$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json) Hash identifier: bje0SliEBmgdguAoMJmPKNAxBJaZ6TzEhkCnDDSIbLE= Subject key identifier: CA:BD:9D:27:48:11:4E:E6:A0:61:8D:15:DB:C6:C3:6A:AE:D3:C3:EC Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 062D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft Manifest number: 0611 Signing time: Sat 10 May 2025 22:30:29 +0000 Manifest this update: Sat 10 May 2025 22:30:29 +0000 Manifest next update: Sat 17 May 2025 22:30:29 +0000 Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: f2yk9a/b9SvBGeKO2ZlZ20Z6hxpi9KrUtAayqWuZ76s=) 2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: tNDEmIxy5H25Y3zlO9rXFUC8hfA45BbpRsPK4rM8u7s=) 3: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: 9S57tdyd45wHLsInsTnI/GZly1K4hEDfcQJTNYuSOFQ=) 4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8=) 5: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: CGANdjpj39CJWyCZVGb4EKEpCCBaXu9btf2XqDDOLY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1581 (0x62d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: May 10 22:30:29 2025 GMT Not After : May 17 22:30:29 2025 GMT Subject: CN=681fd385-b957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:58:11:50:c4:5d:cf:39:ae:48:45:0b:68: 47:7b:79:55:b9:9a:f8:2e:5b:bf:77:4b:1f:e4:a4: eb:7c:e5:a0:d3:92:ad:ae:11:84:dc:ba:2d:6c:a5: b9:fa:c4:49:68:8b:9a:19:81:3b:49:c0:61:0a:b1: 03:82:ed:ff:23:61:e3:c6:55:64:16:41:e7:01:40: 9e:57:2d:9d:5a:e2:db:fe:f0:0f:57:4f:07:8f:fb: a5:a5:7a:f6:a1:78:96:2d:00:29:40:37:dc:89:88: 5b:d2:9b:21:4b:57:20:71:54:73:a5:f6:2e:7d:77: 4f:19:59:45:db:75:b6:79:d4:08:5b:51:60:15:8b: fb:a1:0c:e0:c0:4b:6d:6e:25:71:a3:ee:48:79:d6: ee:85:f2:5d:91:bd:0b:6c:da:9f:d1:32:5e:c9:6c: c2:b7:88:2e:ae:7e:20:c1:c7:63:56:8a:bf:da:8c: 96:a1:a7:1b:fe:c1:1b:ac:3c:64:80:54:d3:88:3c: fb:ba:58:f7:24:b8:bf:dc:95:78:f0:95:21:86:58: c8:22:43:a7:b2:0f:db:50:1e:26:fd:4b:dc:a4:a2: 93:65:13:b4:9c:fc:ef:c4:49:07:7f:5b:4d:14:5a: 8e:36:f9:98:fe:51:8b:ac:5d:a3:80:21:2e:5e:2b: 74:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BD:9D:27:48:11:4E:E6:A0:61:8D:15:DB:C6:C3:6A:AE:D3:C3:EC X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:25:aa:99:7f:32:cc:4d:5a:ee:dd:93:4c:66:cd:8b:50:a4: 7f:92:5a:44:e2:47:97:b1:d7:f9:74:59:fd:97:a2:c6:cf:d9: 32:0b:25:66:b6:14:a1:fc:79:39:04:d3:86:b4:82:f9:ea:bd: 38:b7:58:60:8c:cf:c8:29:a9:b8:eb:d9:27:9f:ea:2d:b8:e1: da:91:fd:37:12:34:9a:30:90:d6:a4:49:6b:65:1f:30:73:42: 36:38:ac:a4:ad:54:84:70:cc:c9:7a:a6:36:fb:06:d7:d9:c6: b9:e7:9b:37:d6:a8:6d:bc:b2:f9:61:e5:d4:2d:3c:9c:19:20: e5:ee:e6:2d:13:bf:72:43:0e:39:a1:8c:e5:98:31:af:a6:14: d3:d8:fc:bb:08:2a:76:25:58:b9:1f:5c:fe:1a:8f:cd:70:eb: 97:0a:96:08:ea:80:b3:9d:62:ee:ec:71:e9:b7:ae:9e:e4:ea: bc:96:90:12:3f:ec:da:0b:47:a1:39:fb:d1:f1:54:bd:4b:0f: 46:b7:b1:53:72:ba:96:b6:08:72:25:75:c2:88:46:4c:b9:95: db:1c:68:20:7d:0e:32:fa:61:d2:fa:cf:f6:75:1c:3b:ae:e5: a2:dd:a5:3c:08:60:52:2c:ba:55:4f:7d:9b:63:b0:89:f4:f2: b7:96:c4:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjUwNTEwMjIzMDI5WhcNMjUwNTE3MjIzMDI5WjAYMRYwFAYD VQQDEw02ODFmZDM4NS1iOTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+pYEVDEXc85rkhFC2hHe3lVuZr4Llu/d0sf5KTrfOWg05KtrhGE3LotbKW5 +sRJaIuaGYE7ScBhCrEDgu3/I2HjxlVkFkHnAUCeVy2dWuLb/vAPV08Hj/ulpXr2 oXiWLQApQDfciYhb0pshS1cgcVRzpfYufXdPGVlF23W2edQIW1FgFYv7oQzgwEtt biVxo+5IedbuhfJdkb0LbNqf0TJeyWzCt4gurn4gwcdjVoq/2oyWoacb/sEbrDxk gFTTiDz7ulj3JLi/3JV48JUhhljIIkOnsg/bUB4m/UvcpKKTZRO0nPzvxEkHf1tN FFqONvmY/lGLrF2jgCEuXit0mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMq9nSdI EU7moGGNFdvGw2qu08PsMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp NUxmLVFMYS16djBYQmF6OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEJaqZfzLMTVru3ZNMZs2LUKR/klpE4keXsdf5dFn9l6LGz9kyCyVm thSh/Hk5BNOGtIL56r04t1hgjM/IKam469knn+otuOHakf03EjSaMJDWpElrZR8w c0I2OKykrVSEcMzJeqY2+wbX2ca555s31qhtvLL5YeXULTycGSDl7uYtE79yQw45 oYzlmDGvphTT2Py7CCp2JVi5H1z+Go/NcOuXCpYI6oCznWLu7HHpt66e5Oq8lpAS P+zaC0ehOfvR8VS9Sw9Gt7FTcrqWtghyJXXCiEZMuZXbHGggfQ4y+mHS+s/2dRw7 ruWi3aU8CGBSLLpVT32bY7CJ9PK3lsTN -----END CERTIFICATE-----Generated at Mon May 12 19:35:24 2025 by rpki-client