$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft File: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft (raw, json) Hash identifier: 87mb8aukcHsuCl4JXV48ENW0ZS1vybFpk/Le0r1+XW4= Subject key identifier: 01:ED:B0:48:D5:6C:05:6D:FE:32:F6:70:8C:32:17:EF:68:CC:3C:14 Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 Certificate issuer: /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft Manifest number: 0504 Signing time: Fri 30 May 2025 23:51:53 +0000 Manifest this update: Fri 30 May 2025 23:51:53 +0000 Manifest next update: Fri 06 Jun 2025 23:51:53 +0000 Files and hashes: 1: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl (hash: XbrW+JWCaacbTVPOuvOdxiyoe8Hbipyv7JyGZnRZkng=) 2: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (hash: 4Lt0Tl7CzwPdD+nUN6H8aD5LDx+lA968UPs17P0Yr/M=) 3: 720FAF9A0BEF11ECAEF3EA5DC4F9AE02.roa (hash: xZDUc0WXMGb3zzRRcf41Z8+TBxtXNqxHLCOZ0h8MoWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5F33, serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Validity Not Before: May 30 23:51:53 2025 GMT Not After : Jun 6 23:51:53 2025 GMT Subject: CN=683a4499-305e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c4:fd:9a:99:a9:ce:f3:4b:31:2c:fc:ad:93: a1:5d:50:b9:2c:90:5c:f7:a2:32:22:9b:32:14:af: 5d:52:98:a2:35:8b:b5:57:c6:43:8d:5c:41:a2:2f: 24:e9:f4:7b:e6:b5:a5:b0:e2:42:81:d3:61:46:89: e0:02:74:44:92:7f:1d:f6:af:11:52:62:ce:54:5c: 49:ee:f4:4c:1c:4d:a0:77:7f:3f:92:45:1e:c3:46: 0c:7d:08:8a:0c:a2:f4:d4:50:ff:22:43:8a:78:86: 5b:3b:6e:90:89:73:59:c7:ca:8f:41:9b:fe:94:e7: f5:6b:18:2b:67:29:b3:94:b1:d5:5d:40:52:a9:6e: 37:fc:c8:ef:07:be:92:1a:fe:f9:64:82:36:03:49: 88:d2:e1:d7:a3:cf:c8:e3:41:2d:d9:ca:f2:e6:9f: ab:59:e3:f1:a6:1a:cd:5e:13:02:67:91:a2:96:c9: 98:42:f9:88:e1:ed:a1:40:67:2e:fc:be:f7:02:25: 6b:62:1d:7c:8f:f2:81:56:f0:9d:5d:fb:14:a5:0e: 01:9d:7c:35:5f:55:ee:f8:5d:ff:a1:7d:97:28:00: 0b:bb:a6:b5:ea:fa:ea:4c:1f:5d:13:1e:98:99:42: 98:20:e0:95:d9:8f:15:ea:84:e7:19:77:1d:51:2f: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:ED:B0:48:D5:6C:05:6D:FE:32:F6:70:8C:32:17:EF:68:CC:3C:14 X509v3 Authority Key Identifier: keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b9:1d:e2:fd:af:36:ea:76:76:d6:cd:44:37:0b:c8:a4:fd: 01:b5:87:64:9e:55:c0:73:cc:da:21:ae:a8:8c:cb:17:db:20: 68:80:76:64:36:79:3a:9a:69:f9:7b:34:f8:fa:c1:79:57:03: 48:19:04:e9:4e:e6:81:d0:84:52:0e:24:9e:04:04:d1:85:f9: 88:f0:78:e9:d2:7e:5b:66:7b:ba:49:cc:aa:03:19:e0:19:d6: aa:32:7d:1e:97:54:f8:a6:a9:84:6a:78:0c:d3:43:a2:7a:5b: 35:5b:05:83:c7:61:fb:86:09:be:8e:a7:31:76:5b:76:4a:8e: 8c:26:32:84:e9:e6:8d:41:eb:dc:51:5f:f7:cd:3f:d8:3f:2a: d1:c2:28:2d:b9:75:b7:c0:33:c6:e7:66:c9:40:04:17:4c:9e: 89:5b:96:f2:48:13:2a:73:78:15:5c:23:d7:17:9d:86:cb:65: f2:04:07:22:d7:96:34:4d:5d:7b:1f:61:46:cc:1d:6f:50:81: 68:a3:5c:e1:ef:43:fd:6d:60:05:e0:3c:24:aa:a8:b5:87:d8: cf:b4:47:79:02:b4:6e:31:16:99:b7:e2:f0:b1:59:d2:e9:59: 87:d1:29:de:31:6c:73:9f:c8:f9:f8:ae:b3:c9:18:ec:fb:db: fe:3b:a7:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVGMzMxMTAvBgNVBAUTKDkzMTdCQjE5RkY5MDdGNDcxODExRUI1NjEwMEFBMEJD OTJDRjE0OTcwHhcNMjUwNTMwMjM1MTUzWhcNMjUwNjA2MjM1MTUzWjAYMRYwFAYD VQQDEw02ODNhNDQ5OS0zMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMT9mpmpzvNLMSz8rZOhXVC5LJBc96IyIpsyFK9dUpiiNYu1V8ZDjVxBoi8k 6fR75rWlsOJCgdNhRongAnREkn8d9q8RUmLOVFxJ7vRMHE2gd38/kkUew0YMfQiK DKL01FD/IkOKeIZbO26QiXNZx8qPQZv+lOf1axgrZymzlLHVXUBSqW43/MjvB76S Gv75ZII2A0mI0uHXo8/I40Et2cry5p+rWePxphrNXhMCZ5GilsmYQvmI4e2hQGcu /L73AiVrYh18j/KBVvCdXfsUpQ4BnXw1X1Xu+F3/oX2XKAALu6a16vrqTB9dEx6Y mUKYIOCV2Y8V6oTnGXcdUS+RtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHtsEjV bAVt/jL2cIwyF+9ozDwUMB8GA1UdIwQYMBaAFJMXuxn/kH9HGBHrVhAKoLySzxSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUYzMy8yRjZBQzEzQzBC RUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYwY1lFZXRXRUFxZ3ZKTFBG SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4ZTdHZi1RZjBjWUVldFdFQXFndkpMUEZKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUYzMy8yRjZBQzEzQzBCRUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYw Y1lFZXRXRUFxZ3ZKTFBGSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0uR3i/a826nZ21s1ENwvIpP0BtYdknlXAc8zaIa6ojMsX2yBogHZk Nnk6mmn5ezT4+sF5VwNIGQTpTuaB0IRSDiSeBATRhfmI8Hjp0n5bZnu6ScyqAxng GdaqMn0el1T4pqmEangM00Oiels1WwWDx2H7hgm+jqcxdlt2So6MJjKE6eaNQevc UV/3zT/YPyrRwigtuXW3wDPG52bJQAQXTJ6JW5bySBMqc3gVXCPXF52Gy2XyBAci 15Y0TV17H2FGzB1vUIFoo1zh70P9bWAF4Dwkqqi1h9jPtEd5ArRuMRaZt+LwsVnS 6VmH0SneMWxzn8j5+K6zyRjs+9v+O6c9 -----END CERTIFICATE-----Generated at Sat May 31 16:44:57 2025 by rpki-client