$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json) Hash identifier: fOjKo42rsvUR/DNDQOjvWpt5cHv4dNqEdDhoKFNYaVk= Subject key identifier: 23:DA:5B:7F:CD:71:79:A7:8F:C9:18:46:78:84:7F:E9:AD:7B:FE:E0 Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 3493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft Manifest number: 348B Signing time: Fri 30 May 2025 15:03:04 +0000 Manifest this update: Fri 30 May 2025 15:03:04 +0000 Manifest next update: Fri 06 Jun 2025 15:03:04 +0000 Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: 12nVOZ8sSrKJQP4PZH7vWbyExEVwwo9KcCYPc6Vxft8=) 2: 0B1273668FA411E78001F63DC4F9AE02.roa (hash: k3e6uk50CslChWb70mel5/uXC1n+xgHkfi8aZq+HzkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13459 (0x3493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: May 30 15:03:04 2025 GMT Not After : Jun 6 15:03:04 2025 GMT Subject: CN=6839c8a8-325a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ef:e8:5b:71:f4:c7:3e:8b:d8:6e:c7:fb:0a: d0:0b:34:fa:6c:7b:19:ce:c8:86:f4:9b:8d:3b:93: 34:7b:61:77:66:c3:31:59:1c:7c:6e:6b:5f:a0:c2: ca:55:c8:99:7b:8f:28:1c:e6:1d:3a:b1:df:43:27: 56:f7:91:e5:5a:39:0e:e3:00:13:36:66:d7:2e:40: 6a:53:cc:21:b1:2b:e3:34:79:9a:a3:c5:72:c6:b3: 3b:d3:aa:f6:c4:ff:f6:c9:f2:5d:b7:88:01:b3:d2: a7:5c:c9:66:e5:db:28:61:d2:a0:8b:62:2e:bf:af: bf:14:e3:88:0d:ec:29:3d:d6:75:c6:12:40:33:4f: 50:7f:ab:05:d0:8f:1d:c0:43:78:9b:b0:d6:21:92: c4:08:bb:86:8e:8e:f7:8c:3e:30:cb:ad:0c:de:45: ae:7c:f2:f9:fe:51:20:9b:d6:d5:31:da:86:7b:ac: 72:fa:40:1a:ba:ea:6f:6e:09:96:48:65:47:42:78: 39:49:d8:33:8d:54:20:e9:82:56:75:68:c0:5a:85: 04:5f:dc:6d:b9:1d:7d:6f:bb:08:7c:c1:81:e0:22: e3:19:19:6e:f1:1e:08:69:a9:59:b3:5e:9f:c5:03: e3:92:31:95:9c:b3:2a:60:26:4b:9c:c0:38:21:f4: 62:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DA:5B:7F:CD:71:79:A7:8F:C9:18:46:78:84:7F:E9:AD:7B:FE:E0 X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f8:16:fd:5c:af:ef:19:18:04:0a:9a:3a:b1:ec:ca:34:34: fc:df:6e:d7:1b:d8:78:56:35:72:6b:07:40:f1:82:56:7d:cd: 27:13:22:ae:ef:22:cb:1a:e2:92:b3:7a:88:e4:f7:12:81:6d: 95:68:1d:93:ec:e6:e3:13:5b:c5:84:47:e2:8d:19:87:3b:8b: ed:ab:95:19:b2:d6:9b:85:9d:5a:2d:82:4a:df:ba:db:00:7b: 4c:37:b7:45:52:3c:1a:64:22:dd:42:4b:42:e1:49:0e:1f:5d: d9:7e:7e:da:08:68:e8:cc:02:d1:bf:2c:a2:ed:a4:47:25:83: 87:17:3b:6c:f9:64:30:5a:2a:4c:fe:d2:8f:6a:db:e8:a2:68: c2:b5:bf:0f:bf:a9:e9:94:5c:b0:7d:55:a6:98:1e:a0:f5:55: 43:e4:aa:0d:40:32:e0:7a:91:ca:04:81:bf:7f:5d:51:0f:f2: bb:f8:bc:5d:6d:86:b9:ce:65:f1:8e:55:c1:27:d9:80:c9:a2: 02:7b:4e:d3:a9:10:52:cb:2d:2a:35:09:a4:6a:2a:c9:4f:dd: c1:8c:29:f1:b2:2f:ce:8f:28:d5:99:59:37:20:42:b4:ab:76: 94:f9:55:5a:6f:74:df:6b:54:ae:c4:e0:f4:0b:34:17:49:1a: 8e:02:69:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjUwNTMwMTUwMzA0WhcNMjUwNjA2MTUwMzA0WjAYMRYwFAYD VQQDEw02ODM5YzhhOC0zMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsu/oW3H0xz6L2G7H+wrQCzT6bHsZzsiG9JuNO5M0e2F3ZsMxWRx8bmtfoMLK VciZe48oHOYdOrHfQydW95HlWjkO4wATNmbXLkBqU8whsSvjNHmao8VyxrM706r2 xP/2yfJdt4gBs9KnXMlm5dsoYdKgi2Iuv6+/FOOIDewpPdZ1xhJAM09Qf6sF0I8d wEN4m7DWIZLECLuGjo73jD4wy60M3kWufPL5/lEgm9bVMdqGe6xy+kAauupvbgmW SGVHQng5SdgzjVQg6YJWdWjAWoUEX9xtuR19b7sIfMGB4CLjGRlu8R4IaalZs16f xQPjkjGVnLMqYCZLnMA4IfRiUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPaW3/N cXmnj8kYRniEf+mte/7gMB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJCMi81M0NBNDYyQTFEOUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4 TU5vNnZQLUJfWjhTX1J0UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh+Bb9XK/vGRgECpo6sezKNDT8327XG9h4VjVyawdA8YJWfc0nEyKu 7yLLGuKSs3qI5PcSgW2VaB2T7ObjE1vFhEfijRmHO4vtq5UZstabhZ1aLYJK37rb AHtMN7dFUjwaZCLdQktC4UkOH13Zfn7aCGjozALRvyyi7aRHJYOHFzts+WQwWipM /tKPatvoomjCtb8Pv6nplFywfVWmmB6g9VVD5KoNQDLgepHKBIG/f11RD/K7+Lxd bYa5zmXxjlXBJ9mAyaICe07TqRBSyy0qNQmkairJT93BjCnxsi/OjyjVmVk3IEK0 q3aU+VVab3Tfa1SuxOD0CzQXSRqOAmlw -----END CERTIFICATE-----Generated at Sat May 31 16:26:53 2025 by rpki-client