$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: psdsRnWvCTWT7ajzYJDVLUbB2jKydmEOkSc/1mk9+8E= Subject key identifier: 32:2B:38:E7:B3:EC:C6:39:38:B9:E9:A9:8F:BB:2B:BD:81:E9:94:90 Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: 01A1 Signing time: Sat 31 May 2025 02:59:36 +0000 Manifest this update: Sat 31 May 2025 02:59:36 +0000 Manifest next update: Sat 07 Jun 2025 02:59:36 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: I5LrQf9rbHB7rRAJlw+o1YGzJg+lB+06Aza4U1lqAhw=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: ewiUnrO7XAgjqsA1wG//P3KoAbNdOVY4KG59Y9E54Tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: May 31 02:59:36 2025 GMT Not After : Jun 7 02:59:36 2025 GMT Subject: CN=683a7098-69fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9a:c0:4f:84:54:0e:df:1f:94:51:e2:96:eb: e0:9e:4f:11:8b:49:3d:ba:88:8b:25:c8:48:64:a9: 17:4c:a3:ba:21:64:90:fa:ed:5e:83:85:2c:ea:de: 6a:be:ae:9c:b0:e0:7a:4d:54:f1:ad:ce:af:6c:40: 2b:61:b1:39:5d:c4:af:96:c9:c7:da:51:be:06:22: c2:a6:30:e0:52:74:e7:db:a3:cc:5c:61:d8:d8:95: f6:c6:1e:e6:f4:96:78:4e:03:95:50:90:3c:9b:1b: da:98:01:64:7e:68:5e:4e:24:0a:9b:09:8c:b9:5d: d4:3c:aa:a2:cc:52:32:b2:22:be:c7:57:ac:fd:f4: 4b:02:b8:c3:8e:f2:08:c4:0b:e3:6a:7b:1a:8a:2b: 17:64:e7:48:e9:66:fe:7b:a2:21:2f:28:62:6f:c9: 2d:94:57:93:a1:c2:92:3d:a2:07:15:bb:07:ce:d6: 2e:a1:37:f3:c5:ce:ca:5a:0f:c4:fa:3d:d6:eb:35: ce:86:79:98:bb:24:3f:8a:53:75:3f:53:0f:e1:25: 65:a0:a4:28:ba:3b:3a:49:76:d6:fa:f2:4b:11:8e: ea:c8:78:10:0d:0e:b6:87:bc:32:a8:81:6c:c2:49: 3c:65:0f:73:9f:6b:ff:8f:62:59:7b:74:50:89:dd: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2B:38:E7:B3:EC:C6:39:38:B9:E9:A9:8F:BB:2B:BD:81:E9:94:90 X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:bd:3d:68:d1:19:91:ef:23:bb:e5:6d:e6:46:bc:b7:29:ef: 59:ed:d1:85:23:41:0c:7d:11:d4:68:a8:84:71:aa:bf:bc:0b: ea:1d:e0:95:20:74:69:77:4f:af:f7:41:a6:cc:e5:32:88:95: 0e:d5:60:81:a6:57:d2:09:14:7b:7d:58:c1:05:09:32:cc:8e: 0e:d1:ca:d6:7d:f9:1f:bf:a2:6c:de:dc:2a:6c:d8:a5:c0:45: 2d:ea:93:c0:be:1e:70:71:a8:49:71:f0:82:49:34:32:4e:85: 17:ba:0b:09:3d:1e:74:26:f9:c2:40:f6:3b:23:d9:3d:fb:08: a9:83:ab:1b:d0:07:95:24:f6:10:b1:d9:ac:74:d4:cc:f9:9f: 0d:ab:0f:bf:b8:0d:ba:80:7f:c9:ef:ca:9a:48:28:46:8e:3d: 7a:21:5c:4e:8c:7f:4a:1e:9e:53:c3:7f:9e:82:6a:5f:20:b3: f7:58:89:cd:03:d6:06:9e:e5:fe:01:7e:34:f6:a3:d3:7b:56: 97:75:f4:b1:b4:65:95:e3:e4:0a:1f:51:d4:4d:28:3c:22:01: 7f:5e:f5:f0:f2:7d:8f:5e:72:a9:60:07:82:64:1c:4f:84:f3: 48:2e:3c:1c:8c:39:a6:8d:70:7f:1d:cd:1e:69:61:66:81:07: 15:1d:98:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjUwNTMxMDI1OTM2WhcNMjUwNjA3MDI1OTM2WjAYMRYwFAYD VQQDEw02ODNhNzA5OC02OWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZrAT4RUDt8flFHiluvgnk8Ri0k9uoiLJchIZKkXTKO6IWSQ+u1eg4Us6t5q vq6csOB6TVTxrc6vbEArYbE5XcSvlsnH2lG+BiLCpjDgUnTn26PMXGHY2JX2xh7m 9JZ4TgOVUJA8mxvamAFkfmheTiQKmwmMuV3UPKqizFIysiK+x1es/fRLArjDjvII xAvjansaiisXZOdI6Wb+e6IhLyhib8ktlFeTocKSPaIHFbsHztYuoTfzxc7KWg/E +j3W6zXOhnmYuyQ/ilN1P1MP4SVloKQoujs6SXbW+vJLEY7qyHgQDQ62h7wyqIFs wkk8ZQ9zn2v/j2JZe3RQid1kwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIrOOez 7MY5OLnpqY+7K72B6ZSQMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASvT1o0RmR7yO75W3mRry3Ke9Z7dGFI0EMfRHUaKiEcaq/vAvqHeCV IHRpd0+v90GmzOUyiJUO1WCBplfSCRR7fVjBBQkyzI4O0crWffkfv6Js3twqbNil wEUt6pPAvh5wcahJcfCCSTQyToUXugsJPR50JvnCQPY7I9k9+wipg6sb0AeVJPYQ sdmsdNTM+Z8Nqw+/uA26gH/J78qaSChGjj16IVxOjH9KHp5Tw3+egmpfILP3WInN A9YGnuX+AX409qPTe1aXdfSxtGWV4+QKH1HUTSg8IgF/XvXw8n2PXnKpYAeCZBxP hPNILjwcjDmmjXB/Hc0eaWFmgQcVHZgm -----END CERTIFICATE-----Generated at Sat May 31 16:53:47 2025 by rpki-client