$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json) Hash identifier: TJt5kNnRUglvNqIi5QOtElA/syNM86HxT18a5ekJGEE= Subject key identifier: 18:5D:F9:D3:DA:C9:BB:B0:2E:12:CE:BC:82:EA:79:FF:5A:34:B7:A1 Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft Manifest number: 07C6 Signing time: Fri 30 May 2025 21:23:19 +0000 Manifest this update: Fri 30 May 2025 21:23:19 +0000 Manifest next update: Fri 06 Jun 2025 21:23:19 +0000 Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: gBl7nDek/nixg5Bvj6yDPsnWRZibVn9SG0tat0bn74Q=) 2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: 0UTI8vBXyFaaaPE8GDLKNFY+lSRTHbfC3s12YcpVQog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Validity Not Before: May 30 21:23:19 2025 GMT Not After : Jun 6 21:23:19 2025 GMT Subject: CN=683a21c7-6186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:c2:d4:dd:98:fe:a6:0e:5f:51:db:f5:36: b5:15:65:64:19:61:f5:f1:2b:db:95:2d:56:b9:fc: ce:84:5a:91:9e:96:84:22:fd:1f:d3:cd:8d:a8:5b: 05:74:bd:3a:06:14:e4:4b:40:c5:a9:e9:9e:15:92: 5b:49:43:3d:1c:ba:ab:68:e4:d6:3b:10:8b:52:96: 18:9a:60:08:d9:68:5e:f8:33:46:d7:fe:1c:7b:93: 75:25:28:90:84:24:e0:f3:84:0c:02:54:43:38:62: e8:c8:1a:00:35:a7:30:d1:a6:eb:90:1d:a1:90:ea: 8b:ac:65:c5:5d:02:f5:c1:9b:ae:04:4e:06:12:57: bd:ad:86:db:e5:d3:3b:83:14:ae:83:7e:4e:f8:cf: 7b:9e:d7:fc:f1:de:be:82:a5:c6:9e:ce:b4:77:29: d3:5a:f7:48:f4:5d:5c:56:14:60:a8:e3:26:e7:00: 87:d4:88:a6:e0:ec:08:9c:30:f0:a1:bf:b0:b4:ea: 3d:a7:9e:e9:96:ff:1e:17:ef:3a:db:9d:e7:bd:8c: ca:33:db:98:fa:55:85:25:66:53:40:6e:32:26:28: ff:d4:1f:c4:57:b7:77:b4:dd:f1:40:1d:2c:8c:a4: 59:bc:9d:b3:f3:ab:e9:70:08:49:81:5a:b7:a0:58: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5D:F9:D3:DA:C9:BB:B0:2E:12:CE:BC:82:EA:79:FF:5A:34:B7:A1 X509v3 Authority Key Identifier: keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:91:75:ae:59:71:00:1d:4d:6a:5f:dd:42:f5:6e:ea:58:37: f7:65:0b:3b:d0:e3:be:40:2d:b4:53:9e:61:ab:7c:18:0b:a1: 11:29:30:07:20:1c:74:44:c3:a2:0e:18:e5:e9:3f:46:52:ab: 8d:14:7e:9e:95:d7:1c:ec:0f:4c:3e:b4:e0:8b:36:67:66:d0: fd:35:33:95:ac:9d:36:8d:11:e0:68:ff:02:97:54:9c:6c:a1: 4a:5c:d5:8b:bd:11:e0:6b:ec:38:aa:05:e6:ca:fb:37:32:7a: f1:0d:6a:c7:5c:16:ba:79:0b:39:7b:24:1d:79:df:03:e5:a9: 7b:07:b1:c7:21:79:6e:b2:46:82:43:63:3e:8c:d2:2c:e8:44: 08:f7:73:29:7b:26:58:2a:d2:87:dc:03:3e:f9:e8:34:62:39: af:08:da:d4:6b:00:3a:c4:ce:33:b4:74:4c:2b:0c:d9:9a:54: 2c:5d:c6:5a:eb:4a:c8:14:a4:58:8e:ab:c9:19:8d:2c:2e:ab: 7f:af:2b:8a:6f:82:ba:c7:25:57:6c:85:e3:7d:eb:23:9e:5d: c7:48:f1:20:43:67:ec:61:40:fd:fd:04:7c:f1:b2:ee:9f:d2: ef:bd:33:95:28:0d:f6:24:8e:1b:97:0e:08:26:71:33:b6:cc: ce:6d:dd:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1RTkxMTAvBgNVBAUTKEJCNUFCQjU5RjMxN0FCN0NFOTU1NDFDQTVBQzUyRjIx N0ZFOTU5MzEwHhcNMjUwNTMwMjEyMzE5WhcNMjUwNjA2MjEyMzE5WjAYMRYwFAYD VQQDEw02ODNhMjFjNy02MTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8bC1N2Y/qYOX1Hb9Ta1FWVkGWH18SvblS1WufzOhFqRnpaEIv0f082NqFsF dL06BhTkS0DFqemeFZJbSUM9HLqraOTWOxCLUpYYmmAI2Whe+DNG1/4ce5N1JSiQ hCTg84QMAlRDOGLoyBoANacw0abrkB2hkOqLrGXFXQL1wZuuBE4GEle9rYbb5dM7 gxSug35O+M97ntf88d6+gqXGns60dynTWvdI9F1cVhRgqOMm5wCH1Iim4OwInDDw ob+wtOo9p57plv8eF+86253nvYzKM9uY+lWFJWZTQG4yJij/1B/EV7d3tN3xQB0s jKRZvJ2z86vpcAhJgVq3oFhXJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhd+dPa ybuwLhLOvILqef9aNLehMB8GA1UdIwQYMBaAFLtau1nzF6t86VVBylrFLyF/6Vkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzVFOS9FNjk0RkM0QUZC RDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEzenBWVUhLV3NVdklYX3BX VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxcTdXZk1YcTN6cFZVSEtXc1V2SVhfcFdURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzVFOS9FNjk0RkM0QUZCRDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEz enBWVUhLV3NVdklYX3BXVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/kXWuWXEAHU1qX91C9W7qWDf3ZQs70OO+QC20U55hq3wYC6ERKTAH IBx0RMOiDhjl6T9GUquNFH6eldcc7A9MPrTgizZnZtD9NTOVrJ02jRHgaP8Cl1Sc bKFKXNWLvRHga+w4qgXmyvs3MnrxDWrHXBa6eQs5eyQded8D5al7B7HHIXluskaC Q2M+jNIs6EQI93MpeyZYKtKH3AM++eg0YjmvCNrUawA6xM4ztHRMKwzZmlQsXcZa 60rIFKRYjqvJGY0sLqt/ryuKb4K6xyVXbIXjfesjnl3HSPEgQ2fsYUD9/QR88bLu n9LvvTOVKA32JI4blw4IJnEztszObd08 -----END CERTIFICATE-----Generated at Sat May 31 16:38:52 2025 by rpki-client