$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: MNsutgPWqfUG5kc6Tt6ugzaA8fXbcHQW80OPj3KwDZY= Subject key identifier: 02:FF:62:F6:17:85:7D:82:BA:4E:5D:15:B1:B8:FB:C1:76:FB:8D:97 Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 0869 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 0863 Signing time: Fri 16 May 2025 21:01:08 +0000 Manifest this update: Fri 16 May 2025 21:01:07 +0000 Manifest next update: Fri 23 May 2025 21:01:07 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: SZzKTattnmulTNszhc3aXfnMJfGXSPN6mxryRz3d/LQ=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: qM1JVSXdUTQJnIVxaVxQsaSGw94EgaLnOqmc/M2SNDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: May 16 21:01:07 2025 GMT Not After : May 23 21:01:07 2025 GMT Subject: CN=6827a793-b03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:06:0d:01:93:c0:e2:f8:b0:d8:b1:2e:d0:02: 64:ce:59:11:ad:46:e3:cc:24:73:a0:67:62:4a:08: 9c:23:41:19:cf:39:7c:c0:30:92:cd:57:82:6a:d2: 03:50:b6:5a:8c:da:35:b1:97:4d:d3:11:5f:9d:ed: 0f:83:63:6d:fe:23:fe:db:22:e0:9e:ba:6e:07:f3: 38:57:08:06:65:ee:10:4a:c2:26:8f:98:44:e0:14: 20:f9:22:ae:1d:2d:01:e8:97:5f:a5:ee:c8:9d:02: 3e:0e:c7:69:03:7a:64:ee:a4:a2:df:e4:4a:d4:c8: cb:e2:9d:85:25:2a:e3:96:e8:f9:24:68:4a:20:b5: a9:a0:f1:d6:04:5b:46:5b:c4:d8:04:47:05:11:5e: 05:96:fd:14:ca:b6:bd:c2:cd:c7:6c:38:34:66:80: 5b:71:50:34:12:92:19:37:7a:3e:ec:2e:58:c7:60: ad:94:e2:4b:78:d3:7e:a1:e9:e6:20:cf:35:c0:d0: 0a:82:d8:41:d7:d6:ec:a7:57:22:08:86:3e:79:26: 61:63:ae:ef:16:45:09:3b:47:43:23:9c:f0:5d:f9: 69:99:6c:eb:71:86:01:12:79:a0:da:2b:1a:a8:68: b5:6c:b6:bb:31:fe:22:5d:f0:c8:3a:63:84:3c:45: c5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FF:62:F6:17:85:7D:82:BA:4E:5D:15:B1:B8:FB:C1:76:FB:8D:97 X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:dd:2b:eb:32:2c:0b:c6:e7:2b:4f:c4:c5:15:5a:2d:f9:db: ef:0b:61:93:8d:f7:e1:91:91:95:dd:34:56:8a:1a:14:fd:bc: 13:19:2a:b5:4f:b4:05:2c:d5:da:19:4e:8a:b0:d2:c6:99:9f: 32:52:ce:6b:fe:36:a6:75:08:05:0d:a0:27:5e:95:0f:24:3d: 3f:ce:ee:7c:7e:ad:a4:9e:2f:ad:d4:cb:d8:5c:38:39:28:c6: 32:1e:84:31:de:83:04:54:b3:38:9b:43:46:35:ce:79:c6:8c: 93:ce:6e:39:e9:54:f1:24:65:91:1c:72:78:c4:cc:87:3a:b3: 03:1f:58:b2:33:23:5a:6f:68:ba:7f:bd:0f:2e:e4:02:59:6c: 6e:ec:fb:ae:49:44:3e:43:28:af:8d:90:43:18:64:41:56:87: 85:4e:0d:63:aa:cd:54:e2:77:51:1b:57:f7:9f:fe:15:2d:80: 31:31:d8:1c:02:b0:e0:da:3f:95:9c:aa:19:6b:85:6b:af:a3: 12:b8:55:c6:1d:9d:45:10:ce:a3:f3:74:e0:2c:f2:0a:3d:36: fc:72:01:a2:00:72:6e:fa:31:98:b1:e7:23:e6:4d:3e:23:a9: 6c:f1:8e:75:6e:8a:26:32:2c:e7:38:0c:92:58:12:40:4a:67: 6e:2a:cb:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjUwNTE2MjEwMTA3WhcNMjUwNTIzMjEwMTA3WjAYMRYwFAYD VQQDEw02ODI3YTc5My1iMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QYNAZPA4viw2LEu0AJkzlkRrUbjzCRzoGdiSgicI0EZzzl8wDCSzVeCatID ULZajNo1sZdN0xFfne0Pg2Nt/iP+2yLgnrpuB/M4VwgGZe4QSsImj5hE4BQg+SKu HS0B6Jdfpe7InQI+DsdpA3pk7qSi3+RK1MjL4p2FJSrjluj5JGhKILWpoPHWBFtG W8TYBEcFEV4Flv0Uyra9ws3HbDg0ZoBbcVA0EpIZN3o+7C5Yx2CtlOJLeNN+oenm IM81wNAKgthB19bsp1ciCIY+eSZhY67vFkUJO0dDI5zwXflpmWzrcYYBEnmg2isa qGi1bLa7Mf4iXfDIOmOEPEXFdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAL/YvYX hX2Cuk5dFbG4+8F2+42XMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS3SvrMiwLxucrT8TFFVot+dvvC2GTjffhkZGV3TRWihoU/bwTGSq1 T7QFLNXaGU6KsNLGmZ8yUs5r/jamdQgFDaAnXpUPJD0/zu58fq2kni+t1MvYXDg5 KMYyHoQx3oMEVLM4m0NGNc55xoyTzm456VTxJGWRHHJ4xMyHOrMDH1iyMyNab2i6 f70PLuQCWWxu7PuuSUQ+QyivjZBDGGRBVoeFTg1jqs1U4ndRG1f3n/4VLYAxMdgc ArDg2j+VnKoZa4Vrr6MSuFXGHZ1FEM6j83TgLPIKPTb8cgGiAHJu+jGYsecj5k0+ I6ls8Y51boomMiznOAySWBJASmduKstP -----END CERTIFICATE-----Generated at Sun May 18 00:57:32 2025 by rpki-client