$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft File: slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json) Hash identifier: vJU3OMYpkgHMBD/vgdQUoTSxS+HnwAw+dKPsmREMZ5U= Subject key identifier: BF:BF:B7:47:3F:59:EA:6A:96:FB:D0:BE:4A:06:FE:F5:AC:AF:83:E4 Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft Manifest number: 96 Signing time: Sat 31 May 2025 05:55:06 +0000 Manifest this update: Sat 31 May 2025 05:55:06 +0000 Manifest next update: Sat 07 Jun 2025 05:55:06 +0000 Files and hashes: 1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: b2Xr+pogDlhsmbDU4oay/22HUng2OoDVIFkY2RZwMW4=) 2: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (hash: u07sFp3Yqjqw6LAiuoDt1givQlP2Rg/DNRW12Og3/70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Validity Not Before: May 31 05:55:06 2025 GMT Not After : Jun 7 05:55:06 2025 GMT Subject: CN=683a99ba-990a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:35:36:37:ef:b0:b1:13:b6:85:f4:db:04: 9c:02:02:72:cf:d7:3b:68:c2:e7:d9:91:22:4a:ce: 0e:11:35:8f:9f:22:6a:bf:d7:8e:52:b0:23:ed:a1: 9e:35:d6:97:a4:9b:39:7c:ce:aa:52:ee:03:c6:01: 23:a9:2e:de:72:9a:44:8f:58:8e:ed:16:ae:ea:f2: ee:37:72:00:28:55:b3:ba:17:c8:7e:ea:5b:2b:9c: 8f:7f:94:14:d0:d0:ae:77:50:97:1a:7a:56:1f:cb: 80:d6:c4:02:71:5f:ea:c2:8f:df:3e:3f:e5:56:ec: 2d:56:19:8a:e0:93:d7:6b:6a:d6:06:93:e2:89:1f: 8c:87:6d:c9:5a:09:a7:41:f6:74:2f:c8:54:5f:87: 5e:33:1e:67:7b:d6:da:1d:a9:bb:6d:11:35:49:f9: 11:5f:5e:31:22:a4:d8:79:92:68:69:85:56:06:87: f4:20:0b:3e:70:8a:a3:ae:00:1b:59:65:52:a2:a0: f4:9b:51:e0:02:93:52:05:c5:ce:09:0f:0e:b9:51: bb:77:2c:d1:a9:21:26:e3:d1:f8:2e:c8:35:59:ef: 67:45:12:3c:0d:17:62:ca:58:08:34:5e:6e:b6:2c: bb:04:d5:43:b5:77:a7:06:75:e5:81:3a:c0:43:ee: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BF:B7:47:3F:59:EA:6A:96:FB:D0:BE:4A:06:FE:F5:AC:AF:83:E4 X509v3 Authority Key Identifier: keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:fb:7e:17:0a:ba:3f:a7:dd:47:5d:18:f0:e1:7e:78:e6:42: 1b:a3:e4:d1:f2:bf:0e:a4:75:ff:e7:3c:2c:b4:02:15:90:1a: 25:f1:84:ea:1c:f4:74:cc:52:1c:ba:47:c0:08:f4:79:9e:c2: 15:4b:55:44:32:13:2b:b9:c5:8a:46:7e:7f:0d:cb:30:e5:8c: 4b:bc:71:55:42:fb:11:48:03:04:8f:5d:61:d0:31:e1:9d:fc: 65:6f:25:24:1f:03:81:66:f3:06:3e:1f:42:ec:b9:be:82:eb: 56:12:c0:41:6f:89:37:f1:25:00:72:36:24:c3:61:5a:9b:32: bc:0d:56:a4:fb:d9:6b:7f:dc:29:d8:48:17:b4:cd:db:ed:21: f1:59:14:00:ce:1f:74:e3:42:94:2d:8c:4b:6c:76:13:64:52: 10:9b:47:06:c8:1c:8e:81:cb:b3:36:71:a1:de:a5:51:6e:e5: 59:8e:66:27:f6:d2:f4:25:ef:ba:15:8d:e9:6e:b6:d9:ce:0b: 5e:7b:01:8b:c7:da:95:18:2d:fe:b7:34:18:ab:1a:1b:11:08: f1:d0:9e:86:d9:07:17:2b:06:2d:1b:d8:45:24:71:05:b7:ce: 44:4e:64:a6:c8:6b:4b:e2:83:62:a8:39:9f:55:47:61:e2:e5: 3a:8e:7f:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3ODYxMTAvBgNVBAUTKEIyNTUyQjM4QjhDNUNCMDkzNUM5NDBGQTYwOTgwRUE2 RjUxMENGODYwHhcNMjUwNTMxMDU1NTA2WhcNMjUwNjA3MDU1NTA2WjAYMRYwFAYD VQQDEw02ODNhOTliYS05OTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+k1NjfvsLETtoX02wScAgJyz9c7aMLn2ZEiSs4OETWPnyJqv9eOUrAj7aGe NdaXpJs5fM6qUu4DxgEjqS7ecppEj1iO7Rau6vLuN3IAKFWzuhfIfupbK5yPf5QU 0NCud1CXGnpWH8uA1sQCcV/qwo/fPj/lVuwtVhmK4JPXa2rWBpPiiR+Mh23JWgmn QfZ0L8hUX4deMx5ne9baHam7bRE1SfkRX14xIqTYeZJoaYVWBof0IAs+cIqjrgAb WWVSoqD0m1HgApNSBcXOCQ8OuVG7dyzRqSEm49H4Lsg1We9nRRI8DRdiylgINF5u tiy7BNVDtXenBnXlgTrAQ+760wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+/t0c/ WepqlvvQvkoG/vWsr4PkMB8GA1UdIwQYMBaAFLJVKzi4xcsJNclA+mCYDqb1EM+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc4Ni9FNTc3MTM4MDVB RTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3azF5VUQ2WUpnT3B2VVF6 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NsVXJPTGpGeXdrMXlVRDZZSmdPcHZVUXo0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc4Ni9FNTc3MTM4MDVBRTExMUVGQkI1QzU3MkRDNEY5QUUwMi9zbFVyT0xqRnl3 azF5VUQ2WUpnT3B2VVF6NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ+34XCro/p91HXRjw4X545kIbo+TR8r8OpHX/5zwstAIVkBol8YTq HPR0zFIcukfACPR5nsIVS1VEMhMrucWKRn5/Dcsw5YxLvHFVQvsRSAMEj11h0DHh nfxlbyUkHwOBZvMGPh9C7Lm+gutWEsBBb4k38SUAcjYkw2FamzK8DVak+9lrf9wp 2EgXtM3b7SHxWRQAzh9040KULYxLbHYTZFIQm0cGyByOgcuzNnGh3qVRbuVZjmYn 9tL0Je+6FY3pbrbZzgteewGLx9qVGC3+tzQYqxobEQjx0J6G2QcXKwYtG9hFJHEF t85ETmSmyGtL4oNiqDmfVUdh4uU6jn8Y -----END CERTIFICATE-----Generated at Sat May 31 17:49:41 2025 by rpki-client