$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft File: RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json) Hash identifier: clhnmoX/J65Yze0SEIt8O2CFIQL2KzvPtgy3PQWG1LE= Subject key identifier: 02:74:B8:EA:E6:CB:9E:FF:59:6B:11:EA:E7:47:C7:FA:A9:4C:0A:32 Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD Certificate issuer: /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Certificate serial: 06D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft Manifest number: 06CC Signing time: Sat 10 May 2025 21:40:20 +0000 Manifest this update: Sat 10 May 2025 21:40:20 +0000 Manifest next update: Sat 17 May 2025 21:40:20 +0000 Files and hashes: 1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: 0FT8tr2InpfL48UZ2CevePUQYYXKOdrVkagB+gU4wa0=) 2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: PrgqmGPVCZutr73KuPF9z7k4L5rKkcCQ9HWUA608bqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Validity Not Before: May 10 21:40:20 2025 GMT Not After : May 17 21:40:20 2025 GMT Subject: CN=681fc7c4-a5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:39:92:c4:61:77:9c:01:6a:bc:c4:9f:bf:ea: 4f:c9:d0:96:c8:15:07:c8:52:d7:6d:c6:dc:4b:42: 78:95:cd:a7:ab:15:b4:d5:7f:e6:ec:a6:0b:a4:43: 8f:15:5d:08:46:5d:22:cd:0a:94:ae:a6:38:d3:0c: d2:0e:f4:a8:4c:c7:9e:e3:3a:29:5d:e8:51:e7:5a: 78:d7:5a:29:f5:61:b4:c1:ec:8f:05:87:37:0a:fd: b6:b8:c7:96:0e:b3:07:94:9c:1d:4e:b2:b8:9f:c5: 04:8e:d8:d9:a5:c1:de:b0:ab:a2:e6:88:69:72:8d: 5e:2a:2b:d7:a0:ca:33:df:45:43:af:a3:67:94:79: d8:08:88:17:fc:d9:58:25:b6:35:90:cf:f4:d9:a8: 48:61:fd:14:da:39:8d:a7:9b:46:c0:3b:6d:5f:c5: 2e:9d:44:90:5c:06:74:a2:ff:a8:13:f4:f7:a2:93: a1:3c:e9:fc:15:f7:3c:9d:d2:d1:5b:08:6c:4a:e0: 5d:e7:a6:77:8c:9a:46:24:d1:f9:c2:ac:1d:bf:34: 71:3b:af:8e:46:9e:e0:bb:77:6b:7e:a2:98:af:8c: 91:a9:f4:de:f7:97:ac:b5:cb:f8:4f:d9:9d:8a:d6: 18:63:f9:f9:6e:0d:25:d4:f2:a6:29:61:04:74:0a: 76:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:74:B8:EA:E6:CB:9E:FF:59:6B:11:EA:E7:47:C7:FA:A9:4C:0A:32 X509v3 Authority Key Identifier: keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:05:1f:db:a0:a8:50:fd:95:d5:16:bd:75:8e:77:97:cd:82: 2e:d3:a7:1d:fb:4d:02:64:45:06:87:b3:5c:18:43:dc:4d:45: 27:28:7d:b5:66:b6:45:6c:47:27:98:f9:2e:99:be:3f:fb:a7: cb:40:6c:e1:06:5e:1c:6d:de:75:54:fc:fb:e7:92:c8:ae:1a: d2:41:e5:ae:41:b1:39:97:35:e0:c1:e0:a8:06:f9:ff:99:dc: 33:54:71:ba:c5:2e:4e:9e:57:aa:ba:58:de:e8:36:73:25:bb: 3e:04:17:f6:7d:5e:7e:46:b1:46:7d:1d:8f:91:70:81:ed:12: 68:7b:59:3b:01:c2:4e:80:bd:1c:07:0b:ce:ea:50:bf:8d:3f: 1a:e8:34:73:39:ec:25:1f:b1:cb:b1:5b:e2:7c:ee:ee:45:e6: c0:c4:de:dc:62:c3:ab:c4:80:15:dc:21:e7:ac:cb:5e:7b:df: 71:71:27:0a:c4:d6:c8:bb:46:ab:6f:22:24:88:71:46:ff:8e: a4:11:9b:25:88:2a:a7:38:58:e2:e3:dd:e5:d1:f8:87:03:a1: 3e:65:b3:d9:07:3d:d9:4f:bb:a8:65:68:f9:b2:65:b4:1a:57: 01:18:2d:e6:49:fd:7a:9e:c1:d8:55:8c:bc:90:60:90:83:39: 43:23:1b:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3RjcxMTAvBgNVBAUTKDQ0QzBCM0U1NUU4RjRENTgzMTg2MDVFNzIxMzQ5QzAy QjI4OUMyRkQwHhcNMjUwNTEwMjE0MDIwWhcNMjUwNTE3MjE0MDIwWjAYMRYwFAYD VQQDEw02ODFmYzdjNC1hNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TmSxGF3nAFqvMSfv+pPydCWyBUHyFLXbcbcS0J4lc2nqxW01X/m7KYLpEOP FV0IRl0izQqUrqY40wzSDvSoTMee4zopXehR51p411op9WG0weyPBYc3Cv22uMeW DrMHlJwdTrK4n8UEjtjZpcHesKui5ohpco1eKivXoMoz30VDr6NnlHnYCIgX/NlY JbY1kM/02ahIYf0U2jmNp5tGwDttX8UunUSQXAZ0ov+oE/T3opOhPOn8Ffc8ndLR WwhsSuBd56Z3jJpGJNH5wqwdvzRxO6+ORp7gu3drfqKYr4yRqfTe95estcv4T9md itYYY/n5bg0l1PKmKWEEdAp2yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJ0uOrm y57/WWsR6udHx/qpTAoyMB8GA1UdIwQYMBaAFETAs+Vej01YMYYF5yE0nAKyicL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjdGNy9CRkQzRUIxQTU0 MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRWZ3hoZ1huSVRTY0FyS0p3 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JNQ3o1VjZQVFZneGhnWG5JVFNjQXJLSnd2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjdGNy9CRkQzRUIxQTU0MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRW Z3hoZ1huSVRTY0FyS0p3djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiBR/boKhQ/ZXVFr11jneXzYIu06cd+00CZEUGh7NcGEPcTUUnKH21 ZrZFbEcnmPkumb4/+6fLQGzhBl4cbd51VPz755LIrhrSQeWuQbE5lzXgweCoBvn/ mdwzVHG6xS5Onlequlje6DZzJbs+BBf2fV5+RrFGfR2PkXCB7RJoe1k7AcJOgL0c BwvO6lC/jT8a6DRzOewlH7HLsVvifO7uRebAxN7cYsOrxIAV3CHnrMtee99xcScK xNbIu0arbyIkiHFG/46kEZsliCqnOFji493l0fiHA6E+ZbPZBz3ZT7uoZWj5smW0 GlcBGC3mSf16nsHYVYy8kGCQgzlDIxtX -----END CERTIFICATE-----Generated at Sun May 11 11:41:04 2025 by rpki-client