$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json) Hash identifier: fVqzXvfz5NRVMVKYyZeyiHjRB1GMvbVJpy3OiZnMCrE= Subject key identifier: 81:16:60:16:89:A8:0C:1D:E9:50:A9:B5:8B:3C:6A:60:AC:EC:A2:B9 Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft Manifest number: 56 Signing time: Mon 12 May 2025 19:09:52 +0000 Manifest this update: Mon 12 May 2025 19:09:51 +0000 Manifest next update: Mon 19 May 2025 19:09:51 +0000 Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: XKy5Htd0sevB+u10NN2VaUZpsKvpLrehhpKOpepKj6k=) 2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: m/ts4+3+KZRfhNwqXbAAZsLEK7jXSiR3RbLIiPT9ph8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Validity Not Before: May 12 19:09:51 2025 GMT Not After : May 19 19:09:51 2025 GMT Subject: CN=68224780-1d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:db:6b:03:15:bb:9d:2f:f0:9d:71:54:73:81: b4:a0:91:93:8d:91:41:b5:03:e8:38:e2:1f:9d:5d: 81:4f:d4:ef:dd:a6:c2:8b:2d:54:88:64:17:d8:09: b9:a6:ef:a7:e0:6b:3e:fa:64:16:be:e3:4f:5a:29: a5:13:f6:37:e2:9a:7b:40:3b:94:59:1a:db:ed:e3: 64:a8:37:f8:54:f2:cc:0a:fd:cf:e1:f4:9d:e0:d2: 52:09:3c:55:4f:3e:28:31:90:1f:65:f5:ab:29:bc: 0d:31:7d:d0:b6:60:34:3c:74:25:47:6a:44:34:45: cf:a6:66:c4:b1:3d:c2:03:22:c1:f4:dd:56:15:2c: a8:71:c4:fa:12:f7:4e:e1:de:27:2b:0a:67:c6:02: 8b:ec:88:90:ca:1e:6e:3d:78:9a:86:69:ad:36:5c: 3b:b9:54:c8:3c:5c:dc:0a:6a:07:c4:f7:92:64:54: 1d:a8:1a:a9:2d:30:e2:23:2e:ef:45:79:10:34:74: 9d:ef:d7:06:f5:d7:49:36:70:b9:47:e7:ba:9f:79: a5:41:6a:bb:5d:12:69:60:45:5c:25:f9:35:30:0c: 9c:f2:07:5b:7d:77:dc:5d:bc:8b:dc:d7:ca:16:4a: e1:da:08:88:8c:bc:33:7e:cf:cf:b9:32:57:a4:63: 2a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:16:60:16:89:A8:0C:1D:E9:50:A9:B5:8B:3C:6A:60:AC:EC:A2:B9 X509v3 Authority Key Identifier: keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4c:ed:66:59:b8:75:a9:c5:3b:1e:ff:29:70:1a:d9:cc:b4: 58:f5:74:0b:42:e3:80:cf:de:f5:0f:b3:c9:a4:92:6e:45:b0: 12:50:db:b1:82:c4:5b:21:7d:0a:a5:25:2d:0f:ad:1f:ab:d0: a6:33:92:55:ed:ab:e7:3a:79:4d:25:90:48:a6:52:70:8b:54: 7a:94:ae:64:2a:a4:8b:fe:23:5b:55:64:e2:75:3b:5c:72:59: 69:4a:7f:71:33:17:32:dc:b2:f6:09:1b:59:b8:a4:56:17:84: ee:06:2d:9a:1c:06:0a:cd:d2:44:c4:e0:b4:cb:04:ea:40:55: 23:ba:84:08:be:2e:68:73:e0:a0:c8:a8:4d:12:76:da:42:20: 20:0c:70:16:03:ac:fb:25:a9:40:c8:2f:d1:d1:09:64:c6:2d: 7b:03:61:d8:4a:08:06:4c:52:4e:bb:d4:b7:55:9c:2b:b6:32: 04:02:d1:f0:c6:18:de:f2:5c:ac:5a:d7:52:30:99:4b:76:a0: 7d:63:92:fc:77:47:09:25:72:17:af:bf:fd:3f:d6:65:ab:93: 7d:91:d8:dc:1a:e7:0f:9c:f4:c8:fa:07:5c:e4:84:6d:c9:6c: f6:14:f9:f1:2d:25:71:2f:37:a1:9c:66:d4:5b:7d:3e:7a:3e: 5e:c3:10:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODhEOTExMC8GA1UEBRMoQTY0QkU0NEFDQjAwRTRCREFFNDQ5MUIwRkEwQ0Q3MDk5 RDJDNzI3QzAeFw0yNTA1MTIxOTA5NTFaFw0yNTA1MTkxOTA5NTFaMBgxFjAUBgNV BAMTDTY4MjI0NzgwLTFkNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD122sDFbudL/CdcVRzgbSgkZONkUG1A+g44h+dXYFP1O/dpsKLLVSIZBfYCbmm 76fgaz76ZBa+409aKaUT9jfimntAO5RZGtvt42SoN/hU8swK/c/h9J3g0lIJPFVP PigxkB9l9aspvA0xfdC2YDQ8dCVHakQ0Rc+mZsSxPcIDIsH03VYVLKhxxPoS907h 3icrCmfGAovsiJDKHm49eJqGaa02XDu5VMg8XNwKagfE95JkVB2oGqktMOIjLu9F eRA0dJ3v1wb110k2cLlH57qfeaVBartdEmlgRVwl+TUwDJzyB1t9d9xdvIvc18oW SuHaCIiMvDN+z8+5MlekYypBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgRZgFomo DB3pUKm1izxqYKzsorkwHwYDVR0jBBgwFoAUpkvkSssA5L2uRJGw+gzXCZ0scnww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4OEQ5L0Y4M0UzRkNFQURC QzExRUZCMzAyOTgzRUM0RjlBRTAyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nu dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGt2a1Nzc0E1TDJ1UkpHdy1nelhDWjBzY253LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 OEQ5L0Y4M0UzRkNFQURCQzExRUZCMzAyOTgzRUM0RjlBRTAyL3BrdmtTc3NBNUwy dVJKR3ctZ3pYQ1owc2Nudy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ9M7WZZuHWpxTse/ylwGtnMtFj1dAtC44DP3vUPs8mkkm5FsBJQ27GC xFshfQqlJS0PrR+r0KYzklXtq+c6eU0lkEimUnCLVHqUrmQqpIv+I1tVZOJ1O1xy WWlKf3EzFzLcsvYJG1m4pFYXhO4GLZocBgrN0kTE4LTLBOpAVSO6hAi+Lmhz4KDI qE0SdtpCICAMcBYDrPslqUDIL9HRCWTGLXsDYdhKCAZMUk671LdVnCu2MgQC0fDG GN7yXKxa11IwmUt2oH1jkvx3Rwklchevv/0/1mWrk32R2Nwa5w+c9Mj6B1zkhG3J bPYU+fEtJXEvN6GcZtRbfT56Pl7DEKs= -----END CERTIFICATE-----Generated at Tue May 13 11:26:46 2025 by rpki-client