$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft File: fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json) Hash identifier: b7oQJGlCfGql9e4aRWs7jlKzMXxTU/Q/j9m8BSYXJ2w= Subject key identifier: 4B:AF:A5:21:C0:B3:15:7F:2A:17:52:32:5F:E4:49:29:97:5C:AD:90 Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Certificate serial: 0917 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft Manifest number: 1EE3 Signing time: Fri 30 May 2025 16:57:20 +0000 Manifest this update: Fri 30 May 2025 16:57:19 +0000 Manifest next update: Fri 06 Jun 2025 16:57:19 +0000 Files and hashes: 1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: BOVQmaouOr60kvBsUY0aU39+jeMQwulaMCK8N45wA5w=) 2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: vKmmh6WIOEqHjc9HRB9xmdHJEo2LxIyyZG3CXzn2ZyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2327 (0x917) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Validity Not Before: May 30 16:57:19 2025 GMT Not After : Jun 6 16:57:19 2025 GMT Subject: CN=6839e36f-ebf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:49:2c:b5:cd:04:9a:d6:49:5c:11:70:17: 30:79:3f:bc:9c:3d:82:0f:f4:68:19:fb:6d:45:bc: ae:cb:72:fb:45:64:58:4a:a5:f7:84:dc:34:9c:28: 25:87:88:e6:82:ce:57:4b:f5:26:7f:d2:33:90:27: 79:5c:77:32:aa:d5:09:cc:bc:0c:33:c5:21:fa:e0: c1:90:0c:3a:ad:30:63:03:46:b8:20:98:d4:03:6e: f9:cb:d7:45:aa:05:26:60:bb:be:bd:84:41:b9:1f: c6:23:51:93:32:b1:7b:40:20:18:84:3f:3a:65:51: a5:d3:bb:ab:57:80:e8:31:72:9e:67:ea:8c:b7:c3: cc:e6:fd:73:71:77:b1:69:bf:90:6f:8d:ec:8d:7d: 0e:cf:fb:da:68:15:b8:6a:81:cc:ff:18:56:ba:d6: 51:e2:a9:83:b7:03:ca:70:f0:28:dc:26:31:6d:df: be:96:ee:40:19:9d:66:c9:c2:58:f2:93:fe:40:b1: e1:48:aa:66:02:69:6e:bb:0d:f5:cf:76:cb:c8:48: ef:66:7a:94:aa:93:6e:69:2c:90:1c:a7:ea:6a:e2: 12:ca:48:a9:83:05:27:8b:29:cd:ff:34:7f:49:d7: 10:fb:31:52:28:94:79:a5:cc:40:59:95:d9:d1:a0: 03:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AF:A5:21:C0:B3:15:7F:2A:17:52:32:5F:E4:49:29:97:5C:AD:90 X509v3 Authority Key Identifier: keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:be:7d:37:9a:f2:c8:c4:0d:3e:ac:8d:37:14:07:4b:15:c1: a1:a2:ac:21:4e:b8:73:1e:54:b2:dd:51:1c:c8:d0:78:f6:e1: 95:39:3b:c9:a3:3d:26:a0:51:5c:2b:dd:c8:09:5e:d6:2b:49: b8:2d:30:e8:ae:da:cb:d7:bb:3b:de:3d:11:ff:74:9b:0d:86: 76:04:42:48:bf:40:9f:0c:9c:19:f7:fd:7b:15:ed:d5:ae:19: d8:3c:cf:04:8c:11:ea:4d:ea:7b:ec:6c:f4:86:1b:b5:f0:a3: 2d:9b:e4:24:ca:fb:e7:28:d0:dd:dc:23:d0:7f:96:0c:5c:20: 21:f5:f9:4e:d4:b5:47:da:e1:87:93:49:11:2c:f7:de:aa:e4: 8a:ba:69:fd:2e:88:a2:22:75:79:1b:a1:dc:ce:de:36:bd:90: 9d:db:e7:10:7d:37:03:66:3f:47:b3:b9:b1:88:5b:d7:79:59: 72:6d:06:5d:c1:f9:39:1c:9b:15:f4:02:12:f0:dc:b0:73:dd: 9b:9e:64:45:38:c1:24:48:b8:19:90:94:2b:84:a6:a3:b1:9c: f5:9d:a1:ed:f1:f7:36:e2:26:5b:ff:ad:96:89:73:cc:3d:0d: ad:97:5b:91:11:66:09:6d:58:3d:8c:f5:74:1d:26:be:fd:20: b3:c9:f9:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlEMDQxMTAvBgNVBAUTKDdFNjdFODhDQzQwMzc4QTk3MDQ2M0RGMkQwQjA2MDg4 RTY1REI5QjAwHhcNMjUwNTMwMTY1NzE5WhcNMjUwNjA2MTY1NzE5WjAYMRYwFAYD VQQDEw02ODM5ZTM2Zi1lYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxR1JLLXNBJrWSVwRcBcweT+8nD2CD/RoGfttRbyuy3L7RWRYSqX3hNw0nCgl h4jmgs5XS/Umf9IzkCd5XHcyqtUJzLwMM8Uh+uDBkAw6rTBjA0a4IJjUA275y9dF qgUmYLu+vYRBuR/GI1GTMrF7QCAYhD86ZVGl07urV4DoMXKeZ+qMt8PM5v1zcXex ab+Qb43sjX0Oz/vaaBW4aoHM/xhWutZR4qmDtwPKcPAo3CYxbd++lu5AGZ1mycJY 8pP+QLHhSKpmAmluuw31z3bLyEjvZnqUqpNuaSyQHKfqauISykipgwUniynN/zR/ SdcQ+zFSKJR5pcxAWZXZ0aADuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuvpSHA sxV/KhdSMl/kSSmXXK2QMB8GA1UdIwQYMBaAFH5n6IzEA3ipcEY98tCwYIjmXbmw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQwNC83MTY2RjM4RTIz NUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVLbHdSajN5MExCZ2lPWmR1 YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZtZm9qTVFEZUtsd1JqM3kwTEJnaU9aZHViQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQwNC83MTY2RjM4RTIzNUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVL bHdSajN5MExCZ2lPWmR1YkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqvn03mvLIxA0+rI03FAdLFcGhoqwhTrhzHlSy3VEcyNB49uGVOTvJ oz0moFFcK93ICV7WK0m4LTDortrL17s73j0R/3SbDYZ2BEJIv0CfDJwZ9/17Fe3V rhnYPM8EjBHqTep77Gz0hhu18KMtm+QkyvvnKNDd3CPQf5YMXCAh9flO1LVH2uGH k0kRLPfequSKumn9LoiiInV5G6Hczt42vZCd2+cQfTcDZj9Hs7mxiFvXeVlybQZd wfk5HJsV9AIS8Nywc92bnmRFOMEkSLgZkJQrhKajsZz1naHt8fc24iZb/62WiXPM PQ2tl1uREWYJbVg9jPV0HSa+/SCzyfks -----END CERTIFICATE-----Generated at Sat May 31 17:37:48 2025 by rpki-client