$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft File: FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json) Hash identifier: rIjyeZ75q4WLglGkwvZTvDDq/1NuKGgHsjuTnX5YZxI= Subject key identifier: 45:A1:9B:62:7C:38:A5:E7:65:0B:A7:E6:B5:7D:AF:61:DD:37:BF:4D Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 Certificate issuer: /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft Manifest number: 67 Signing time: Sat 31 May 2025 06:33:16 +0000 Manifest this update: Sat 31 May 2025 06:33:15 +0000 Manifest next update: Sat 07 Jun 2025 06:33:15 +0000 Files and hashes: 1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: d8EAyYnmWu6Fj2bxmMKoC3WjR5oKZkrLu7LthqIDSYg=) 2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: plZkhxc00wQXxhpH5zdDV/kYvwUsg48B+WnMIB2ox4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Validity Not Before: May 31 06:33:15 2025 GMT Not After : Jun 7 06:33:15 2025 GMT Subject: CN=683aa2ac-d518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:fc:ef:61:7e:06:69:78:c4:51:82:0f:7c: 02:28:ca:1e:48:a6:a6:45:2f:a0:db:94:58:d9:59: 01:54:ec:aa:86:15:a0:d4:8d:ba:7a:0b:ff:be:75: 45:37:d8:1d:c6:99:fb:53:08:f0:7c:fb:c3:8f:6b: 97:f8:5a:98:75:47:58:4e:af:71:40:4b:0e:44:55: da:aa:58:56:f0:26:4f:d9:dc:15:f6:1a:ae:58:ad: 7f:3e:47:37:33:1c:b7:6c:09:1c:cb:e0:0b:25:d3: cd:4d:01:20:85:4c:6d:d3:28:a9:c9:0b:43:89:f0: 89:04:62:fa:b9:9c:0f:d9:b5:73:56:f3:c8:de:b4: bb:69:f0:82:1e:63:95:20:43:23:5d:19:d7:49:4f: 5f:9e:6f:1f:cc:24:f4:6c:fc:8f:95:3a:b1:eb:b9: a9:44:9c:dc:70:ac:88:de:c9:5f:3f:8c:6a:5e:54: 24:a8:d8:36:ba:cb:47:e0:00:6a:e7:d5:cb:93:c6: e8:46:76:18:0e:5a:ca:d7:f6:ec:be:9a:90:15:d9: a1:6b:0e:e8:f7:82:05:be:eb:c6:00:c4:9a:4f:51: c4:15:4d:30:13:bd:e2:9f:f4:1d:22:fa:a9:43:e5: 01:4b:9f:55:bb:3c:b8:a6:89:10:06:a8:cd:a9:2e: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A1:9B:62:7C:38:A5:E7:65:0B:A7:E6:B5:7D:AF:61:DD:37:BF:4D X509v3 Authority Key Identifier: keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:85:80:82:1a:e7:9c:fb:21:8d:d0:33:d0:92:21:59:cd:50: 7a:a6:36:29:ef:0e:21:94:7f:3e:57:42:9d:f0:a5:32:9e:63: bb:ff:b2:d5:44:74:a7:a7:11:42:5a:25:3a:43:3b:73:ee:24: 67:a8:8a:fb:e5:57:61:27:ca:4e:bf:82:bf:d7:01:72:14:c2: 81:c6:df:a2:52:18:0a:43:38:94:a4:2d:75:23:9c:cf:2a:17: ee:6d:51:27:51:45:9f:b2:e1:f8:5c:68:96:6b:57:43:52:7b: cb:6f:2f:ac:6a:31:6b:8a:12:51:e0:1e:bc:94:b7:5f:a2:97: 0a:75:42:19:b1:c4:0e:83:26:4d:05:cb:08:96:46:c8:1a:6d: 09:87:52:3f:59:8f:3a:44:d2:e0:01:28:56:32:6c:e3:29:eb: 19:ab:1b:ca:d4:b6:9f:be:2c:d1:92:4a:7a:16:36:dc:b0:fd: 64:49:f7:88:c9:35:b9:8a:77:a2:c4:af:cc:d6:5c:1a:40:a4: 97:3b:05:e5:8e:0b:33:26:86:5d:24:a1:6a:98:b3:33:f0:ab: f6:0f:ef:48:09:ec:30:fa:0a:c0:8b:53:d4:53:a1:c6:ba:7e: 9b:eb:5a:55:45:8b:5d:e2:67:5b:ad:b8:69:58:2f:cf:2d:2a: 4b:33:75:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI5OTExMC8GA1UEBRMoMTU2RUQ1QkY4MTQzN0MxQjcxRTcxQ0IwMkVFQzI3QUIx OEFGNzlBNDAeFw0yNTA1MzEwNjMzMTVaFw0yNTA2MDcwNjMzMTVaMBgxFjAUBgNV BAMTDTY4M2FhMmFjLWQ1MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDB/zvYX4GaXjEUYIPfAIoyh5IpqZFL6DblFjZWQFU7KqGFaDUjbp6C/++dUU3 2B3GmftTCPB8+8OPa5f4Wph1R1hOr3FASw5EVdqqWFbwJk/Z3BX2Gq5YrX8+Rzcz HLdsCRzL4Asl081NASCFTG3TKKnJC0OJ8IkEYvq5nA/ZtXNW88jetLtp8IIeY5Ug QyNdGddJT1+ebx/MJPRs/I+VOrHrualEnNxwrIjeyV8/jGpeVCSo2Da6y0fgAGrn 1cuTxuhGdhgOWsrX9uy+mpAV2aFrDuj3ggW+68YAxJpPUcQVTTATveKf9B0i+qlD 5QFLn1W7PLimiRAGqM2pLhUxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURaGbYnw4 pedlC6fmtX2vYd03v00wHwYDVR0jBBgwFoAUFW7Vv4FDfBtx5xywLuwnqxiveaQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjk5LzVFQjkzQTcyQTFE QTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0eDV4eXdMdXducXhpdmVh US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlc3VnY0RkRmQnR4NXh5d0x1d25xeGl2ZWFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE Mjk5LzVFQjkzQTcyQTFEQTExRUZCMjMzM0E0NUM0RjlBRTAyL0ZXN1Z2NEZEZkJ0 eDV4eXdMdXducXhpdmVhUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHqFgIIa55z7IY3QM9CSIVnNUHqmNinvDiGUfz5XQp3wpTKeY7v/stVE dKenEUJaJTpDO3PuJGeoivvlV2Enyk6/gr/XAXIUwoHG36JSGApDOJSkLXUjnM8q F+5tUSdRRZ+y4fhcaJZrV0NSe8tvL6xqMWuKElHgHryUt1+ilwp1QhmxxA6DJk0F ywiWRsgabQmHUj9ZjzpE0uABKFYybOMp6xmrG8rUtp++LNGSSnoWNtyw/WRJ94jJ NbmKd6LEr8zWXBpApJc7BeWOCzMmhl0koWqYszPwq/YP70gJ7DD6CsCLU9RToca6 fpvrWlVFi13iZ1utuGlYL88tKkszdfs= -----END CERTIFICATE-----Generated at Sat May 31 15:26:38 2025 by rpki-client