$ rpki-client -vvf rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft File: bUron6l6cWotkmYf8s9b08zcKfw.mft (raw, json) Hash identifier: tDKaQCF/n6drLts/MNXh8RRRN8Mt3Gr9p6IFATXmYgM= Subject key identifier: BF:1D:C3:D3:EA:23:BD:D9:3D:D0:49:CC:2D:04:89:AD:1B:55:BA:69 Authority key identifier: 6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC Certificate issuer: /CN=A91778C2/serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC Certificate serial: 173C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft Manifest number: 16FF Signing time: Sat 10 May 2025 16:34:56 +0000 Manifest this update: Sat 10 May 2025 16:34:56 +0000 Manifest next update: Sat 17 May 2025 16:34:56 +0000 Files and hashes: 1: bUron6l6cWotkmYf8s9b08zcKfw.crl (hash: Pww10r97BCIi3Fj6a2DXnPrcV0zQ3dlDnBeOkEL+kQo=) 2: 0EF775B2EFCD11EF92BCB66CC4F9AE02.roa (hash: N7nsErlzveEnISxiIX6awL6ZI+EjGdyZ1xE6eFlduvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5948 (0x173c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91778C2, serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC Validity Not Before: May 10 16:34:56 2025 GMT Not After : May 17 16:34:56 2025 GMT Subject: CN=681f8030-702e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9a:9b:72:b4:c7:80:16:20:d6:93:23:59:9b: 8d:ff:68:62:ef:88:8a:d4:d5:28:96:b6:09:4d:0f: d8:f1:57:c9:02:16:be:d5:5c:c8:99:08:9a:b1:66: 91:ad:07:99:f1:78:cb:ce:43:53:d4:98:6d:8a:76: 59:80:d3:a0:01:7b:ac:1f:9c:1a:ef:33:86:63:b4: 3a:ad:7a:aa:5a:73:18:25:f8:4a:e3:c0:d5:53:18: 29:f4:e2:60:39:e4:48:5e:71:32:7c:77:0b:4d:52: d9:77:a9:fb:ce:d2:94:bc:b0:c4:fb:5b:3f:28:74: 25:cf:45:bb:4c:06:0b:07:55:56:64:c0:fc:f8:92: c0:f9:03:36:d1:03:2a:bc:30:fb:4d:32:0e:cf:6d: fd:c1:7c:17:de:bc:92:07:e6:94:8a:7d:6d:6c:eb: e8:c3:d4:4c:ff:9d:9d:73:d0:22:d1:e6:4e:a4:19: 6f:69:8c:54:97:8f:11:1b:db:0a:b4:05:13:30:9c: 47:a7:a6:e6:89:95:57:63:77:e8:65:0a:b7:4d:1e: 1b:b0:af:17:1b:26:22:31:56:d3:97:cc:39:51:c2: 87:8e:12:03:e8:b1:6f:16:a4:e3:d6:39:26:84:f8: 4d:2a:4b:97:65:ff:1f:e2:8f:af:ad:41:fd:c7:d0: e6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1D:C3:D3:EA:23:BD:D9:3D:D0:49:CC:2D:04:89:AD:1B:55:BA:69 X509v3 Authority Key Identifier: keyid:6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f4:01:e0:1d:4a:78:9f:42:13:79:0c:2c:d6:fb:db:7c:5b: 7e:aa:e7:40:d3:88:ae:1f:46:25:18:b6:a9:be:91:0a:96:4e: a8:52:7f:63:f0:46:48:21:a6:6e:ff:5a:be:94:24:95:b6:f3: bd:d6:72:94:e4:d1:a8:cd:f6:93:24:fe:63:54:cd:a2:ac:ac: 86:9b:62:c5:c4:a7:f1:53:82:68:3a:4c:2c:ac:9e:d4:df:4c: 03:54:a7:46:b3:21:b9:ed:65:2d:d0:9d:ea:12:8a:81:5b:3a: 04:28:20:f7:54:10:2f:05:e9:a6:e1:b1:1a:98:21:5d:b6:41: f3:77:85:db:06:4d:cf:0d:bc:d8:24:71:99:d8:61:af:d3:e0: c1:08:97:94:ea:95:57:18:1d:78:89:24:d6:04:db:cc:6e:65: a9:79:e8:4e:27:ef:f8:84:26:26:5c:31:a0:64:8e:ac:d2:c0: 4e:57:c2:49:01:00:68:56:f1:5a:e5:9b:d1:10:d4:cc:03:44: d7:3f:89:fe:2b:d1:20:2e:44:65:24:96:5d:87:fe:96:0c:0e: b5:90:f2:95:31:90:e5:e6:0b:84:21:39:d4:5b:8d:a9:03:ca: 92:ba:b6:08:c6:cd:0c:84:fe:a2:31:fa:44:57:d6:2d:e0:02: fe:e3:dd:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc4QzIxMTAvBgNVBAUTKDZENEFFODlGQTk3QTcxNkEyRDkyNjYxRkYyQ0Y1QkQz Q0NEQzI5RkMwHhcNMjUwNTEwMTYzNDU2WhcNMjUwNTE3MTYzNDU2WjAYMRYwFAYD VQQDEw02ODFmODAzMC03MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ZqbcrTHgBYg1pMjWZuN/2hi74iK1NUolrYJTQ/Y8VfJAha+1VzImQiasWaR rQeZ8XjLzkNT1JhtinZZgNOgAXusH5wa7zOGY7Q6rXqqWnMYJfhK48DVUxgp9OJg OeRIXnEyfHcLTVLZd6n7ztKUvLDE+1s/KHQlz0W7TAYLB1VWZMD8+JLA+QM20QMq vDD7TTIOz239wXwX3rySB+aUin1tbOvow9RM/52dc9Ai0eZOpBlvaYxUl48RG9sK tAUTMJxHp6bmiZVXY3foZQq3TR4bsK8XGyYiMVbTl8w5UcKHjhID6LFvFqTj1jkm hPhNKkuXZf8f4o+vrUH9x9DmKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8dw9Pq I73ZPdBJzC0Eia0bVbppMB8GA1UdIwQYMBaAFG1K6J+penFqLZJmH/LPW9PM3Cn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzhDMi9FRDJCQkM3MEY4 ODcxMUU3OTIxRjg2NjhDNEY5QUUwMi9iVXJvbjZsNmNXb3RrbVlmOHM5YjA4emNL ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JVcm9uNmw2Y1dvdGttWWY4czliMDh6Y0tmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzhDMi9FRDJCQkM3MEY4ODcxMUU3OTIxRjg2NjhDNEY5QUUwMi9iVXJvbjZsNmNX b3RrbVlmOHM5YjA4emNLZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx9AHgHUp4n0ITeQws1vvbfFt+qudA04iuH0YlGLapvpEKlk6oUn9j 8EZIIaZu/1q+lCSVtvO91nKU5NGozfaTJP5jVM2irKyGm2LFxKfxU4JoOkwsrJ7U 30wDVKdGsyG57WUt0J3qEoqBWzoEKCD3VBAvBemm4bEamCFdtkHzd4XbBk3PDbzY JHGZ2GGv0+DBCJeU6pVXGB14iSTWBNvMbmWpeehOJ+/4hCYmXDGgZI6s0sBOV8JJ AQBoVvFa5ZvRENTMA0TXP4n+K9EgLkRlJJZdh/6WDA61kPKVMZDl5guEITnUW42p A8qSurYIxs0MhP6iMfpEV9Yt4AL+493I -----END CERTIFICATE-----Generated at Sun May 11 00:34:27 2025 by rpki-client