$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft File: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json) Hash identifier: 6DGL47FWPrbyZ5T7AUv8Kh/08ho8iE+ORhpaZSABNik= Subject key identifier: 25:F0:7F:D6:97:37:E5:06:76:80:E6:CC:95:35:DF:B8:AC:47:0F:1D Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F Certificate issuer: /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft Manifest number: 057E Signing time: Fri 30 May 2025 23:29:59 +0000 Manifest this update: Fri 30 May 2025 23:29:59 +0000 Manifest next update: Fri 06 Jun 2025 23:29:59 +0000 Files and hashes: 1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: qBLY8jKRnRZo5P5b6gn1S+NWQA0ppqOJrWNTHTRRvqI=) 2: 05A2A4008FE811EEACB1296AC4F9AE02.roa (hash: OvWek+7GoTr0MOzRQOUQXIl3oHCUTRccIlCGDYFLUR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F Validity Not Before: May 30 23:29:59 2025 GMT Not After : Jun 6 23:29:59 2025 GMT Subject: CN=683a3f77-18c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:4a:40:5b:52:c6:3f:1d:11:d3:16:fa:e7: 5b:7b:5f:10:0c:78:08:a1:6c:0c:5d:1f:de:bb:e5: 9d:33:7b:9d:00:d5:a8:0e:24:d1:14:c5:d1:0b:50: 64:86:d6:52:0d:03:2e:0e:b1:ec:1f:cd:6d:58:47: ce:46:d3:9f:22:c2:c3:30:97:23:96:d9:02:f5:e3: 43:07:af:66:08:dd:69:b5:b2:7f:08:53:8b:26:13: a2:2c:0c:b2:42:de:bd:56:1b:41:91:12:02:50:80: 5a:66:7f:a9:ef:44:45:6a:84:6e:3e:ad:e2:a0:45: 46:f4:35:bd:b5:0f:25:f7:5a:38:88:2d:8c:b2:50: 21:34:15:99:4e:4f:24:4c:53:ef:11:15:b6:2f:0a: 7f:5e:70:73:f6:77:a7:53:c6:40:aa:bb:f3:1c:84: 7d:47:49:93:92:f0:59:98:5e:d5:c7:fa:de:46:18: 25:c2:be:c4:47:9b:4f:7e:68:fe:c5:c9:67:6c:c4: 71:1f:4c:15:bf:29:52:d9:99:bc:aa:f6:58:a2:97: 2b:cd:85:24:00:7d:92:30:39:04:50:97:00:c6:5b: 43:c4:b3:e1:1f:8b:46:3a:f7:0f:28:06:06:4c:96: 71:49:1e:f4:13:de:9f:37:d9:b6:9d:40:f7:c8:17: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F0:7F:D6:97:37:E5:06:76:80:E6:CC:95:35:DF:B8:AC:47:0F:1D X509v3 Authority Key Identifier: keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:0a:4e:09:f8:1d:54:c3:96:ce:89:ef:99:cb:ad:52:f8:59: 26:65:f1:7c:0d:a6:cf:b9:0a:2c:97:6f:f3:f7:68:8f:fc:d4: f8:13:2c:94:a6:f2:f4:1c:14:93:32:8a:ec:36:af:ca:81:41: fa:cd:27:f2:9b:c1:55:12:89:b3:d2:4a:dd:f4:0e:b4:3d:e7: 58:d7:43:02:1d:38:01:48:8b:a3:5d:2c:27:f7:ef:04:77:ce: 8a:6f:6a:59:6d:ad:51:69:8d:a2:5f:b8:c9:97:cf:31:3c:e5: d3:90:e2:bd:63:51:2c:9c:32:76:09:5f:08:37:fb:5a:d4:a4: 2a:fa:2a:37:c4:a5:f2:15:13:1f:4d:df:ca:64:15:34:b0:4c: 60:ea:4a:55:8f:f7:f2:35:ec:d8:3e:d7:bc:1c:95:b7:71:9c: d6:2b:1e:82:92:01:b5:33:97:9a:cb:97:b9:92:af:36:82:f8: 97:bb:e2:59:37:5c:d4:be:cd:07:78:0a:1e:03:f9:8b:0a:97: 17:37:ac:da:c5:78:57:b4:26:ed:5a:85:2a:53:46:20:f0:ff: 42:b0:76:98:ea:71:dc:f8:71:ba:b7:32:46:77:f9:95:e7:ff: 1e:7e:36:dc:d4:48:79:fc:04:83:c3:5e:3f:db:a5:cc:9c:43: d4:96:6a:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQkUxMTAvBgNVBAUTKEQ3MEU1OTRCODFBMTY1OEMyQURERjRBMzI2OEVGOUNG MDhGOTY1MEYwHhcNMjUwNTMwMjMyOTU5WhcNMjUwNjA2MjMyOTU5WjAYMRYwFAYD VQQDEw02ODNhM2Y3Ny0xOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvr5KQFtSxj8dEdMW+udbe18QDHgIoWwMXR/eu+WdM3udANWoDiTRFMXRC1Bk htZSDQMuDrHsH81tWEfORtOfIsLDMJcjltkC9eNDB69mCN1ptbJ/CFOLJhOiLAyy Qt69VhtBkRICUIBaZn+p70RFaoRuPq3ioEVG9DW9tQ8l91o4iC2MslAhNBWZTk8k TFPvERW2Lwp/XnBz9nenU8ZAqrvzHIR9R0mTkvBZmF7Vx/reRhglwr7ER5tPfmj+ xclnbMRxH0wVvylS2Zm8qvZYopcrzYUkAH2SMDkEUJcAxltDxLPhH4tGOvcPKAYG TJZxSR70E96fN9m2nUD3yBcHBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXwf9aX N+UGdoDmzJU137isRw8dMB8GA1UdIwQYMBaAFNcOWUuBoWWMKt30oyaO+c8I+WUP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZCRS83NDIyMzcwNkRB RkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZd3EzZlNqSm83NXp3ajVa UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF3NVpTNEdoWll3cTNmU2pKbzc1endqNVpROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZCRS83NDIyMzcwNkRBRkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZ d3EzZlNqSm83NXp3ajVaUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVCk4J+B1Uw5bOie+Zy61S+FkmZfF8DabPuQosl2/z92iP/NT4EyyU pvL0HBSTMorsNq/KgUH6zSfym8FVEomz0krd9A60PedY10MCHTgBSIujXSwn9+8E d86Kb2pZba1RaY2iX7jJl88xPOXTkOK9Y1EsnDJ2CV8IN/ta1KQq+io3xKXyFRMf Td/KZBU0sExg6kpVj/fyNezYPte8HJW3cZzWKx6CkgG1M5eay5e5kq82gviXu+JZ N1zUvs0HeAoeA/mLCpcXN6zaxXhXtCbtWoUqU0Yg8P9CsHaY6nHc+HG6tzJGd/mV 5/8efjbc1Eh5/ASDw14/26XMnEPUlmoL -----END CERTIFICATE-----Generated at Sat May 31 17:51:38 2025 by rpki-client