$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json) Hash identifier: M3VcEp0lOm2TY6E5GQPAyb7R9zqpyj9IkkYJwK/EmNM= Subject key identifier: 5C:35:DC:E3:BB:44:C5:13:5A:AF:5F:AD:81:8B:2A:8A:36:05:D1:F5 Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 1179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft Manifest number: 1173 Signing time: Fri 16 May 2025 17:28:01 +0000 Manifest this update: Fri 16 May 2025 17:28:00 +0000 Manifest next update: Fri 23 May 2025 17:28:00 +0000 Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: N5GVWaXHdndKBGPhB5+YGjMKTpRNiPz9z9qB2SxITGY=) 2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: PSSQDCbjfGOv5hsREHHq3AE69qVBQBbQjxmYclshFuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4473 (0x1179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: May 16 17:28:00 2025 GMT Not After : May 23 17:28:00 2025 GMT Subject: CN=682775a0-cdfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:22:43:a9:dd:12:41:24:14:b2:e6:11:99: fa:5e:3a:84:1b:79:3d:a6:99:9d:7f:a3:98:22:a5: 80:3d:35:37:e4:2b:e5:d3:10:6e:4f:58:3d:26:15: 96:90:d2:63:83:b7:05:0f:5e:43:0b:2e:fc:63:c0: fc:54:4e:b0:45:a3:06:b1:c5:cd:b3:a2:52:ce:d4: 8b:09:a5:00:78:1c:29:e4:af:b8:a3:78:5b:80:dc: 66:98:47:b1:58:b5:83:4e:ca:36:70:cb:28:01:52: 78:b1:48:de:7f:f2:1b:69:ab:cb:c8:14:e5:6a:78: 8d:57:31:32:98:2b:fb:41:37:bf:5b:cd:21:ab:2d: 86:11:d3:f7:b6:1f:43:e9:87:64:fa:fd:9b:df:2b: 43:1b:bb:5c:4f:d7:bf:0f:c3:f9:3f:06:8e:0f:f7: 2f:71:28:7b:b5:c2:71:c9:ea:fb:08:93:9e:4e:07: 1f:71:a5:33:56:d1:16:1c:f8:1e:58:ba:5f:89:72: b7:4f:59:56:00:bc:41:7a:dd:21:f5:6b:1f:36:6f: 29:78:fc:5d:71:15:92:37:54:fe:c9:3c:d9:a5:d7: f4:4e:c9:18:f0:5b:09:6c:0d:00:3d:00:39:57:5a: f7:e6:b5:71:5f:a7:4e:2d:99:91:18:c9:5e:40:96: f0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:35:DC:E3:BB:44:C5:13:5A:AF:5F:AD:81:8B:2A:8A:36:05:D1:F5 X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:70:56:5d:bf:57:93:83:d2:44:34:87:b4:1c:6e:e4:8a:6d: b3:17:fd:df:00:de:ea:9e:36:db:68:dc:e5:cb:4e:5a:a9:ef: d1:c4:3d:06:61:18:70:d6:91:90:e5:a4:9f:6e:6d:70:d7:9a: f5:c1:c9:53:71:fb:f1:bb:dc:22:74:eb:6d:27:60:ea:00:b9: ea:40:a7:cd:dd:61:0c:db:db:f5:84:9e:96:b2:db:ee:a5:7d: 70:91:ee:0d:a8:88:62:fe:6a:4c:a6:ec:ca:85:26:9e:01:45: 81:fe:0d:aa:f9:da:40:aa:ee:87:19:93:4b:ca:d3:7c:b6:a7: 58:37:1b:50:d6:43:89:27:83:69:f6:e0:48:59:82:fb:e1:1c: cb:34:a3:84:39:df:57:f1:dd:13:90:59:ea:55:5e:71:fc:02: f7:7d:84:b3:61:1f:92:42:0e:33:52:bb:4e:f6:4b:2a:63:2a: 90:04:94:5e:16:8c:77:72:dd:47:2e:2e:3e:87:c3:55:59:3e: 61:70:5e:d1:37:15:26:ea:a1:a2:43:60:a7:53:23:e7:0a:b1: 76:da:dc:0e:a1:b8:3d:11:5e:da:c8:08:46:d2:cf:ad:39:69: 24:91:50:d5:bc:28:40:45:55:1d:e7:b0:72:c1:34:7d:5a:08: 1f:84:79:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjUwNTE2MTcyODAwWhcNMjUwNTIzMTcyODAwWjAYMRYwFAYD VQQDEw02ODI3NzVhMC1jZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXoiQ6ndEkEkFLLmEZn6XjqEG3k9ppmdf6OYIqWAPTU35Cvl0xBuT1g9JhWW kNJjg7cFD15DCy78Y8D8VE6wRaMGscXNs6JSztSLCaUAeBwp5K+4o3hbgNxmmEex WLWDTso2cMsoAVJ4sUjef/IbaavLyBTlaniNVzEymCv7QTe/W80hqy2GEdP3th9D 6Ydk+v2b3ytDG7tcT9e/D8P5PwaOD/cvcSh7tcJxyer7CJOeTgcfcaUzVtEWHPge WLpfiXK3T1lWALxBet0h9WsfNm8pePxdcRWSN1T+yTzZpdf0TskY8FsJbA0APQA5 V1r35rVxX6dOLZmRGMleQJbwjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFw13OO7 RMUTWq9frYGLKoo2BdH1MB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85 RFFxZW8tTjBON2tlUlVzalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATcFZdv1eTg9JENIe0HG7kim2zF/3fAN7qnjbbaNzly05aqe/RxD0G YRhw1pGQ5aSfbm1w15r1wclTcfvxu9widOttJ2DqALnqQKfN3WEM29v1hJ6Wstvu pX1wke4NqIhi/mpMpuzKhSaeAUWB/g2q+dpAqu6HGZNLytN8tqdYNxtQ1kOJJ4Np 9uBIWYL74RzLNKOEOd9X8d0TkFnqVV5x/AL3fYSzYR+SQg4zUrtO9ksqYyqQBJRe Fox3ct1HLi4+h8NVWT5hcF7RNxUm6qGiQ2CnUyPnCrF22twOobg9EV7ayAhG0s+t OWkkkVDVvChARVUd57BywTR9WggfhHnc -----END CERTIFICATE-----Generated at Sat May 17 01:01:48 2025 by rpki-client