7:4e:02:6f:ac:bf:86:20:25:fc: 40:87:b8:ae:db:c8:4f:f4:df:61:2d:8d:a0:21:cd:93:cb:64: bd:ca:a9:3f:10:e2:e9:90:0e:24:d5:3b:36:b3:6d:9a:bf:fb: 5c:c0:47:16:a6:f3:17:46:0a:78:1f:32:d4:af:c0:52:b0:6c: 3e:df:b8:b4:5f:42:8e:15:ae:7f:62:50:08:60:15:32:0d:86: 37:8b:75:3b:ac:70:97:08:aa:6a:8c:d1:ab:30:d8:e7:43:3a: ba:b0:5e:04:36:95:c6:87:7d:92:6c:a4:5d:17:29:ea:05:e0: f3:c2:fa:cd:8b:e0:23:1c:3b:24:85:94:5c:1b:18:88:c9:60: 73:f2:09:c0:48:09:ab:72:8c:aa:48:e3:b3:39:88:da:b9:3c: 60:53:c1:27:9b:dc:2b:8e:09:da:ee:10:7e:60:03:a7:6f:b7: df:63:2a:da:29:33:ad:34:cd:61:a9:0c:57:9d:ae:5e:30:b7: 80:31:18:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUwQTQxMTAvBgNVBAUTKDNEMUQ2QTMzMkFFQTRFQzUwMjAzN0EwOTA5RjRDQzE5 RDQyREIxOTgwHhcNMjUwNTMwMjEzNTAwWhcNMjUwNjA2MjEzNTAwWjAYMRYwFAYD VQQDEw02ODNhMjQ4NC01M2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXQYzQaXuyJ7T1EoshKL7wlHothUJx8ZZ5vpY7fzYtu7URRD0U0oCgW0r4cn S3h34ILwlTeOSIv0/fYsuOQBWLeFRAw5kpFiy3VF6pGDyN7k81ZYAPNS5QsgGkvk 8C3/QVcZSL9TG0oQ/kqK6OWgd0+vFGLEgVD/qmEQVP4aroNzrrEBRnMSegpR8Ep4 wDt/jA3WojvQf1bXmGb2iT6yRp/MSeADmukyyqQJ03LCX7pulHbtNe7VAvHYa/hF ikNzHR0yE0A/BxIqqTkjV1obfM/3eP0cr1lvRIIzB8Qvhw+tdiFLk2/jeVm65P9j ZWi7O4WDBHSh26LldS2opdJ9pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJe+Ra3 MjCUdb49LDa7sTTWLUjdMB8GA1UdIwQYMBaAFD0dajMq6k7FAgN6CQn0zBnULbGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTBBNC9ERDQ3MzY5ODBD MzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRzVUNBM29KQ2ZUTUdkUXRz WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSMXFNeXJxVHNVQ0Ezb0pDZlRNR2RRdHNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTBBNC9ERDQ3MzY5ODBDMzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRz VUNBM29KQ2ZUTUdkUXRzWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuDpzAA/I2BFAFzRegP/0QIrk71Rot/J76/2y6LsBjq5BgKBoKz9pC fdgJ5tdkaE/C+KelF5mM1Wz/IAZc7vdOAm+sv4YgJfxAh7iu28hP9N9hLY2gIc2T y2S9yqk/EOLpkA4k1Ts2s22av/tcwEcWpvMXRgp4HzLUr8BSsGw+37i0X0KOFa5/ YlAIYBUyDYY3i3U7rHCXCKpqjNGrMNjnQzq6sF4ENpXGh32SbKRdFynqBeDzwvrN i+AjHDskhZRcGxiIyWBz8gnASAmrcoyqSOOzOYjauTxgU8Enm9wrjgna7hB+YAOn b7ffYyraKTOtNM1hqQxXna5eMLeAMRhW -----END CERTIFICATE-----Generated at Sat May 31 17:26:16 2025 by rpki-client