$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft File: 83-esXYeax0_fqbWxvyluZc5FKs.mft (raw, json) Hash identifier: 4Mfg+SHFKrjk3jvBTIw+oQoQEgxH79J3eraY21/uIYM= Subject key identifier: 36:8C:E8:B8:F6:92:88:EF:82:96:93:C3:AE:9D:D8:F5:49:EC:1B:20 Authority key identifier: F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB Certificate issuer: /CN=A91B8FA2/serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB Certificate serial: 0425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft Manifest number: 0420 Signing time: Sat 31 May 2025 00:35:29 +0000 Manifest this update: Sat 31 May 2025 00:35:29 +0000 Manifest next update: Sat 07 Jun 2025 00:35:29 +0000 Files and hashes: 1: 83-esXYeax0_fqbWxvyluZc5FKs.crl (hash: 9DE2mAjEjGO1Wu36KQu2mSxoLCcKaHdperFpK8fZHFw=) 2: FEDE0F2066C611EC93A73A3DC4F9AE02.roa (hash: OrbaAoDN+OT8Q5oOwIoJmcxxZsgOvnH47cr4vwyZT3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8FA2, serialNumber=F37F9EB1761E6B1D3F7EA6D6C6FCA5B9973914AB Validity Not Before: May 31 00:35:29 2025 GMT Not After : Jun 7 00:35:29 2025 GMT Subject: CN=683a4ed1-f0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cd:f3:8f:51:86:1a:30:61:12:b3:d2:2c:e8: ae:aa:32:48:08:c5:c2:f5:e5:37:53:53:b4:04:65: f1:1e:83:27:9d:39:76:37:42:a2:8c:c0:2b:91:d9: c9:c6:f0:79:16:91:08:d6:bc:47:a1:06:55:ac:6d: 24:43:33:02:40:b6:76:75:bb:8d:4b:9d:04:83:12: 23:fc:9d:28:21:fb:55:62:64:64:ce:61:6b:32:a7: 89:22:02:c1:59:76:02:4d:e6:57:25:c5:ce:eb:a6: e2:44:d2:7b:92:3d:a3:ae:56:3b:94:7a:d6:7f:24: fa:5b:64:0e:e2:77:ff:87:59:be:5d:f6:b5:48:8a: b1:c5:99:37:01:13:2d:4a:70:2a:97:2e:8f:c5:06: ff:a3:24:16:91:cd:89:d4:f8:b9:04:8d:8a:b5:ea: 3c:11:81:9c:dc:2b:aa:51:d0:15:8f:3b:8e:19:26: b9:90:f3:b3:72:17:2a:ff:63:b3:b2:34:16:ec:8c: d0:71:9e:03:e7:5f:90:a9:f0:e8:58:5a:05:18:e8: 7f:e5:ac:80:9e:37:21:df:52:23:a2:7d:18:12:42: 33:d3:22:da:b4:d4:03:e8:b3:d5:fc:c4:6b:6d:ce: ff:65:49:0c:51:17:4d:19:36:a1:e5:7a:2b:c9:9f: d1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8C:E8:B8:F6:92:88:EF:82:96:93:C3:AE:9D:D8:F5:49:EC:1B:20 X509v3 Authority Key Identifier: keyid:F3:7F:9E:B1:76:1E:6B:1D:3F:7E:A6:D6:C6:FC:A5:B9:97:39:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83-esXYeax0_fqbWxvyluZc5FKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8FA2/91B7DF4C66C211ECB55A9F31C4F9AE02/83-esXYeax0_fqbWxvyluZc5FKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:74:d0:e2:41:17:65:1a:1b:17:89:d8:e0:34:ad:32:e2:d1: a6:b0:84:c8:02:14:e1:c2:1b:df:b0:c0:d2:7f:1c:98:ff:96: f1:6a:d1:25:73:b8:91:00:f3:93:b4:a0:50:8a:05:b9:a7:b6: f5:10:b0:aa:22:90:13:ad:95:df:c3:a6:5c:5b:e6:26:c8:26: 11:b7:53:fd:ff:23:a4:f3:34:76:6a:1c:28:0c:73:4f:d2:96: 05:a8:22:39:31:7d:d8:a4:c9:6b:a0:e4:92:24:0b:67:e5:dc: 50:78:ef:76:fe:79:8e:80:0a:83:4c:9e:2f:af:6f:e0:6c:ce: 20:e2:bb:5c:2b:f2:16:77:c0:a5:c8:1a:1c:50:65:84:69:8d: 37:6f:60:87:3e:3a:9b:e8:ce:02:bc:42:0f:02:15:b2:de:7f: 01:d2:13:11:08:c1:ad:ef:1c:13:a8:d2:ec:c4:53:7a:8c:2d: aa:d9:7a:53:f2:b0:2f:56:a1:c8:52:0d:54:4c:dd:d2:4b:8e: 37:f5:cc:9a:95:95:f7:7e:e2:d8:98:dd:c3:e1:d8:03:be:62: d7:a1:05:34:f3:c7:f5:d1:f6:d9:b0:3f:74:a8:76:9a:c7:a5: 5e:69:d5:c7:f1:94:5c:45:33:06:a8:4b:27:a9:77:03:04:f0: 22:f1:66:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGQTIxMTAvBgNVBAUTKEYzN0Y5RUIxNzYxRTZCMUQzRjdFQTZENkM2RkNBNUI5 OTczOTE0QUIwHhcNMjUwNTMxMDAzNTI5WhcNMjUwNjA3MDAzNTI5WjAYMRYwFAYD VQQDEw02ODNhNGVkMS1mMGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1M3zj1GGGjBhErPSLOiuqjJICMXC9eU3U1O0BGXxHoMnnTl2N0KijMArkdnJ xvB5FpEI1rxHoQZVrG0kQzMCQLZ2dbuNS50EgxIj/J0oIftVYmRkzmFrMqeJIgLB WXYCTeZXJcXO66biRNJ7kj2jrlY7lHrWfyT6W2QO4nf/h1m+Xfa1SIqxxZk3ARMt SnAqly6PxQb/oyQWkc2J1Pi5BI2Kteo8EYGc3CuqUdAVjzuOGSa5kPOzchcq/2Oz sjQW7IzQcZ4D51+QqfDoWFoFGOh/5ayAnjch31Ijon0YEkIz0yLatNQD6LPV/MRr bc7/ZUkMURdNGTah5XoryZ/R+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaM6Lj2 kojvgpaTw66d2PVJ7BsgMB8GA1UdIwQYMBaAFPN/nrF2HmsdP36m1sb8pbmXORSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEZBMi85MUI3REY0QzY2 QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4MF9mcWJXeHZ5bHVaYzVG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzLWVzWFllYXgwX2ZxYld4dnlsdVpjNUZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEZBMi85MUI3REY0QzY2QzIxMUVDQjU1QTlGMzFDNEY5QUUwMi84My1lc1hZZWF4 MF9mcWJXeHZ5bHVaYzVGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALdNDiQRdlGhsXidjgNK0y4tGmsITIAhThwhvfsMDSfxyY/5bxatEl c7iRAPOTtKBQigW5p7b1ELCqIpATrZXfw6ZcW+YmyCYRt1P9/yOk8zR2ahwoDHNP 0pYFqCI5MX3YpMlroOSSJAtn5dxQeO92/nmOgAqDTJ4vr2/gbM4g4rtcK/IWd8Cl yBocUGWEaY03b2CHPjqb6M4CvEIPAhWy3n8B0hMRCMGt7xwTqNLsxFN6jC2q2XpT 8rAvVqHIUg1UTN3SS4439cyalZX3fuLYmN3D4dgDvmLXoQU088f10fbZsD90qHaa x6VeadXH8ZRcRTMGqEsnqXcDBPAi8WYf -----END CERTIFICATE-----Generated at Sat May 31 14:39:51 2025 by rpki-client