$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json) Hash identifier: vVhClS9aQSPGa7P6OrQIcoVX60D9wTh4SvnDiOb/nLk= Subject key identifier: 7E:79:F3:E3:29:96:9B:62:8D:E3:5F:A1:55:15:1B:A9:22:0B:0F:C5 Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft Manifest number: 03BE Signing time: Sat 31 May 2025 00:53:09 +0000 Manifest this update: Sat 31 May 2025 00:53:08 +0000 Manifest next update: Sat 07 Jun 2025 00:53:08 +0000 Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: OX4lKotSQ3hYF9YlaqpxRIj5JuyidtSAXPFZZUgjd4M=) 2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: 9DfUOxvFR13SpwnP9dE6JJ+qwtWuEZ4XB8tC3ndW1gI=) 3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: dBKzmRV5kLqxEgnT/9vEMvol4LmNVdPd79i3sVZVmJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Validity Not Before: May 31 00:53:08 2025 GMT Not After : Jun 7 00:53:08 2025 GMT Subject: CN=683a52f4-30db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8f:2f:b8:5a:27:53:04:75:86:8f:e3:f4:2a: c9:49:49:b5:67:3d:6c:8d:a1:ea:f2:43:9c:6e:68: 57:0e:39:b6:29:ba:bc:06:d9:9c:b7:5f:9c:e5:2a: c7:ef:fc:48:2e:f6:3d:7c:f5:80:a9:1a:e0:1d:87: 25:4e:da:97:66:31:0e:19:2e:c3:9e:5a:9b:95:2c: 93:ef:fb:0f:92:11:85:0d:00:ff:e3:26:df:c9:00: c3:25:60:bc:8b:7b:cb:41:c7:99:25:13:5e:82:e7: ab:4c:7a:41:60:0e:49:ee:1b:84:10:a3:2d:67:4b: e0:16:37:cf:ef:ff:2d:81:1e:e2:55:b7:7a:38:2c: 30:33:70:37:52:af:fc:08:cb:ed:ad:f2:7a:23:db: 87:fe:3b:c1:99:01:eb:ce:8a:51:4e:cd:74:43:f7: 63:e7:93:fb:07:a2:1a:78:d5:fc:b7:7e:88:1d:90: db:70:48:38:a1:ff:56:8a:fe:1d:7e:38:eb:be:05: ae:90:0c:f7:bc:63:e5:50:e8:ef:72:08:f0:9d:13: 77:76:d3:66:a5:1f:cb:7c:3a:51:48:17:66:c8:8f: 3a:65:d9:e6:c1:16:31:4f:5a:3c:e4:48:f0:47:5e: f1:80:cd:1f:76:96:81:1d:54:82:6e:fb:b2:7d:e7: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:79:F3:E3:29:96:9B:62:8D:E3:5F:A1:55:15:1B:A9:22:0B:0F:C5 X509v3 Authority Key Identifier: keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:83:18:db:c4:a4:ea:84:df:b2:2c:2a:95:22:4f:e1:e5:eb: eb:56:e5:4b:e0:82:5b:57:bf:f4:55:f2:af:c8:eb:67:4b:8c: 07:ca:56:09:ee:7f:33:41:34:3d:e6:7a:8f:75:b5:ed:e8:1a: 84:fd:a8:1c:d4:eb:e5:89:6b:6c:44:ba:cc:e3:98:31:21:22: 7e:d3:55:6a:3d:44:55:8a:92:9d:9e:e0:4c:4a:9b:3c:8b:ab: a9:83:94:68:fd:84:ed:0e:93:c2:7e:40:20:7e:41:d9:78:4f: bf:2e:d1:73:db:71:96:fc:67:50:ca:07:4f:7e:2b:cb:23:45: 3f:03:cc:b9:a6:cf:9e:c6:6c:ed:ce:d4:f5:16:31:78:6f:10: 1a:90:da:a7:a2:17:3f:25:ce:2e:47:44:ad:7d:68:88:59:55: b2:75:78:0c:03:50:23:9c:aa:97:7d:04:0c:4c:00:ec:5f:a9: fa:1a:5b:87:00:94:51:ea:d6:e8:1b:51:19:71:e0:f1:de:29: 2d:ac:7a:b9:6f:bb:e2:15:9b:9a:d3:87:b9:f5:6d:45:5d:b1: 55:7e:f9:b6:ad:9c:05:4e:8d:fa:2e:f9:76:34:31:ae:0c:13: 05:33:7f:70:32:15:50:7d:ab:b1:e5:a8:1d:91:f3:65:15:90: 13:05:d4:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU1NjcxMTAvBgNVBAUTKEZCNEFCNUE5QTREQzM3QkJENjVFNjFFNDJBNDI1NkNG OTUxQjhDNzMwHhcNMjUwNTMxMDA1MzA4WhcNMjUwNjA3MDA1MzA4WjAYMRYwFAYD VQQDEw02ODNhNTJmNC0zMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzY8vuFonUwR1ho/j9CrJSUm1Zz1sjaHq8kOcbmhXDjm2Kbq8Btmct1+c5SrH 7/xILvY9fPWAqRrgHYclTtqXZjEOGS7DnlqblSyT7/sPkhGFDQD/4ybfyQDDJWC8 i3vLQceZJRNeguerTHpBYA5J7huEEKMtZ0vgFjfP7/8tgR7iVbd6OCwwM3A3Uq/8 CMvtrfJ6I9uH/jvBmQHrzopRTs10Q/dj55P7B6IaeNX8t36IHZDbcEg4of9Wiv4d fjjrvgWukAz3vGPlUOjvcgjwnRN3dtNmpR/LfDpRSBdmyI86ZdnmwRYxT1o85Ejw R17xgM0fdpaBHVSCbvuyfefUMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH558+Mp lptijeNfoVUVG6kiCw/FMB8GA1UdIwQYMBaAFPtKtamk3De71l5h5CpCVs+VG4xz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTU2Ny9FNjc5OTRERThG RjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043dldYbUhrS2tKV3o1VWJq SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wcTFxYVRjTjd2V1htSGtLa0pXejVVYmpITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTU2Ny9FNjc5OTRERThGRjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043 dldYbUhrS2tKV3o1VWJqSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCogxjbxKTqhN+yLCqVIk/h5evrVuVL4IJbV7/0VfKvyOtnS4wHylYJ 7n8zQTQ95nqPdbXt6BqE/agc1OvliWtsRLrM45gxISJ+01VqPURVipKdnuBMSps8 i6upg5Ro/YTtDpPCfkAgfkHZeE+/LtFz23GW/GdQygdPfivLI0U/A8y5ps+exmzt ztT1FjF4bxAakNqnohc/Jc4uR0StfWiIWVWydXgMA1AjnKqXfQQMTADsX6n6GluH AJRR6tboG1EZceDx3iktrHq5b7viFZua04e59W1FXbFVfvm2rZwFTo36Lvl2NDGu DBMFM39wMhVQfaux5agdkfNlFZATBdQY -----END CERTIFICATE-----Generated at Sat May 31 17:10:21 2025 by rpki-client