$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft File: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json) Hash identifier: S17T9oH826kAeRfVTeW32XuI/lmJbojUYl5gMBl1/U4= Subject key identifier: 0C:73:3F:D0:7B:98:33:B8:94:A1:F1:4F:E7:BD:BC:0D:E6:FF:FE:3B Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 Certificate issuer: /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Certificate serial: 050D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft Manifest number: 0507 Signing time: Fri 30 May 2025 23:52:08 +0000 Manifest this update: Fri 30 May 2025 23:52:07 +0000 Manifest next update: Fri 06 Jun 2025 23:52:07 +0000 Files and hashes: 1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: RIdPr3PsDT2X5z4NaRqF/TsBaLvSYejH1a6V5UjcZDE=) 2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: OdV4BW1AypHn4SWRXVNRSTTOuuILOVr+n5WSk2uAXqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1293 (0x50d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219 Validity Not Before: May 30 23:52:07 2025 GMT Not After : Jun 6 23:52:07 2025 GMT Subject: CN=683a44a7-22d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:7e:47:22:f9:44:28:4d:39:18:87:f3:0f: a4:03:bf:b0:f9:3f:68:fb:a2:b1:ab:36:90:25:41: a2:56:17:1f:5d:e0:aa:70:8e:e2:56:95:d6:7b:92: bb:8f:bb:14:94:eb:56:eb:d6:8a:de:ae:77:e6:9f: ba:40:5b:22:f5:5a:2c:95:ff:44:7e:ac:da:ad:81: df:c5:b6:33:af:51:0f:a2:10:47:5c:b5:e8:16:3d: aa:b7:b2:61:ef:b8:d0:38:c2:a0:92:4c:8b:21:1e: 37:c6:93:a8:7e:e8:bb:ea:1a:d9:db:c4:02:0a:9f: 9c:db:46:82:26:68:59:45:93:8c:30:77:62:f3:47: d7:93:37:9c:4c:83:73:cc:89:37:c8:40:4b:5c:ec: 98:95:00:a4:10:49:52:01:55:21:0a:94:23:3d:76: 24:11:84:47:88:7a:e0:c4:d3:b9:cc:2a:87:21:cd: b5:13:9a:ce:5f:15:24:bc:e7:8b:33:cb:73:5c:b0: b0:52:ae:e3:3a:c4:76:35:a8:2b:4e:d2:e9:70:46: 35:59:1d:b7:3e:80:49:80:0e:44:a7:9f:26:74:71: 0b:b5:e3:94:71:d2:10:3e:58:b9:d4:e7:3a:8a:9d: 69:ed:4c:9d:35:f3:18:13:69:6b:bb:ef:19:ce:ac: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:73:3F:D0:7B:98:33:B8:94:A1:F1:4F:E7:BD:BC:0D:E6:FF:FE:3B X509v3 Authority Key Identifier: keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d8:c4:ca:89:96:d6:08:b6:22:99:b2:e0:81:8f:09:ee:f8: 38:e9:e8:64:8d:01:31:70:96:ce:af:23:6a:6f:9f:12:23:9c: 4d:31:d0:12:32:8c:81:0e:1a:34:dc:b7:aa:ce:4e:df:b6:f9: 48:eb:c0:d2:bf:3b:7a:36:38:1f:22:77:cb:88:d9:39:1e:a6: 54:64:1d:8b:26:33:f9:31:fc:c5:b2:64:79:33:07:6f:6c:05: 8e:01:1d:82:09:ac:10:87:b9:cd:35:6e:f1:e0:ab:7f:d5:bf: 64:9d:bf:47:10:a4:20:19:8b:5d:8e:c2:23:a8:29:50:bd:7e: 48:30:3e:72:42:e9:fe:45:b7:b5:ee:59:f0:6c:9b:59:bf:15: 19:cd:c7:b7:24:b8:0c:6f:06:d3:35:1d:7b:45:cc:b0:0f:21: c0:3e:55:6c:a2:54:e3:ec:fd:a8:1a:e0:fc:01:37:fc:60:d8: 34:39:8d:01:ab:81:e9:30:97:44:48:f7:87:2a:57:1b:6b:81: 89:50:23:49:b1:66:41:04:9c:aa:c1:35:66:61:87:86:cb:86: 17:5e:f4:9a:3b:27:65:d0:94:1b:bf:43:1a:5b:ae:88:7e:5f: c8:de:6a:b0:89:37:0f:2b:9d:6d:33:03:df:fd:4b:a8:8d:7b: 13:38:8c:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdBQzkxMTAvBgNVBAUTKDMyNkU1NUU3NEIwNkNEODNGOTk0Q0MxREE2NjU2NTQy MUNDOUUyMTkwHhcNMjUwNTMwMjM1MjA3WhcNMjUwNjA2MjM1MjA3WjAYMRYwFAYD VQQDEw02ODNhNDRhNy0yMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kd+RyL5RChNORiH8w+kA7+w+T9o+6KxqzaQJUGiVhcfXeCqcI7iVpXWe5K7 j7sUlOtW69aK3q535p+6QFsi9Voslf9EfqzarYHfxbYzr1EPohBHXLXoFj2qt7Jh 77jQOMKgkkyLIR43xpOofui76hrZ28QCCp+c20aCJmhZRZOMMHdi80fXkzecTINz zIk3yEBLXOyYlQCkEElSAVUhCpQjPXYkEYRHiHrgxNO5zCqHIc21E5rOXxUkvOeL M8tzXLCwUq7jOsR2NagrTtLpcEY1WR23PoBJgA5Ep58mdHELteOUcdIQPli51Oc6 ip1p7UydNfMYE2lru+8ZzqxuhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxzP9B7 mDO4lKHxT+e9vA3m//47MB8GA1UdIwQYMBaAFDJuVedLBs2D+ZTMHaZlZUIcyeIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0FDOS8wRDlGNDBFNjBD NUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZUDVsTXdkcG1WbFFoeko0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tNVY1MHNHellQNWxNd2RwbVZsUWh6SjRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0FDOS8wRDlGNDBFNjBDNUExMUVDOUY0MTUzNDVDNEY5QUUwMi9NbTVWNTBzR3pZ UDVsTXdkcG1WbFFoeko0aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo2MTKiZbWCLYimbLggY8J7vg46ehkjQExcJbOryNqb58SI5xNMdAS MoyBDho03Leqzk7ftvlI68DSvzt6NjgfInfLiNk5HqZUZB2LJjP5MfzFsmR5Mwdv bAWOAR2CCawQh7nNNW7x4Kt/1b9knb9HEKQgGYtdjsIjqClQvX5IMD5yQun+Rbe1 7lnwbJtZvxUZzce3JLgMbwbTNR17RcywDyHAPlVsolTj7P2oGuD8ATf8YNg0OY0B q4HpMJdESPeHKlcba4GJUCNJsWZBBJyqwTVmYYeGy4YXXvSaOydl0JQbv0MaW66I fl/I3mqwiTcPK51tMwPf/UuojXsTOIwh -----END CERTIFICATE-----Generated at Sat May 31 16:57:45 2025 by rpki-client