$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft File: djUTLn1AWlRkWzst-y4KA9_0VsM.mft (raw, json) Hash identifier: ga/VMnPzKZtkoF/WaTYrIt9fSgpnAq9Hhz5hZQX9QS8= Subject key identifier: 2B:55:A9:38:99:09:42:48:E2:F3:FC:CA:E7:81:D2:59:38:7F:AD:C3 Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 Certificate issuer: /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft Manifest number: 88 Signing time: Sat 31 May 2025 06:08:34 +0000 Manifest this update: Sat 31 May 2025 06:08:34 +0000 Manifest next update: Sat 07 Jun 2025 06:08:34 +0000 Files and hashes: 1: djUTLn1AWlRkWzst-y4KA9_0VsM.crl (hash: x5pAb1dX/bdOWN8zxzR+Uvq1umIQhleWE1pEWtHT17s=) 2: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (hash: Q9yPm3gs8BRfJ5g6BfqBpNgsQGDHcY41Tws1eH6Cg1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6799, serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Validity Not Before: May 31 06:08:34 2025 GMT Not After : Jun 7 06:08:34 2025 GMT Subject: CN=683a9ce2-811d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:47:e9:e0:0b:95:a8:0f:b2:02:55:f7:e9:5f: 3e:8f:e4:44:c9:01:2f:ec:3d:a9:a5:74:bc:58:f1: a2:4c:59:14:a6:50:d2:5d:7b:72:71:b8:d2:ec:4d: eb:52:b6:80:bf:74:93:25:7f:56:46:8b:1a:96:a5: 1d:6e:1a:cc:c4:f8:54:e0:93:f4:73:54:6c:27:88: e7:46:35:0d:0d:5a:a0:64:46:31:a9:a4:1e:43:05: 16:9a:6a:16:42:01:cc:5e:ce:e3:92:29:83:06:05: 2a:4f:f5:50:da:af:24:3a:99:2b:db:97:d1:1c:37: fb:2b:90:8a:a0:de:69:89:9c:47:f1:41:26:15:f0: 1c:6e:9e:68:6e:31:9c:92:2d:aa:7b:ac:a2:cc:8f: 61:25:1f:63:61:41:c8:2d:74:c6:9c:1d:3a:9e:80: 46:81:78:44:93:14:57:53:32:f7:27:ba:47:6f:61: 6c:65:f9:bb:96:1a:29:ea:1e:ac:e6:38:e5:0f:f3: 5e:73:ab:99:13:c3:a7:31:ec:3d:d8:ab:33:06:bd: f1:b3:c5:c8:53:06:27:7e:e3:90:02:00:08:13:73: f9:fd:8c:43:76:6f:33:2e:fa:48:a8:25:9b:6a:6f: 69:f0:44:62:23:7a:3c:25:16:a1:e6:d4:0d:3e:79: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:55:A9:38:99:09:42:48:E2:F3:FC:CA:E7:81:D2:59:38:7F:AD:C3 X509v3 Authority Key Identifier: keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:0d:eb:9c:66:c7:d5:6a:f6:09:db:74:84:aa:ae:0e:a2:a5: 76:e9:f2:e8:4f:ac:75:2f:84:9b:f7:9c:a2:df:93:2c:97:84: e2:a4:62:23:fc:9e:1b:5a:97:34:15:e1:75:95:c4:29:ee:1e: 95:9f:f4:c6:c3:9d:58:bb:94:61:3f:50:fe:48:59:8d:26:90: ec:25:09:8d:3c:6a:3c:7b:90:f0:3d:8b:93:ba:e1:6f:b8:e0: 40:c1:d5:e7:15:06:1a:5e:b3:96:b6:4d:4a:37:09:3e:72:0d: 3f:cb:9c:d6:5f:91:b5:07:da:57:79:b0:1d:2b:8a:5d:10:32: a5:98:41:a2:18:93:4c:43:ca:34:84:5e:83:aa:cf:5a:c9:30: 28:35:e4:e4:17:6d:6c:87:c1:4a:79:d8:7f:51:e8:04:4e:74: fd:01:61:7f:5e:bd:75:37:ad:99:3d:0d:34:06:d7:e9:8f:35: 0d:d7:8b:aa:b5:65:67:2c:30:1d:50:c2:bf:c6:8d:5a:8b:85: c9:17:12:d7:31:c5:6e:79:21:65:40:a8:83:79:7d:db:ba:6e: 7b:c0:3b:b1:30:1f:f2:c7:47:74:21:52:e2:a4:17:46:2d:8a: 1b:d4:6b:55:4e:74:60:f9:56:b1:85:7b:e7:2f:6b:49:24:fc: 68:1a:f5:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3OTkxMTAvBgNVBAUTKDc2MzUxMzJFN0Q0MDVBNTQ2NDVCM0IyREZCMkUwQTAz REZGNDU2QzMwHhcNMjUwNTMxMDYwODM0WhcNMjUwNjA3MDYwODM0WjAYMRYwFAYD VQQDEw02ODNhOWNlMi04MTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEfp4AuVqA+yAlX36V8+j+REyQEv7D2ppXS8WPGiTFkUplDSXXtycbjS7E3r UraAv3STJX9WRosalqUdbhrMxPhU4JP0c1RsJ4jnRjUNDVqgZEYxqaQeQwUWmmoW QgHMXs7jkimDBgUqT/VQ2q8kOpkr25fRHDf7K5CKoN5piZxH8UEmFfAcbp5objGc ki2qe6yizI9hJR9jYUHILXTGnB06noBGgXhEkxRXUzL3J7pHb2FsZfm7lhop6h6s 5jjlD/Nec6uZE8OnMew92KszBr3xs8XIUwYnfuOQAgAIE3P5/YxDdm8zLvpIqCWb am9p8ERiI3o8JRah5tQNPnnH3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtVqTiZ CUJI4vP8yueB0lk4f63DMB8GA1UdIwQYMBaAFHY1Ey59QFpUZFs7LfsuCgPf9FbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjc5OS9FRDlFNjBCMjcw OUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVdsUmtXenN0LXk0S0E5XzBW c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqVVRMbjFBV2xSa1d6c3QteTRLQTlfMFZzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Njc5OS9FRDlFNjBCMjcwOUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVds UmtXenN0LXk0S0E5XzBWc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsDeucZsfVavYJ23SEqq4OoqV26fLoT6x1L4Sb95yi35Msl4TipGIj /J4bWpc0FeF1lcQp7h6Vn/TGw51Yu5RhP1D+SFmNJpDsJQmNPGo8e5DwPYuTuuFv uOBAwdXnFQYaXrOWtk1KNwk+cg0/y5zWX5G1B9pXebAdK4pdEDKlmEGiGJNMQ8o0 hF6Dqs9ayTAoNeTkF21sh8FKedh/UegETnT9AWF/Xr11N62ZPQ00BtfpjzUN14uq tWVnLDAdUMK/xo1ai4XJFxLXMcVueSFlQKiDeX3bum57wDuxMB/yx0d0IVLipBdG LYob1GtVTnRg+VaxhXvnL2tJJPxoGvWH -----END CERTIFICATE-----Generated at Sat May 31 16:45:43 2025 by rpki-client