$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: WnXtsLPI/kPxCx3BRDTfzJCZIDg1CkR+lEY7N+iomFc= Subject key identifier: 12:DB:C2:9E:3D:E7:F1:37:2C:21:1D:A9:36:E6:D9:38:3E:16:72:B1 Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 0601 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 05E1 Signing time: Fri 30 May 2025 23:15:42 +0000 Manifest this update: Fri 30 May 2025 23:15:42 +0000 Manifest next update: Fri 06 Jun 2025 23:15:42 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: kkJWRTNabI+/pVEsNFPP6R6x731Ao06So/Y84uQgzJA=) 2: C9BA671C3A2611F0908A2B20C4F9AE02.roa (hash: hAsOFqLGhlXPlJQqq8o+TJ1lqU96PHU1fRQ8ll9kM1c=) 3: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: RAzhHtW1VH/eUjgZQiEsm0Ej6j+0F6PlwpjTpjOi8Jo=) 4: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: EkzwfsPvhq1FP6pm5CT4LDCnqWr4szU6ESASOp0o6DU=) 5: DBF856463A3011F0B0C6F437C4F9AE02.roa (hash: 3y3NqdGA4Yb7KDxIbZnutCZORNmNgdB027E2G7UT98A=) 6: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: 1YFs0Zqq59OdTTfQ9TRBhg+ye+627iyYVeuBlex3Kfk=) 7: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: ehyJGIeBDK390bSFLx2HamOEcgKmw6zu6VhcLaVRD/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1537 (0x601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Validity Not Before: May 30 23:15:42 2025 GMT Not After : Jun 6 23:15:42 2025 GMT Subject: CN=683a3c1e-464f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9f:17:d2:81:bb:e0:52:d0:9b:37:21:4a:a3: c5:d4:db:28:15:ae:fe:cc:e6:6e:82:f4:06:14:2a: d6:da:de:5b:91:8e:c8:fc:9b:81:b1:11:4d:f0:52: 59:49:2c:1f:e2:90:5f:ca:82:14:d5:ea:84:0a:ba: 7b:49:ab:01:f1:bc:5e:54:da:e1:22:f5:64:f8:4f: 4c:76:a6:55:dc:99:d1:76:be:14:d0:0a:db:7e:c3: 12:55:3a:7f:95:5f:5e:79:6e:e9:8b:71:9f:7d:ac: d4:1e:9a:cf:f8:d8:77:e9:02:97:a8:dc:67:a4:49: f8:83:80:08:c0:9f:b3:29:a2:b9:b9:62:29:0d:1e: f1:6e:30:f7:2a:63:ef:bd:09:ec:38:6e:5b:57:cb: f7:c2:68:c7:23:0a:d5:2a:6c:5a:54:82:d6:8e:d2: 59:07:e1:1a:20:d4:bd:b0:d6:97:8a:af:71:ba:8f: 45:3a:1b:d3:ea:3e:46:a3:00:73:9a:32:0d:5a:5d: 61:a1:e5:db:6b:16:7a:80:f5:2d:41:f8:61:b6:15: a4:8f:81:3a:66:bb:38:e6:f8:61:87:37:e8:58:b8: 7e:9c:5c:c4:08:1d:85:de:09:90:b4:31:ef:f8:5d: fe:c7:0e:45:c3:8b:4b:9b:60:fa:ae:64:d9:73:21: 2e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DB:C2:9E:3D:E7:F1:37:2C:21:1D:A9:36:E6:D9:38:3E:16:72:B1 X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e6:47:dc:30:0e:6e:2a:4b:e0:09:26:8c:a5:dc:d5:11:38: b9:42:62:ad:3b:6a:93:66:9b:51:12:5f:e4:b6:58:72:fa:1c: db:33:ad:be:d4:43:4f:a6:e2:a4:fd:24:1c:20:84:5a:20:c3: 43:1d:c6:8c:6d:64:48:5c:90:0f:26:c5:3d:01:a7:85:3e:0c: 3e:4c:0f:a7:c4:88:d9:c1:2d:e8:88:02:da:02:3f:d4:b7:a2: 53:c0:1f:0f:00:0f:b1:12:43:49:38:a8:53:ab:5b:f8:2f:47: 3a:29:c4:bd:84:9d:86:2e:01:ac:7a:d8:a1:92:db:88:db:fc: 35:cb:17:47:10:57:4b:17:54:97:93:90:71:76:ed:86:49:58: 8b:b4:96:56:e3:20:9d:84:fe:1f:02:ab:e6:84:e2:55:b2:a5: 69:3a:49:10:d8:11:51:3e:fe:78:79:9b:40:85:98:d2:b0:80: a0:a4:4d:5e:82:a4:7b:4f:97:ae:0b:0e:01:4d:7b:97:4c:ca: 2d:79:3b:83:f1:4c:0c:47:cb:8e:4f:dc:47:1d:57:17:60:30: 4a:00:ce:a7:3a:ab:d5:f7:0c:36:95:13:0d:59:16:40:3c:ea: 06:33:59:01:cb:f5:1d:45:7e:da:af:5d:cc:2e:74:40:fe:84: ab:c7:8c:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUwNTMwMjMxNTQyWhcNMjUwNjA2MjMxNTQyWjAYMRYwFAYD VQQDEw02ODNhM2MxZS00NjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzp8X0oG74FLQmzchSqPF1NsoFa7+zOZugvQGFCrW2t5bkY7I/JuBsRFN8FJZ SSwf4pBfyoIU1eqECrp7SasB8bxeVNrhIvVk+E9MdqZV3JnRdr4U0ArbfsMSVTp/ lV9eeW7pi3GffazUHprP+Nh36QKXqNxnpEn4g4AIwJ+zKaK5uWIpDR7xbjD3KmPv vQnsOG5bV8v3wmjHIwrVKmxaVILWjtJZB+EaINS9sNaXiq9xuo9FOhvT6j5GowBz mjINWl1hoeXbaxZ6gPUtQfhhthWkj4E6Zrs45vhhhzfoWLh+nFzECB2F3gmQtDHv +F3+xw5Fw4tLm2D6rmTZcyEuuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLbwp49 5/E3LCEdqTbm2Tg+FnKxMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn5kfcMA5uKkvgCSaMpdzVETi5QmKtO2qTZptREl/ktlhy+hzbM62+ 1ENPpuKk/SQcIIRaIMNDHcaMbWRIXJAPJsU9AaeFPgw+TA+nxIjZwS3oiALaAj/U t6JTwB8PAA+xEkNJOKhTq1v4L0c6KcS9hJ2GLgGsetihktuI2/w1yxdHEFdLF1SX k5Bxdu2GSViLtJZW4yCdhP4fAqvmhOJVsqVpOkkQ2BFRPv54eZtAhZjSsICgpE1e gqR7T5euCw4BTXuXTMoteTuD8UwMR8uOT9xHHVcXYDBKAM6nOqvV9ww2lRMNWRZA POoGM1kBy/UdRX7ar13MLnRA/oSrx4zW -----END CERTIFICATE-----Generated at Sat May 31 17:34:26 2025 by rpki-client