$ rpki-client -vvf rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft File: _un91LDoMTGIoIn3qH-30BUyU4g.mft (raw, json) Hash identifier: Bw6c4H3YpmbiMzzDTSXrnqFiGVGpwlvzjEYVXf8n4JU= Subject key identifier: 62:86:D4:B4:85:E8:08:21:79:71:7C:CF:F4:01:1E:97:D3:4B:BD:35 Authority key identifier: FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 Certificate issuer: /CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft Manifest number: 065B Signing time: Wed 14 May 2025 22:30:36 +0000 Manifest this update: Wed 14 May 2025 22:30:36 +0000 Manifest next update: Wed 21 May 2025 22:30:36 +0000 Files and hashes: 1: _un91LDoMTGIoIn3qH-30BUyU4g.crl (hash: 2uxXsfgxr0mdJwiw8udQ3iT5Y4KLgE6PGlObWZYBcpw=) 2: 5803FE3880CD11EB83E8035FC4F9AE02.roa (hash: NgLitwn58Hzqdz8jFqI6KtHUu7WwdEhFCnvHC3Qm5IU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C673, serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Validity Not Before: May 14 22:30:36 2025 GMT Not After : May 21 22:30:36 2025 GMT Subject: CN=6825198c-8c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:5b:b3:89:df:27:6d:85:29:1d:db:14:a2: c2:db:be:9b:08:80:d1:e7:e8:c5:2f:da:99:50:31: d7:79:49:e3:3b:08:3f:f3:dc:71:4e:e5:5b:34:23: 58:81:bc:5c:99:21:d3:e7:10:87:6f:19:1c:81:00: b7:f1:57:41:55:bf:fd:a9:d6:89:a2:1a:06:1a:b8: ab:af:91:90:f4:68:e8:be:a3:06:03:4a:3d:08:d5: df:89:de:1b:f0:08:e6:d1:ea:f6:b2:3b:cf:3e:ff: 1d:81:f6:27:4d:c4:32:4e:72:d3:b6:1a:c3:0d:47: 82:ff:2a:61:53:8d:09:9b:78:40:91:c2:98:54:91: 20:60:88:f6:2e:5b:c7:63:da:2f:32:39:ef:3b:07: ce:f9:bd:87:a7:f2:be:7a:04:92:dd:8e:62:eb:d4: e0:b0:52:e7:7b:c8:3c:6c:84:c7:fd:14:9a:f4:69: 41:a0:88:32:88:d3:4d:90:b7:68:76:6e:49:ab:07: a8:4d:6e:0a:a1:69:eb:39:32:50:31:18:2b:88:3f: 56:21:a8:3f:da:ef:c7:43:15:41:f0:63:58:ea:c4: b0:8b:71:d3:78:2a:b5:a2:09:79:c0:5a:90:98:e6: e1:41:a7:46:4f:db:0f:b2:16:86:8d:58:4e:d0:4a: 50:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:86:D4:B4:85:E8:08:21:79:71:7C:CF:F4:01:1E:97:D3:4B:BD:35 X509v3 Authority Key Identifier: keyid:FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f7:c7:b6:e6:50:fd:b9:a3:f9:65:63:3a:fb:a6:98:d8:4a: 9c:68:82:ea:b2:43:03:94:3d:bb:50:1e:ad:3a:84:d9:eb:ad: 43:a1:38:39:ae:52:e9:16:f7:51:72:d3:f1:48:2a:7d:3c:b0: 67:c6:ab:46:75:c1:0a:75:1b:2c:b2:47:f3:15:f1:4e:ae:3f: 42:76:57:72:c7:e0:58:c1:c8:9b:b6:5b:cc:72:73:90:d4:68: 54:82:c4:9f:53:27:a4:c1:ea:be:32:94:b4:6c:39:7f:8a:5e: 77:50:d6:6e:f3:7b:0c:1f:f3:42:21:46:22:86:c2:34:02:f8: 57:32:0e:62:e1:ad:ab:dc:89:93:fc:ed:26:32:8f:07:3e:ef: eb:8c:32:e3:5a:ef:1b:63:93:03:4b:5a:e6:87:a7:09:ba:f0: 16:fa:d0:b6:67:49:16:de:d3:45:8d:65:f7:c9:66:78:d2:34: 51:da:d6:0a:c7:46:fc:9a:20:78:72:86:b6:d2:a9:7c:63:60: 24:e6:61:b2:ea:7b:5a:0d:42:51:94:2f:4d:09:a8:b0:e1:0d: 68:cc:ae:c2:ca:d7:e3:fe:4f:3b:fa:d0:19:02:78:4a:4b:89: a6:b7:49:46:9a:18:82:0f:66:47:06:94:4d:03:da:2a:eb:69: f7:df:21:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NzMxMTAvBgNVBAUTKEZFRTlGREQ0QjBFODMxMzE4OEEwODlGN0E4N0ZCN0Qw MTUzMjUzODgwHhcNMjUwNTE0MjIzMDM2WhcNMjUwNTIxMjIzMDM2WjAYMRYwFAYD VQQDEw02ODI1MTk4Yy04YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7Fbs4nfJ22FKR3bFKLC276bCIDR5+jFL9qZUDHXeUnjOwg/89xxTuVbNCNY gbxcmSHT5xCHbxkcgQC38VdBVb/9qdaJohoGGrirr5GQ9GjovqMGA0o9CNXfid4b 8Ajm0er2sjvPPv8dgfYnTcQyTnLTthrDDUeC/yphU40Jm3hAkcKYVJEgYIj2LlvH Y9ovMjnvOwfO+b2Hp/K+egSS3Y5i69TgsFLne8g8bITH/RSa9GlBoIgyiNNNkLdo dm5JqweoTW4KoWnrOTJQMRgriD9WIag/2u/HQxVB8GNY6sSwi3HTeCq1ogl5wFqQ mObhQadGT9sPshaGjVhO0EpQLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKG1LSF 6AgheXF8z/QBHpfTS701MB8GA1UdIwQYMBaAFP7p/dSw6DExiKCJ96h/t9AVMlOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY3My9BRTVGQjEwMjgw Q0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01UR0lvSW4zcUgtMzBCVXlV NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191bjkxTERvTVRHSW9JbjNxSC0zMEJVeVU0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY3My9BRTVGQjEwMjgwQ0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01U R0lvSW4zcUgtMzBCVXlVNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt98e25lD9uaP5ZWM6+6aY2EqcaILqskMDlD27UB6tOoTZ661DoTg5 rlLpFvdRctPxSCp9PLBnxqtGdcEKdRssskfzFfFOrj9Cdldyx+BYwcibtlvMcnOQ 1GhUgsSfUyekweq+MpS0bDl/il53UNZu83sMH/NCIUYihsI0AvhXMg5i4a2r3ImT /O0mMo8HPu/rjDLjWu8bY5MDS1rmh6cJuvAW+tC2Z0kW3tNFjWX3yWZ40jRR2tYK x0b8miB4coa20ql8Y2Ak5mGy6ntaDUJRlC9NCaiw4Q1ozK7Cytfj/k87+tAZAnhK S4mmt0lGmhiCD2ZHBpRNA9oq62n33yG4 -----END CERTIFICATE-----Generated at Thu May 15 03:49:50 2025 by rpki-client