$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft File: utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json) Hash identifier: gFMIbPc6FZAxeqcRUifTZTxpWBD9ELzBAz/PVKWhVJo= Subject key identifier: DA:B5:D0:8D:EB:69:58:C6:DF:DA:BA:23:1D:54:6A:5B:07:80:B0:67 Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A Certificate issuer: /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft Manifest number: 01E0 Signing time: Sat 31 May 2025 02:22:39 +0000 Manifest this update: Sat 31 May 2025 02:22:39 +0000 Manifest next update: Sat 07 Jun 2025 02:22:39 +0000 Files and hashes: 1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: Q5jkLoKE/7NyL1VRU31eQrQV3ON3i3Qeehe7paNvha0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5A49, serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A Validity Not Before: May 31 02:22:39 2025 GMT Not After : Jun 7 02:22:39 2025 GMT Subject: CN=683a67ef-c857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:95:e3:b5:7e:c1:b1:5b:ea:4a:b8:5f:fc:e0: c3:4a:7b:15:e7:e0:44:4f:2f:dc:19:43:68:c4:8e: 72:65:6d:b7:8b:5a:a8:62:87:f4:86:59:ab:83:47: 11:2f:08:bf:4c:46:be:7f:34:b0:f1:5b:c4:35:71: 0d:a3:c3:e5:df:af:4c:a7:50:73:b8:1e:d3:f0:88: de:d7:6c:5c:f9:62:bf:36:96:93:68:80:b2:77:d8: ce:9e:a2:5b:2a:90:f8:c4:05:39:35:50:7d:d2:27: 82:eb:41:92:b2:42:5d:66:ca:58:cf:c2:11:7e:dc: 62:43:7e:35:5f:6b:c4:9f:dd:d5:95:66:19:a2:d4: ac:b6:83:f3:07:62:e5:9a:83:dc:24:9b:ab:31:ad: 1a:a7:54:c8:9f:01:fc:5c:ed:d1:0c:13:19:67:ff: dc:29:43:4b:22:a9:d0:cc:0a:19:ef:c7:e6:06:b6: 5e:a0:b7:f2:72:09:70:bb:d1:6e:aa:fe:34:43:e9: 25:11:55:f7:55:74:89:17:e9:63:8a:e4:85:4f:67: ed:fc:fe:29:e3:3e:bf:b4:ee:24:ac:02:24:48:2e: 52:0b:68:a1:91:cd:35:61:73:70:1e:3b:9e:f4:56: 5b:d7:d9:d0:44:2d:37:b2:57:ed:db:60:88:2a:43: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B5:D0:8D:EB:69:58:C6:DF:DA:BA:23:1D:54:6A:5B:07:80:B0:67 X509v3 Authority Key Identifier: keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:18:c8:c1:51:09:f5:ad:d3:39:c4:b9:c7:2f:50:28:af:03: 6d:69:51:68:d4:e3:f8:88:74:96:d4:b1:ba:e0:e9:98:56:6e: 2c:4b:a4:4c:78:d6:8b:5d:65:4b:4c:18:39:13:d1:df:74:7b: c5:e4:29:72:42:57:eb:5b:8c:b3:8b:48:17:d4:ba:b1:d4:1e: fd:2b:13:a5:90:b4:7c:73:e3:af:f5:99:cd:0d:7b:6f:b1:d1: 48:30:43:b8:da:5b:b8:b3:dd:75:7d:7d:d6:91:8c:04:34:66: 27:81:ec:74:d9:07:63:13:b2:27:c4:93:df:c8:c9:ba:40:d9: b7:f0:9b:79:b2:f1:fd:eb:ae:2e:cc:d8:87:bc:2a:92:e7:b0: b4:d1:57:3d:9c:67:22:09:1c:20:05:37:c6:fe:e0:39:0e:e8: 3b:fd:9a:4f:db:3a:ba:48:8e:37:49:9b:cc:bf:32:95:3a:fc: bb:e8:6f:c9:4d:ab:65:c5:62:b5:af:07:a6:74:9f:9b:c3:82: ea:3c:1a:e6:6e:4a:a0:e7:6e:e1:2e:55:66:d5:3f:cb:75:64: 6b:83:01:d7:aa:d2:5a:df:b9:66:e4:38:a0:6a:58:0c:c2:b0: 75:7b:45:c8:67:0e:e5:46:d8:1f:68:96:a1:3f:f5:eb:60:b0: f9:4c:3d:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBNDkxMTAvBgNVBAUTKEJBRDYzRUMwNUEwMzE4Rjk3RjMxNTZGMkUyMDU5QzYx OTNDRTM4MEEwHhcNMjUwNTMxMDIyMjM5WhcNMjUwNjA3MDIyMjM5WjAYMRYwFAYD VQQDEw02ODNhNjdlZi1jODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pXjtX7BsVvqSrhf/ODDSnsV5+BETy/cGUNoxI5yZW23i1qoYof0hlmrg0cR Lwi/TEa+fzSw8VvENXENo8Pl369Mp1BzuB7T8Ije12xc+WK/NpaTaICyd9jOnqJb KpD4xAU5NVB90ieC60GSskJdZspYz8IRftxiQ341X2vEn93VlWYZotSstoPzB2Ll moPcJJurMa0ap1TInwH8XO3RDBMZZ//cKUNLIqnQzAoZ78fmBrZeoLfycglwu9Fu qv40Q+klEVX3VXSJF+ljiuSFT2ft/P4p4z6/tO4krAIkSC5SC2ihkc01YXNwHjue 9FZb19nQRC03slft22CIKkNTVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNq10I3r aVjG39q6Ix1UalsHgLBnMB8GA1UdIwQYMBaAFLrWPsBaAxj5fzFW8uIFnGGTzjgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUE0OS9GOTEzMURBNjU4 QTYxMUVEQTJCQjIwNjBDNEY5QUUwMi91dFktd0ZvREdQbF9NVmJ5NGdXY1laUE9P QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V0WS13Rm9ER1BsX01WYnk0Z1djWVpQT09Bby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUE0OS9GOTEzMURBNjU4QTYxMUVEQTJCQjIwNjBDNEY5QUUwMi91dFktd0ZvREdQ bF9NVmJ5NGdXY1laUE9PQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDuGMjBUQn1rdM5xLnHL1AorwNtaVFo1OP4iHSW1LG64OmYVm4sS6RM eNaLXWVLTBg5E9HfdHvF5ClyQlfrW4yzi0gX1Lqx1B79KxOlkLR8c+Ov9ZnNDXtv sdFIMEO42lu4s911fX3WkYwENGYngex02QdjE7InxJPfyMm6QNm38Jt5svH9664u zNiHvCqS57C00Vc9nGciCRwgBTfG/uA5Dug7/ZpP2zq6SI43SZvMvzKVOvy76G/J TatlxWK1rwemdJ+bw4LqPBrmbkqg527hLlVm1T/LdWRrgwHXqtJa37lm5DigalgM wrB1e0XIZw7lRtgfaJahP/XrYLD5TD3J -----END CERTIFICATE-----Generated at Sat May 31 17:23:38 2025 by rpki-client