$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft File: bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft (raw, json) Hash identifier: 6HStLBIUvqO0DojP4OuqxfBTE3YLcARQCbQvvYAerec= Subject key identifier: C3:EF:B7:1F:7F:80:46:69:6B:E6:A5:33:F0:42:12:AE:BE:71:58:4D Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 Certificate issuer: /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Certificate serial: 180B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft Manifest number: 1802 Signing time: Mon 12 May 2025 16:28:33 +0000 Manifest this update: Mon 12 May 2025 16:28:33 +0000 Manifest next update: Mon 19 May 2025 16:28:33 +0000 Files and hashes: 1: bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl (hash: b4iKDcMHYifZCPqgb/jQxLY3+K+Eytv2RbV6GB1QsMg=) 2: 870C2B58B47811E788EC7E65C4F9AE02.roa (hash: IgkWueiZzDaSaqXsqac+/PyEgRdDcfnQbUbjQVGTTtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6155 (0x180b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D9, serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Validity Not Before: May 12 16:28:33 2025 GMT Not After : May 19 16:28:33 2025 GMT Subject: CN=682221b1-a39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a8:9c:13:43:09:13:1e:20:22:c7:de:2c:2f: 3c:b3:66:a8:37:4d:61:f4:cd:af:a5:05:33:3f:3d: 78:4f:7e:48:27:44:2d:97:9b:6e:c3:de:fe:03:85: fd:12:ed:fe:6d:5d:5a:69:93:e8:cd:69:fd:56:4a: f8:41:fd:6b:55:94:4d:6c:b8:48:2e:d9:81:e9:a3: a4:3f:21:30:9a:03:09:8c:d1:58:4c:84:f7:4e:d0: c5:1f:22:49:37:3d:17:6c:85:cc:d2:b7:c2:5a:01: e5:0f:c9:b0:11:d3:e4:db:e0:5d:59:98:08:b4:ba: b1:64:58:58:c7:e1:0f:df:03:16:4f:01:2f:e4:4a: a8:77:8b:b5:03:20:24:b6:4a:bf:24:28:2f:57:05: a8:03:dd:0c:d0:5f:b9:76:3b:2c:bd:e0:07:66:b3: 23:12:31:dc:27:4b:63:28:1a:97:38:85:0a:fa:a3: 7f:cb:b4:93:bf:85:81:1a:22:e6:f9:39:3a:1d:90: a3:20:73:19:0b:4c:4d:e7:84:41:fa:0b:b8:4d:b7: 76:93:0b:cc:51:be:27:6b:d0:95:8d:85:de:a1:53: cb:88:70:86:e0:41:55:dd:46:1f:04:4b:7c:e3:ca: d5:94:a6:9e:58:19:42:d8:e2:58:5f:11:41:4a:71: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EF:B7:1F:7F:80:46:69:6B:E6:A5:33:F0:42:12:AE:BE:71:58:4D X509v3 Authority Key Identifier: keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:93:3c:7a:27:fc:e8:1e:b5:12:6b:98:77:08:57:5f:1f:23: de:f9:bf:73:70:c7:36:f4:ac:93:31:14:33:10:3c:a9:08:69: 89:e9:e9:fc:12:dd:c6:f7:bb:3d:6c:a6:df:dd:fd:e6:ab:19: 51:69:e9:90:d4:83:3b:ca:48:4e:4a:7a:39:52:22:e3:f3:69: 71:da:82:70:93:c9:ec:ef:88:96:52:49:d6:8b:40:1f:2d:b6: 35:ba:05:63:59:24:e0:d8:00:a4:1a:4a:21:db:d8:7e:ae:f0: 2e:59:8a:f6:aa:4b:ee:8f:e0:2b:9a:06:42:1b:0e:65:6d:7a: 77:e1:44:08:1c:db:a6:cc:b4:14:b5:47:74:bd:03:91:25:1e: 07:70:37:d3:14:36:7d:19:a0:d0:d3:af:5f:dd:aa:07:e9:13: ef:13:01:80:32:c4:bc:90:ab:dc:c2:d5:df:fb:ce:e8:31:96: 25:be:8f:a4:78:31:cc:2e:e8:04:cc:3d:19:f0:83:e2:74:e4: b1:e5:e2:0a:75:2e:6f:5d:0b:7f:1a:3d:f8:b2:75:da:4c:dd: f6:88:9c:6f:d3:a2:ce:7d:bf:f8:ee:9e:be:8f:88:23:f5:51: 98:1d:57:08:ff:fc:66:d5:97:90:f4:16:0f:dc:58:eb:14:29: 1f:12:b2:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDkxMTAvBgNVBAUTKDZDMUI2MzhFQTlEN0M2Q0UwMjNDQjVFNTdFM0NBRTE2 QTExQjQ1MDUwHhcNMjUwNTEyMTYyODMzWhcNMjUwNTE5MTYyODMzWjAYMRYwFAYD VQQDEw02ODIyMjFiMS1hMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4aicE0MJEx4gIsfeLC88s2aoN01h9M2vpQUzPz14T35IJ0Qtl5tuw97+A4X9 Eu3+bV1aaZPozWn9Vkr4Qf1rVZRNbLhILtmB6aOkPyEwmgMJjNFYTIT3TtDFHyJJ Nz0XbIXM0rfCWgHlD8mwEdPk2+BdWZgItLqxZFhYx+EP3wMWTwEv5Eqod4u1AyAk tkq/JCgvVwWoA90M0F+5djssveAHZrMjEjHcJ0tjKBqXOIUK+qN/y7STv4WBGiLm +Tk6HZCjIHMZC0xN54RB+gu4Tbd2kwvMUb4na9CVjYXeoVPLiHCG4EFV3UYfBEt8 48rVlKaeWBlC2OJYXxFBSnFSNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPvtx9/ gEZpa+alM/BCEq6+cVhNMB8GA1UdIwQYMBaAFGwbY46p18bOAjy15X48rhahG0UF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFEOS9EODlCQjMwRUI0 NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhzNENQTFhsZmp5dUZxRWJS UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCdGpqcW5YeHM0Q1BMWGxmanl1RnFFYlJRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODFEOS9EODlCQjMwRUI0NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhz NENQTFhsZmp5dUZxRWJSUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8kzx6J/zoHrUSa5h3CFdfHyPe+b9zcMc29KyTMRQzEDypCGmJ6en8 Et3G97s9bKbf3f3mqxlRaemQ1IM7ykhOSno5UiLj82lx2oJwk8ns74iWUknWi0Af LbY1ugVjWSTg2ACkGkoh29h+rvAuWYr2qkvuj+ArmgZCGw5lbXp34UQIHNumzLQU tUd0vQORJR4HcDfTFDZ9GaDQ069f3aoH6RPvEwGAMsS8kKvcwtXf+87oMZYlvo+k eDHMLugEzD0Z8IPidOSx5eIKdS5vXQt/Gj34snXaTN32iJxv06LOfb/47p6+j4gj 9VGYHVcI//xm1ZeQ9BYP3FjrFCkfErL7 -----END CERTIFICATE-----Generated at Wed May 14 17:16:14 2025 by rpki-client