$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft File: iZOTjIV1ACgOj15T3As-kweu1Kc.mft (raw, json) Hash identifier: L3nFVUKjvoRvsnS41hRrVYnexl3sbTCmKj+hwtEKNYw= Subject key identifier: 7A:C7:CC:42:79:DD:8A:A0:D3:75:DF:CE:C1:8B:21:9C:62:73:47:BA Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft Manifest number: 36 Signing time: Sat 31 May 2025 07:11:13 +0000 Manifest this update: Sat 31 May 2025 07:11:13 +0000 Manifest next update: Sat 07 Jun 2025 07:11:13 +0000 Files and hashes: 1: iZOTjIV1ACgOj15T3As-kweu1Kc.crl (hash: hzeIfXHAm6CNoAore2/W7u/qhPQc0pLuDun1ak+25Ek=) 2: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (hash: t4VsjBzDPnCNqQJ4/+l/e7o+o8AvICh72VVWJ8BMmY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Validity Not Before: May 31 07:11:13 2025 GMT Not After : Jun 7 07:11:13 2025 GMT Subject: CN=683aab91-7683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7d:85:b4:a2:97:b1:0a:3f:97:fa:55:2e:b2: 55:bf:57:38:11:b8:84:26:59:11:03:4f:3f:2c:71: 7c:13:d4:89:7c:1b:8c:6d:4a:fa:40:fc:77:ad:95: b0:33:c9:ac:42:63:f5:62:cb:ae:dc:28:ee:70:1e: c9:b8:d4:09:22:f9:95:af:2e:0b:66:3b:fc:73:11: cf:9d:ad:e3:84:ee:50:92:b6:54:bf:13:63:78:01: 8c:c5:fb:bc:f9:71:59:52:a4:0e:b9:1d:f5:df:6e: 86:6c:aa:b1:c7:ea:5c:84:d9:fa:d1:c6:d8:0a:55: 79:05:a3:2c:fb:5f:ce:6c:05:f9:65:d9:5f:e6:bf: 7f:2d:d8:69:d5:4d:65:74:85:59:4b:ce:90:c9:7d: f8:6c:79:c6:c4:13:f5:6b:41:71:b3:58:7b:46:ef: de:f4:d9:80:66:d3:6d:27:ca:99:28:a1:a0:c7:5e: 9a:08:41:ff:61:3e:40:e7:80:3e:a4:0e:a9:33:77: 9f:56:27:18:2a:34:49:1f:df:08:57:95:6f:20:5c: a3:01:aa:a2:05:79:3c:84:ca:db:b5:44:ca:8b:9c: d2:fa:f5:30:50:9b:88:cb:fe:cd:5c:4b:2a:75:a5: ab:4a:20:57:3d:5c:cf:55:88:0e:cb:cb:d1:36:7a: 00:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C7:CC:42:79:DD:8A:A0:D3:75:DF:CE:C1:8B:21:9C:62:73:47:BA X509v3 Authority Key Identifier: keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:5d:b8:e8:fb:ec:c8:2b:0d:d9:77:9c:6e:40:1d:ad:58:89: d8:98:e3:33:3b:ac:b0:ca:a9:a7:07:db:cb:9a:2b:ca:10:b3: f7:49:ba:97:33:26:32:75:bc:f5:f4:93:d7:28:4e:db:22:23: f0:85:03:ed:f7:6b:28:ed:57:75:65:b5:57:5b:17:9b:df:c9: 50:57:5b:b1:e0:ae:0d:6b:1a:a5:a6:74:a3:a3:f6:c3:ee:62: 31:92:11:84:e3:d8:79:f8:ed:89:c5:98:56:68:26:e8:81:bf: 37:b1:26:b3:de:43:5d:6f:e3:bf:35:72:92:bc:8a:21:01:03: 4e:ac:b0:64:7d:97:dc:97:c2:ba:fb:ac:10:14:4b:0c:82:b0: af:71:30:3e:0b:8b:da:fe:28:47:8e:0e:a4:58:04:bb:08:ef: 60:26:ce:00:d0:4e:d0:46:9d:13:9b:a8:94:63:e4:71:b7:a9: d7:32:55:83:e5:80:d3:8a:42:1e:d5:2f:91:b7:67:e8:6c:13: b1:31:b7:26:d3:35:9d:78:29:c8:07:63:73:a8:fb:bc:77:20: 54:d0:09:1c:d1:64:93:10:42:39:f1:d4:5d:d7:2f:23:a3:65: 74:22:50:67:f0:d1:29:35:18:19:a7:75:5a:ff:da:b5:d6:1f: 43:0c:80:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDNFMTExMC8GA1UEBRMoODk5MzkzOEM4NTc1MDAyODBFOEY1RTUzREMwQjNFOTMw N0FFRDRBNzAeFw0yNTA1MzEwNzExMTNaFw0yNTA2MDcwNzExMTNaMBgxFjAUBgNV BAMTDTY4M2FhYjkxLTc2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAfYW0opexCj+X+lUuslW/VzgRuIQmWREDTz8scXwT1Il8G4xtSvpA/HetlbAz yaxCY/Viy67cKO5wHsm41Aki+ZWvLgtmO/xzEc+dreOE7lCStlS/E2N4AYzF+7z5 cVlSpA65HfXfboZsqrHH6lyE2frRxtgKVXkFoyz7X85sBfll2V/mv38t2GnVTWV0 hVlLzpDJffhsecbEE/VrQXGzWHtG79702YBm020nypkooaDHXpoIQf9hPkDngD6k Dqkzd59WJxgqNEkf3whXlW8gXKMBqqIFeTyEytu1RMqLnNL69TBQm4jL/s1cSyp1 patKIFc9XM9ViA7Ly9E2egBVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUesfMQnnd iqDTdd/OwYshnGJzR7owHwYDVR0jBBgwFoAUiZOTjIV1ACgOj15T3As+kweu1Kcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEM0UxLzdDRjA3QkM2RUY0 NzExRUZBRjRDNDk2OEM0RjlBRTAyL2laT1RqSVYxQUNnT2oxNVQzQXMta3dldTFL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVpPVGpJVjFBQ2dPajE1VDNBcy1rd2V1MUtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE M0UxLzdDRjA3QkM2RUY0NzExRUZBRjRDNDk2OEM0RjlBRTAyL2laT1RqSVYxQUNn T2oxNVQzQXMta3dldTFLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK9duOj77MgrDdl3nG5AHa1YidiY4zM7rLDKqacH28uaK8oQs/dJupcz JjJ1vPX0k9coTtsiI/CFA+33ayjtV3VltVdbF5vfyVBXW7Hgrg1rGqWmdKOj9sPu YjGSEYTj2Hn47YnFmFZoJuiBvzexJrPeQ11v4781cpK8iiEBA06ssGR9l9yXwrr7 rBAUSwyCsK9xMD4Li9r+KEeODqRYBLsI72AmzgDQTtBGnRObqJRj5HG3qdcyVYPl gNOKQh7VL5G3Z+hsE7ExtybTNZ14KcgHY3Oo+7x3IFTQCRzRZJMQQjnx1F3XLyOj ZXQiUGfw0Sk1GBmndVr/2rXWH0MMgB8= -----END CERTIFICATE-----Generated at Sat May 31 17:22:07 2025 by rpki-client