$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: q3bbiRhpfEf8Y1bSYqKTf0rnKhf0HFnwzIWUJn7eMig= Subject key identifier: A7:DA:5F:CE:87:78:DF:80:5C:F3:C4:D3:67:E0:E6:E8:4A:B8:2C:E8 Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 05C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 05AD Signing time: Fri 30 May 2025 23:24:59 +0000 Manifest this update: Fri 30 May 2025 23:24:59 +0000 Manifest next update: Fri 06 Jun 2025 23:24:59 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: vHBzl9QS38hcw+Nbxi4zIMNcZsZSD1yoUInHHhRcoVs=) 2: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=) 3: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: NusIDt0f4j0NcRF078XLORWazAmsiuO0j1zyJghrWis=) 4: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: RdB+XhDvSvaJvXs7BGUe7hQ0J/yDuFEAfzGv0ijmNPc=) 6: 6D24010C300311F0995E874EC4F9AE02.roa (hash: JH/oVs3Jqan8Flty+gkOdXRSGquUVwbS7q7MqJveDFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1477 (0x5c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: May 30 23:24:59 2025 GMT Not After : Jun 6 23:24:59 2025 GMT Subject: CN=683a3e4b-9899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:01:f1:d8:a6:f9:d7:c3:10:a0:0a:32:15: b4:bd:a3:1f:e5:06:b3:2b:26:72:e1:8d:d1:a4:b2: a9:1e:f8:1c:66:26:16:6f:99:cb:cd:a0:45:d8:3c: 29:d8:40:0e:65:94:e2:76:fb:a1:0d:d3:68:2d:c0: f6:42:0e:53:02:d5:29:ee:3a:21:f3:dd:9f:29:2b: 12:aa:8d:59:99:43:5c:ee:3c:57:1c:09:84:e9:d2: df:4b:63:8c:09:45:36:9e:39:42:15:3f:68:d5:5e: 73:da:23:e6:76:00:11:e0:c7:62:46:88:c1:11:aa: 56:b8:0c:04:a6:9c:8a:64:78:06:0e:1e:7a:6f:31: 6e:31:dc:6e:73:b4:b1:c5:b6:03:d5:35:85:15:01: 76:cb:0e:9f:e4:96:e7:4a:be:ab:26:d9:55:44:da: de:47:47:60:7b:41:be:2b:bf:6d:54:b4:5b:b6:5e: d2:d2:8a:cc:6d:df:7d:db:90:d9:27:f3:8e:1f:e1: ba:43:f2:4e:84:60:ce:95:98:a5:64:8a:55:7a:7d: f1:67:53:72:1e:b9:38:47:3e:49:53:03:7d:ac:e9: 69:59:80:74:85:b4:32:6b:49:55:60:f2:e1:19:9e: a3:a2:12:d3:3a:a6:d4:2b:1c:ac:f0:1f:86:88:e0: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DA:5F:CE:87:78:DF:80:5C:F3:C4:D3:67:E0:E6:E8:4A:B8:2C:E8 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:80:bb:62:d4:b3:bb:d9:58:c3:82:b7:d6:5e:6c:86:32:f5: 59:d7:d5:85:7f:8d:76:77:d8:55:be:6b:3f:ab:37:52:4d:b3: 8f:21:cc:ba:48:13:36:30:2b:82:e0:55:70:9f:55:af:45:8c: be:3c:de:45:22:6b:43:df:1d:48:be:64:15:58:c4:50:85:d1: 99:94:f6:01:14:82:e7:1a:2e:01:ca:2c:cd:48:d3:d5:b7:fc: d1:9a:8e:57:c3:2f:ce:eb:1f:19:a3:92:18:2d:49:6c:f9:dc: fb:b0:c6:e9:88:51:39:fa:58:77:a5:b7:f8:0c:5d:c0:21:95: 2f:89:4a:d1:7d:6d:0c:a7:c2:b5:4d:89:96:8b:1a:6c:c4:35: 4a:52:57:52:a9:e2:0d:bd:f9:20:83:1c:7d:0c:83:da:56:8f: 6d:42:b1:fc:4f:02:2a:67:37:32:27:6a:3d:a0:1f:cc:72:79: 6e:59:d1:85:e2:9f:f7:43:47:d9:b0:72:7c:6f:e8:c8:8d:2f: e3:c7:8c:d5:8d:78:3c:b4:09:23:26:ea:f1:d2:ee:31:3d:69: bb:c2:6b:5b:cf:ba:f5:75:6c:87:38:d0:93:68:18:92:27:6b: 4c:dd:e1:9b:25:d6:9a:0f:df:05:c0:3b:ac:a0:1a:14:81:18: e8:4a:89:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUwNTMwMjMyNDU5WhcNMjUwNjA2MjMyNDU5WjAYMRYwFAYD VQQDEw02ODNhM2U0Yi05ODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1toB8dim+dfDEKAKMhW0vaMf5QazKyZy4Y3RpLKpHvgcZiYWb5nLzaBF2Dwp 2EAOZZTidvuhDdNoLcD2Qg5TAtUp7joh892fKSsSqo1ZmUNc7jxXHAmE6dLfS2OM CUU2njlCFT9o1V5z2iPmdgAR4MdiRojBEapWuAwEppyKZHgGDh56bzFuMdxuc7Sx xbYD1TWFFQF2yw6f5JbnSr6rJtlVRNreR0dge0G+K79tVLRbtl7S0orMbd9925DZ J/OOH+G6Q/JOhGDOlZilZIpVen3xZ1NyHrk4Rz5JUwN9rOlpWYB0hbQya0lVYPLh GZ6johLTOqbUKxys8B+GiOD95wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfaX86H eN+AXPPE02fg5uhKuCzoMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4gLti1LO72VjDgrfWXmyGMvVZ19WFf412d9hVvms/qzdSTbOPIcy6 SBM2MCuC4FVwn1WvRYy+PN5FImtD3x1IvmQVWMRQhdGZlPYBFILnGi4ByizNSNPV t/zRmo5Xwy/O6x8Zo5IYLUls+dz7sMbpiFE5+lh3pbf4DF3AIZUviUrRfW0Mp8K1 TYmWixpsxDVKUldSqeINvfkggxx9DIPaVo9tQrH8TwIqZzcyJ2o9oB/McnluWdGF 4p/3Q0fZsHJ8b+jIjS/jx4zVjXg8tAkjJurx0u4xPWm7wmtbz7r1dWyHONCTaBiS J2tM3eGbJdaaD98FwDusoBoUgRjoSolz -----END CERTIFICATE-----Generated at Sat May 31 14:59:32 2025 by rpki-client