$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft File: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft (raw, json) Hash identifier: 9bDlKFMbv6sAstgTflNmSD9ddzjHnP5m1OVMfCWyYF8= Subject key identifier: 95:F7:7C:41:5C:C0:80:DB:3A:0C:98:B4:25:E8:97:6B:9C:B8:23:17 Authority key identifier: D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 Certificate issuer: /CN=A91AA897/serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft Manifest number: 0635 Signing time: Fri 30 May 2025 22:53:53 +0000 Manifest this update: Fri 30 May 2025 22:53:52 +0000 Manifest next update: Fri 06 Jun 2025 22:53:52 +0000 Files and hashes: 1: 1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl (hash: JFYeFNtm9yzUjqzjpM0b/A8tTP3Hbay2qYgbcuTQrNc=) 2: D78A16ECCAC311EC910B8C20C4F9AE02.roa (hash: oJo0EldVtMJvTJnA4FpJe7JGIUD/xhTk+VY6Q3vUpoY=) 3: D6692528CAC311EC910B8C20C4F9AE02.roa (hash: ZgaT6NUPSJGrS2FDGhXNf1URQXdcMTQg5TCptCSVeas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA897, serialNumber=D68D411AD03E7314F1492D062DB0D9194E9F5095 Validity Not Before: May 30 22:53:52 2025 GMT Not After : Jun 6 22:53:52 2025 GMT Subject: CN=683a3700-6ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d9:fd:2a:48:af:3c:37:4d:04:cd:55:5d:c6: 66:1f:39:3f:11:76:32:a4:e0:ea:de:94:20:5b:ea: 51:a5:f1:c3:47:3e:28:17:ea:62:a6:ed:36:48:df: a7:3b:98:f6:05:db:9a:ad:33:26:80:96:5b:92:79: 8b:ed:2e:34:0f:86:3e:d7:c6:17:17:bf:50:ae:3d: e5:b9:00:91:cc:4d:b6:c3:6c:be:08:9b:1b:8e:53: 01:31:1a:75:68:3f:c0:1c:f5:88:c0:0d:49:8c:3a: 96:e9:d2:7f:ec:52:04:14:ea:2d:05:24:11:9f:d2: c1:c8:e1:99:4e:0f:a8:54:f3:ac:60:ae:11:af:1b: 29:ab:0d:7b:89:e0:16:3d:b0:4b:12:a0:73:e7:f1: af:71:42:66:25:2c:b5:48:e8:20:18:7a:f1:9d:4b: 17:15:52:af:29:e5:6d:8f:40:53:15:3b:57:8d:4c: da:12:0d:03:38:a2:8f:40:4c:63:53:a0:0e:bc:78: 2c:70:be:af:44:6c:91:e2:4f:65:e6:cf:cf:aa:d0: a6:72:f2:6c:d2:8d:f7:34:40:bc:50:42:aa:f7:79: da:be:63:d7:af:fe:b3:8c:17:5b:5f:ad:dd:75:a5: 26:21:b7:29:eb:9b:b8:58:76:8a:21:2f:44:a0:36: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F7:7C:41:5C:C0:80:DB:3A:0C:98:B4:25:E8:97:6B:9C:B8:23:17 X509v3 Authority Key Identifier: keyid:D6:8D:41:1A:D0:3E:73:14:F1:49:2D:06:2D:B0:D9:19:4E:9F:50:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1o1BGtA-cxTxSS0GLbDZGU6fUJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA897/E1D1177095BA11EBB2812371C4F9AE02/1o1BGtA-cxTxSS0GLbDZGU6fUJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3b:bf:e9:36:43:fa:36:67:a8:ae:8f:6c:40:03:97:f9:fd: 61:ff:62:b6:42:da:81:86:c8:1e:c9:50:2b:d7:85:ce:5d:9e: 8f:de:af:90:74:f0:8a:c0:4e:30:38:25:9a:60:91:52:fd:72: 59:1d:f1:12:4e:c1:2f:ec:47:85:9e:5e:4b:a6:b1:52:e4:93: 14:03:7e:e5:59:50:04:0e:86:8e:85:bf:60:e8:96:38:5d:c5: 0e:ae:b1:a2:9e:4f:5b:38:eb:ba:98:72:e7:30:6b:48:15:e0: 6b:a4:16:01:a4:77:fb:83:82:88:72:0c:94:ab:37:eb:59:35: 9c:e4:b1:51:64:dc:f8:9b:38:15:a3:2e:18:28:0e:31:66:ab: f3:29:74:13:22:7c:4c:e2:ee:0c:eb:35:a0:77:fd:b1:7f:c3: f9:df:34:61:46:e8:11:73:8b:d9:51:9f:9a:b4:20:1a:7c:5a: cd:33:8d:f9:b6:68:72:fb:ed:65:11:1e:1c:2a:4d:f2:af:b7: 62:93:94:50:81:7e:69:1e:87:ec:16:fd:c0:2a:fa:0f:14:9b: 26:ef:ce:fe:e1:0f:1a:de:ce:e7:e0:eb:b7:7a:32:9b:2a:5a: 25:79:f9:5e:10:4e:24:32:c0:fb:b4:e0:5f:42:d7:39:d3:0a: 80:67:c3:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4OTcxMTAvBgNVBAUTKEQ2OEQ0MTFBRDAzRTczMTRGMTQ5MkQwNjJEQjBEOTE5 NEU5RjUwOTUwHhcNMjUwNTMwMjI1MzUyWhcNMjUwNjA2MjI1MzUyWjAYMRYwFAYD VQQDEw02ODNhMzcwMC02Y2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dn9KkivPDdNBM1VXcZmHzk/EXYypODq3pQgW+pRpfHDRz4oF+pipu02SN+n O5j2BduarTMmgJZbknmL7S40D4Y+18YXF79Qrj3luQCRzE22w2y+CJsbjlMBMRp1 aD/AHPWIwA1JjDqW6dJ/7FIEFOotBSQRn9LByOGZTg+oVPOsYK4Rrxspqw17ieAW PbBLEqBz5/GvcUJmJSy1SOggGHrxnUsXFVKvKeVtj0BTFTtXjUzaEg0DOKKPQExj U6AOvHgscL6vRGyR4k9l5s/PqtCmcvJs0o33NEC8UEKq93navmPXr/6zjBdbX63d daUmIbcp65u4WHaKIS9EoDbUIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJX3fEFc wIDbOgyYtCXol2ucuCMXMB8GA1UdIwQYMBaAFNaNQRrQPnMU8UktBi2w2RlOn1CV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTg5Ny9FMUQxMTc3MDk1 QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4VHhTUzBHTGJEWkdVNmZV SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFvMUJHdEEtY3hUeFNTMEdMYkRaR1U2ZlVKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTg5Ny9FMUQxMTc3MDk1QkExMUVCQjI4MTIzNzFDNEY5QUUwMi8xbzFCR3RBLWN4 VHhTUzBHTGJEWkdVNmZVSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMO7/pNkP6Nmeoro9sQAOX+f1h/2K2QtqBhsgeyVAr14XOXZ6P3q+Q dPCKwE4wOCWaYJFS/XJZHfESTsEv7EeFnl5LprFS5JMUA37lWVAEDoaOhb9g6JY4 XcUOrrGink9bOOu6mHLnMGtIFeBrpBYBpHf7g4KIcgyUqzfrWTWc5LFRZNz4mzgV oy4YKA4xZqvzKXQTInxM4u4M6zWgd/2xf8P53zRhRugRc4vZUZ+atCAafFrNM435 tmhy++1lER4cKk3yr7dik5RQgX5pHofsFv3AKvoPFJsm787+4Q8a3s7n4Ou3ejKb KlolefleEE4kMsD7tOBfQtc50wqAZ8NN -----END CERTIFICATE-----Generated at Sat May 31 17:20:39 2025 by rpki-client