$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json) Hash identifier: S8KvXm0pA/uQS4kwL2htNY76kuMMAnqo7BaTkFd1nL0= Subject key identifier: 63:DD:27:72:A7:49:34:FE:C5:C8:A5:11:35:EF:8C:33:FA:49:25:D8 Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4 Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft Manifest number: 0180 Signing time: Sat 31 May 2025 03:28:23 +0000 Manifest this update: Sat 31 May 2025 03:28:22 +0000 Manifest next update: Sat 07 Jun 2025 03:28:22 +0000 Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: pG+eZdLHCZGBVgu2dFULkPwR6y8Vzg23gYybOBAqVnc=) 2: 9F79846406E911EE88450147C4F9AE02.roa (hash: VUMq+AnQ5vAh9348tyFEWeU9Ep6U+LrIKC3PKZ58L3M=) 3: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: xqi0fyo9pYw63B4k/7OwfLMW8Zv6WUfvY5OXteBY87I=) 4: E5925096093911EEABCFA170C4F9AE02.roa (hash: 9se4h5DVwbqK4ocwNJG41tqNbygd7PqouTQTwTnQqOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4 Validity Not Before: May 31 03:28:22 2025 GMT Not After : Jun 7 03:28:22 2025 GMT Subject: CN=683a7757-0f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:80:8d:23:3e:46:c9:d1:de:d3:8b:e4:fc:17: 89:88:03:4e:0a:e9:e5:9f:4c:0e:3f:00:57:b0:53: 30:82:27:e4:ab:31:33:19:66:64:84:f3:74:8d:f5: 9c:ba:52:a9:f0:65:bd:ca:01:2a:74:b9:24:77:8d: f8:6c:3c:d3:b5:c3:fa:da:fe:1f:33:b4:cc:2d:02: ab:65:81:ea:61:c7:33:f9:90:cf:36:6a:59:43:79: 92:02:b7:f4:fa:c3:90:e7:57:32:c2:45:48:f8:ff: 17:0c:c4:05:55:94:c7:bf:5e:69:ce:83:5e:85:91: 5b:3a:c8:fe:49:80:e9:ed:fe:47:56:b8:3f:b9:5a: 5c:51:53:22:f7:98:e8:d2:f5:0a:e7:36:65:c2:24: 27:e1:86:4e:e8:67:15:fd:05:aa:90:ab:ed:5c:3c: da:8a:b8:75:59:13:72:ca:b7:ef:53:df:66:d2:6b: b0:8e:ff:57:17:d0:8e:f6:d3:b7:f7:b6:41:58:04: 70:6d:75:23:a0:b6:71:2c:96:d5:ac:4a:49:aa:d2: bf:cd:8d:bd:69:55:7c:85:08:bb:e3:40:ac:18:d8: 8c:2e:51:6f:8f:8b:00:65:0d:72:e5:f4:56:08:b9: 93:c2:4f:94:7a:f5:67:f7:b4:bc:52:a0:ef:a7:44: 8a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DD:27:72:A7:49:34:FE:C5:C8:A5:11:35:EF:8C:33:FA:49:25:D8 X509v3 Authority Key Identifier: keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0b:f6:f9:1d:74:45:c9:16:bc:d0:ff:bc:67:ff:ee:3e:2c: 30:70:0c:98:68:cf:8c:c8:ae:42:95:55:d4:1a:05:84:c2:07: 43:fe:ac:b0:ff:2f:ae:d8:8c:e8:6c:60:87:b3:c7:82:de:98: dc:db:82:cd:d5:05:68:a7:11:8b:7f:52:d2:cb:1e:8d:b7:43: e9:be:eb:12:3b:cc:e5:ed:f3:80:33:cb:4d:1b:1c:5e:63:d9: da:5d:6a:29:e0:56:36:5c:5c:6c:26:e7:d1:d1:0b:eb:51:17: 22:84:4e:f3:55:e1:55:e0:82:ce:23:e3:d5:28:a4:ae:b4:bb: 85:6a:05:3c:0f:20:8b:11:a1:a1:17:22:88:f1:a2:72:8e:e7: 79:f2:f8:1b:8b:1b:79:4f:d9:d2:6b:d2:0d:9c:f9:4e:f8:f0: 97:07:4e:76:22:37:4a:e8:ab:05:a2:a9:a2:2f:f7:cf:f1:7f: 6c:62:08:56:38:b2:ba:b3:7a:5e:5e:e5:83:cd:c7:fc:f7:ee: 1b:53:89:c8:56:2d:64:d6:25:0e:23:42:0d:bb:8f:27:50:f0: 46:36:df:f2:c8:b3:e3:f7:f8:44:ee:25:01:95:14:6f:22:e3: e9:60:2b:ae:79:1e:c6:7d:5c:75:bb:ac:d0:bc:aa:93:7b:48: 7b:82:5a:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx MjcwQTI0QzQwHhcNMjUwNTMxMDMyODIyWhcNMjUwNjA3MDMyODIyWjAYMRYwFAYD VQQDEw02ODNhNzc1Ny0wZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyICNIz5GydHe04vk/BeJiANOCunln0wOPwBXsFMwgifkqzEzGWZkhPN0jfWc ulKp8GW9ygEqdLkkd434bDzTtcP62v4fM7TMLQKrZYHqYccz+ZDPNmpZQ3mSArf0 +sOQ51cywkVI+P8XDMQFVZTHv15pzoNehZFbOsj+SYDp7f5HVrg/uVpcUVMi95jo 0vUK5zZlwiQn4YZO6GcV/QWqkKvtXDzairh1WRNyyrfvU99m0muwjv9XF9CO9tO3 97ZBWARwbXUjoLZxLJbVrEpJqtK/zY29aVV8hQi740CsGNiMLlFvj4sAZQ1y5fRW CLmTwk+UevVn97S8UqDvp0SKDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPdJ3Kn STT+xcilETXvjDP6SSXYMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2 OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTgxOC82OEVBNzNFQzA2OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNP MFVqSlBWbExiME1TY0tKTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcC/b5HXRFyRa80P+8Z//uPiwwcAyYaM+MyK5ClVXUGgWEwgdD/qyw /y+u2IzobGCHs8eC3pjc24LN1QVopxGLf1LSyx6Nt0PpvusSO8zl7fOAM8tNGxxe Y9naXWop4FY2XFxsJufR0QvrURcihE7zVeFV4ILOI+PVKKSutLuFagU8DyCLEaGh FyKI8aJyjud58vgbixt5T9nSa9INnPlO+PCXB052IjdK6KsFoqmiL/fP8X9sYghW OLK6s3peXuWDzcf89+4bU4nIVi1k1iUOI0INu48nUPBGNt/yyLPj9/hE7iUBlRRv IuPpYCuueR7GfVx1u6zQvKqTe0h7glpM -----END CERTIFICATE-----Generated at Sat May 31 16:56:12 2025 by rpki-client