$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json) Hash identifier: WFKOjwUxUgdt2yZ/Jb56FxsuNfcwSRJezeUHAUXld/A= Subject key identifier: 34:62:EE:DC:E1:CF:37:39:5B:D0:AA:B2:3C:54:EB:40:14:82:3C:9E Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft Manifest number: 0F9B Signing time: Fri 30 May 2025 18:01:35 +0000 Manifest this update: Fri 30 May 2025 18:01:34 +0000 Manifest next update: Fri 06 Jun 2025 18:01:34 +0000 Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: sJmXkgTUw89xbk9HGUa7/QaxVIPFBozXTJRLguOHhwE=) 2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: pr44aMdjUjF3qJ5V59OemeYMLJZAouFtZX25Dx2aXA8=) 3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: Fb7LVlJG+JVdijAn+Ys69+wkABJKfcULX5Fgfk+/L5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Validity Not Before: May 30 18:01:34 2025 GMT Not After : Jun 6 18:01:34 2025 GMT Subject: CN=6839f27e-159f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:b6:d1:c8:af:40:51:61:e4:d8:3e:b4:5c: 39:ce:ca:f5:54:87:c7:2e:69:fd:c9:2b:8f:ce:8a: 82:17:ae:12:86:2e:48:85:a7:c7:34:ea:3e:dc:c4: 61:a1:a7:d6:85:3a:04:63:88:fc:5d:c0:7d:89:0d: 03:79:e1:92:fd:2f:55:8e:44:20:e8:50:d9:63:af: ef:6c:88:d0:7e:4d:7d:9d:ee:3b:40:46:eb:22:6f: a7:f2:50:b5:51:e3:41:f3:f0:4b:8b:7b:50:c0:32: 21:b3:88:d1:78:44:54:f9:3c:f6:e0:d7:9c:8b:3c: 87:7a:92:32:da:6d:c9:2a:14:86:2a:65:6e:37:1c: ba:7b:c0:fa:bb:d3:14:34:4a:6d:30:99:bb:97:8b: 1e:75:a0:1f:14:3d:03:55:0a:90:2b:3f:9d:14:17: 63:74:69:58:e4:07:ae:18:0a:86:b4:aa:9f:15:67: c5:e4:67:2b:43:3b:ec:ca:3b:a0:52:30:4e:dc:a6: ed:61:56:39:c4:19:b1:5f:85:f2:e7:87:54:8d:59: 97:08:7c:54:c8:9e:2c:5c:a5:52:91:dd:19:df:44: 83:ba:3f:49:36:26:7b:6c:78:0b:cd:0c:20:dd:64: 83:ad:00:7b:2b:fb:88:c3:ff:f1:0d:a1:06:6d:37: 65:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:62:EE:DC:E1:CF:37:39:5B:D0:AA:B2:3C:54:EB:40:14:82:3C:9E X509v3 Authority Key Identifier: keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:2a:77:44:30:42:68:f7:37:b6:70:e1:25:81:92:9a:8c:9d: ea:57:14:f5:f7:c0:d7:21:8a:1c:cd:d6:d0:dd:f7:e9:fb:79: 76:4f:4d:a4:76:a8:79:da:0e:f9:95:80:da:a5:df:b6:41:56: c2:20:fd:a5:b4:3e:47:12:b8:24:21:a8:21:58:cf:e3:48:49: 31:ad:e1:79:11:05:14:e6:68:15:2a:af:9a:44:a3:10:1a:73: 52:06:8d:a2:43:b5:c7:31:75:76:2d:2b:27:d8:d1:e4:2b:d7: 33:8e:aa:a6:8c:8d:d4:bf:d3:62:91:74:41:fe:b4:e3:24:7d: fd:9b:e0:67:86:e2:9c:19:d9:8c:c4:01:a5:17:22:1c:54:c8: 10:13:9a:3f:9c:3c:5d:73:99:fe:02:06:a4:94:1a:21:41:b6: fe:a3:a4:09:be:f5:6c:cf:93:cb:3e:e1:df:ce:71:79:02:79: 84:23:b0:08:9f:0a:8b:a0:b4:34:67:8d:e8:73:5c:35:55:df: 4c:4d:ef:2b:12:3e:85:e0:da:ce:f1:f6:dc:51:ca:e8:f4:bd: e9:e5:1b:87:3a:32:ba:91:6b:ae:e8:49:34:3f:e2:98:15:d8: dc:39:60:d7:91:89:38:ac:15:fe:a6:66:57:cb:fc:bd:52:10: f2:bb:36:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5 ODM4MTQyMjUwHhcNMjUwNTMwMTgwMTM0WhcNMjUwNjA2MTgwMTM0WjAYMRYwFAYD VQQDEw02ODM5ZjI3ZS0xNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5a20civQFFh5Ng+tFw5zsr1VIfHLmn9ySuPzoqCF64Shi5IhafHNOo+3MRh oafWhToEY4j8XcB9iQ0DeeGS/S9VjkQg6FDZY6/vbIjQfk19ne47QEbrIm+n8lC1 UeNB8/BLi3tQwDIhs4jReERU+Tz24NecizyHepIy2m3JKhSGKmVuNxy6e8D6u9MU NEptMJm7l4sedaAfFD0DVQqQKz+dFBdjdGlY5AeuGAqGtKqfFWfF5GcrQzvsyjug UjBO3KbtYVY5xBmxX4Xy54dUjVmXCHxUyJ4sXKVSkd0Z30SDuj9JNiZ7bHgLzQwg 3WSDrQB7K/uIw//xDaEGbTdlPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRi7tzh zzc5W9CqsjxU60AUgjyeMB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxKndEMEJo9ze2cOElgZKajJ3qVxT198DXIYoczdbQ3ffp+3l2T02k dqh52g75lYDapd+2QVbCIP2ltD5HErgkIaghWM/jSEkxreF5EQUU5mgVKq+aRKMQ GnNSBo2iQ7XHMXV2LSsn2NHkK9czjqqmjI3Uv9NikXRB/rTjJH39m+BnhuKcGdmM xAGlFyIcVMgQE5o/nDxdc5n+AgaklBohQbb+o6QJvvVsz5PLPuHfznF5AnmEI7AI nwqLoLQ0Z43oc1w1Vd9MTe8rEj6F4NrO8fbcUcro9L3p5RuHOjK6kWuu6Ek0P+KY FdjcOWDXkYk4rBX+pmZXy/y9UhDyuzb2 -----END CERTIFICATE-----Generated at Sat May 31 17:41:00 2025 by rpki-client