$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft File: i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json) Hash identifier: f9y+95pgd70DoVaC7npdhzCN7FB0Uuoo7yB+RZgmvsA= Subject key identifier: 68:20:D4:8C:E8:87:77:0E:08:15:21:C8:FD:98:3D:10:6A:3C:C2:8B Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 Certificate issuer: /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft Manifest number: 0647 Signing time: Fri 30 May 2025 22:46:15 +0000 Manifest this update: Fri 30 May 2025 22:46:14 +0000 Manifest next update: Fri 06 Jun 2025 22:46:14 +0000 Files and hashes: 1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: wdTCAaTBiWgX0mEwTUhlkHZmHW9o2Jmd0Alv52ZD3DU=) 2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: am0gLM47UswkhQ7d8ve9CDz5IVO8+0wgLFBI3jyuYpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Validity Not Before: May 30 22:46:14 2025 GMT Not After : Jun 6 22:46:14 2025 GMT Subject: CN=683a3536-e418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:8b:ae:35:e2:00:60:e9:88:42:11:63:38: 56:14:9c:f9:a6:c4:a8:e8:7f:a7:73:ae:da:13:0e: f1:55:04:86:f7:ec:5f:b6:26:13:dd:7c:e8:87:81: 00:61:5a:12:fc:b7:33:51:73:8d:9c:b4:dc:c5:51: 10:21:1e:19:f5:2f:ed:bc:8e:16:b7:f8:31:4c:67: 52:2f:89:55:c7:e8:e7:35:6b:12:45:08:aa:ad:7c: 11:5a:41:c1:22:5f:19:73:3d:7f:8f:11:b9:7e:9c: eb:ea:c4:f4:af:5a:41:fb:00:63:09:ab:e1:06:fd: c8:fd:3f:58:46:34:fc:4c:b9:88:50:4e:35:e5:7d: 2e:e4:f9:79:54:79:1e:57:f9:2c:ba:35:1b:0f:2a: f1:b9:ca:08:18:fc:57:e3:aa:4a:6d:b1:5d:ad:e7: 53:a2:66:39:a2:4f:59:27:0e:bc:6b:19:0c:2d:c2: dd:ad:6a:ee:23:39:06:f9:56:15:4d:76:e3:80:c1: 49:69:74:d6:dd:ec:9d:85:17:6f:d8:e7:6c:34:72: f3:8b:3a:ee:83:67:6e:de:06:c1:e1:4f:9c:7a:14: 53:76:66:24:39:7e:a3:42:f3:b9:7f:03:de:35:64: 49:54:b1:c1:46:26:78:db:83:8b:83:a1:8b:81:01: d2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:20:D4:8C:E8:87:77:0E:08:15:21:C8:FD:98:3D:10:6A:3C:C2:8B X509v3 Authority Key Identifier: keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:d1:c4:23:5f:1e:94:d1:51:0a:af:7b:97:47:52:3f:24:af: a3:4c:49:3c:fe:da:3d:db:8c:ab:ca:da:f9:e1:07:9e:24:c7: f2:6b:11:22:2d:55:90:25:7d:19:15:7f:f3:21:5e:43:da:0f: 37:3c:46:57:62:60:50:92:1c:39:74:03:07:4a:4a:8d:ce:06: dc:37:e3:5b:b6:92:03:2d:69:73:3d:eb:da:3c:47:fa:60:72: d6:e5:ec:7f:69:26:21:cd:60:72:26:12:60:9a:17:7c:a8:fd: fb:4f:e0:c5:92:3f:ec:8b:a4:15:af:bc:be:ec:bc:3b:b8:36: 09:83:f9:19:56:78:54:8d:72:54:4e:ad:6d:73:30:61:a5:f0: c6:7e:e2:75:d7:fe:6f:a4:54:cf:86:48:a4:d6:00:ca:e2:27: 25:91:74:67:a0:73:57:be:a5:b6:83:b8:d7:98:64:ea:44:d0: 82:55:94:84:8c:6e:f3:bc:10:53:d7:26:9e:6a:46:2b:72:4b: 70:7a:2c:a6:91:09:b5:91:05:95:92:2e:96:f2:37:34:02:c3: 8b:f0:0f:1b:59:f3:b7:38:cb:6a:ec:14:7f:e6:b2:2c:de:52: d2:1b:cb:09:19:40:fb:0e:b1:92:5b:68:e2:40:52:35:e2:35: b6:99:2a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz QkY1QzVEMTQwHhcNMjUwNTMwMjI0NjE0WhcNMjUwNjA2MjI0NjE0WjAYMRYwFAYD VQQDEw02ODNhMzUzNi1lNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwciLrjXiAGDpiEIRYzhWFJz5psSo6H+nc67aEw7xVQSG9+xftiYT3Xzoh4EA YVoS/LczUXONnLTcxVEQIR4Z9S/tvI4Wt/gxTGdSL4lVx+jnNWsSRQiqrXwRWkHB Il8Zcz1/jxG5fpzr6sT0r1pB+wBjCavhBv3I/T9YRjT8TLmIUE415X0u5Pl5VHke V/ksujUbDyrxucoIGPxX46pKbbFdredTomY5ok9ZJw68axkMLcLdrWruIzkG+VYV TXbjgMFJaXTW3eydhRdv2OdsNHLzizrug2du3gbB4U+cehRTdmYkOX6jQvO5fwPe NWRJVLHBRiZ424OLg6GLgQHStQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgg1Izo h3cOCBUhyP2YPRBqPMKLMB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDMxRS83QTg0ODE5NjhDNjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlm RmU3bWRVZUJqaVk3OWNYUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw0cQjXx6U0VEKr3uXR1I/JK+jTEk8/to924yrytr54QeeJMfyaxEi LVWQJX0ZFX/zIV5D2g83PEZXYmBQkhw5dAMHSkqNzgbcN+NbtpIDLWlzPevaPEf6 YHLW5ex/aSYhzWByJhJgmhd8qP37T+DFkj/si6QVr7y+7Lw7uDYJg/kZVnhUjXJU Tq1tczBhpfDGfuJ11/5vpFTPhkik1gDK4iclkXRnoHNXvqW2g7jXmGTqRNCCVZSE jG7zvBBT1yaeakYrcktweiymkQm1kQWVki6W8jc0AsOL8A8bWfO3OMtq7BR/5rIs 3lLSG8sJGUD7DrGSW2jiQFI14jW2mSoT -----END CERTIFICATE-----Generated at Sat May 31 16:35:03 2025 by rpki-client