$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft File: A1Tb4e09meGUXicnS6L2A-tqF4E.mft (raw, json) Hash identifier: tiPNI6gv9SGgL9Q29NlbRWOduXg1k9isNDYjxUpEi/k= Subject key identifier: 1B:14:42:8A:D2:1F:6A:31:EF:3C:53:42:00:E4:D5:9C:AA:AD:60:9F Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft Manifest number: 0104 Signing time: Sat 31 May 2025 04:41:50 +0000 Manifest this update: Sat 31 May 2025 04:41:50 +0000 Manifest next update: Sat 07 Jun 2025 04:41:50 +0000 Files and hashes: 1: A1Tb4e09meGUXicnS6L2A-tqF4E.crl (hash: +czNVG5xEZlAm+He3eQYDInhtuVXuiMdrCUV++4YMMc=) 2: DDCCD058B35111EE96186E1EC4F9AE02.roa (hash: uxPFrv/qJkuVD9/YdePXL9+7rk2TcQQl1VlKRTfOD/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Validity Not Before: May 31 04:41:50 2025 GMT Not After : Jun 7 04:41:50 2025 GMT Subject: CN=683a888e-130b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:41:27:53:cf:50:d9:f2:bb:cf:3b:58:87:93: 28:a9:2a:ce:8e:2b:4e:03:5b:0a:9f:69:db:b6:1b: 6f:9d:11:ab:6a:44:dc:1f:84:e9:64:b8:66:46:5b: a6:19:97:8b:54:5f:36:ac:00:44:bf:9d:92:8f:30: 75:17:30:e4:82:b3:dd:c8:e3:47:d8:d5:3d:81:16: 1b:2c:1a:a5:ac:eb:f2:39:5f:6f:06:e5:30:c5:6e: 39:b8:2d:44:87:18:47:77:64:2d:68:71:a9:67:67: 53:79:1b:12:d2:f0:ce:4c:c5:f5:f3:1e:d3:af:a1: 0d:79:a6:15:93:0b:f0:cf:d1:82:8a:f0:ed:84:d8: 07:14:b9:76:15:d5:28:4f:01:ef:7a:26:56:2d:ae: bc:d4:ad:b5:82:4e:47:62:b8:25:be:07:d2:04:29: 6a:b3:fe:5b:ba:43:d4:b4:11:52:6a:44:32:75:8a: 95:07:39:73:de:8c:ab:e4:ae:7e:04:87:f8:14:7b: b6:ab:03:2a:4e:fb:99:23:16:f5:57:6d:aa:1d:f1: 04:a2:dd:ec:f7:d3:98:13:cc:19:ef:6c:87:32:01: f8:8d:41:b1:00:69:86:e9:11:e2:6e:ea:bc:e0:0f: 4a:58:dd:2c:77:c9:58:bc:36:31:26:c1:82:16:bc: 82:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:14:42:8A:D2:1F:6A:31:EF:3C:53:42:00:E4:D5:9C:AA:AD:60:9F X509v3 Authority Key Identifier: keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d9:d2:e4:16:7f:1c:66:c9:14:b1:7b:75:1e:22:7f:9e:bb: 42:6f:52:90:b7:d1:41:0b:26:ff:a7:23:79:6f:18:7c:f0:e4: d2:a9:e2:3e:68:95:56:80:68:26:d5:f0:e4:87:ce:7d:52:7c: ea:61:e9:dc:49:81:b3:c1:e9:10:27:aa:b2:9a:0f:f5:7a:01: bd:fa:8b:dd:a3:43:ec:fd:3a:ac:67:8d:71:a2:fe:ea:28:f6: df:f9:b3:0d:36:b1:3c:80:d4:aa:b7:8a:08:8b:96:0c:1c:98: 31:98:cc:93:11:db:8a:02:21:85:bb:aa:59:86:44:ad:9e:2b: 3b:c8:6f:3d:6e:ba:70:ef:14:e1:42:15:30:a3:19:81:f8:42: 26:39:f6:46:3e:cc:13:0d:03:ba:aa:ea:81:65:91:4d:cf:be: 37:a2:a4:fb:85:44:b6:18:46:45:2e:4e:18:41:d5:5d:4b:cc: c6:e9:48:03:73:a7:6a:99:b4:01:b0:8e:5b:51:ab:dd:da:90: 1f:93:3a:6f:d4:20:95:4a:ef:ca:b5:00:bd:71:59:87:9f:c0: f9:e8:c8:fd:f7:e2:93:51:c8:86:03:4c:36:d0:83:47:f7:3a: 0e:58:27:74:e1:e9:44:8c:77:a1:72:20:3a:93:1d:57:b2:d8: cc:5e:2d:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNjcxMTAvBgNVBAUTKDAzNTREQkUxRUQzRDk5RTE5NDVFMjcyNzRCQTJGNjAz RUI2QTE3ODEwHhcNMjUwNTMxMDQ0MTUwWhcNMjUwNjA3MDQ0MTUwWjAYMRYwFAYD VQQDEw02ODNhODg4ZS0xMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EEnU89Q2fK7zztYh5MoqSrOjitOA1sKn2nbthtvnRGrakTcH4TpZLhmRlum GZeLVF82rABEv52SjzB1FzDkgrPdyONH2NU9gRYbLBqlrOvyOV9vBuUwxW45uC1E hxhHd2QtaHGpZ2dTeRsS0vDOTMX18x7Tr6ENeaYVkwvwz9GCivDthNgHFLl2FdUo TwHveiZWLa681K21gk5HYrglvgfSBClqs/5bukPUtBFSakQydYqVBzlz3oyr5K5+ BIf4FHu2qwMqTvuZIxb1V22qHfEEot3s99OYE8wZ72yHMgH4jUGxAGmG6RHibuq8 4A9KWN0sd8lYvDYxJsGCFryC+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsUQorS H2ox7zxTQgDk1ZyqrWCfMB8GA1UdIwQYMBaAFANU2+HtPZnhlF4nJ0ui9gPraheB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE2Ny81NTExQUY2OEIz NTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1lR1VYaWNuUzZMMkEtdHFG NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ExVGI0ZTA5bWVHVVhpY25TNkwyQS10cUY0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE2Ny81NTExQUY2OEIzNTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1l R1VYaWNuUzZMMkEtdHFGNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR2dLkFn8cZskUsXt1HiJ/nrtCb1KQt9FBCyb/pyN5bxh88OTSqeI+ aJVWgGgm1fDkh859UnzqYencSYGzwekQJ6qymg/1egG9+ovdo0Ps/TqsZ41xov7q KPbf+bMNNrE8gNSqt4oIi5YMHJgxmMyTEduKAiGFu6pZhkStnis7yG89brpw7xTh QhUwoxmB+EImOfZGPswTDQO6quqBZZFNz743oqT7hUS2GEZFLk4YQdVdS8zG6UgD c6dqmbQBsI5bUavd2pAfkzpv1CCVSu/KtQC9cVmHn8D56Mj99+KTUciGA0w20INH 9zoOWCd04elEjHehciA6kx1XstjMXi2p -----END CERTIFICATE-----Generated at Sat May 31 17:06:25 2025 by rpki-client