$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft File: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json) Hash identifier: l/I+VXDb2aaDVdfpqb3mYflf2SaKpb/pKR+H1gFrZI0= Subject key identifier: 4F:D5:27:AE:D6:33:ED:ED:7B:04:26:3A:D8:E5:C1:09:6C:31:3B:D1 Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 Certificate issuer: /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft Manifest number: A2 Signing time: Sat 31 May 2025 05:47:33 +0000 Manifest this update: Sat 31 May 2025 05:47:33 +0000 Manifest next update: Sat 07 Jun 2025 05:47:33 +0000 Files and hashes: 1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: OOguRmbTrbV0WlejeucKmVyXFZdaGZ20LbsKNcADQi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Validity Not Before: May 31 05:47:33 2025 GMT Not After : Jun 7 05:47:33 2025 GMT Subject: CN=683a97f5-9a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9b:61:84:c4:d0:12:62:d6:85:36:9e:e3:ff: f5:1e:f3:e2:3c:21:ca:29:70:e6:ca:29:de:10:2b: 0c:29:0e:f1:19:6c:a0:9d:35:52:00:fc:f2:1b:ca: 92:6d:bc:10:61:70:99:82:a3:a8:7a:12:a5:6b:8f: f5:c9:7c:02:08:1b:f5:61:c8:f1:9a:fa:0c:c0:29: b5:00:9e:46:e9:51:0d:91:89:00:3e:76:07:be:8f: 25:ba:51:ab:1b:59:be:8a:9f:b2:17:01:0e:ab:f6: 2a:c3:e6:cd:be:fa:07:af:da:9c:8c:66:bd:99:a1: 30:7d:3d:37:0a:4f:da:f6:b9:6a:6d:7e:99:a0:ab: 15:f9:ec:e4:eb:e7:0f:5c:48:51:ba:e3:e0:a5:7a: 04:37:b0:b2:2f:ef:fa:2d:d8:32:4f:e6:bb:09:12: a3:78:04:80:bd:0a:54:d6:6a:56:19:66:62:f8:b7: 26:81:ee:87:0f:fc:9b:52:1c:0e:66:30:ab:ae:f0: 61:1f:6d:0e:ad:61:a2:92:56:f8:88:9a:f7:9b:83: 31:d3:6d:c0:f7:a1:3b:a4:82:49:89:dc:50:a0:89: 89:5f:90:02:ce:f4:14:84:e1:7e:73:b8:9e:4c:f4: a0:20:d1:9c:70:e4:e8:62:eb:e1:10:10:4e:cc:80: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D5:27:AE:D6:33:ED:ED:7B:04:26:3A:D8:E5:C1:09:6C:31:3B:D1 X509v3 Authority Key Identifier: keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:38:51:3d:7a:3b:c0:d1:31:00:1d:5b:b7:d8:82:c4:f7:3d: 30:0b:5e:1d:0b:cc:2c:63:df:55:1a:4e:d3:60:ab:5d:4d:3d: 81:5c:c7:44:6d:61:25:1c:6d:0f:8d:15:2d:78:bb:81:72:84: 21:95:7b:f1:71:3a:5e:96:3b:7e:90:e4:23:83:24:7a:31:b0: 5d:53:f4:9f:08:3c:ef:3d:49:dc:0b:31:59:dd:92:9e:61:5c: d1:44:9c:86:02:c8:d9:b8:68:d8:6e:f3:c9:c8:86:e9:15:e5: 44:46:74:a8:32:fc:0f:c4:d5:ec:4e:d8:38:ce:4c:df:dc:ed: 7a:65:6c:56:3c:49:20:ab:48:8e:64:c5:bc:3a:53:90:65:67: 40:98:5e:3c:cf:02:1e:c7:b7:a2:11:c9:7a:4c:61:38:fe:c7: ce:53:f8:be:51:c3:ae:7d:d7:c0:14:da:57:ba:86:ee:1e:59: c6:99:55:c4:07:b7:66:b1:df:3f:0b:95:51:64:ce:5c:e5:a1: 37:f5:a6:af:91:e0:02:9a:04:5d:65:40:48:b5:6a:a4:6c:06: 5b:8e:ed:ce:26:56:ce:f3:23:1b:04:80:b6:0d:aa:b1:a5:99: d2:22:5b:31:93:b3:d7:93:af:db:2f:ff:81:da:43:40:21:60: 82:d9:f4:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2MjkxMTAvBgNVBAUTKEQ2NjExQTM0MkUwNUU2RENEQzE5MjQzQkQ1MkY4OEQw MkIwNzg3RDIwHhcNMjUwNTMxMDU0NzMzWhcNMjUwNjA3MDU0NzMzWjAYMRYwFAYD VQQDEw02ODNhOTdmNS05YTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5thhMTQEmLWhTae4//1HvPiPCHKKXDmyineECsMKQ7xGWygnTVSAPzyG8qS bbwQYXCZgqOoehKla4/1yXwCCBv1YcjxmvoMwCm1AJ5G6VENkYkAPnYHvo8lulGr G1m+ip+yFwEOq/Yqw+bNvvoHr9qcjGa9maEwfT03Ck/a9rlqbX6ZoKsV+ezk6+cP XEhRuuPgpXoEN7CyL+/6LdgyT+a7CRKjeASAvQpU1mpWGWZi+Lcmge6HD/ybUhwO ZjCrrvBhH20OrWGiklb4iJr3m4Mx023A96E7pIJJidxQoImJX5ACzvQUhOF+c7ie TPSgINGccOToYuvhEBBOzIBzxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/VJ67W M+3tewQmOtjlwQlsMTvRMB8GA1UdIwQYMBaAFNZhGjQuBebc3BkkO9UviNArB4fS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FQUZCQjU1MDQ1 QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0emNHU1E3MVMtSTBDc0ho OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtRWFOQzRGNXR6Y0dTUTcxUy1JMENzSGg5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FQUZCQjU1MDQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0 emNHU1E3MVMtSTBDc0hoOUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKOFE9ejvA0TEAHVu32ILE9z0wC14dC8wsY99VGk7TYKtdTT2BXMdE bWElHG0PjRUteLuBcoQhlXvxcTpeljt+kOQjgyR6MbBdU/SfCDzvPUncCzFZ3ZKe YVzRRJyGAsjZuGjYbvPJyIbpFeVERnSoMvwPxNXsTtg4zkzf3O16ZWxWPEkgq0iO ZMW8OlOQZWdAmF48zwIex7eiEcl6TGE4/sfOU/i+UcOufdfAFNpXuobuHlnGmVXE B7dmsd8/C5VRZM5c5aE39aavkeACmgRdZUBItWqkbAZbju3OJlbO8yMbBIC2Daqx pZnSIlsxk7PXk6/bL/+B2kNAIWCC2fQJ -----END CERTIFICATE-----Generated at Sat May 31 16:52:10 2025 by rpki-client