$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft File: fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json) Hash identifier: w9xHcuR2r8VDOFkOjppVnIxm1vyF6m7ibeWgYBUPfrY= Subject key identifier: 15:EA:16:62:3E:07:E2:66:1D:7E:F2:F4:55:90:FC:2C:5F:65:97:2D Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 Certificate issuer: /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft Manifest number: 02A4 Signing time: Sat 17 May 2025 01:43:46 +0000 Manifest this update: Sat 17 May 2025 01:43:46 +0000 Manifest next update: Sat 24 May 2025 01:43:46 +0000 Files and hashes: 1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: wFWRT2cejIIWsMzV7LZYj4fWr8WoWWg71vsEAK2iz0s=) 2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: 81tZME9FAwzO2UIk/WDugs2sSYBMwRpnwSHq/X3xc/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 01:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Validity Not Before: May 17 01:43:46 2025 GMT Not After : May 24 01:43:46 2025 GMT Subject: CN=6827e9d2-48f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a3:a1:14:bd:9a:94:ec:5f:40:f6:f0:4c:33: 69:58:a0:08:e9:f4:d4:c4:75:58:f2:f4:69:1d:d6: 45:21:a5:18:68:61:e0:11:f2:73:ef:28:c6:92:75: 19:48:52:29:e3:23:49:9c:5e:9b:72:35:fa:97:1c: 9b:19:f3:03:f8:04:18:cc:54:26:13:94:1f:b6:84: 48:47:ac:22:c1:b1:a8:69:1e:f8:fe:86:36:54:23: 9f:d7:de:fc:2d:c6:05:83:08:a4:af:44:82:4d:53: a7:36:60:57:9f:e9:45:36:be:8d:93:a5:eb:ef:fe: fd:03:3d:e3:b7:9e:9f:3e:9f:ea:8d:9a:6d:14:1f: a5:f0:44:e1:c5:6e:46:32:50:7a:31:25:36:65:3c: 3c:89:54:64:70:a1:0c:2b:e5:a7:4b:53:bf:88:06: ab:6c:90:e6:d2:1a:0e:75:4c:b9:8c:14:4c:a0:8a: b2:da:5e:2a:d3:8c:01:cf:d2:81:72:04:ea:9b:f0: ef:52:8a:54:25:c1:41:5b:32:ad:f6:1d:55:94:00: 05:2a:8b:90:8c:fa:c6:92:a2:e6:92:96:81:4f:a9: a8:21:c9:b9:ce:1e:f5:a0:4f:8c:c1:94:fe:31:1b: 89:c8:4f:59:1a:eb:46:bf:0f:ce:6a:ab:a8:71:c1: d6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EA:16:62:3E:07:E2:66:1D:7E:F2:F4:55:90:FC:2C:5F:65:97:2D X509v3 Authority Key Identifier: keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:6e:1a:03:2a:66:bb:06:0f:1f:53:14:56:6a:4d:7a:13:4a: d6:07:7a:f3:39:b2:7f:e0:ee:eb:06:eb:4c:f5:5a:91:ea:cb: f6:39:c3:ee:13:26:17:d9:5d:a7:de:a4:0b:d9:77:8c:51:62: a2:5e:1d:2f:8c:49:7b:1e:20:ab:bd:0b:74:09:12:e5:37:8c: 2d:c7:a7:2a:3a:cb:49:ea:87:5c:fe:5b:ce:80:63:a0:51:51: 39:50:02:f6:60:56:27:67:17:c1:79:b8:a6:71:85:0b:5c:95: 01:48:45:90:a5:f5:3a:9d:f9:e2:73:ce:e9:c6:03:13:be:1e: bb:fd:af:e0:43:5f:71:01:84:bb:ab:26:6e:46:18:ab:44:8a: 79:bb:95:6f:90:17:1a:14:0f:d7:4e:f6:f9:8c:0d:79:57:5b: 90:04:9a:1f:93:e5:94:e6:28:1c:68:3b:18:8c:f6:40:91:23: 95:97:49:9a:47:91:20:9b:1b:66:e5:fa:af:6b:97:f2:87:2b: 42:7e:e0:12:1c:cb:26:31:bc:b7:15:f6:08:a6:27:1c:4c:20: ef:a1:68:a4:a1:11:3b:76:5d:5b:49:e3:23:d5:8f:ca:4f:17: c9:ea:d5:98:73:a7:5d:67:46:19:ca:d7:87:38:8e:7a:d5:25: c5:3d:6c:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5RUExMTAvBgNVBAUTKDdEM0REQjIwQUZGRTcxNEM4RjM1NDk2NTFDMUVFODBG NTU2MDExQjgwHhcNMjUwNTE3MDE0MzQ2WhcNMjUwNTI0MDE0MzQ2WjAYMRYwFAYD VQQDEw02ODI3ZTlkMi00OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6OhFL2alOxfQPbwTDNpWKAI6fTUxHVY8vRpHdZFIaUYaGHgEfJz7yjGknUZ SFIp4yNJnF6bcjX6lxybGfMD+AQYzFQmE5QftoRIR6wiwbGoaR74/oY2VCOf1978 LcYFgwikr0SCTVOnNmBXn+lFNr6Nk6Xr7/79Az3jt56fPp/qjZptFB+l8EThxW5G MlB6MSU2ZTw8iVRkcKEMK+WnS1O/iAarbJDm0hoOdUy5jBRMoIqy2l4q04wBz9KB cgTqm/DvUopUJcFBWzKt9h1VlAAFKouQjPrGkqLmkpaBT6moIcm5zh71oE+MwZT+ MRuJyE9ZGutGvw/OaquoccHWMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXqFmI+ B+JmHX7y9FWQ/CxfZZctMB8GA1UdIwQYMBaAFH092yCv/nFMjzVJZRwe6A9VYBG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTlFQS9EMjZDNDEyOEY4 RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNVeVBOVWxsSEI3b0QxVmdF YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUM2JJS18tY1V5UE5VbGxIQjdvRDFWZ0ViZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTlFQS9EMjZDNDEyOEY4RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNV eVBOVWxsSEI3b0QxVmdFYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhbhoDKma7Bg8fUxRWak16E0rWB3rzObJ/4O7rButM9VqR6sv2OcPu EyYX2V2n3qQL2XeMUWKiXh0vjEl7HiCrvQt0CRLlN4wtx6cqOstJ6odc/lvOgGOg UVE5UAL2YFYnZxfBebimcYULXJUBSEWQpfU6nfnic87pxgMTvh67/a/gQ19xAYS7 qyZuRhirRIp5u5VvkBcaFA/XTvb5jA15V1uQBJofk+WU5igcaDsYjPZAkSOVl0ma R5Egmxtm5fqva5fyhytCfuASHMsmMby3FfYIpiccTCDvoWikoRE7dl1bSeMj1Y/K TxfJ6tWYc6ddZ0YZyteHOI561SXFPWyb -----END CERTIFICATE-----Generated at Sun May 18 03:43:47 2025 by rpki-client