$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: fsvTJi0JskNATL/YKBBQMn/Ag12u2j+FDJ4oLdaJNYk= Subject key identifier: 53:5A:0D:67:C1:C3:EB:F8:A7:96:F6:4F:88:76:44:D7:E1:3C:9C:89 Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 0320 Signing time: Sat 31 May 2025 01:21:53 +0000 Manifest this update: Sat 31 May 2025 01:21:53 +0000 Manifest next update: Sat 07 Jun 2025 01:21:53 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: JElGc3caubt1UDiTpmmQIfXDLrngQwJVmcpxOstji0E=) 2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: 2IeO54Cp6b06u4xrChfhugqf5OR3NU+qoLsUiOOPr8M=) 3: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: f/9vGnn2JXmJ21/jrMMvJ7DpIN0BPneJ38/5WfHmbrI=) 4: B1CE8816650411EEBE8D4512C4F9AE02.roa (hash: xl/v3HFE5XZWMUy9IIOzuRvTobJH6hv4JoT6vWaFF1Q=) 5: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: i3ADmyA4WgLpGdAmHRBQc8Kk5ppJaulRCigFr15Uv0k=) 6: 9389FFE8650411EE80570A12C4F9AE02.roa (hash: IhHnqIJSUKHQvAUemNA8DV1wdnkLH6BV1/tBV7gGepE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: May 31 01:21:53 2025 GMT Not After : Jun 7 01:21:53 2025 GMT Subject: CN=683a59b1-65ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fd:39:3a:a8:25:dc:db:15:a6:6b:54:a9:86: a3:7c:c8:30:29:9e:c7:a7:82:5b:5f:22:a1:eb:6b: 88:a0:4f:d4:11:f5:a5:79:8b:e9:08:de:5a:2d:28: 31:45:5f:3d:db:d0:87:74:6c:a4:f2:c3:21:2b:98: 02:2e:26:e9:5a:97:b5:57:6f:c2:10:a0:2a:de:95: 36:00:cb:a1:df:d8:8e:4c:43:30:03:b9:ba:95:24: 19:4e:a4:28:78:93:4b:ad:47:24:39:7a:79:3b:e5: 06:df:ca:c6:a2:02:a1:f0:ef:b3:34:bd:57:66:00: 8b:5f:d5:45:90:33:39:e4:a9:53:8b:f3:f2:46:bc: ec:8e:ca:99:b3:86:40:d8:89:4d:55:68:7f:74:fe: 03:27:de:bb:b7:23:6f:52:72:73:94:07:62:fc:f1: 85:11:e8:4b:d3:95:8f:c3:81:2e:83:4a:a3:b7:02: 05:60:b5:d0:1e:69:9b:d0:15:17:45:91:d2:1c:ba: 11:31:b9:57:8c:e6:63:90:61:a7:4c:02:36:5b:41: 43:cd:66:93:8e:0f:c8:2c:64:58:c9:06:02:0e:8a: f6:f8:82:00:0a:1f:90:12:1f:b3:e2:12:da:ab:e3: b5:a9:6f:e3:91:04:93:11:8d:ac:30:c8:e2:93:be: 25:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5A:0D:67:C1:C3:EB:F8:A7:96:F6:4F:88:76:44:D7:E1:3C:9C:89 X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:19:70:29:b5:e2:07:c7:a7:30:f4:00:ef:32:d8:68:f6:87: c8:9b:0f:89:6e:cc:86:17:cd:64:4d:8d:4e:3a:ba:8d:3f:a9: 63:62:9d:e7:4f:eb:c4:3d:ac:66:5e:3c:b3:0c:7a:db:81:fe: 9d:1d:31:44:79:9f:32:29:0f:8a:44:8f:91:4e:d5:18:b1:87: f9:85:3e:04:1b:b2:a6:f8:1f:c3:d4:a2:c7:9f:85:ae:27:9f: 5c:34:58:88:72:51:cf:6e:cf:ed:35:93:f0:ba:fd:83:7b:0d: 2a:22:9a:a8:53:dd:88:ba:e0:75:25:62:8f:71:6a:0a:e9:0c: 18:7b:ab:56:95:a1:52:38:13:05:d3:83:85:b2:24:83:6e:a3: e5:00:f4:e3:2a:99:2d:b2:6a:4c:38:94:55:a5:dc:fc:38:6e: 35:de:6e:fa:a0:29:d4:25:e0:66:c6:92:5b:8b:9c:39:11:a8: 46:e8:77:81:5e:2f:05:ad:e8:50:55:c4:ea:c0:4d:ad:95:9b: 43:b6:c6:4b:3c:dd:1b:97:e5:9a:f6:3b:19:75:9a:83:ec:c6: 98:9b:b4:1f:ef:54:ba:5e:68:fd:53:36:f9:a2:3d:f0:69:86: df:b6:0e:03:d1:09:60:31:67:89:01:0f:df:5b:51:aa:27:73: 78:c3:a5:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjUwNTMxMDEyMTUzWhcNMjUwNjA3MDEyMTUzWjAYMRYwFAYD VQQDEw02ODNhNTliMS02NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/05Oqgl3NsVpmtUqYajfMgwKZ7Hp4JbXyKh62uIoE/UEfWleYvpCN5aLSgx RV8929CHdGyk8sMhK5gCLibpWpe1V2/CEKAq3pU2AMuh39iOTEMwA7m6lSQZTqQo eJNLrUckOXp5O+UG38rGogKh8O+zNL1XZgCLX9VFkDM55KlTi/PyRrzsjsqZs4ZA 2IlNVWh/dP4DJ967tyNvUnJzlAdi/PGFEehL05WPw4Eug0qjtwIFYLXQHmmb0BUX RZHSHLoRMblXjOZjkGGnTAI2W0FDzWaTjg/ILGRYyQYCDor2+IIACh+QEh+z4hLa q+O1qW/jkQSTEY2sMMjik74lQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNaDWfB w+v4p5b2T4h2RNfhPJyJMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9GXApteIHx6cw9ADvMtho9ofImw+JbsyGF81kTY1OOrqNP6ljYp3n T+vEPaxmXjyzDHrbgf6dHTFEeZ8yKQ+KRI+RTtUYsYf5hT4EG7Km+B/D1KLHn4Wu J59cNFiIclHPbs/tNZPwuv2Dew0qIpqoU92IuuB1JWKPcWoK6QwYe6tWlaFSOBMF 04OFsiSDbqPlAPTjKpktsmpMOJRVpdz8OG413m76oCnUJeBmxpJbi5w5EahG6HeB Xi8FrehQVcTqwE2tlZtDtsZLPN0bl+Wa9jsZdZqD7MaYm7Qf71S6Xmj9Uzb5oj3w aYbftg4D0QlgMWeJAQ/fW1GqJ3N4w6Wr -----END CERTIFICATE-----Generated at Sat May 31 16:53:41 2025 by rpki-client