$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: 1YcGXW+Q1RkolJvWU4Gh9G9c9Dxtwf/3pfOtEBLfceA= Subject key identifier: 77:8A:29:9E:D8:7D:12:A3:3B:60:A4:62:91:85:4A:52:0A:4B:82:C3 Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: 13 Signing time: Sat 31 May 2025 07:35:27 +0000 Manifest this update: Sat 31 May 2025 07:35:26 +0000 Manifest next update: Sat 07 Jun 2025 07:35:26 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: uHOXh3I4IViOiXAX+HUHxD79iHUZU2vD2u9jDJYtDIc=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: gGLpwNDKILKj8KiWuRMqmJ+fLEpRADmW87NfmWpK6sE=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: Zrr0Zmh170T21y9iJRbERw6GVfqvG2/61KJESV309v8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: May 31 07:35:26 2025 GMT Not After : Jun 7 07:35:26 2025 GMT Subject: CN=683ab13e-06b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:7f:4c:5a:25:d4:0a:38:04:32:58:9e:65: 76:63:0e:81:53:7c:72:d3:11:5a:87:84:da:66:37: 9e:ec:68:9d:5f:d1:83:ad:d9:c5:c7:c2:e3:03:63: 91:76:f6:e2:cc:94:6a:35:4e:f1:51:e8:2d:61:e4: f8:3b:1f:6c:16:17:02:6b:5f:87:f2:50:29:cf:b5: e1:e9:1e:c5:04:1f:52:0d:b5:25:d3:11:1c:f3:d0: ea:0b:b1:00:0c:6d:36:51:ce:34:7d:40:04:83:9b: 25:ea:0e:c6:3e:dc:74:25:7b:f7:f1:4d:24:a7:1e: 96:13:65:76:ec:82:5c:d8:04:78:72:d2:71:2a:31: 1c:25:15:49:b5:a8:c8:e1:01:a7:10:0e:95:c8:7d: b3:ee:5c:bf:8c:94:5b:a3:ba:d3:0d:42:81:4d:63: 8b:01:1e:36:c0:55:28:82:15:bf:56:5d:32:d3:80: a7:f3:bd:de:26:f5:97:5d:e7:8f:4e:9a:0a:6d:a5: 75:98:e5:3f:c1:5b:25:3b:2a:2b:1f:18:df:cf:c3: df:80:3e:b4:79:68:0b:6b:5f:c6:66:1c:57:4a:02: c7:51:75:b6:46:f5:cd:2d:a3:c1:29:67:8b:e2:2c: c4:d6:2e:d8:b5:49:ad:47:ef:49:1e:13:1a:27:69: 70:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8A:29:9E:D8:7D:12:A3:3B:60:A4:62:91:85:4A:52:0A:4B:82:C3 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:88:e3:ac:f7:18:e5:24:7d:e2:5d:fb:e9:85:0a:a2:4e:15: cc:c7:e1:cd:1a:ef:4c:07:78:86:4b:a3:ed:76:55:86:89:3a: 28:e3:26:c8:d6:4f:88:e6:e7:7d:e7:d4:0f:6c:01:3a:4d:45: e8:9b:9f:f7:fb:72:3d:ba:0a:12:1d:e2:d6:d8:99:ff:81:19: 09:8a:c4:ac:a7:e3:df:33:fc:59:b2:18:36:94:00:64:fa:e2: 6c:64:02:86:0a:56:d2:2f:e4:73:8f:0b:f2:e8:d8:90:a4:41: dc:66:f7:d3:7a:dd:98:25:73:53:8d:af:60:32:63:18:48:87: 08:2c:4d:e0:8c:22:b0:8f:dc:4a:e3:fa:9e:81:20:38:22:57: 00:88:99:62:05:ad:7c:e6:af:60:15:87:67:b7:b5:ba:7f:63: 31:41:bf:5d:8d:97:eb:71:d5:cd:7f:c3:32:8b:3f:db:0d:65: 1b:8f:08:ee:6e:9a:53:42:4e:80:d0:4e:6d:4f:02:6c:03:e6: 96:70:63:9e:22:a6:83:95:ca:1b:ef:e6:ad:9b:e0:56:a4:9a: 4e:36:ab:f9:22:92:b9:81:96:ef:78:6e:e2:d1:ae:44:eb:cb: ff:3d:52:c2:d5:78:95:a4:17:ba:97:9c:59:ee:90:49:f9:12: 50:1e:99:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzdBQjExMC8GA1UEBRMoOTRDOEVGM0YyQTkyMkVFMTQ0QUE2RjBCNjY0MzZDQTQ2 NkNDNEIwQTAeFw0yNTA1MzEwNzM1MjZaFw0yNTA2MDcwNzM1MjZaMBgxFjAUBgNV BAMTDTY4M2FiMTNlLTA2YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGuX9MWiXUCjgEMlieZXZjDoFTfHLTEVqHhNpmN57saJ1f0YOt2cXHwuMDY5F2 9uLMlGo1TvFR6C1h5Pg7H2wWFwJrX4fyUCnPteHpHsUEH1INtSXTERzz0OoLsQAM bTZRzjR9QASDmyXqDsY+3HQle/fxTSSnHpYTZXbsglzYBHhy0nEqMRwlFUm1qMjh AacQDpXIfbPuXL+MlFujutMNQoFNY4sBHjbAVSiCFb9WXTLTgKfzvd4m9Zdd549O mgptpXWY5T/BWyU7KisfGN/Pw9+APrR5aAtrX8ZmHFdKAsdRdbZG9c0to8EpZ4vi LMTWLti1Sa1H70keExonaXBHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd4opnth9 EqM7YKRikYVKUgpLgsMwHwYDVR0jBBgwFoAUlMjvPyqSLuFEqm8LZkNspGbMSwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzN0FCLzI2NDg0NTkwMjFG MzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE1qdlB5cVNMdUZFcW04TFprTnNwR2JNU3dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz N0FCLzI2NDg0NTkwMjFGMzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVG RXFtOExaa05zcEdiTVN3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGSI46z3GOUkfeJd++mFCqJOFczH4c0a70wHeIZLo+12VYaJOijjJsjW T4jm533n1A9sATpNReibn/f7cj26ChId4tbYmf+BGQmKxKyn498z/FmyGDaUAGT6 4mxkAoYKVtIv5HOPC/Lo2JCkQdxm99N63Zglc1ONr2AyYxhIhwgsTeCMIrCP3Erj +p6BIDgiVwCImWIFrXzmr2AVh2e3tbp/YzFBv12Nl+tx1c1/wzKLP9sNZRuPCO5u mlNCToDQTm1PAmwD5pZwY54ipoOVyhvv5q2b4Fakmk42q/kikrmBlu94buLRrkTr y/89UsLVeJWkF7qXnFnukEn5ElAemZ8= -----END CERTIFICATE-----Generated at Sat May 31 17:08:54 2025 by rpki-client