$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft File: dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json) Hash identifier: oExZ13djBAOpWoBo12KcyTXixBsoinc3vP8COXuLBEU= Subject key identifier: 4B:A5:01:CF:D7:D9:01:89:7B:AD:9B:18:EE:4D:92:F6:37:DF:73:54 Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft Manifest number: 34 Signing time: Sat 31 May 2025 07:12:01 +0000 Manifest this update: Sat 31 May 2025 07:12:00 +0000 Manifest next update: Sat 07 Jun 2025 07:12:00 +0000 Files and hashes: 1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: XuUKB3sFydE/rGElTvaswfvJxVpWgtvvBt2u+aE+cwY=) 2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: H0Gt6hkw2JpHPGPBgwlKru1+nCswYpwJdtuwdjPnKvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Validity Not Before: May 31 07:12:00 2025 GMT Not After : Jun 7 07:12:00 2025 GMT Subject: CN=683aabc1-9dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6d:5a:74:4f:d1:24:8c:8f:91:52:c2:3b:5d: ac:06:0a:0d:63:2a:48:ee:6f:f3:3a:65:39:8c:88: dd:02:65:57:c6:50:43:8b:c4:b6:fd:07:6c:5b:5b: 41:37:fc:89:91:e7:d8:12:62:c6:29:14:76:e5:bb: ed:a0:a4:ee:3a:92:e9:12:e0:a3:9c:34:44:7c:7c: c2:23:5f:e1:9d:53:dd:44:8c:cd:7c:07:87:a4:b0: 6e:41:31:6b:04:dc:1a:4a:3f:40:48:25:9c:7a:a9: 22:35:8e:76:11:c6:ac:4d:e3:44:33:09:46:80:67: 4b:30:d2:51:91:a1:b6:4b:a2:18:2b:ee:a5:c2:92: 85:37:f0:35:22:35:6b:e7:4c:c3:c3:ea:88:39:e3: 94:81:eb:0a:da:48:03:6f:ad:a5:74:52:bd:53:bd: 86:0e:9c:00:be:9f:85:6d:02:5a:23:30:7f:f5:54: ef:7e:c9:9d:48:53:b2:f8:11:22:00:56:23:03:55: 17:e1:1b:e3:3c:ed:3e:35:df:50:bb:f6:cf:39:37: 6d:64:aa:fb:62:21:6d:fd:3c:fa:55:12:33:48:35: 27:a7:1c:aa:6d:cf:62:71:fc:67:29:56:4e:fb:68: 8f:de:f4:f6:da:63:90:9f:16:f5:a8:bc:a0:e8:50: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A5:01:CF:D7:D9:01:89:7B:AD:9B:18:EE:4D:92:F6:37:DF:73:54 X509v3 Authority Key Identifier: keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:09:b6:d6:39:b2:e2:53:87:39:20:f4:86:7b:74:4b:f2:be: 62:03:db:da:fa:49:94:5b:f1:31:33:1d:b7:2a:15:3e:0d:ea: 2d:01:2c:d6:1f:b9:ec:51:52:bc:a8:63:1b:29:51:fe:23:5b: ae:bf:f4:bf:99:ae:01:b2:d1:cd:34:69:7e:8c:d0:8c:4b:53: 91:8a:33:fc:54:05:32:41:13:9a:e6:0d:aa:fc:9f:88:54:d6: 45:d9:44:4c:2b:78:2f:a3:7b:7f:ab:63:25:5c:e6:db:35:cf: b2:28:30:8c:9e:66:34:7d:41:22:2b:85:04:ea:02:bb:5c:5f: 34:49:5f:ec:30:2e:e0:63:f9:a6:cf:6b:8f:ba:3f:e4:5a:42: a9:7e:f1:56:9e:c5:4f:2a:51:33:54:95:df:4d:73:8d:c9:89: 5e:45:ef:11:de:2f:49:65:5a:db:bb:4e:6f:63:9e:ef:cd:ab: 36:30:cc:e6:9f:2a:f6:ef:cb:0e:1c:75:53:d4:d2:ce:dc:1a: ef:20:e6:d8:86:7f:e7:e1:81:83:9e:a8:b0:8e:4f:a3:28:5c: d5:bf:94:0f:98:99:75:b2:76:9f:0b:4b:75:1b:2a:9e:aa:c2: 26:33:0e:f6:18:99:16:1e:85:cb:d9:87:d6:ed:3a:4a:46:f4: a5:d1:cf:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDI4MTExMC8GA1UEBRMoNzQxNjY2NjhCRTc2QjczNzU3NjMxNkU1NUQ5RTY0MzlF NjcxQ0Y0NzAeFw0yNTA1MzEwNzEyMDBaFw0yNTA2MDcwNzEyMDBaMBgxFjAUBgNV BAMTDTY4M2FhYmMxLTlkYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXbVp0T9EkjI+RUsI7XawGCg1jKkjub/M6ZTmMiN0CZVfGUEOLxLb9B2xbW0E3 /ImR59gSYsYpFHblu+2gpO46kukS4KOcNER8fMIjX+GdU91EjM18B4eksG5BMWsE 3BpKP0BIJZx6qSI1jnYRxqxN40QzCUaAZ0sw0lGRobZLohgr7qXCkoU38DUiNWvn TMPD6og545SB6wraSANvraV0Ur1TvYYOnAC+n4VtAlojMH/1VO9+yZ1IU7L4ESIA ViMDVRfhG+M87T4131C79s85N21kqvtiIW39PPpVEjNINSenHKptz2Jx/GcpVk77 aI/e9PbaY5CfFvWovKDoUGhfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS6UBz9fZ AYl7rZsY7k2S9jffc1QwHwYDVR0jBBgwFoAUdBZmaL52tzdXYxblXZ5kOeZxz0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMjgxL0ZCNDIxNkU4RjI3 MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpkWFl4YmxYWjVrT2VaeHow Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEJabWFMNTJ0emRYWXhibFhaNWtPZVp4ejBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MjgxL0ZCNDIxNkU4RjI3MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpk WFl4YmxYWjVrT2VaeHowYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEIJttY5suJThzkg9IZ7dEvyvmID29r6SZRb8TEzHbcqFT4N6i0BLNYf uexRUryoYxspUf4jW66/9L+ZrgGy0c00aX6M0IxLU5GKM/xUBTJBE5rmDar8n4hU 1kXZREwreC+je3+rYyVc5ts1z7IoMIyeZjR9QSIrhQTqArtcXzRJX+wwLuBj+abP a4+6P+RaQql+8VaexU8qUTNUld9Nc43JiV5F7xHeL0llWtu7Tm9jnu/NqzYwzOaf Kvbvyw4cdVPU0s7cGu8g5tiGf+fhgYOeqLCOT6MoXNW/lA+YmXWydp8LS3UbKp6q wiYzDvYYmRYehcvZh9btOkpG9KXRz4M= -----END CERTIFICATE-----Generated at Sat May 31 17:10:14 2025 by rpki-client