$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: uzd/ToAKSlkB/AqDGmfJnMyjWJFCZY51HVLlrKNwhds= Subject key identifier: CD:66:81:7A:00:C4:9E:FA:CD:61:F9:40:7C:1B:14:1C:B9:EC:50:34 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0D5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0D57 Signing time: Fri 30 May 2025 18:09:30 +0000 Manifest this update: Fri 30 May 2025 18:09:30 +0000 Manifest next update: Fri 06 Jun 2025 18:09:30 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: eCerdvpnUMDcqjAEu/5FhHaW/qgI46rByg8/sppNj2Y=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: EM624Ee5dZvup/p2NN7lZAjAZv2Q+/2EJL827rz91tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3422 (0xd5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: May 30 18:09:30 2025 GMT Not After : Jun 6 18:09:30 2025 GMT Subject: CN=6839f45a-8975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:b9:63:f5:21:1b:9a:3f:bd:b9:30:7e:7a: d6:8d:5d:b4:a8:3c:fc:96:d3:66:2f:78:b3:73:69: bc:0d:b7:d1:dc:c0:57:23:f3:cb:18:52:4c:dc:e5: 66:2e:b6:76:be:67:3a:82:28:96:ae:17:8f:31:89: 5e:f3:b8:ae:65:3b:4d:d7:87:11:13:78:08:aa:5e: a2:b0:44:57:3b:62:6e:a9:c4:3f:03:c6:6f:b5:6e: 8e:6d:26:b9:ca:72:c2:6a:f4:0c:d7:e7:44:60:f6: a8:f5:35:dc:b1:62:81:df:01:72:ab:70:9a:a2:45: d1:84:03:03:14:18:4f:d3:9e:53:43:34:4c:f9:f3: bf:7b:57:d2:64:b9:92:56:ee:9e:c7:15:dd:0d:06: 16:1d:b7:46:61:22:34:9a:ff:b4:fb:80:e5:4f:9a: ec:f1:b7:48:04:10:c4:2d:7d:50:45:10:8e:6d:f1: b8:b4:37:ca:18:72:aa:36:49:e7:6b:e1:e8:91:c8: 45:fa:34:8e:36:1b:67:a8:15:b6:05:c5:c2:05:45: 75:a3:86:fd:e1:b1:c4:06:c6:ea:bd:7e:f3:37:86: 86:de:ae:cc:73:76:93:db:15:79:f0:f6:46:6e:81: 50:2a:31:64:36:c3:c1:0c:9c:ae:8f:29:db:3f:70: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:66:81:7A:00:C4:9E:FA:CD:61:F9:40:7C:1B:14:1C:B9:EC:50:34 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:4f:1e:ea:a2:96:d7:f7:91:88:da:f0:83:87:b5:29:28:e4: ef:62:0c:9a:d8:ac:50:68:03:d6:80:07:e2:94:69:3d:f4:30: d1:ff:b0:0a:26:05:b7:bf:49:60:76:1c:56:5a:a5:66:6d:e9: 48:cb:4d:e4:a1:89:26:90:5f:51:f1:b4:4e:40:f0:ae:e8:68: 57:d0:92:9a:53:f0:3c:be:e6:bc:d6:2c:14:85:b4:3c:ca:43: 27:52:5d:96:23:3a:15:cf:a3:07:9f:12:d4:f7:e0:bc:ce:f2: b3:66:20:e1:f9:8e:6f:16:b2:b9:d8:47:e2:70:8f:53:69:7c: 5d:b1:28:e3:b6:95:ba:a8:91:dc:94:8c:32:37:d5:e5:33:4f: 1c:cc:8c:54:6a:77:6c:01:47:b9:0c:ac:e1:d5:65:83:2b:22: d6:d7:03:3f:14:7c:63:f2:58:ac:c1:df:5c:1e:ca:42:1c:29: 46:cc:21:55:ad:c4:3c:2a:c3:29:cd:14:86:6e:63:6b:39:41: 2b:f6:ff:10:73:a2:19:63:09:6a:96:80:67:29:2c:7b:eb:ee: 45:45:01:ef:02:98:bd:31:a8:10:a4:18:50:2a:5c:02:13:ee: b5:90:02:57:dc:94:2e:84:26:43:5b:f4:33:99:fc:0c:54:5d: 9c:47:c0:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjUwNTMwMTgwOTMwWhcNMjUwNjA2MTgwOTMwWjAYMRYwFAYD VQQDEw02ODM5ZjQ1YS04OTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6O5Y/UhG5o/vbkwfnrWjV20qDz8ltNmL3izc2m8DbfR3MBXI/PLGFJM3OVm LrZ2vmc6giiWrhePMYle87iuZTtN14cRE3gIql6isERXO2JuqcQ/A8ZvtW6ObSa5 ynLCavQM1+dEYPao9TXcsWKB3wFyq3CaokXRhAMDFBhP055TQzRM+fO/e1fSZLmS Vu6exxXdDQYWHbdGYSI0mv+0+4DlT5rs8bdIBBDELX1QRRCObfG4tDfKGHKqNknn a+HokchF+jSONhtnqBW2BcXCBUV1o4b94bHEBsbqvX7zN4aG3q7Mc3aT2xV58PZG boFQKjFkNsPBDJyujynbP3B1XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1mgXoA xJ76zWH5QHwbFBy57FA0MB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTTx7qopbX95GI2vCDh7UpKOTvYgya2KxQaAPWgAfilGk99DDR/7AK JgW3v0lgdhxWWqVmbelIy03koYkmkF9R8bROQPCu6GhX0JKaU/A8vua81iwUhbQ8 ykMnUl2WIzoVz6MHnxLU9+C8zvKzZiDh+Y5vFrK52EficI9TaXxdsSjjtpW6qJHc lIwyN9XlM08czIxUandsAUe5DKzh1WWDKyLW1wM/FHxj8liswd9cHspCHClGzCFV rcQ8KsMpzRSGbmNrOUEr9v8Qc6IZYwlqloBnKSx76+5FRQHvApi9MagQpBhQKlwC E+61kAJX3JQuhCZDW/QzmfwMVF2cR8Ax -----END CERTIFICATE-----Generated at Sat May 31 16:38:00 2025 by rpki-client