$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: 7GqrRhL31yuo6MahN5przlNxr9vhhotqbzg5fs1j+S8= Subject key identifier: 7F:73:32:79:75:7F:FF:1D:90:B6:E1:B2:E6:D2:43:4F:2C:F5:38:6E Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 0429 Signing time: Sat 31 May 2025 00:35:15 +0000 Manifest this update: Sat 31 May 2025 00:35:15 +0000 Manifest next update: Sat 07 Jun 2025 00:35:15 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: AKNQbgKvGHwA5jJ8SPqj5RsoLHBS6DZBWliJqGxeI6c=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: IyhV9MGtQ1VyJp3y60dauCI+itu5hIIH24D+SkqtwwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: May 31 00:35:15 2025 GMT Not After : Jun 7 00:35:15 2025 GMT Subject: CN=683a4ec3-dba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:0b:a5:48:ec:e5:93:36:80:0a:7c:3d:8d: 57:64:42:36:0f:24:02:96:28:bb:51:a8:f9:40:58: a8:49:61:bc:1b:2c:2d:fd:fe:80:80:a7:f1:ab:02: ab:b0:54:99:57:cc:42:55:51:e7:0c:35:47:32:03: f2:96:13:26:1b:66:d3:34:22:43:25:1e:19:71:e6: 29:e8:3d:de:65:85:f2:60:66:7b:21:de:eb:ba:69: 59:20:e6:58:44:e3:70:32:f7:fa:d0:37:a5:91:5a: 3e:9b:5c:80:ba:f6:78:ac:79:d5:9e:0b:81:74:d8: d0:0e:00:0f:e6:2c:1d:19:e8:50:78:a9:74:79:90: 14:da:9d:5a:f3:9e:1e:3b:b5:b1:c7:d6:6e:6a:a7: 6b:e5:b3:07:49:16:43:a0:96:13:89:5e:cb:cb:a7: ea:de:d7:11:6f:24:b7:b6:cd:31:68:07:4d:24:6e: c2:a5:52:f7:e6:05:9d:2d:26:c7:15:ea:de:f2:4f: 75:de:ca:82:ab:e4:18:4d:74:9e:6a:ac:c8:1a:51: 60:fb:02:04:af:bd:07:00:22:ca:89:dd:fb:64:98: 22:80:1f:fe:74:6b:89:6e:50:99:f9:ab:61:f5:08: 05:ef:8f:23:ee:2b:d8:e5:87:ab:c1:30:82:ca:0f: e7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:73:32:79:75:7F:FF:1D:90:B6:E1:B2:E6:D2:43:4F:2C:F5:38:6E X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:64:6a:e7:85:90:bd:8b:0f:21:34:c2:ff:fa:df:3e:d0:67: 81:04:e1:6e:e0:6d:f3:51:43:32:7f:3c:61:74:6c:08:5c:64: 19:34:f5:b6:f0:b7:c6:92:7e:33:91:e7:4d:76:94:f8:14:7a: 7f:7c:05:46:e6:d0:39:8a:15:4a:e5:5b:f2:42:a7:d2:75:18: c8:fb:20:75:fb:3b:77:7d:b6:07:e2:af:f8:28:3c:d3:64:41: e8:84:a2:47:73:3a:37:b6:e7:7e:61:98:bf:ed:d6:6f:11:f5: 8f:77:59:aa:8e:8b:c3:6d:4d:a2:15:8f:11:45:03:a1:e5:49: 0c:fa:7e:a0:0d:dd:c3:79:76:02:74:37:71:23:71:27:df:4d: 56:17:be:a6:e0:a2:de:b0:b9:29:51:58:3a:11:d2:81:90:62: 3f:99:2f:35:c0:23:4b:eb:36:57:9a:a1:91:b3:8c:fd:48:8a: 0d:ec:71:1b:16:ef:b1:91:f7:04:e9:42:ad:26:5b:92:6e:fb: 52:b6:a4:87:1d:50:92:c4:e8:69:11:77:fb:84:32:51:ca:a8: 43:05:32:15:63:8a:66:50:6a:67:a7:86:d5:9c:02:5d:eb:5d: 4c:45:9a:86:ae:ab:2f:f5:b0:b3:29:5c:21:99:d6:5b:05:e4: 68:20:0e:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjUwNTMxMDAzNTE1WhcNMjUwNjA3MDAzNTE1WjAYMRYwFAYD VQQDEw02ODNhNGVjMy1kYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvALpUjs5ZM2gAp8PY1XZEI2DyQClii7Uaj5QFioSWG8Gywt/f6AgKfxqwKr sFSZV8xCVVHnDDVHMgPylhMmG2bTNCJDJR4ZceYp6D3eZYXyYGZ7Id7rumlZIOZY RONwMvf60DelkVo+m1yAuvZ4rHnVnguBdNjQDgAP5iwdGehQeKl0eZAU2p1a854e O7Wxx9Zuaqdr5bMHSRZDoJYTiV7Ly6fq3tcRbyS3ts0xaAdNJG7CpVL35gWdLSbH Fere8k913sqCq+QYTXSeaqzIGlFg+wIEr70HACLKid37ZJgigB/+dGuJblCZ+ath 9QgF748j7ivY5YerwTCCyg/nKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9zMnl1 f/8dkLbhsubSQ08s9ThuMB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKZGrnhZC9iw8hNML/+t8+0GeBBOFu4G3zUUMyfzxhdGwIXGQZNPW2 8LfGkn4zkedNdpT4FHp/fAVG5tA5ihVK5VvyQqfSdRjI+yB1+zt3fbYH4q/4KDzT ZEHohKJHczo3tud+YZi/7dZvEfWPd1mqjovDbU2iFY8RRQOh5UkM+n6gDd3DeXYC dDdxI3En301WF76m4KLesLkpUVg6EdKBkGI/mS81wCNL6zZXmqGRs4z9SIoN7HEb Fu+xkfcE6UKtJluSbvtStqSHHVCSxOhpEXf7hDJRyqhDBTIVY4pmUGpnp4bVnAJd 611MRZqGrqsv9bCzKVwhmdZbBeRoIA5M -----END CERTIFICATE-----Generated at Sat May 31 16:39:50 2025 by rpki-client