$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json) Hash identifier: l03DxMOcaMbZEjihu6kUVuYVr3ZDbbIxmEebmiYFu1M= Subject key identifier: BB:FF:19:FF:51:2F:8D:03:8D:53:A7:D9:A0:B7:49:2A:86:A6:28:8F Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft Manifest number: 013B Signing time: Sat 31 May 2025 04:04:55 +0000 Manifest this update: Sat 31 May 2025 04:04:55 +0000 Manifest next update: Sat 07 Jun 2025 04:04:55 +0000 Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: xCXEGc9GYH3mSIYFNxW7wJrp2V7TjVysAx2qp5KCAW8=) 2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: UriYheink9mBFpQsL32JX0ce8LUKE4XsmIwp1611QqI=) 3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: jh0oO56JyhcPYhu6/Q/RMYfmAkOnoy1yyTgFcYp5ApY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: May 31 04:04:55 2025 GMT Not After : Jun 7 04:04:55 2025 GMT Subject: CN=683a7fe7-7c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:f7:7c:f7:28:ed:a3:7c:ef:88:58:4b:db: 20:db:0e:e4:8c:60:8f:f7:8d:de:55:51:ad:84:48: 77:6f:83:19:96:b1:b0:2c:ff:a7:69:4a:30:f1:25: a2:fc:4d:d4:35:53:45:4b:f0:11:56:6e:58:e2:18: 02:6f:d3:51:ee:12:6b:63:46:24:7f:b4:73:de:1f: ad:67:46:aa:ff:14:0c:a4:2e:e1:48:31:b3:cf:85: d9:8d:15:91:1f:6e:13:55:da:94:42:66:3e:9c:c4: 01:82:7f:94:27:b9:26:c9:db:1f:f9:ec:96:9f:ce: 0c:4b:cd:03:a4:17:e4:83:c7:71:5a:7a:15:a3:e8: d0:db:36:91:bc:69:90:6b:b2:e4:e7:55:8e:b0:c2: f8:59:7c:0c:03:47:61:40:b4:a5:bf:3b:43:8e:8b: 73:14:2b:2a:e5:7c:41:f0:eb:82:58:cf:33:fe:88: f4:de:32:e9:c7:73:13:f1:46:ac:a3:a9:08:c6:78: 82:37:0e:9a:6f:70:99:41:0a:1d:93:97:d7:99:d6: 30:3f:2e:ae:93:06:40:d2:c0:1c:ca:91:47:2e:b5: d4:80:c0:7a:16:41:72:8f:36:a2:37:46:fc:a1:26: af:b5:74:73:d6:23:f2:79:f4:22:5a:c0:00:05:bf: 53:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FF:19:FF:51:2F:8D:03:8D:53:A7:D9:A0:B7:49:2A:86:A6:28:8F X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b8:c3:9c:fd:d0:4f:8d:81:c7:f2:f9:d0:65:65:88:c5:cb: 0c:3f:a5:c4:4e:8a:80:09:72:57:36:f3:14:52:ca:35:28:90: 1b:cc:2e:bb:e5:de:66:bf:65:81:f2:d8:39:49:d3:40:b9:2c: 5e:bc:ac:5c:85:b3:a6:00:2f:61:80:3e:2f:36:ef:3f:6e:a0: d9:67:0e:ab:57:67:81:9b:c3:1c:dd:29:7c:fb:e8:61:d2:1b: 86:40:8d:d0:ee:05:7d:2c:2e:3b:64:7f:d5:92:ec:1a:a3:1d: 74:18:0e:a6:81:c2:89:eb:8c:c7:06:c6:af:0d:fa:59:b7:35: 93:25:c7:ac:2e:ff:9d:e8:ad:d4:c0:eb:19:14:ab:c7:1e:9f: cd:40:47:2a:93:2d:58:1a:de:90:dc:d5:a1:13:21:b3:2d:3d: df:cc:c2:0f:cc:d4:c7:73:94:03:b8:43:aa:f0:31:59:d8:c9: 89:83:f6:51:38:c0:7a:7b:a4:81:38:79:27:f4:4d:0f:e0:dc: 18:f8:85:d6:29:cf:7f:98:9c:29:96:86:ee:cd:66:16:89:3b: e1:a7:c4:db:e6:1d:16:bb:5b:68:25:42:32:9d:19:13:16:de: 66:9f:54:08:74:01:de:3e:c2:a3:21:c7:5c:2c:66:94:83:9a: 93:9d:1a:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE Q0IyQThBNEIwHhcNMjUwNTMxMDQwNDU1WhcNMjUwNjA3MDQwNDU1WjAYMRYwFAYD VQQDEw02ODNhN2ZlNy03YzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhX3fPco7aN874hYS9sg2w7kjGCP943eVVGthEh3b4MZlrGwLP+naUow8SWi /E3UNVNFS/ARVm5Y4hgCb9NR7hJrY0Ykf7Rz3h+tZ0aq/xQMpC7hSDGzz4XZjRWR H24TVdqUQmY+nMQBgn+UJ7kmydsf+eyWn84MS80DpBfkg8dxWnoVo+jQ2zaRvGmQ a7Lk51WOsML4WXwMA0dhQLSlvztDjotzFCsq5XxB8OuCWM8z/oj03jLpx3MT8Uas o6kIxniCNw6ab3CZQQodk5fXmdYwPy6ukwZA0sAcypFHLrXUgMB6FkFyjzaiN0b8 oSavtXRz1iPyefQiWsAABb9ThwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLv/Gf9R L40DjVOn2aC3SSqGpiiPMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLuMOc/dBPjYHH8vnQZWWIxcsMP6XEToqACXJXNvMUUso1KJAbzC67 5d5mv2WB8tg5SdNAuSxevKxchbOmAC9hgD4vNu8/bqDZZw6rV2eBm8Mc3Sl8++hh 0huGQI3Q7gV9LC47ZH/Vkuwaox10GA6mgcKJ64zHBsavDfpZtzWTJcesLv+d6K3U wOsZFKvHHp/NQEcqky1YGt6Q3NWhEyGzLT3fzMIPzNTHc5QDuEOq8DFZ2MmJg/ZR OMB6e6SBOHkn9E0P4NwY+IXWKc9/mJwplobuzWYWiTvhp8Tb5h0Wu1toJUIynRkT Ft5mn1QIdAHePsKjIcdcLGaUg5qTnRr4 -----END CERTIFICATE-----Generated at Sat May 31 17:04:58 2025 by rpki-client