$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: /9b+xF1XeI85Tzgl2X7pcgiwdmzF1H5z4n+uJ+y5BnI= Subject key identifier: 7C:59:F0:18:A0:F8:6E:C7:E1:EF:62:48:6C:2A:C1:3D:0B:01:26:D0 Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 06D4 Signing time: Fri 30 May 2025 22:15:46 +0000 Manifest this update: Fri 30 May 2025 22:15:45 +0000 Manifest next update: Fri 06 Jun 2025 22:15:45 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: SBFk6Rwz0FoZg5hecdLhYCrkTChXjiPs5W3fxz6shWQ=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: yon8zk/9fCZ3WyFBjyvszv/gLcYp08xtnvCiEsyDKSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: May 30 22:15:45 2025 GMT Not After : Jun 6 22:15:45 2025 GMT Subject: CN=683a2e11-e890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:a4:01:02:10:20:d3:73:7c:1b:75:1b:65: 09:12:90:86:42:ca:88:d1:ad:e9:3d:ac:89:ca:d8: e6:17:72:d5:da:92:29:65:ef:ed:10:ad:d2:6f:6b: 2d:46:14:a1:f0:2f:da:67:94:eb:a0:dc:72:91:e2: 7e:a9:74:34:1a:3a:7a:2e:05:47:b2:00:ca:7a:9a: 0d:f3:df:18:8f:de:33:ac:f2:84:e3:bf:b6:ee:b7: 39:c9:10:e5:bf:e8:b0:fe:80:6a:1a:4b:94:51:a5: 0c:ce:f6:99:78:59:91:46:97:df:4c:c3:8e:bd:6b: a0:08:56:9e:ae:89:1b:6f:d4:a9:0c:50:75:f0:bd: b2:4f:4e:78:a2:5d:2d:81:60:a7:1c:37:4d:96:c8: 31:1e:c2:b8:40:06:a7:02:29:ac:b7:9e:29:7d:7e: 35:6d:c9:01:24:fe:b1:a7:32:2d:18:a7:ea:23:29: f8:bc:b6:c7:76:0e:da:eb:0e:bb:22:9c:a9:e6:29: 3f:2e:fa:a5:5a:c2:7b:42:02:e2:3c:31:37:b4:9b: f6:5f:85:30:9a:41:af:99:d4:92:6e:b3:e7:3a:89: 66:1b:c5:49:a0:c8:4a:5a:b0:1a:e2:04:7c:c8:60: 91:bc:77:83:53:8b:b3:b8:c0:1f:a1:53:65:fb:7b: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:59:F0:18:A0:F8:6E:C7:E1:EF:62:48:6C:2A:C1:3D:0B:01:26:D0 X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:49:fb:1a:86:16:bd:9c:fb:df:ad:39:d6:c8:fd:7c:28:16: 16:24:40:6d:cf:c4:2a:47:32:9a:a5:1f:45:5b:9b:26:63:a4: d6:5f:77:d6:de:65:8c:88:50:d5:80:0a:3b:ed:02:88:48:56: be:99:1b:50:c3:8f:07:98:e1:18:37:a1:aa:00:28:af:ee:c3: 3a:65:ba:21:5b:44:f2:2e:21:17:78:c2:9b:15:1c:34:10:da: f7:2e:1a:b0:fe:b7:5e:31:85:bf:1b:f0:d8:82:1d:40:73:9c: 59:99:2e:aa:c5:6d:5f:76:2b:d4:2a:4a:a5:2d:7f:6b:f5:c0: c7:52:1a:8e:57:7b:5d:3b:89:6b:05:54:d1:57:41:4b:cd:b0: 69:33:e8:62:1c:83:45:1f:96:f4:1f:53:7a:0b:11:f2:31:78: 13:81:b3:0d:eb:81:b5:31:9f:d3:15:1b:59:24:00:8d:da:16: da:df:db:10:09:a1:94:ee:c1:71:aa:06:29:b6:4a:49:0f:7e: d7:a4:7a:da:4f:e5:93:ad:63:2d:d1:3d:56:72:70:91:11:b9: 82:6e:ca:1e:b1:9a:f3:da:cc:77:1c:e5:3d:77:e8:e9:f8:56: 39:ff:d2:72:cc:f1:ac:0d:38:2a:09:18:07:42:b3:6e:04:89: c5:33:cf:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjUwNTMwMjIxNTQ1WhcNMjUwNjA2MjIxNTQ1WjAYMRYwFAYD VQQDEw02ODNhMmUxMS1lODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHikAQIQINNzfBt1G2UJEpCGQsqI0a3pPayJytjmF3LV2pIpZe/tEK3Sb2st RhSh8C/aZ5TroNxykeJ+qXQ0Gjp6LgVHsgDKepoN898Yj94zrPKE47+27rc5yRDl v+iw/oBqGkuUUaUMzvaZeFmRRpffTMOOvWugCFaerokbb9SpDFB18L2yT054ol0t gWCnHDdNlsgxHsK4QAanAimst54pfX41bckBJP6xpzItGKfqIyn4vLbHdg7a6w67 Ipyp5ik/LvqlWsJ7QgLiPDE3tJv2X4UwmkGvmdSSbrPnOolmG8VJoMhKWrAa4gR8 yGCRvHeDU4uzuMAfoVNl+3tvywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxZ8Big +G7H4e9iSGwqwT0LASbQMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Sfsahha9nPvfrTnWyP18KBYWJEBtz8QqRzKapR9FW5smY6TWX3fW 3mWMiFDVgAo77QKISFa+mRtQw48HmOEYN6GqACiv7sM6ZbohW0TyLiEXeMKbFRw0 ENr3Lhqw/rdeMYW/G/DYgh1Ac5xZmS6qxW1fdivUKkqlLX9r9cDHUhqOV3tdO4lr BVTRV0FLzbBpM+hiHINFH5b0H1N6CxHyMXgTgbMN64G1MZ/TFRtZJACN2hba39sQ CaGU7sFxqgYptkpJD37XpHraT+WTrWMt0T1WcnCREbmCbsoesZrz2sx3HOU9d+jp +FY5/9JyzPGsDTgqCRgHQrNuBInFM89c -----END CERTIFICATE-----Generated at Sat May 31 15:35:07 2025 by rpki-client