$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json) Hash identifier: PFGGlyMDFxYrTk32Av2HS0r2UbwQGXRNHf3/+jz2IO4= Subject key identifier: 26:8B:49:CE:6D:CC:FB:D7:A1:4F:5F:EF:9F:17:37:8E:50:A6:92:A7 Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 18EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft Manifest number: 18BB Signing time: Fri 30 May 2025 16:40:52 +0000 Manifest this update: Fri 30 May 2025 16:40:52 +0000 Manifest next update: Fri 06 Jun 2025 16:40:52 +0000 Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: PhW6nnOf/JvSQSW9e13Ev1YQGvFTyQTJI4nDV9+PeM0=) 2: 4A4CE204D49A11EEAB1AF055C4F9AE02.roa (hash: EzHzSCDlBlC4veKW1Q3W/qzMLdRqyApJm4hY8qe4PS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6379 (0x18eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: May 30 16:40:52 2025 GMT Not After : Jun 6 16:40:52 2025 GMT Subject: CN=6839df94-2359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:4c:97:76:c4:76:6d:38:8b:d2:0e:93:e1: 9a:90:6d:81:4b:1c:3c:64:d4:54:e6:11:28:a6:1d: da:91:89:37:a7:e0:bc:bd:33:af:a5:e3:62:b8:ef: 97:ac:d3:53:df:7f:82:4e:01:45:15:58:06:d0:cb: 70:f5:74:e4:0f:b4:55:29:45:02:be:e9:87:0d:26: 0b:67:9d:0a:a8:c6:d1:37:5c:89:7e:bd:7b:b3:b2: 51:ac:7f:c5:f9:4a:f2:7f:b1:c5:6a:05:2a:62:08: 42:f5:43:fd:7a:6d:0c:ec:9b:81:f4:24:16:2d:61: cc:a7:73:cb:a7:c9:4e:5b:11:3d:33:8c:fd:f3:ab: f6:d0:35:ac:c9:ab:37:29:e1:f2:d3:d1:e2:4c:9c: b6:37:dc:c4:74:97:00:49:dd:c7:09:3f:3f:11:8e: 11:2a:c2:d3:db:1c:ff:c5:a5:cf:8b:2f:2d:d5:cc: 57:a8:12:de:cb:a3:d9:ce:c2:8f:42:34:53:38:85: 57:99:bf:cd:f8:be:2b:09:0f:90:f1:5e:af:45:c6: ca:33:0a:83:98:90:24:0d:53:29:44:d7:07:08:96: c1:c3:6d:e7:78:18:81:ac:98:5c:43:c3:38:41:92: 9f:88:9e:5b:37:1c:d5:ca:ca:8e:78:09:30:62:6d: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8B:49:CE:6D:CC:FB:D7:A1:4F:5F:EF:9F:17:37:8E:50:A6:92:A7 X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:87:47:06:6f:d2:cf:36:ff:ae:da:90:c9:18:6f:5f:a9:ea: 14:91:0d:1d:e5:33:52:92:a8:52:0b:54:00:de:ef:a8:83:65: 37:36:49:57:79:4a:dc:59:33:da:d4:dd:84:63:b8:82:ce:80: b0:41:14:bc:ad:68:aa:cc:10:83:86:9d:0b:b5:ed:27:21:31: c2:b8:4f:ac:b0:57:92:7f:a8:26:e3:4a:b4:00:a0:49:03:17: 84:de:da:c3:4f:d6:11:5b:b8:f5:71:39:16:d1:46:f1:24:17: 53:7c:a8:7a:48:25:5f:a1:82:5f:3f:7b:60:12:38:8f:1e:98: 61:2f:7d:4e:33:f0:e0:68:4c:d4:a7:2a:e5:26:2c:7a:4e:f5: f6:83:d2:eb:b7:de:e4:23:5b:50:26:20:f0:f3:d1:bd:ed:00: 15:fa:40:14:f7:e4:68:fc:4a:40:5b:21:04:8f:5d:58:a1:a6: 3c:1a:e5:23:09:2a:35:81:43:6c:2b:e1:85:88:11:e8:d0:20: 0d:76:01:7d:c6:a8:df:b2:66:5c:0c:de:b4:fc:24:a2:50:fb: 07:1d:35:06:a1:b1:d5:25:0e:ce:37:07:63:a1:12:04:97:86: 98:92:74:b7:a8:7b:f3:02:57:b9:a1:45:a3:fb:eb:e3:cc:61: c2:79:81:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjUwNTMwMTY0MDUyWhcNMjUwNjA2MTY0MDUyWjAYMRYwFAYD VQQDEw02ODM5ZGY5NC0yMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUJMl3bEdm04i9IOk+GakG2BSxw8ZNRU5hEoph3akYk3p+C8vTOvpeNiuO+X rNNT33+CTgFFFVgG0Mtw9XTkD7RVKUUCvumHDSYLZ50KqMbRN1yJfr17s7JRrH/F +Uryf7HFagUqYghC9UP9em0M7JuB9CQWLWHMp3PLp8lOWxE9M4z986v20DWsyas3 KeHy09HiTJy2N9zEdJcASd3HCT8/EY4RKsLT2xz/xaXPiy8t1cxXqBLey6PZzsKP QjRTOIVXmb/N+L4rCQ+Q8V6vRcbKMwqDmJAkDVMpRNcHCJbBw23neBiBrJhcQ8M4 QZKfiJ5bNxzVysqOeAkwYm1ljwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaLSc5t zPvXoU9f758XN45QppKnMB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTBFMy9EQTE4QjE4NDlBNDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3 WGpmNndBcGJlSWpsZjFIRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOh0cGb9LPNv+u2pDJGG9fqeoUkQ0d5TNSkqhSC1QA3u+og2U3NklX eUrcWTPa1N2EY7iCzoCwQRS8rWiqzBCDhp0Lte0nITHCuE+ssFeSf6gm40q0AKBJ AxeE3trDT9YRW7j1cTkW0UbxJBdTfKh6SCVfoYJfP3tgEjiPHphhL31OM/DgaEzU pyrlJix6TvX2g9Lrt97kI1tQJiDw89G97QAV+kAU9+Ro/EpAWyEEj11YoaY8GuUj CSo1gUNsK+GFiBHo0CANdgF9xqjfsmZcDN60/CSiUPsHHTUGobHVJQ7ONwdjoRIE l4aYknS3qHvzAle5oUWj++vjzGHCeYGl -----END CERTIFICATE-----Generated at Sat May 31 17:44:07 2025 by rpki-client