$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: Wb03eyVF/86o6lZl0clCQdJVyeZRwOe30AhY2CWp4fs= Subject key identifier: 5B:5F:06:4E:C8:54:4E:FA:D4:D0:1F:A2:8F:AD:00:6E:0E:30:D8:8D Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: 01A3 Signing time: Thu 05 Jun 2025 02:40:42 +0000 Manifest this update: Thu 05 Jun 2025 02:40:42 +0000 Manifest next update: Thu 12 Jun 2025 02:40:42 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: 8tmf0s8ghKJLCr6jcGLHViVS6eLdzYL7mSbKKSGjQ3Q=) 2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: QVA6cnHl8Ur5a0kDBgQcj4pP7Ka7QThHbgUyDhuNztQ=) 3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: El263VSWEusvqzTfH9aiwLLR8nJJvv9GT054yDKZA+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 02:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: Jun 5 02:40:42 2025 GMT Not After : Jun 12 02:40:42 2025 GMT Subject: CN=684103aa-3bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:d0:bf:43:88:93:49:91:71:db:c9:f4:d1: 1a:8f:e8:5c:cd:3b:91:46:a7:fc:37:e0:8e:fd:20: 20:be:72:3a:a4:6a:9d:0e:a7:1a:70:b2:6f:cd:61: 0a:c6:d3:2c:02:f6:f0:a2:10:dc:0d:0e:8a:e7:ee: 38:27:de:78:c6:2a:c5:d7:dd:53:8b:90:24:4c:c4: 50:56:1f:e4:61:23:76:03:5d:c5:81:52:7d:88:a6: 59:62:22:1a:a8:2f:30:ac:0f:38:32:b4:76:33:ad: de:cc:7a:50:f0:8b:47:89:23:a9:a1:26:3d:08:a5: ae:9c:5b:01:c0:a7:e0:fa:a3:2a:e1:de:69:43:66: 6d:4e:c2:2e:cf:b0:50:e8:3e:22:c8:9a:93:ea:72: 01:56:e0:e9:0c:ab:4a:78:85:41:67:86:6e:ea:46: 5a:b2:d1:2f:26:5f:71:12:17:7a:41:22:d8:f4:dd: 18:41:0c:6a:69:0f:8b:19:0b:9c:ef:01:d7:6d:7d: 14:34:59:d2:81:94:55:1d:75:33:d1:65:3d:a0:8a: dd:3a:7c:28:8d:1f:5c:a7:7f:c1:f7:46:d1:fc:f2: 7d:7f:dd:f3:50:ba:8b:02:f0:e7:43:63:ec:06:e2: 53:47:b9:c6:dd:0b:25:2d:fc:e8:d0:5b:a2:3b:94: 06:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5F:06:4E:C8:54:4E:FA:D4:D0:1F:A2:8F:AD:00:6E:0E:30:D8:8D X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:43:36:f9:d6:46:9d:a8:19:8a:f3:ea:1f:a3:db:fb:ac:c3: 6e:a3:94:5d:cb:81:3f:fb:ec:d9:0f:8b:6a:43:8a:25:8f:99: 14:44:e4:a2:06:56:44:d1:74:db:89:0d:4d:9c:ee:28:0a:65: d2:4e:1a:f7:82:9f:38:9d:33:8f:90:ca:7e:b2:fa:13:e0:f0: d3:a3:ad:ba:6f:4c:4e:f4:b8:dc:4d:f9:c1:f4:9d:9b:c5:51: 89:50:78:ae:e7:14:47:14:ed:32:b7:03:77:e1:ec:53:2e:82: 53:f1:97:7a:27:be:4b:2f:f0:ae:a7:69:2c:48:db:a8:2f:ca: bd:6f:d3:7e:34:f9:e6:23:25:8d:a6:2d:85:83:73:77:b0:ed: db:42:12:d2:39:d6:3c:24:4a:07:47:d7:96:f3:13:aa:0d:c2: 34:4d:ad:4e:a8:41:55:06:43:93:15:ee:4c:72:a8:20:27:1b: d8:9d:3f:d6:be:83:c0:8c:28:be:f4:6d:f7:7e:7b:d4:bb:e1: a1:99:0b:69:96:66:1a:01:d0:5f:6b:e4:f8:e0:36:4a:98:4e: 55:79:a3:be:49:12:9d:b6:36:f6:eb:f7:0b:ed:5d:d6:a4:e2: 57:2d:7b:f3:ce:f5:ca:a3:96:b5:4b:40:d2:d3:3c:3a:52:39: ca:12:eb:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjUwNjA1MDI0MDQyWhcNMjUwNjEyMDI0MDQyWjAYMRYwFAYD VQQDEw02ODQxMDNhYS0zYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtETQv0OIk0mRcdvJ9NEaj+hczTuRRqf8N+CO/SAgvnI6pGqdDqcacLJvzWEK xtMsAvbwohDcDQ6K5+44J954xirF191Ti5AkTMRQVh/kYSN2A13FgVJ9iKZZYiIa qC8wrA84MrR2M63ezHpQ8ItHiSOpoSY9CKWunFsBwKfg+qMq4d5pQ2ZtTsIuz7BQ 6D4iyJqT6nIBVuDpDKtKeIVBZ4Zu6kZastEvJl9xEhd6QSLY9N0YQQxqaQ+LGQuc 7wHXbX0UNFnSgZRVHXUz0WU9oIrdOnwojR9cp3/B90bR/PJ9f93zULqLAvDnQ2Ps BuJTR7nG3QslLfzo0FuiO5QGHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtfBk7I VE761NAfoo+tAG4OMNiNMB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApQzb51kadqBmK8+ofo9v7rMNuo5Rdy4E/++zZD4tqQ4olj5kUROSi BlZE0XTbiQ1NnO4oCmXSThr3gp84nTOPkMp+svoT4PDTo626b0xO9LjcTfnB9J2b xVGJUHiu5xRHFO0ytwN34exTLoJT8Zd6J75LL/Cup2ksSNuoL8q9b9N+NPnmIyWN pi2Fg3N3sO3bQhLSOdY8JEoHR9eW8xOqDcI0Ta1OqEFVBkOTFe5McqggJxvYnT/W voPAjCi+9G33fnvUu+GhmQtplmYaAdBfa+T44DZKmE5VeaO+SRKdtjb26/cL7V3W pOJXLXvzzvXKo5a1S0DS0zw6UjnKEuvO -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:50 2025 by rpki-client