$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: LwRw211Aj6FDgrRuvZNdWGe4QuoiOMWRFTRivKxtquU= Subject key identifier: 4F:B6:F7:F4:06:A8:84:F1:2F:3B:5D:DD:A5:DC:49:31:1D:A5:A0:56 Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 078E Signing time: Fri 30 May 2025 22:42:28 +0000 Manifest this update: Fri 30 May 2025 22:42:27 +0000 Manifest next update: Fri 06 Jun 2025 22:42:27 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: QaGIRx5opBY3mdcZoqmSc0sc/mAI1a1tsiy8FPUM9DY=) 2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: M0Fcljsjjstipss7xqc7MHaM40CrhRfp+Ko6GKTS2eY=) 3: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: /G2Mgl5uzW1IjI6PHih/zk+tlWLrMlnnVYCS55/UFdM=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: E4qGKWG7PfGIitr8iGGPNSOx9z6hB7rmiJDWW78bXko=) 5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: 5xpmMyySrXgvXThxY4s4oxrkg/HJvlh/5VD0HqrC+TE=) 6: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: ibBpC0J7xssLmpNwn4rG5DteNDNkqNer4WUY/po6k0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: May 30 22:42:27 2025 GMT Not After : Jun 6 22:42:27 2025 GMT Subject: CN=683a3453-e8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3f:86:e0:cc:d2:72:5e:a2:9f:fa:f1:9c:cf: 9b:1b:18:4d:80:ed:1e:fa:20:c9:ee:b2:5d:04:67: 96:51:cd:dc:03:b3:85:e1:1f:2d:c3:98:f8:1b:00: 5f:0f:2b:9b:50:31:1a:0b:cf:95:ef:60:bc:3f:b2: 46:0a:b2:b7:fa:b6:73:6a:ce:c3:3c:73:f3:c8:2c: 76:b1:81:63:8e:0a:ce:c7:c0:c3:3a:85:43:82:f4: d3:06:4f:7b:3c:82:f9:55:74:ed:f2:9d:bb:9d:c3: 03:41:92:9e:4c:5a:cf:b3:47:27:35:b8:12:81:1a: 32:6c:77:8d:38:40:20:a7:16:3e:a2:0a:2b:ff:62: 72:4a:99:77:7f:38:ab:b3:d7:ab:05:c0:1e:c4:8c: db:43:40:f7:7c:48:36:fa:e6:cf:d8:15:4d:93:78: a0:c3:80:c0:54:6c:39:dd:70:53:a3:55:cd:de:09: 7d:46:7d:bb:55:fe:2e:6b:eb:e3:9f:c7:c1:97:8e: 60:82:84:de:98:f6:16:9a:47:d3:e9:ea:76:82:5f: 0d:1d:d6:7b:b9:13:79:73:29:0b:79:a3:6e:b5:30: c8:dd:96:75:f9:c9:23:9b:4f:ae:f9:3c:f3:61:a7: eb:a7:c1:0e:f9:91:37:cd:35:08:98:6f:84:f0:da: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B6:F7:F4:06:A8:84:F1:2F:3B:5D:DD:A5:DC:49:31:1D:A5:A0:56 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f2:a7:92:0d:3e:c3:80:2d:8b:c2:93:87:dd:4c:3a:ec:b6: ea:79:d6:f5:3e:63:cb:db:84:e0:e7:f9:f0:e4:c9:28:25:73: 89:85:8e:74:fb:7f:a8:d7:a9:4f:3a:82:5d:19:91:ff:37:3e: 91:dd:36:d3:12:82:e2:ed:b4:bd:04:ab:01:58:4c:da:d2:5b: c2:48:de:65:07:92:3c:e7:08:be:a2:51:26:e3:dd:96:b9:4c: 9a:27:3f:3f:1a:08:e9:a2:fc:3a:c7:6b:69:87:5e:17:b1:2e: 36:d0:b9:30:15:d1:43:e7:7f:8a:08:49:84:50:77:64:6b:8f: e7:0a:8b:30:89:50:8d:48:70:f2:df:a8:99:d7:e5:f5:4b:c1: d2:7c:9a:bc:10:97:64:1f:99:fc:13:a4:48:4f:39:cc:6f:f1: 96:d4:da:80:9f:fb:5e:18:1d:b8:a3:28:70:38:bf:2f:65:a9: d1:a1:0a:46:b7:d1:63:bb:ca:cc:5b:ab:6f:9f:76:3f:83:c2: 22:7f:d5:6c:c5:45:33:75:05:75:21:25:d0:cd:0b:59:a5:7e: 14:76:10:a5:56:f3:ef:08:93:30:69:69:d8:2c:a0:e6:f6:cf: 26:3f:d8:80:cb:43:47:05:26:d4:61:57:43:81:3c:09:ac:49: c1:91:d1:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUwNTMwMjI0MjI3WhcNMjUwNjA2MjI0MjI3WjAYMRYwFAYD VQQDEw02ODNhMzQ1My1lOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8j+G4MzScl6in/rxnM+bGxhNgO0e+iDJ7rJdBGeWUc3cA7OF4R8tw5j4GwBf DyubUDEaC8+V72C8P7JGCrK3+rZzas7DPHPzyCx2sYFjjgrOx8DDOoVDgvTTBk97 PIL5VXTt8p27ncMDQZKeTFrPs0cnNbgSgRoybHeNOEAgpxY+ogor/2JySpl3fzir s9erBcAexIzbQ0D3fEg2+ubP2BVNk3igw4DAVGw53XBTo1XN3gl9Rn27Vf4ua+vj n8fBl45ggoTemPYWmkfT6ep2gl8NHdZ7uRN5cykLeaNutTDI3ZZ1+ckjm0+u+Tzz Yafrp8EO+ZE3zTUImG+E8NpnZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+29/QG qITxLztd3aXcSTEdpaBWMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl8qeSDT7DgC2LwpOH3Uw67Lbqedb1PmPL24Tg5/nw5MkoJXOJhY50 +3+o16lPOoJdGZH/Nz6R3TbTEoLi7bS9BKsBWEza0lvCSN5lB5I85wi+olEm492W uUyaJz8/Ggjpovw6x2tph14XsS420LkwFdFD53+KCEmEUHdka4/nCoswiVCNSHDy 36iZ1+X1S8HSfJq8EJdkH5n8E6RITznMb/GW1NqAn/teGB24oyhwOL8vZanRoQpG t9Fju8rMW6tvn3Y/g8Iif9VsxUUzdQV1ISXQzQtZpX4UdhClVvPvCJMwaWnYLKDm 9s8mP9iAy0NHBSbUYVdDgTwJrEnBkdG2 -----END CERTIFICATE-----Generated at Sat May 31 17:16:16 2025 by rpki-client