$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: /ckTHox8pnx41FJRvES8EBtDqH/WhLeP5HYdTXuXQ6U= Subject key identifier: 7E:A3:9E:95:47:14:CC:71:A2:F0:1A:55:86:65:61:29:F0:2A:65:A3 Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 044D Signing time: Sat 31 May 2025 00:27:17 +0000 Manifest this update: Sat 31 May 2025 00:27:17 +0000 Manifest next update: Sat 07 Jun 2025 00:27:17 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: KdZafe06rxHCKhgK6/hR8Gljj0H6XqlcqIbJjQYuE5w=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: R82yDGIsGFvNSThNuNqqir6NPI8oiHV+tooLUAlLp1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: May 31 00:27:17 2025 GMT Not After : Jun 7 00:27:17 2025 GMT Subject: CN=683a4ce5-968b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:2d:3f:f4:8c:b6:56:34:27:90:3f:01:76: bb:0f:00:cb:c1:14:f5:82:7b:16:af:a2:54:5d:8c: b8:0f:3d:74:2a:72:e2:1c:ec:f0:8f:e3:34:80:ac: 99:ae:9a:16:78:85:e3:7e:43:42:8e:db:ae:fc:72: 87:98:cb:37:84:51:70:e3:e8:dc:e9:65:6f:69:70: 8e:88:77:9e:80:36:8f:58:39:c6:df:b3:d8:c1:d1: e5:b8:5f:9f:53:e4:60:d6:0d:40:bb:23:a6:30:26: cf:c7:b1:48:9b:05:69:e2:b6:64:4c:53:53:b7:b6: e1:e5:1c:50:ec:6c:5b:99:af:42:e7:c1:03:01:29: 04:c7:a4:88:29:e2:6e:90:a4:75:7e:cc:f1:18:e7: 81:8d:65:60:66:f2:81:ae:eb:ef:1d:98:ec:e9:b5: ef:1d:99:15:cc:00:6a:80:f9:6c:98:4a:bd:92:6a: 17:b7:f1:58:7c:7f:74:e2:d1:35:0e:d0:80:3a:cb: ea:26:06:dd:3f:b9:f1:1d:d2:c5:ef:d5:7c:d4:90: c0:52:ab:55:64:e6:03:9a:d2:be:ed:20:5c:59:a2: ea:0e:ec:81:6e:25:9f:d4:9c:ee:8c:b8:03:09:4f: 6d:b0:8b:4f:d1:b7:4c:e5:cc:31:41:01:c0:51:2d: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A3:9E:95:47:14:CC:71:A2:F0:1A:55:86:65:61:29:F0:2A:65:A3 X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ef:17:4c:96:78:f4:e5:ae:13:23:a9:d6:36:46:e8:e9:e0: bf:6f:4f:e9:5f:b7:69:67:01:7d:a2:e8:30:7c:17:ad:f3:de: 78:40:74:e1:65:78:10:2c:ab:90:a4:e9:13:a8:c5:41:a5:f2: 2d:70:57:b3:99:38:2f:a5:24:a4:bd:15:22:d1:03:a3:5c:52: b5:84:1f:60:1e:ab:61:df:64:c0:58:5d:e7:68:7b:0f:bc:f7: 3e:6c:11:90:b7:ad:b7:0a:81:34:46:d4:2b:f2:2f:03:38:58: d9:4c:3b:6a:0f:97:2d:54:1c:db:29:15:04:a3:72:11:9a:77: 95:34:43:c0:9a:22:71:a3:5e:64:3b:15:6b:36:1c:76:c2:2a: d5:46:01:83:6e:ab:16:2c:48:43:76:e1:fe:ad:0a:fc:b6:50: b2:22:f9:ea:ae:46:4c:d6:d8:89:b3:71:6e:84:ff:aa:93:a5: ee:0d:4a:55:1f:99:72:38:8c:a2:4b:a4:15:8b:92:57:74:7b: 63:b8:c0:dd:fc:e6:8e:4a:f9:be:88:10:86:bd:56:01:32:72: ad:d1:66:f6:09:6e:24:95:dc:36:e2:1d:77:b2:25:c8:c4:12: c7:82:7c:5f:9d:0e:53:16:55:ef:3d:74:36:cd:f2:9a:49:4a: 50:4f:cd:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjUwNTMxMDAyNzE3WhcNMjUwNjA3MDAyNzE3WjAYMRYwFAYD VQQDEw02ODNhNGNlNS05NjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8YtP/SMtlY0J5A/AXa7DwDLwRT1gnsWr6JUXYy4Dz10KnLiHOzwj+M0gKyZ rpoWeIXjfkNCjtuu/HKHmMs3hFFw4+jc6WVvaXCOiHeegDaPWDnG37PYwdHluF+f U+Rg1g1AuyOmMCbPx7FImwVp4rZkTFNTt7bh5RxQ7Gxbma9C58EDASkEx6SIKeJu kKR1fszxGOeBjWVgZvKBruvvHZjs6bXvHZkVzABqgPlsmEq9kmoXt/FYfH904tE1 DtCAOsvqJgbdP7nxHdLF79V81JDAUqtVZOYDmtK+7SBcWaLqDuyBbiWf1JzujLgD CU9tsItP0bdM5cwxQQHAUS1DKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6jnpVH FMxxovAaVYZlYSnwKmWjMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt7xdMlnj05a4TI6nWNkbo6eC/b0/pX7dpZwF9ougwfBet8954QHTh ZXgQLKuQpOkTqMVBpfItcFezmTgvpSSkvRUi0QOjXFK1hB9gHqth32TAWF3naHsP vPc+bBGQt623CoE0RtQr8i8DOFjZTDtqD5ctVBzbKRUEo3IRmneVNEPAmiJxo15k OxVrNhx2wirVRgGDbqsWLEhDduH+rQr8tlCyIvnqrkZM1tiJs3FuhP+qk6XuDUpV H5lyOIyiS6QVi5JXdHtjuMDd/OaOSvm+iBCGvVYBMnKt0Wb2CW4kldw24h13siXI xBLHgnxfnQ5TFlXvPXQ2zfKaSUpQT835 -----END CERTIFICATE-----Generated at Sat May 31 16:29:39 2025 by rpki-client