$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft File: 9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json) Hash identifier: haNl+XDVVAcLhKN4QbhZJkDDfP9jgQRPNFEVSqshVq0= Subject key identifier: ED:89:E6:66:9F:B7:C0:A1:2D:5C:49:3B:2B:1D:C4:C2:CE:68:25:71 Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A Certificate issuer: /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft Manifest number: 017C Signing time: Sat 31 May 2025 03:32:57 +0000 Manifest this update: Sat 31 May 2025 03:32:57 +0000 Manifest next update: Sat 07 Jun 2025 03:32:57 +0000 Files and hashes: 1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: i7we6EZPXu99nkPBXu7eEbHZgAVrxjKeZeitwiW6lJE=) 2: 5509870E6B6911EFA634B086C4F9AE02.roa (hash: Ha7uuCzrs6q52L6yqD5G/7/RQyqW/lnT9pM0rZZ1mMg=) 3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: JS7S95pwMMq4VJCG+rsKP1S3MhXCo+P6oTggAIuVIcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Validity Not Before: May 31 03:32:57 2025 GMT Not After : Jun 7 03:32:57 2025 GMT Subject: CN=683a7869-a8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0c:10:b0:09:a2:02:27:31:0d:85:58:5c:a7: 7d:2d:c6:2a:cc:f4:18:30:b0:4e:fb:1e:9a:2b:55: 0b:21:d2:0e:52:94:d5:30:ce:36:ad:ec:e0:82:8d: 0c:ba:3f:36:09:43:3c:eb:2e:e7:ef:42:ed:b2:dd: 26:cc:fe:ce:64:ea:95:a8:eb:fb:3a:59:5d:39:97: 41:07:0c:a8:57:3e:62:d6:60:4d:04:fc:d0:68:d7: 9a:54:85:96:4b:86:6f:22:24:09:f1:58:dc:97:fc: 53:4a:ef:18:91:34:1c:4d:ee:ac:bc:e7:e9:fb:14: a2:03:46:13:8b:6d:60:65:1f:49:7d:fe:c1:58:9a: 9a:2a:68:02:81:50:d3:6d:05:c9:f6:d8:14:3b:7c: e3:ba:01:68:69:5c:46:8c:07:35:6c:b1:57:7c:05: ed:2b:c1:f8:87:3c:9d:a4:61:0e:ff:97:52:7e:5b: b8:24:84:da:b7:ae:32:2d:76:5c:93:39:b5:63:ad: ed:cc:67:27:83:88:3a:9e:f2:22:2e:34:d2:44:6f: a9:bf:d6:54:63:7b:d5:8f:6f:62:18:5e:c2:f3:05: 7e:6d:0e:e2:27:8b:ea:73:fb:94:dd:b4:5e:91:a4: fe:9a:bc:28:04:14:be:5c:93:64:b5:56:8c:c4:e3: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:89:E6:66:9F:B7:C0:A1:2D:5C:49:3B:2B:1D:C4:C2:CE:68:25:71 X509v3 Authority Key Identifier: keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:75:1e:04:61:bf:f8:92:ba:be:82:6e:ac:9d:37:98:06:78: bb:2b:7e:79:e2:c5:cc:6e:78:f1:90:98:75:ba:d9:e8:07:04: 05:db:65:33:c1:4f:0f:ff:bb:a1:52:db:d9:77:1f:e8:5f:66: 94:54:bd:dd:90:34:df:8a:ac:b3:f3:42:5e:b9:26:5b:2d:86: de:00:de:2d:b6:70:37:17:a9:d2:66:49:2d:3a:a5:68:c9:0f: b3:26:f9:2c:6c:82:d6:37:10:9d:13:ba:2f:71:00:94:89:11: 6b:5e:0d:37:69:69:00:3c:ad:57:db:7d:d1:e6:55:5e:f8:da: 4f:53:23:e1:fe:95:e2:7e:a1:99:3d:9c:fa:66:05:a6:61:1b: 1a:05:65:59:2f:84:ea:21:c9:ba:4b:dc:a3:5a:3c:da:81:c1: f7:97:3f:a6:8d:56:c6:b1:f7:ef:e7:89:92:f5:b5:dc:73:e0: c9:51:fb:25:25:fb:9e:07:ff:44:32:fa:4b:b5:32:5c:10:35: 29:18:c9:bf:5b:bd:3e:c7:dd:41:62:c3:25:06:e0:9d:23:80: 75:f0:4a:c9:c8:2e:f9:42:88:10:2d:76:88:22:4f:07:46:12: 68:cb:2f:16:ce:6a:4b:ff:3d:f7:dd:22:4e:37:d7:28:0a:60: 42:ac:51:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNkExMTAvBgNVBAUTKEY1NDU5Q0JBMzFGOTMzRjkwNzNCNTE0QzlDQkJFQzM0 RjZFRDJFNEEwHhcNMjUwNTMxMDMzMjU3WhcNMjUwNjA3MDMzMjU3WjAYMRYwFAYD VQQDEw02ODNhNzg2OS1hOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gwQsAmiAicxDYVYXKd9LcYqzPQYMLBO+x6aK1ULIdIOUpTVMM42rezggo0M uj82CUM86y7n70Ltst0mzP7OZOqVqOv7OlldOZdBBwyoVz5i1mBNBPzQaNeaVIWW S4ZvIiQJ8Vjcl/xTSu8YkTQcTe6svOfp+xSiA0YTi21gZR9Jff7BWJqaKmgCgVDT bQXJ9tgUO3zjugFoaVxGjAc1bLFXfAXtK8H4hzydpGEO/5dSflu4JITat64yLXZc kzm1Y63tzGcng4g6nvIiLjTSRG+pv9ZUY3vVj29iGF7C8wV+bQ7iJ4vqc/uU3bRe kaT+mrwoBBS+XJNktVaMxOPK5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2J5maf t8ChLVxJOysdxMLOaCVxMB8GA1UdIwQYMBaAFPVFnLox+TP5BztRTJy77DT27S5K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU2QS80QzI4MUJCRTEx QTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1fa0hPMUZNbkx2c05QYnRM a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVV2N1akg1TV9rSE8xRk1uTHZzTlBidExrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU2QS80QzI4MUJCRTExQTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1f a0hPMUZNbkx2c05QYnRMa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjdR4EYb/4krq+gm6snTeYBni7K3554sXMbnjxkJh1utnoBwQF22Uz wU8P/7uhUtvZdx/oX2aUVL3dkDTfiqyz80JeuSZbLYbeAN4ttnA3F6nSZkktOqVo yQ+zJvksbILWNxCdE7ovcQCUiRFrXg03aWkAPK1X233R5lVe+NpPUyPh/pXifqGZ PZz6ZgWmYRsaBWVZL4TqIcm6S9yjWjzagcH3lz+mjVbGsffv54mS9bXcc+DJUfsl JfueB/9EMvpLtTJcEDUpGMm/W70+x91BYsMlBuCdI4B18ErJyC75QogQLXaIIk8H RhJoyy8WzmpL/z333SJON9coCmBCrFEV -----END CERTIFICATE-----Generated at Sat May 31 16:40:45 2025 by rpki-client