$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json) Hash identifier: PPaS4sGciBZqe8bFBgSpWBdFlHExvXBBNS8ggyV9Bys= Subject key identifier: 8F:7C:3E:8F:C1:C7:AC:35:CF:65:15:71:12:66:6B:78:70:01:44:C4 Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 15CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft Manifest number: 15BE Signing time: Fri 30 May 2025 16:57:41 +0000 Manifest this update: Fri 30 May 2025 16:57:41 +0000 Manifest next update: Fri 06 Jun 2025 16:57:41 +0000 Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: TvbdinmjZv0E9QIxEkyoObeFc1bdrQz4LO5Ld9xilkw=) 2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: jy3Wft/F/5UxXAXx08sOlZkwBarb1srk+Xi5m/F+Ac0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5580 (0x15cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: May 30 16:57:41 2025 GMT Not After : Jun 6 16:57:41 2025 GMT Subject: CN=6839e385-e088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:01:e0:d5:f0:78:5d:55:05:21:73:c7:b5: 7c:02:a0:73:e1:6c:37:04:1f:ae:d7:bc:37:05:23: 0d:4e:2b:84:87:14:e0:aa:a5:17:af:71:1c:35:c1: 79:0e:5a:e2:ff:fd:9c:1f:2c:36:b0:77:10:7e:71: 64:ca:5c:c6:b6:7b:c7:b9:1a:92:48:80:5b:61:13: 04:eb:51:9a:4f:8a:81:a3:58:e5:ea:ee:48:ad:7c: bd:45:40:33:c6:6f:69:9e:75:68:6e:34:05:f9:eb: fb:b3:51:44:db:8e:fa:7b:26:fb:88:29:f4:5c:96: 38:02:18:ee:0d:60:2e:09:04:ef:08:c2:81:5f:ac: cd:39:ad:56:a0:69:d9:95:cf:a2:84:6f:46:b0:ce: 74:07:50:02:1f:63:49:57:ab:cf:fe:1a:39:a5:47: 55:12:0a:54:36:b5:de:fa:76:fb:bc:04:95:56:8b: ba:0b:36:21:99:4b:6e:22:f1:a3:4e:2a:d3:68:b9: cc:9f:a1:81:7f:41:3f:f8:ba:1d:69:1a:11:52:aa: 2e:4a:3d:62:60:b1:4d:7a:87:f6:a7:50:86:6e:5b: 78:e4:a2:ef:86:b0:a1:87:35:79:f5:47:d5:b1:3e: e5:c7:f4:dc:c8:77:ee:34:60:5a:b4:81:0f:e4:74: 00:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7C:3E:8F:C1:C7:AC:35:CF:65:15:71:12:66:6B:78:70:01:44:C4 X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:5e:32:ea:1c:25:8f:63:4b:2d:e6:e5:37:07:fb:55:e9:65: ec:28:83:16:9b:87:d7:f1:14:74:57:f8:a9:40:56:2a:00:80: a8:cf:8d:00:ea:e6:8d:db:35:fb:7a:d8:1c:54:09:d4:0f:ab: bc:13:9d:f3:5f:7f:d7:f5:27:18:9e:fc:67:dc:12:17:8c:87: cf:6e:92:c7:02:fb:88:44:fd:be:92:c7:3d:77:da:ec:d9:71: f2:88:eb:c2:86:40:cb:ab:d0:bc:34:0a:e7:41:01:7b:93:50: 90:01:82:e1:fd:ea:10:9f:c5:f2:9e:9a:13:3b:cc:ad:e8:30: b0:96:f7:20:bb:0c:f3:60:f5:df:71:2a:a6:4f:11:42:5e:8d: f6:c0:a0:08:d8:e2:a9:b8:14:1f:fe:54:20:61:32:7e:2e:b3: 4d:08:b1:b9:13:9b:11:fb:89:fc:c6:c3:7e:29:73:67:89:dd: 02:bf:2f:24:de:90:76:10:7e:ce:84:ab:50:fc:54:c8:f2:0c: ee:c9:fc:c3:e5:1b:6d:31:10:d8:06:ca:ae:50:1e:25:2d:20: d7:23:17:e6:67:18:68:3e:20:5f:4b:6a:65:fb:fa:c8:4c:f3: 25:5f:76:ce:7c:14:03:07:d9:8b:82:57:71:53:c3:de:cf:35: 3a:3f:72:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjUwNTMwMTY1NzQxWhcNMjUwNjA2MTY1NzQxWjAYMRYwFAYD VQQDEw02ODM5ZTM4NS1lMDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxcB4NXweF1VBSFzx7V8AqBz4Ww3BB+u17w3BSMNTiuEhxTgqqUXr3EcNcF5 Dlri//2cHyw2sHcQfnFkylzGtnvHuRqSSIBbYRME61GaT4qBo1jl6u5IrXy9RUAz xm9pnnVobjQF+ev7s1FE2476eyb7iCn0XJY4AhjuDWAuCQTvCMKBX6zNOa1WoGnZ lc+ihG9GsM50B1ACH2NJV6vP/ho5pUdVEgpUNrXe+nb7vASVVou6CzYhmUtuIvGj TirTaLnMn6GBf0E/+LodaRoRUqouSj1iYLFNeof2p1CGblt45KLvhrChhzV59UfV sT7lx/TcyHfuNGBatIEP5HQAlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI98Po/B x6w1z2UVcRJma3hwAUTEMB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDRFQS82ODkwMzM5NjJCNDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtT T0E1NnU1QWNOQ1l6TEdxbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWXjLqHCWPY0st5uU3B/tV6WXsKIMWm4fX8RR0V/ipQFYqAICoz40A 6uaN2zX7etgcVAnUD6u8E53zX3/X9ScYnvxn3BIXjIfPbpLHAvuIRP2+ksc9d9rs 2XHyiOvChkDLq9C8NArnQQF7k1CQAYLh/eoQn8XynpoTO8yt6DCwlvcguwzzYPXf cSqmTxFCXo32wKAI2OKpuBQf/lQgYTJ+LrNNCLG5E5sR+4n8xsN+KXNnid0Cvy8k 3pB2EH7OhKtQ/FTI8gzuyfzD5RttMRDYBsquUB4lLSDXIxfmZxhoPiBfS2pl+/rI TPMlX3bOfBQDB9mLgldxU8PezzU6P3KV -----END CERTIFICATE-----Generated at Sat May 31 17:45:01 2025 by rpki-client