$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft File: 4H5XaJwnqZNhHLq6l7GU0xeWz28.mft (raw, json) Hash identifier: 6VXoOGwNNuf+cYaK/mRvcDufQTDhlRdXqX5S/sDfO5I= Subject key identifier: E7:CE:5A:F4:59:96:CB:7E:16:20:AA:CE:4D:86:88:D3:62:75:75:E7 Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft Manifest number: 03 Signing time: Sat 31 May 2025 07:47:19 +0000 Manifest this update: Sat 31 May 2025 07:47:19 +0000 Manifest next update: Sat 07 Jun 2025 07:47:19 +0000 Files and hashes: 1: 4H5XaJwnqZNhHLq6l7GU0xeWz28.crl (hash: 673AjHEYTfsRpCkRH8AV2lgWunasbhqSFeWXj85Iia0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: May 31 07:47:19 2025 GMT Not After : Jun 7 07:47:19 2025 GMT Subject: CN=683ab407-0595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7c:12:28:24:65:f9:55:d6:b8:20:a5:e4:7c: 8a:2d:6c:74:2d:93:d2:79:75:5c:7d:8e:0a:7b:ac: 9f:d1:fa:bb:09:5c:9c:2b:f0:d6:66:45:91:1d:61: 8f:e7:61:e5:9f:2c:e3:e4:20:e8:41:89:9b:a6:79: e2:d7:88:e7:93:9f:b5:e8:60:67:73:07:23:85:12: d8:23:44:50:46:87:af:68:af:b0:3f:78:80:bf:73: f3:a0:e7:b8:72:05:d9:9f:a6:59:61:ec:f5:35:3d: bb:bc:ad:45:18:f2:6f:80:22:38:ec:8e:c2:91:d4: 09:3f:36:b1:c2:d4:51:1c:87:5b:26:82:f7:54:30: 20:b2:a6:d4:ea:0b:e7:78:46:40:ee:63:37:d2:67: 57:ea:80:4e:9f:0c:00:20:e5:34:1d:a7:3c:84:a0: 27:fe:af:08:f8:1e:60:d1:f4:7e:d3:96:11:58:9b: 55:c4:a9:af:3a:38:80:30:cf:3f:32:36:27:45:11: 9b:41:7d:75:d4:c7:37:b5:37:9a:0b:96:f8:a0:25: 8a:eb:49:a0:a5:8d:cb:36:88:be:83:44:0d:dd:1f: 9f:53:f2:29:2f:d9:ad:79:f8:6f:19:3e:1c:a2:7d: 39:8a:30:d2:a3:b5:a4:e6:6a:37:c9:db:ea:6b:82: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CE:5A:F4:59:96:CB:7E:16:20:AA:CE:4D:86:88:D3:62:75:75:E7 X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:71:81:33:fb:9e:d1:38:76:1d:04:1d:50:8a:ed:3c:5d:96: f9:90:07:73:36:d0:36:28:f3:15:cf:1b:4e:08:f5:23:a5:bc: 69:c3:20:10:c4:00:33:f5:8d:83:fa:9c:c3:86:9a:02:37:4f: e1:ec:43:01:00:d1:42:ff:ed:d9:40:4f:3d:13:e6:17:e1:b3: 93:ab:68:0b:77:3f:5a:33:03:7c:a1:ac:da:bd:47:5e:c0:19: 05:2c:45:52:bc:9e:cb:e5:ae:be:5c:7e:b8:13:e2:e4:8f:e7: a4:16:f1:3a:55:f8:1c:53:32:c5:28:bf:40:8d:0d:bf:f9:63: 19:eb:0c:2c:8c:50:4e:16:78:ea:64:ac:be:9d:50:64:6c:3e: b6:1b:5e:98:b4:91:b8:86:df:1b:40:53:3f:c3:94:9a:2a:8e: d3:46:e8:e2:53:a6:e2:33:af:ba:b2:14:00:6e:32:10:8d:dc: f6:26:d8:e8:0f:ad:fe:ba:3c:f3:1e:56:a1:0a:2b:3c:cb:32: a7:94:33:11:10:fc:0a:17:d0:40:8c:a1:cb:58:f0:70:fb:ea: 1f:be:1f:ae:e9:57:c0:7a:ec:26:46:0c:ca:43:83:4f:82:b8: 1a:04:77:81:57:2a:fe:1c:42:a6:cc:30:88:33:81:06:52:23: a7:ac:d7:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoRTA3RTU3Njg5QzI3QTk5MzYxMUNCQUJBOTdCMTk0RDMx Nzk2Q0Y2RjAeFw0yNTA1MzEwNzQ3MTlaFw0yNTA2MDcwNzQ3MTlaMBgxFjAUBgNV BAMTDTY4M2FiNDA3LTA1OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDofBIoJGX5Vda4IKXkfIotbHQtk9J5dVx9jgp7rJ/R+rsJXJwr8NZmRZEdYY/n YeWfLOPkIOhBiZumeeLXiOeTn7XoYGdzByOFEtgjRFBGh69or7A/eIC/c/Og57hy Bdmfpllh7PU1Pbu8rUUY8m+AIjjsjsKR1Ak/NrHC1FEch1smgvdUMCCyptTqC+d4 RkDuYzfSZ1fqgE6fDAAg5TQdpzyEoCf+rwj4HmDR9H7TlhFYm1XEqa86OIAwzz8y NidFEZtBfXXUxze1N5oLlvigJYrrSaCljcs2iL6DRA3dH59T8ikv2a15+G8ZPhyi fTmKMNKjtaTmajfJ2+prgkR9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU585a9FmW y34WIKrOTYaI02J1decwHwYDVR0jBBgwFoAU4H5XaJwnqZNhHLq6l7GU0xeWz28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0UxNEY3MjI0M0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEg1WGFKd25xWk5oSExxNmw3R1UweGVXejI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 RTVCL0UxNEY3MjI0M0M2RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpO aEhMcTZsN0dVMHhlV3oyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlxgTP7ntE4dh0EHVCK7TxdlvmQB3M20DYo8xXPG04I9SOlvGnDIBDE ADP1jYP6nMOGmgI3T+HsQwEA0UL/7dlATz0T5hfhs5OraAt3P1ozA3yhrNq9R17A GQUsRVK8nsvlrr5cfrgT4uSP56QW8TpV+BxTMsUov0CNDb/5YxnrDCyMUE4WeOpk rL6dUGRsPrYbXpi0kbiG3xtAUz/DlJoqjtNG6OJTpuIzr7qyFABuMhCN3PYm2OgP rf66PPMeVqEKKzzLMqeUMxEQ/AoX0ECMoctY8HD76h++H67pV8B67CZGDMpDg0+C uBoEd4FXKv4cQqbMMIgzgQZSI6es19Y= -----END CERTIFICATE-----Generated at Sat May 31 16:42:59 2025 by rpki-client