$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft File: d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json) Hash identifier: wNI20Cjf3zQkM3oJK5OXJ8R/b6T+Rwk1UtegFRdl2y0= Subject key identifier: 2B:23:95:04:F8:CE:65:9F:5D:66:57:E5:B7:22:53:E6:A8:B7:53:5E Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 Certificate issuer: /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft Manifest number: 03E5 Signing time: Sat 31 May 2025 00:43:59 +0000 Manifest this update: Sat 31 May 2025 00:43:58 +0000 Manifest next update: Sat 07 Jun 2025 00:43:58 +0000 Files and hashes: 1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: r0pM5Em/fnR5qnw2z3lP1d/xhXE/0OeBMitaa7If8tI=) 2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: gxyFLyvg9iXUzDVt1BFdSUDwgh1JJfmLmwnyPeOCm3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9EAC, serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Validity Not Before: May 31 00:43:58 2025 GMT Not After : Jun 7 00:43:58 2025 GMT Subject: CN=683a50ce-29be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:0b:e6:40:97:4d:14:31:80:89:2d:19:22: 6b:cb:32:11:32:74:25:cc:8b:08:0b:fa:09:93:89: 4d:aa:86:9e:6a:3a:ee:56:47:26:b7:0d:07:de:01: 6f:aa:3e:7a:80:4d:aa:32:1b:57:51:45:49:74:33: e7:d0:4b:d4:17:db:ab:74:3c:62:4c:bc:ec:8c:f2: 0e:5b:2d:cd:a6:e5:e5:ab:fe:1f:a2:8f:38:0c:43: 8b:0c:ef:3f:cd:dc:47:10:2a:0c:0a:5c:8d:a6:2e: c1:bf:c5:99:b1:6a:36:29:2d:fc:2c:df:a0:7c:26: a0:2d:62:44:43:22:64:cf:8b:0d:35:0f:77:22:d0: 9b:62:4d:75:2d:78:53:ac:99:61:23:7a:25:cd:ec: f0:55:d9:49:0d:a3:63:2f:f5:be:51:4d:f4:c8:d2: 0d:f6:65:81:7d:48:b2:b2:b6:cf:6d:a6:22:08:1a: b1:6c:02:6b:ba:bb:de:fc:30:3b:d9:5e:b7:0b:a8: 32:a1:40:c1:ba:90:82:62:7f:b4:10:d6:e3:87:5f: 95:a3:c8:78:62:17:98:59:13:0e:43:5b:b9:48:6f: 8b:88:67:a3:26:75:3d:89:83:85:5f:be:e2:83:ba: 6a:d0:ef:73:ff:6b:1d:ea:e2:1f:1a:d8:78:6a:d9: 55:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:23:95:04:F8:CE:65:9F:5D:66:57:E5:B7:22:53:E6:A8:B7:53:5E X509v3 Authority Key Identifier: keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:7e:60:54:d3:f5:33:40:95:ba:b1:c6:45:91:a9:be:47:f6: 2a:ad:4a:b7:49:a7:d3:17:ed:9c:0e:82:f2:c1:de:ff:61:87: 9d:84:18:05:f2:45:ca:87:64:a9:68:0f:58:c6:0a:2a:c5:77: cb:9a:9f:06:09:d3:19:f3:84:83:e7:e6:3c:06:b2:59:3e:ae: 8e:77:77:92:e3:eb:5a:d9:a4:98:d3:ff:a5:6d:e1:60:6d:54: 98:fa:f6:a9:3e:c5:57:63:89:47:cd:4d:29:10:f6:5d:e7:5a: 3a:3c:48:8e:fd:a8:f8:1e:7d:fd:0b:88:28:b1:e7:92:57:e3: c0:12:04:48:7c:82:d1:f2:b8:3e:af:0f:43:4e:9e:a2:c5:c9: a4:ab:73:75:0d:5f:09:70:51:84:70:c6:6e:53:e5:67:9b:53: e9:78:18:be:aa:dc:91:d4:a3:ae:43:a2:80:30:d3:55:8a:68: 0b:16:6f:40:ad:a2:c4:9e:8f:e6:bb:89:6a:b5:66:af:61:26: c3:89:9a:8c:86:d1:56:11:21:ad:55:5c:bb:38:20:97:a4:25: c6:e5:3d:40:87:0c:eb:49:d1:49:06:bb:ca:38:5f:3d:cc:3f: a3:2b:46:31:f9:c5:78:84:09:f1:88:8f:7f:82:79:87:99:12: 6b:20:3c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFQUMxMTAvBgNVBAUTKDc3QjREODM4QjdEMjI5RkQxQzc0RDU1ODJDNzM1RTkx QjU2N0I1RTIwHhcNMjUwNTMxMDA0MzU4WhcNMjUwNjA3MDA0MzU4WjAYMRYwFAYD VQQDEw02ODNhNTBjZS0yOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCIL5kCXTRQxgIktGSJryzIRMnQlzIsIC/oJk4lNqoaeajruVkcmtw0H3gFv qj56gE2qMhtXUUVJdDPn0EvUF9urdDxiTLzsjPIOWy3NpuXlq/4foo84DEOLDO8/ zdxHECoMClyNpi7Bv8WZsWo2KS38LN+gfCagLWJEQyJkz4sNNQ93ItCbYk11LXhT rJlhI3olzezwVdlJDaNjL/W+UU30yNIN9mWBfUiysrbPbaYiCBqxbAJrurve/DA7 2V63C6gyoUDBupCCYn+0ENbjh1+Vo8h4YheYWRMOQ1u5SG+LiGejJnU9iYOFX77i g7pq0O9z/2sd6uIfGth4atlVEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsjlQT4 zmWfXWZX5bciU+aot1NeMB8GA1UdIwQYMBaAFHe02Di30in9HHTVWCxzXpG1Z7Xi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUVBQy81RDQ1MEZBRTdG NDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tmMGNkTlZZTEhOZWtiVm50 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q3VFlPTGZTS2YwY2ROVllMSE5la2JWbnRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUVBQy81RDQ1MEZBRTdGNDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tm MGNkTlZZTEhOZWtiVm50ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1fmBU0/UzQJW6scZFkam+R/YqrUq3SafTF+2cDoLywd7/YYedhBgF 8kXKh2SpaA9YxgoqxXfLmp8GCdMZ84SD5+Y8BrJZPq6Od3eS4+ta2aSY0/+lbeFg bVSY+vapPsVXY4lHzU0pEPZd51o6PEiO/aj4Hn39C4goseeSV+PAEgRIfILR8rg+ rw9DTp6ixcmkq3N1DV8JcFGEcMZuU+Vnm1PpeBi+qtyR1KOuQ6KAMNNVimgLFm9A raLEno/mu4lqtWavYSbDiZqMhtFWESGtVVy7OCCXpCXG5T1AhwzrSdFJBrvKOF89 zD+jK0Yx+cV4hAnxiI9/gnmHmRJrIDxw -----END CERTIFICATE-----Generated at Sat May 31 16:47:47 2025 by rpki-client