$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json) Hash identifier: Wpdkx6AU2oYhZ1CXcICd7K7kctvTgZ8ow/aQunMfjYc= Subject key identifier: BA:31:C4:D9:41:9D:F8:E3:72:85:51:0C:5A:B8:52:B0:56:D1:C5:57 Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft Manifest number: 3487 Signing time: Sat 31 May 2025 15:16:43 +0000 Manifest this update: Sat 31 May 2025 15:16:42 +0000 Manifest next update: Sat 07 Jun 2025 15:16:42 +0000 Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: 4/UlzkYBEtgp45Ob4rslWdQTVk2CR9tdbjvH+eYxBXM=) 2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: zYMb1XnG0WFocOb8g6o9H1kl0CBRuaJqUP3nm71UW5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Validity Not Before: May 31 15:16:42 2025 GMT Not After : Jun 7 15:16:42 2025 GMT Subject: CN=683b1d5a-d42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:d1:bf:1c:20:0f:51:ae:24:00:61:21:87: 16:71:bb:c1:1b:20:74:11:97:3b:d1:1a:d4:a0:77: c0:83:4c:7b:20:9b:54:0a:fd:35:92:0a:af:4c:90: d4:1a:d0:b8:9e:68:37:32:b5:68:2b:a2:5a:e4:46: cd:6b:50:21:27:25:32:a8:fe:bd:0d:d9:e6:43:3a: 8a:12:f8:c1:f8:c0:9b:c3:47:48:da:64:ca:24:8e: 0f:79:50:8e:38:51:5c:00:1e:fd:be:49:d1:e0:2b: fe:39:db:73:af:91:b2:a9:2d:cc:a1:2e:a1:78:6f: 76:9a:10:f5:18:d5:cc:79:15:ad:f2:7d:d9:44:37: a5:1e:a5:96:ad:b0:22:16:b8:77:43:cb:e1:9a:c4: 71:a7:36:79:30:56:78:05:83:a9:97:81:a9:34:7c: e5:96:85:99:53:65:3b:bc:4c:b7:98:8a:52:01:12: b1:fe:72:40:e7:47:13:fe:32:5c:07:74:d4:a4:a4: 76:7f:1c:49:5f:b0:0d:fb:c3:6d:22:be:d8:16:33: 52:40:0f:3b:63:14:cc:99:49:92:b3:26:de:4e:eb: 77:bd:e8:6a:3d:07:a8:93:60:f7:04:ae:50:cf:4b: 25:31:ef:92:ed:74:99:aa:09:92:37:af:7c:fd:6e: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:31:C4:D9:41:9D:F8:E3:72:85:51:0C:5A:B8:52:B0:56:D1:C5:57 X509v3 Authority Key Identifier: keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ed:b0:1b:fb:57:60:b1:ed:5c:44:ca:30:2d:8a:51:3e:a6: 82:3f:a4:b6:d3:8e:d2:b0:3d:2b:5c:cb:cd:31:27:77:99:d1: e3:46:71:d6:77:6a:87:64:23:e3:b0:52:84:e6:9b:8e:7c:46: 9e:cf:0b:36:8f:56:77:cc:46:9a:9f:fa:20:d7:7b:df:b8:50: b6:64:af:42:1f:03:bb:70:d3:d6:bd:94:8e:40:2f:03:07:70: f7:f7:25:5f:3e:c5:ff:65:dc:66:ff:9b:4c:06:da:0a:4c:1a: 04:4f:a5:e2:27:71:73:98:fa:f6:7f:33:91:a1:ef:0a:f5:02: d0:7e:7f:ed:ca:35:77:ef:06:de:3b:47:b7:5b:51:63:88:a8: 06:1d:50:4e:f2:43:3c:1b:7a:8c:5b:ee:e6:db:58:7a:35:11: 27:15:5f:6a:fd:3a:be:c2:26:28:c0:e7:b8:20:87:d2:b3:0d: f0:b6:b9:d9:3d:fb:1c:0f:9d:ab:91:7b:e0:cb:46:50:4b:da: 77:c9:b6:6c:dd:ee:c3:fc:b7:2d:8c:bc:93:e5:1d:d6:aa:93: aa:d4:31:d9:c1:3d:e7:47:b2:1d:59:f1:44:0b:c5:8a:21:74: b5:af:4d:89:46:49:68:04:0b:51:00:fc:0b:96:fe:76:10:75: 5d:0e:37:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz NkMxNDdBNzEwHhcNMjUwNTMxMTUxNjQyWhcNMjUwNjA3MTUxNjQyWjAYMRYwFAYD VQQDEw02ODNiMWQ1YS1kNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvObRvxwgD1GuJABhIYcWcbvBGyB0EZc70RrUoHfAg0x7IJtUCv01kgqvTJDU GtC4nmg3MrVoK6Ja5EbNa1AhJyUyqP69DdnmQzqKEvjB+MCbw0dI2mTKJI4PeVCO OFFcAB79vknR4Cv+Odtzr5GyqS3MoS6heG92mhD1GNXMeRWt8n3ZRDelHqWWrbAi Frh3Q8vhmsRxpzZ5MFZ4BYOpl4GpNHzlloWZU2U7vEy3mIpSARKx/nJA50cT/jJc B3TUpKR2fxxJX7AN+8NtIr7YFjNSQA87YxTMmUmSsybeTut3vehqPQeok2D3BK5Q z0slMe+S7XSZqgmSN698/W6MAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoxxNlB nfjjcoVRDFq4UrBW0cVXMB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzUyRi9GNkZGRTI5RTFEQTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFp Rjc4YkhGcndzeFUyd1VlbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy7bAb+1dgse1cRMowLYpRPqaCP6S2047SsD0rXMvNMSd3mdHjRnHW d2qHZCPjsFKE5puOfEaezws2j1Z3zEaan/og13vfuFC2ZK9CHwO7cNPWvZSOQC8D B3D39yVfPsX/Zdxm/5tMBtoKTBoET6XiJ3FzmPr2fzORoe8K9QLQfn/tyjV37wbe O0e3W1FjiKgGHVBO8kM8G3qMW+7m21h6NREnFV9q/Tq+wiYowOe4IIfSsw3wtrnZ PfscD52rkXvgy0ZQS9p3ybZs3e7D/LctjLyT5R3WqpOq1DHZwT3nR7IdWfFEC8WK IXS1r02JRkloBAtRAPwLlv52EHVdDjfA -----END CERTIFICATE-----Generated at Sat May 31 17:45:09 2025 by rpki-client