$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft File: esDADw_KR57kZeT39UXoyUmT1hw.mft (raw, json) Hash identifier: Yt7ruOG/YK1zT3PW6QRAhZChsLoB5bX6ala1AxQ/FMg= Subject key identifier: A2:84:F3:2D:BA:2E:A5:C7:AF:63:2E:2C:42:99:0F:EB:A6:9E:7E:88 Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Certificate serial: 2449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft Manifest number: 241E Signing time: Sat 31 May 2025 15:46:53 +0000 Manifest this update: Sat 31 May 2025 15:46:53 +0000 Manifest next update: Sat 07 Jun 2025 15:46:53 +0000 Files and hashes: 1: esDADw_KR57kZeT39UXoyUmT1hw.crl (hash: w1gylOVNFXIRkhz8LMbH085Rc3VGgmjvNq/Qztmy1OY=) 2: E8976FF0928211EF8D2A551EC4F9AE02.roa (hash: ZQDzR5Xdny7JF3r/Zb16j0lL2mL345yAUojH7vcVjic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9289 (0x2449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Validity Not Before: May 31 15:46:53 2025 GMT Not After : Jun 7 15:46:53 2025 GMT Subject: CN=683b246d-ac9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:1c:9f:0d:16:5c:3e:90:03:2c:4b:f5:f1: b9:4b:06:a8:e9:fe:18:61:6e:d4:6c:1d:75:11:1a: 64:86:05:ef:c5:da:72:c3:60:66:18:70:99:4d:ae: 1d:48:25:6b:24:17:62:ef:54:a5:c9:1c:2a:62:af: 94:7c:51:e1:7d:16:51:2f:a5:80:14:64:54:bb:5e: 35:12:3a:4f:0a:08:2f:6f:68:8c:a7:ee:fd:7e:7c: b1:b1:0e:b1:b3:5f:6b:f9:c6:ef:aa:7a:b5:82:22: c5:f3:68:e4:d8:f2:1f:3e:c0:d1:f3:32:3b:9d:d1: b7:80:a3:13:37:11:d2:0b:82:45:8c:0b:d7:b4:be: 8a:e7:94:03:7e:03:5c:e2:98:50:70:36:37:64:32: a4:f4:a5:d6:32:fb:32:56:f2:96:e7:23:ab:e4:8f: b0:2c:fd:7b:4a:48:03:64:00:dc:93:b8:50:72:5e: b2:8d:50:17:b8:93:5a:7d:12:eb:8f:1f:15:aa:20: 89:65:b1:0d:fb:da:36:28:a1:33:df:66:12:76:55: b2:b7:e2:53:0b:30:27:f2:f3:84:94:4d:1e:c6:37: dc:f0:71:6a:90:ea:0f:93:08:29:ba:10:ca:ff:4c: 54:39:8d:93:1a:51:1e:c5:f3:36:54:0d:a8:4a:68: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:84:F3:2D:BA:2E:A5:C7:AF:63:2E:2C:42:99:0F:EB:A6:9E:7E:88 X509v3 Authority Key Identifier: keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:72:ab:84:c0:7a:47:40:9a:d3:f9:64:7e:2a:e6:79:36:62: 25:9e:4f:03:d5:5b:2b:a4:29:70:ff:a3:77:ee:49:25:d9:9a: d1:d0:62:28:56:32:34:db:58:96:63:01:1f:11:ee:c4:e1:66: b7:65:46:f0:a4:e3:d5:cf:de:c9:15:e9:2e:a0:2b:11:75:0b: c3:67:62:88:a1:9a:f7:48:77:74:d6:38:96:ab:f7:03:31:26: f2:3a:16:e1:7e:06:b2:26:81:41:d9:5b:09:e6:a1:31:bb:58: f6:fc:85:0a:93:13:43:fc:43:fe:49:d8:c7:c8:77:fd:04:35: 58:ef:f2:67:91:ab:d0:fa:33:70:51:1e:1b:db:23:91:86:e9: 30:51:df:d2:d5:b8:c2:ca:cc:27:4e:42:43:bc:3b:26:f2:10: b2:49:5c:f9:45:0e:20:38:79:ab:35:fe:56:4d:8b:22:0a:50: 1b:17:74:28:82:fd:0b:28:40:15:c6:3f:78:d3:18:4b:35:1b: 68:55:80:82:92:ac:c1:f5:3b:de:0d:9d:36:d2:85:c4:82:7a: 01:6d:48:16:21:17:5a:a7:d1:73:f7:3b:71:18:dc:06:c1:1c: e7:ec:1c:d7:10:c0:b7:d5:5c:13:99:1f:56:e1:1d:01:f3:ed: a1:f5:73:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5 NDk5M0Q2MUMwHhcNMjUwNTMxMTU0NjUzWhcNMjUwNjA3MTU0NjUzWjAYMRYwFAYD VQQDEw02ODNiMjQ2ZC1hYzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk0cnw0WXD6QAyxL9fG5Swao6f4YYW7UbB11ERpkhgXvxdpyw2BmGHCZTa4d SCVrJBdi71SlyRwqYq+UfFHhfRZRL6WAFGRUu141EjpPCggvb2iMp+79fnyxsQ6x s19r+cbvqnq1giLF82jk2PIfPsDR8zI7ndG3gKMTNxHSC4JFjAvXtL6K55QDfgNc 4phQcDY3ZDKk9KXWMvsyVvKW5yOr5I+wLP17SkgDZADck7hQcl6yjVAXuJNafRLr jx8VqiCJZbEN+9o2KKEz32YSdlWyt+JTCzAn8vOElE0exjfc8HFqkOoPkwgpuhDK /0xUOY2TGlEexfM2VA2oSmjnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKE8y26 LqXHr2MuLEKZD+umnn6IMB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1 MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81QUZDMjY5MjY1MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1 N2taZVQzOVVYb3lVbVQxaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjcquEwHpHQJrT+WR+KuZ5NmIlnk8D1VsrpClw/6N37kkl2ZrR0GIo VjI021iWYwEfEe7E4Wa3ZUbwpOPVz97JFekuoCsRdQvDZ2KIoZr3SHd01jiWq/cD MSbyOhbhfgayJoFB2VsJ5qExu1j2/IUKkxND/EP+SdjHyHf9BDVY7/JnkavQ+jNw UR4b2yORhukwUd/S1bjCyswnTkJDvDsm8hCySVz5RQ4gOHmrNf5WTYsiClAbF3Qo gv0LKEAVxj940xhLNRtoVYCCkqzB9TveDZ020oXEgnoBbUgWIRdap9Fz9ztxGNwG wRzn7BzXEMC31VwTmR9W4R0B8+2h9XNb -----END CERTIFICATE-----Generated at Sat May 31 17:32:55 2025 by rpki-client