$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json) Hash identifier: BPK3LkPPeIS6OD0o7aumitln+7LDRkXzo6cKDXM42ds= Subject key identifier: 42:85:63:02:3E:5E:0D:8D:06:66:15:0A:1D:67:83:B1:93:67:DB:DF Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft Manifest number: 02BE Signing time: Sat 31 May 2025 01:37:28 +0000 Manifest this update: Sat 31 May 2025 01:37:27 +0000 Manifest next update: Sat 07 Jun 2025 01:37:27 +0000 Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: 7wZnlyYdglr1PiSMhUtKnEDIvf6rRef+rlpqHFKzDRk=) 2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: tIjRYvm7kHb3Z/vuy4/Hasw9Jy2neJdJRNnPansBj78=) 3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: llPQK6RAm7smNmRGwi10ZC04JcuM8comzd+cTfPYGBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: May 31 01:37:27 2025 GMT Not After : Jun 7 01:37:27 2025 GMT Subject: CN=683a5d58-aa73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:3a:ce:3a:93:2d:40:29:32:55:a8:93:ae: ec:31:38:e4:db:7a:8e:bc:e5:de:16:de:20:c2:06: 99:7f:64:78:c9:48:ca:a2:a0:62:3e:25:b4:fb:4c: 62:64:05:d2:f2:c3:5f:20:d0:4c:a6:07:68:00:72: df:fe:ce:b5:05:c3:c5:37:7e:f2:6d:11:79:f0:19: f6:56:2e:ce:01:35:89:d8:7c:57:03:06:f9:b3:e2: 88:21:79:8b:8b:e2:ad:89:40:58:8d:aa:25:3e:ae: 01:9c:b5:6b:a6:f1:ea:8d:c5:1a:a0:6a:66:88:58: 30:fc:64:af:80:20:b5:d4:a6:c5:38:58:ab:25:90: e0:9f:b8:4c:ba:46:25:60:31:4e:11:09:b5:20:81: ee:db:82:f1:85:ac:75:22:17:ab:8f:01:ce:24:a1: 8f:56:b3:a7:3b:d5:61:7d:01:65:bc:bd:df:df:89: 98:2f:2b:be:c6:b4:fd:bd:e6:fa:01:9d:2e:7d:1a: 08:69:af:c2:64:c2:33:46:06:45:9d:31:79:b8:d8: 93:46:c6:ff:df:94:57:bf:86:a5:2d:b2:fc:a9:bc: ec:8e:f2:43:3d:c8:f5:2a:3f:4c:8e:a9:96:3e:e6: a6:b9:ea:91:fb:d2:96:46:b7:fc:0f:f0:c6:1e:09: ab:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:85:63:02:3E:5E:0D:8D:06:66:15:0A:1D:67:83:B1:93:67:DB:DF X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:79:b9:54:88:bc:63:cb:2c:e0:2c:02:ff:23:98:91:74:d4: 82:6c:6d:1f:53:40:f4:b4:3c:8f:82:49:a6:aa:78:7b:1f:60: 1d:ac:73:0f:43:f5:35:6c:da:9c:b6:ca:db:1d:43:ed:05:7a: 9d:29:51:c8:7c:6b:49:82:bd:86:ef:20:9a:15:11:d4:0f:b6: df:55:96:ce:02:b3:6a:73:19:2d:6b:4e:dc:dd:b7:87:03:f3: 88:70:9b:9e:99:de:5f:93:33:e6:9c:0b:8c:bc:d5:de:6a:ba: 2b:0a:ff:e7:74:eb:03:7f:06:23:6b:bc:5d:95:ef:31:08:ba: 4a:b0:bb:5b:f1:13:14:3c:ca:77:36:0b:6c:46:c7:87:94:f3: 8a:9f:3f:ee:be:4a:05:fc:75:97:de:99:6e:48:ab:cd:b1:95: e1:35:04:fd:df:f4:5b:07:49:23:e1:e4:3d:82:57:50:de:7d: f5:20:70:ee:1d:5a:cd:77:86:00:6f:f2:0b:f5:cb:65:e7:c6: df:6c:9c:ea:e3:3c:c8:15:ab:d0:f1:af:fd:72:d5:ae:ff:31: 35:ef:e1:98:8f:49:ab:2f:40:88:51:e7:18:33:83:5e:a9:04: dc:e0:0c:a8:c8:b9:e0:35:ad:bb:3b:f1:a1:be:49:4f:80:59: 0f:87:43:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjUwNTMxMDEzNzI3WhcNMjUwNjA3MDEzNzI3WjAYMRYwFAYD VQQDEw02ODNhNWQ1OC1hYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkI6zjqTLUApMlWok67sMTjk23qOvOXeFt4gwgaZf2R4yUjKoqBiPiW0+0xi ZAXS8sNfINBMpgdoAHLf/s61BcPFN37ybRF58Bn2Vi7OATWJ2HxXAwb5s+KIIXmL i+KtiUBYjaolPq4BnLVrpvHqjcUaoGpmiFgw/GSvgCC11KbFOFirJZDgn7hMukYl YDFOEQm1IIHu24Lxhax1IherjwHOJKGPVrOnO9VhfQFlvL3f34mYLyu+xrT9veb6 AZ0ufRoIaa/CZMIzRgZFnTF5uNiTRsb/35RXv4alLbL8qbzsjvJDPcj1Kj9MjqmW PuamueqR+9KWRrf8D/DGHgmrQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKFYwI+ Xg2NBmYVCh1ng7GTZ9vfMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjVDMC9CQ0JENEZCNkYxQzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1 OGNMX0xyeEVLWFEzM1c1cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzeblUiLxjyyzgLAL/I5iRdNSCbG0fU0D0tDyPgkmmqnh7H2AdrHMP Q/U1bNqctsrbHUPtBXqdKVHIfGtJgr2G7yCaFRHUD7bfVZbOArNqcxkta07c3beH A/OIcJuemd5fkzPmnAuMvNXearorCv/ndOsDfwYja7xdle8xCLpKsLtb8RMUPMp3 NgtsRseHlPOKnz/uvkoF/HWX3pluSKvNsZXhNQT93/RbB0kj4eQ9gldQ3n31IHDu HVrNd4YAb/IL9ctl58bfbJzq4zzIFavQ8a/9ctWu/zE17+GYj0mrL0CIUecYM4Ne qQTc4AyoyLngNa27O/GhvklPgFkPh0M7 -----END CERTIFICATE-----Generated at Sat May 31 17:11:20 2025 by rpki-client