$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft File: hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json) Hash identifier: lo38i1Us3v0E9sIu0X6mGZIYkY97lbmGNFYTanfoCD4= Subject key identifier: DE:12:8D:4F:DF:2E:63:2B:91:CA:06:7E:44:6B:EC:82:55:C3:3D:C0 Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA Certificate issuer: /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft Manifest number: C5 Signing time: Sat 31 May 2025 05:25:47 +0000 Manifest this update: Sat 31 May 2025 05:25:47 +0000 Manifest next update: Sat 07 Jun 2025 05:25:47 +0000 Files and hashes: 1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: yj6G6uCdR0/wj+Bpub5GQnOe6BM0tu5f/Xs4bfGPTQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Validity Not Before: May 31 05:25:47 2025 GMT Not After : Jun 7 05:25:47 2025 GMT Subject: CN=683a92db-e6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:e7:bf:10:58:55:7f:93:77:e1:d3:32:c3: 94:f0:fb:c5:1a:d9:e0:73:74:66:52:1e:7b:db:6e: 61:d0:5f:7b:80:19:13:ab:78:03:86:af:47:8e:05: 84:28:ae:8b:64:bd:48:d4:96:49:4e:fb:e4:92:b1: c0:cb:46:56:ed:b4:73:8e:cb:4f:2e:a6:69:b8:9f: 19:76:75:6c:dd:4e:9e:de:0e:8c:11:1e:b4:84:67: 26:c7:f9:bf:74:c9:ad:56:e5:99:00:24:ba:dd:bd: e4:b8:3d:38:7b:c5:a3:44:59:43:87:84:50:20:56: e8:07:53:e2:a4:7b:45:c2:93:93:3c:bd:ee:f8:fa: 91:df:8c:1d:cd:d5:60:83:94:a9:cf:10:c0:cc:52: 38:7a:e4:54:2d:8a:a1:3a:62:ed:7a:b0:ec:7f:4b: 25:4d:d1:01:64:82:d7:90:67:f7:3e:36:a6:1c:ca: 0a:4a:8a:e7:e2:0c:ec:7b:5f:a1:32:50:32:33:82: d2:66:a3:13:e9:bd:36:0b:1e:d1:b3:a6:d4:72:b9: 6a:33:d8:2b:5f:43:2c:3f:91:72:00:cc:c7:e3:af: 88:12:e2:8d:5e:0f:62:5a:b6:91:d8:e4:80:a4:db: ef:ef:aa:cb:b6:c1:79:e6:8f:ef:56:05:29:2f:c1: 4f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:12:8D:4F:DF:2E:63:2B:91:CA:06:7E:44:6B:EC:82:55:C3:3D:C0 X509v3 Authority Key Identifier: keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2b:f6:b5:79:72:75:53:1f:ba:48:42:a5:f9:5c:ca:fe:77: 5a:aa:4f:e0:df:31:bb:03:36:48:8b:d1:e6:06:72:cf:9c:77: 21:53:13:33:67:1d:2b:ae:32:d7:a9:cf:2d:57:67:39:d7:24: 1e:3f:71:66:b3:34:8a:3d:62:00:60:41:96:d5:4f:ae:7c:b0: 54:e7:3f:05:82:6d:3f:3a:f4:c2:cf:b1:ad:e2:e0:db:6c:b0: 92:95:65:24:c0:19:95:de:fe:b3:b2:74:d7:f0:8a:9a:31:b6: 76:50:0e:cb:6a:8a:c2:33:c8:47:ae:d0:6f:26:ad:be:8a:8f: 5f:87:c9:f4:91:47:f3:87:7b:bd:1e:46:ca:7c:d3:14:ea:be: f6:8d:cd:bc:3e:60:7b:82:fc:17:8a:97:a9:b1:d8:02:cd:57: 74:de:4d:a4:85:06:02:27:fb:b4:07:a7:8f:02:0b:ee:86:2c: 0f:90:42:07:36:48:66:2d:bf:32:eb:22:d9:86:c8:76:6d:e6: 5b:11:97:55:f3:ec:14:de:fe:b0:df:ba:c7:33:26:ff:97:f0: 68:84:ee:45:ee:45:d3:20:a5:23:39:a5:21:d3:95:c1:2f:e3: ac:79:82:a7:d9:2c:9a:c9:87:9a:e8:46:9c:96:51:17:f0:b3: 4a:82:93:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDg0MzI0N0MwQUMxODFGQzM2NjY2QTQ0MzcyMUFGMjFE OURBNjUwREEwHhcNMjUwNTMxMDUyNTQ3WhcNMjUwNjA3MDUyNTQ3WjAYMRYwFAYD VQQDEw02ODNhOTJkYi1lNmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6bnvxBYVX+Td+HTMsOU8PvFGtngc3RmUh57225h0F97gBkTq3gDhq9HjgWE KK6LZL1I1JZJTvvkkrHAy0ZW7bRzjstPLqZpuJ8ZdnVs3U6e3g6MER60hGcmx/m/ dMmtVuWZACS63b3kuD04e8WjRFlDh4RQIFboB1PipHtFwpOTPL3u+PqR34wdzdVg g5SpzxDAzFI4euRULYqhOmLterDsf0slTdEBZILXkGf3PjamHMoKSorn4gzse1+h MlAyM4LSZqMT6b02Cx7Rs6bUcrlqM9grX0MsP5FyAMzH46+IEuKNXg9iWraR2OSA pNvv76rLtsF55o/vVgUpL8FPnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4SjU/f LmMrkcoGfkRr7IJVwz3AMB8GA1UdIwQYMBaAFIQyR8CsGB/DZmakQ3Ia8h2dplDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9CQzUyMUE1NDE5 MEExMUVGQTkwRUM5MjlDNEY5QUUwMi9oREpId0t3WUg4Tm1acVJEY2hyeUhaMm1V Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hESkh3S3dZSDhObVpxUkRjaHJ5SFoybVVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9CQzUyMUE1NDE5MEExMUVGQTkwRUM5MjlDNEY5QUUwMi9oREpId0t3WUg4 Tm1acVJEY2hyeUhaMm1VTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbK/a1eXJ1Ux+6SEKl+VzK/ndaqk/g3zG7AzZIi9HmBnLPnHchUxMz Zx0rrjLXqc8tV2c51yQeP3FmszSKPWIAYEGW1U+ufLBU5z8Fgm0/OvTCz7Gt4uDb bLCSlWUkwBmV3v6zsnTX8IqaMbZ2UA7LaorCM8hHrtBvJq2+io9fh8n0kUfzh3u9 HkbKfNMU6r72jc28PmB7gvwXipepsdgCzVd03k2khQYCJ/u0B6ePAgvuhiwPkEIH NkhmLb8y6yLZhsh2beZbEZdV8+wU3v6w37rHMyb/l/BohO5F7kXTIKUjOaUh05XB L+OseYKn2SyayYea6EacllEX8LNKgpP7 -----END CERTIFICATE-----Generated at Sat May 31 16:32:11 2025 by rpki-client