$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json) Hash identifier: Vukb1V2CYxEv3H56YzLQtMC83ujX18I97SqQH3O58ts= Subject key identifier: B1:06:EF:22:E3:0C:74:84:05:33:DD:4B:73:4B:43:7C:17:75:0A:EC Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Certificate serial: 1BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft Manifest number: 1BE4 Signing time: Fri 30 May 2025 16:25:34 +0000 Manifest this update: Fri 30 May 2025 16:25:33 +0000 Manifest next update: Fri 06 Jun 2025 16:25:33 +0000 Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: TMjkNwE/HnO4MVcY0xAN3mYb4a67SKiyb5PZxJllyrE=) 2: 5949B76C00DB11E8A9CA373DC4F9AE02.roa (hash: uYIH2Df820V7sq00NPl6eOckfu5/+u+T1sNhFFho9vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7166 (0x1bfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Validity Not Before: May 30 16:25:33 2025 GMT Not After : Jun 6 16:25:33 2025 GMT Subject: CN=6839dbfe-02bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:e2:63:b0:b7:b5:f1:51:9a:6c:9d:03:ab: ff:62:2c:8f:63:65:73:3f:83:a3:4c:54:38:45:69: a3:2f:c6:76:3f:42:26:9a:43:c4:e0:b4:84:ec:33: 50:6a:1e:24:71:f7:81:72:a6:0b:87:4a:50:f7:27: 8a:68:59:34:aa:84:9a:44:ab:aa:fc:0e:de:96:6f: 5a:e7:82:46:d5:43:41:95:cb:ce:7a:a7:77:56:87: a5:22:13:f7:ce:ef:33:60:42:3e:e6:e9:e0:47:3d: b2:eb:26:fa:33:4a:d2:fb:33:3d:75:a1:44:b4:69: b9:63:16:c1:d4:bc:f5:3d:d0:74:88:7e:c7:59:31: 7b:1d:22:82:9c:be:fe:de:6c:2e:10:ad:78:64:21: 99:89:86:7b:a2:73:4d:9e:c0:fb:ed:8e:ed:a7:dd: 2a:07:13:1f:79:ad:96:c9:db:ad:75:c0:b4:99:b3: a0:6c:66:7c:55:c0:68:28:5a:8a:6e:b9:04:1f:79: 81:f6:23:4c:6e:be:be:e3:30:da:31:f8:aa:3c:fe: ba:18:55:a2:54:b0:96:ac:e1:c7:64:e6:c3:75:ea: 27:fa:8c:cb:8d:39:9d:be:95:03:87:f5:f8:a6:e4: 06:5d:da:7f:ee:8d:ef:66:48:c2:ce:44:b7:5f:d1: 2f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:06:EF:22:E3:0C:74:84:05:33:DD:4B:73:4B:43:7C:17:75:0A:EC X509v3 Authority Key Identifier: keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:02:80:62:a5:26:cd:3b:89:8a:23:60:95:11:58:0f:b8:7c: 40:33:00:81:53:56:65:0a:63:60:91:30:b5:d1:0e:42:dc:ca: a3:51:da:f1:92:89:c5:30:22:a3:a1:77:97:cf:cd:31:d5:3b: bb:64:15:5e:b6:69:bd:68:ce:42:0d:10:23:b2:63:f8:0f:52: e1:f2:ea:0d:c8:36:fd:5d:e7:b7:af:4b:68:73:f3:f1:5a:d1: 19:4e:1f:25:e5:e0:86:86:91:b8:b1:25:b0:2a:cb:81:35:0f: 3f:11:3c:cd:bd:b8:dc:36:70:ce:47:33:71:f3:d7:71:7b:0e: 6e:57:04:03:b9:87:63:0f:7b:20:e8:7a:c2:ff:03:a3:6c:3d: 47:2f:83:30:2e:42:15:e8:f4:f7:c6:79:e5:0f:3a:d6:c2:2d: 93:20:d9:8a:4c:4c:fc:7a:32:f6:fe:c7:0f:01:ff:55:0e:41: 49:5c:14:40:06:1c:8a:1b:7a:4e:71:02:b6:fd:c7:f7:2a:03: 19:37:bf:f2:1e:4b:7b:e1:77:30:34:47:e1:bd:5b:97:72:77: 46:cd:8e:03:4b:16:f5:0f:d2:ec:ff:0b:9a:f8:97:bf:89:2e: be:9f:f3:49:cf:c6:3d:20:37:06:09:fb:2e:d2:cc:01:6b:2b: 7a:b6:64:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5 MUYwMjFFNDUwHhcNMjUwNTMwMTYyNTMzWhcNMjUwNjA2MTYyNTMzWjAYMRYwFAYD VQQDEw02ODM5ZGJmZS0wMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqfiY7C3tfFRmmydA6v/YiyPY2VzP4OjTFQ4RWmjL8Z2P0ImmkPE4LSE7DNQ ah4kcfeBcqYLh0pQ9yeKaFk0qoSaRKuq/A7elm9a54JG1UNBlcvOeqd3VoelIhP3 zu8zYEI+5ungRz2y6yb6M0rS+zM9daFEtGm5YxbB1Lz1PdB0iH7HWTF7HSKCnL7+ 3mwuEK14ZCGZiYZ7onNNnsD77Y7tp90qBxMfea2WydutdcC0mbOgbGZ8VcBoKFqK brkEH3mB9iNMbr6+4zDaMfiqPP66GFWiVLCWrOHHZObDdeon+ozLjTmdvpUDh/X4 puQGXdp/7o3vZkjCzkS3X9Ev3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEG7yLj DHSEBTPdS3NLQ3wXdQrsMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv NnJMVl9DdG9tUkNSOENIa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+AoBipSbNO4mKI2CVEVgPuHxAMwCBU1ZlCmNgkTC10Q5C3MqjUdrx konFMCKjoXeXz80x1Tu7ZBVetmm9aM5CDRAjsmP4D1Lh8uoNyDb9Xee3r0toc/Px WtEZTh8l5eCGhpG4sSWwKsuBNQ8/ETzNvbjcNnDORzNx89dxew5uVwQDuYdjD3sg 6HrC/wOjbD1HL4MwLkIV6PT3xnnlDzrWwi2TINmKTEz8ejL2/scPAf9VDkFJXBRA BhyKG3pOcQK2/cf3KgMZN7/yHkt74XcwNEfhvVuXcndGzY4DSxb1D9Ls/wua+Je/ iS6+n/NJz8Y9IDcGCfsu0swBayt6tmRX -----END CERTIFICATE-----Generated at Sat May 31 17:00:25 2025 by rpki-client