$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft File: Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json) Hash identifier: UHvPUmFJqSj0wq7XaAINp6seVyA0H9qEVEureXnUAk8= Subject key identifier: 62:74:5E:46:7B:78:EA:FD:DE:58:44:27:21:B6:53:75:1F:DF:53:17 Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 Certificate issuer: /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft Manifest number: 80 Signing time: Sat 31 May 2025 06:17:01 +0000 Manifest this update: Sat 31 May 2025 06:17:01 +0000 Manifest next update: Sat 07 Jun 2025 06:17:01 +0000 Files and hashes: 1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: P+yQUHq7VzX4U6pLUMTi8yUMs06cRjcoXRqIH3RkR/I=) 2: F696F52C8C7311EF995EA751C4F9AE02.roa (hash: IVAag2n39OgPxLOhqGGK4t8maSAxh28CoPmeH83pRE4=) 3: A227F4CC84CC11EFB2C53051C4F9AE02.roa (hash: xCL7VbACEpLGPMzJlAr4A4F4pPeHjMya8awCZyLgvNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Validity Not Before: May 31 06:17:01 2025 GMT Not After : Jun 7 06:17:01 2025 GMT Subject: CN=683a9edd-08d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:99:dc:7a:c6:a6:d8:18:d3:0b:e8:54:7d:07: 12:e2:94:42:69:77:e8:53:df:5c:46:3a:f3:13:c2: bb:ea:40:36:f5:d5:f7:de:be:61:17:11:22:b7:e8: 21:96:85:6d:aa:56:e7:99:3a:30:59:c5:0a:4e:da: 27:1f:70:06:ef:da:b1:17:87:35:97:35:76:e7:b1: 28:57:7c:1c:e1:fc:9e:53:97:c9:02:53:8c:86:34: 5e:25:91:0f:36:af:ff:06:3d:2e:86:b8:67:21:2d: 46:b6:41:85:30:e9:7d:7b:82:ec:96:41:87:ef:1b: 5b:c4:70:82:eb:f3:28:6a:15:ae:ae:38:89:27:27: e2:5b:35:90:78:55:7b:8c:10:58:5b:34:a3:16:ba: b4:3f:89:6a:ac:d7:34:7b:cf:85:64:57:18:10:20: 50:ed:20:86:43:31:f6:b4:a6:7d:01:5d:03:b0:f9: 88:ff:40:e9:e7:1b:9d:00:50:3b:b9:0d:b6:fb:1c: 36:ba:18:b8:a6:89:7e:7c:f8:73:65:16:c2:ca:5f: dc:93:8b:c9:94:68:a4:62:2a:70:aa:ad:cc:5a:f4: 28:39:da:b0:aa:d2:2d:03:48:ff:ed:00:f9:9e:86: 25:88:20:49:e9:82:3b:ef:fb:6d:cc:db:8a:2b:e0: bf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:74:5E:46:7B:78:EA:FD:DE:58:44:27:21:B6:53:75:1F:DF:53:17 X509v3 Authority Key Identifier: keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:1b:20:6f:92:5c:58:d0:8a:02:a3:27:11:0c:07:c6:98:98: bd:86:9b:15:52:d7:c1:e8:3f:49:60:8a:c7:70:6c:57:c6:70: d0:02:78:5e:f3:25:28:01:6a:e2:74:ef:e4:71:d9:7f:d8:a1: 01:e2:7d:18:da:a1:6f:9a:fc:45:3b:61:ae:3a:dc:ec:31:c1: 17:85:f5:ee:80:e4:18:db:4f:c5:85:47:18:a6:34:13:b4:43: 4e:0e:09:6b:95:7d:33:a6:ee:63:a6:34:21:de:a0:fe:68:45: 4b:78:7d:f4:2f:61:8f:ae:e1:de:a1:86:0a:ca:4d:2b:16:ce: 42:74:fb:02:d1:cf:04:ca:83:ca:f3:0c:f4:18:2e:2b:9c:71: 63:8d:ff:e9:fd:1f:da:ff:82:85:b4:06:53:86:89:ce:1b:a1: 12:cc:95:14:75:a3:52:f9:f3:59:75:3e:22:c3:ef:8b:8c:0b: f2:e7:e8:1e:72:ee:c4:48:1f:cc:a4:6d:18:9e:ef:79:ba:43: b6:59:f8:4b:c7:64:7a:12:0a:21:54:e1:7c:62:e5:33:4e:69: f4:e1:08:3b:02:9c:c1:84:df:f9:a2:bf:0c:ff:3f:71:c4:e0: d7:d4:c7:f6:cc:d7:e9:87:7e:e1:f2:11:ce:5d:db:02:6f:c5: cd:46:60:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIzNjQxMTAvBgNVBAUTKDQ3MENERkQ0OUY1REZGMjEyNTc4REVDNURBMjFGMjFE QTBCM0ZBRDIwHhcNMjUwNTMxMDYxNzAxWhcNMjUwNjA3MDYxNzAxWjAYMRYwFAYD VQQDEw02ODNhOWVkZC0wOGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5ncesam2BjTC+hUfQcS4pRCaXfoU99cRjrzE8K76kA29dX33r5hFxEit+gh loVtqlbnmTowWcUKTtonH3AG79qxF4c1lzV257EoV3wc4fyeU5fJAlOMhjReJZEP Nq//Bj0uhrhnIS1GtkGFMOl9e4LslkGH7xtbxHCC6/MoahWurjiJJyfiWzWQeFV7 jBBYWzSjFrq0P4lqrNc0e8+FZFcYECBQ7SCGQzH2tKZ9AV0DsPmI/0Dp5xudAFA7 uQ22+xw2uhi4pol+fPhzZRbCyl/ck4vJlGikYipwqq3MWvQoOdqwqtItA0j/7QD5 noYliCBJ6YI77/ttzNuKK+C/eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJ0XkZ7 eOr93lhEJyG2U3Uf31MXMB8GA1UdIwQYMBaAFEcM39SfXf8hJXjexdoh8h2gs/rS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjM2NC8wNDA1NjZBODg0 Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95RWxlTjdGMmlIeUhhQ3ot dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J3emYxSjlkX3lFbGVON0YyaUh5SGFDei10SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjM2NC8wNDA1NjZBODg0Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95 RWxlTjdGMmlIeUhhQ3otdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVGyBvklxY0IoCoycRDAfGmJi9hpsVUtfB6D9JYIrHcGxXxnDQAnhe 8yUoAWridO/kcdl/2KEB4n0Y2qFvmvxFO2GuOtzsMcEXhfXugOQY20/FhUcYpjQT tENODglrlX0zpu5jpjQh3qD+aEVLeH30L2GPruHeoYYKyk0rFs5CdPsC0c8EyoPK 8wz0GC4rnHFjjf/p/R/a/4KFtAZThonOG6ESzJUUdaNS+fNZdT4iw++LjAvy5+ge cu7ESB/MpG0Ynu95ukO2WfhLx2R6EgohVOF8YuUzTmn04Qg7ApzBhN/5or8M/z9x xODX1Mf2zNfph37h8hHOXdsCb8XNRmBF -----END CERTIFICATE-----Generated at Sat May 31 16:39:50 2025 by rpki-client