$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json) Hash identifier: /g6QB0+kenKcxT5Hy2KkfBle0Ehc6xwYMQzCoBMaYpY= Subject key identifier: 3F:8E:6C:5F:62:DA:B6:87:6C:90:97:D2:9F:DD:D1:A5:D5:B1:97:7E Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 0899 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft Manifest number: 138D Signing time: Fri 30 May 2025 19:29:16 +0000 Manifest this update: Fri 30 May 2025 19:29:15 +0000 Manifest next update: Fri 06 Jun 2025 19:29:15 +0000 Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: tkgrVPZq4cO5OW/hwN1vvpp1Ww+tLUpjIs793Tk0P6Q=) 2: 98DE3894CCE411EFA6203F26C4F9AE02.roa (hash: VEO00g9Wl0SGw0f2i0cGvp6jjnbdvIYaLuu58A6mseU=) 3: 4E0A64703A3811F0ADB0050BC4F9AE02.roa (hash: Vqxb0PYOCR3C6cShr5awy3jVN80kFbWIBGbta/oK5uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2201 (0x899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: May 30 19:29:15 2025 GMT Not After : Jun 6 19:29:15 2025 GMT Subject: CN=683a070c-2b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:58:b9:62:b1:6e:59:33:2c:d7:2d:91:c9:4c: f7:5a:87:c6:ad:7e:2b:8a:b2:e6:58:9a:61:7b:6c: ec:2b:44:2a:fb:b9:b8:55:f7:a5:04:3b:1f:2d:f7: 48:88:4a:79:45:39:7e:72:b8:d2:46:26:e8:0b:34: bd:50:7e:ae:84:d4:68:07:7f:6a:0f:c0:1f:39:5a: 3b:36:7c:d7:04:6a:ad:cc:f6:c0:94:54:ca:52:2d: cc:fb:3c:64:24:e9:ee:92:60:06:73:da:b5:45:7e: db:6e:e2:31:fd:ce:4b:f1:b3:81:73:e4:b0:bc:1c: 54:6c:6d:ba:5e:c2:42:ae:a7:e2:a7:a3:55:f4:a2: 73:87:75:e1:3e:73:55:f3:b0:bb:cd:78:3c:be:6e: 0a:b7:1e:15:7a:e5:f0:ae:dc:32:44:3f:19:3d:4c: f6:91:95:eb:14:61:b8:e1:f4:86:5e:1c:d6:1d:30: 21:7b:bb:ce:75:d5:5e:c6:4c:5a:e3:c1:78:1d:57: 98:7b:31:18:ea:75:86:d3:b1:e1:3a:65:dd:a9:eb: 49:d2:de:e6:07:60:0d:3e:9c:39:6a:4b:06:de:e8: dc:96:e0:d0:d0:db:ca:dc:eb:0f:63:25:59:45:d1: 52:1e:c8:93:2e:af:a3:72:50:69:5e:dd:2c:37:da: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8E:6C:5F:62:DA:B6:87:6C:90:97:D2:9F:DD:D1:A5:D5:B1:97:7E X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fd:e6:d6:78:c3:4d:fe:91:56:b4:69:0e:d5:24:af:3b:33: 3a:66:74:5d:4d:b1:10:f7:73:4a:1f:46:6e:ce:94:95:f9:ba: 85:93:02:80:a8:7b:c0:0a:e5:05:a7:94:04:3b:89:d0:7a:a4: a2:30:91:70:da:75:7c:25:d2:dd:42:5f:6f:f3:6a:95:79:94: ee:b5:5a:59:83:a3:86:6e:ba:af:f5:66:61:40:e3:6f:b0:27: 81:45:7b:8a:ff:03:72:65:67:cf:1a:81:cf:fd:24:47:ca:ff: c9:0e:91:cd:f8:a7:5d:1c:92:45:38:e6:71:b0:f5:69:45:28: 1c:5c:54:7e:16:b6:3e:c3:97:71:b1:96:06:b6:51:f2:d0:58: 7a:84:fb:38:3e:74:45:01:13:47:7f:65:e4:b6:78:e4:30:8c: 0d:85:45:f4:9e:d1:5d:0d:44:ee:55:3e:3c:3c:31:5e:3e:51: d7:db:3c:74:5f:e8:7e:57:48:7e:6a:be:f9:2e:4f:ce:f1:11: 7b:cc:3a:ed:05:7f:30:94:dd:d7:6f:b0:77:2a:e7:88:c7:aa: 03:d5:a5:f7:6c:94:6c:56:26:d8:9b:21:f2:3e:44:61:e5:87: 04:8c:9e:96:50:87:cf:7f:8b:1c:6b:f3:1e:33:b8:30:0e:08: 10:b5:5c:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUwNTMwMTkyOTE1WhcNMjUwNjA2MTkyOTE1WjAYMRYwFAYD VQQDEw02ODNhMDcwYy0yYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Fi5YrFuWTMs1y2RyUz3WofGrX4rirLmWJphe2zsK0Qq+7m4VfelBDsfLfdI iEp5RTl+crjSRiboCzS9UH6uhNRoB39qD8AfOVo7NnzXBGqtzPbAlFTKUi3M+zxk JOnukmAGc9q1RX7bbuIx/c5L8bOBc+SwvBxUbG26XsJCrqfip6NV9KJzh3XhPnNV 87C7zXg8vm4Ktx4VeuXwrtwyRD8ZPUz2kZXrFGG44fSGXhzWHTAhe7vOddVexkxa 48F4HVeYezEY6nWG07HhOmXdqetJ0t7mB2ANPpw5aksG3ujcluDQ0NvK3OsPYyVZ RdFSHsiTLq+jclBpXt0sN9q7pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+ObF9i 2raHbJCX0p/d0aXVsZd+MB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN/ebWeMNN/pFWtGkO1SSvOzM6ZnRdTbEQ93NKH0ZuzpSV+bqFkwKA qHvACuUFp5QEO4nQeqSiMJFw2nV8JdLdQl9v82qVeZTutVpZg6OGbrqv9WZhQONv sCeBRXuK/wNyZWfPGoHP/SRHyv/JDpHN+KddHJJFOOZxsPVpRSgcXFR+FrY+w5dx sZYGtlHy0Fh6hPs4PnRFARNHf2XktnjkMIwNhUX0ntFdDUTuVT48PDFePlHX2zx0 X+h+V0h+ar75Lk/O8RF7zDrtBX8wlN3Xb7B3KueIx6oD1aX3bJRsVibYmyHyPkRh 5YcEjJ6WUIfPf4sca/MeM7gwDggQtVz2 -----END CERTIFICATE-----Generated at Sat May 31 16:52:11 2025 by rpki-client