$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: KPkOYN1X92lKylvnbbeDSOsxA1GkeoX/0LYMhGrKr1M= Subject key identifier: 54:FD:33:1E:4B:25:A0:51:74:64:48:91:BE:A3:07:8D:E7:09:D5:E5 Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0C8B Signing time: Sat 10 May 2025 18:01:56 +0000 Manifest this update: Sat 10 May 2025 18:01:56 +0000 Manifest next update: Sat 17 May 2025 18:01:56 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: delwF2NtuSSYJoSNzSjJnf8IoFIFWgWRqwdjrI5jlLo=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: srN4MybkybSjP5c+l2pI3OXFvu05+GspG1m/SkxGd6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: May 10 18:01:56 2025 GMT Not After : May 17 18:01:56 2025 GMT Subject: CN=681f9494-d1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:73:f8:09:63:e5:76:0a:76:c2:a8:b6:73: 38:58:dc:f7:1c:24:b2:b1:3b:68:07:33:f3:5a:cb: 7a:61:7a:e5:a4:99:a9:e8:55:40:98:c3:ca:9b:ba: 59:61:1b:11:4b:1c:13:1d:5e:5a:a2:dc:0f:7c:6f: b3:30:50:41:b9:49:a3:0a:10:6f:0c:f2:fd:e5:6c: 0c:29:30:a6:3b:02:3f:fd:2d:40:d2:5c:1e:f4:2b: 95:29:87:e9:7a:3e:56:f9:ef:11:1d:c6:5b:ba:fc: b2:24:c8:89:df:e8:67:35:3c:e9:ae:07:73:c5:2e: 7c:9b:73:81:48:78:ce:0e:73:b8:ca:57:a0:99:fd: 0a:28:f6:b7:23:59:1b:18:28:ff:0c:e6:cb:88:6b: 0d:c6:56:a4:ef:12:a3:88:67:ee:8b:fa:f6:cb:ab: ad:31:5c:c3:ca:1c:fc:65:ec:a3:87:c2:a7:4a:bd: 30:88:92:76:6b:04:38:c3:68:55:b9:39:bf:a9:01: 18:b5:6b:b9:42:5b:6b:ca:70:c7:ae:1c:68:bd:ac: ff:89:4c:18:d8:20:95:9a:39:b7:b2:70:32:39:b2: c5:5d:9f:d5:40:fa:a2:bb:5e:b0:65:83:ea:d5:4c: bf:26:de:dc:8d:0b:2e:0a:48:d3:be:d1:00:93:b6: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FD:33:1E:4B:25:A0:51:74:64:48:91:BE:A3:07:8D:E7:09:D5:E5 X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:6b:97:50:05:92:7a:1e:95:ee:dc:40:33:b9:a3:30:15:cc: d7:c8:fd:2b:6c:2f:71:9d:eb:72:c2:55:c1:8a:a4:d2:5b:a0: ae:64:69:77:9a:e2:21:e0:95:16:bb:2f:5e:09:87:91:f5:fb: 56:1f:10:7d:e0:3f:7e:a5:78:90:35:87:0d:9f:dd:7f:9f:be: 71:ac:be:94:19:be:13:6c:ed:7b:b8:9a:c7:43:74:f4:95:ba: 68:f8:a2:6d:aa:8d:88:22:59:cd:ac:c0:57:19:18:1c:96:82: 82:c9:cb:d4:1d:6f:69:55:c5:d8:87:7e:14:d5:e9:08:52:fd: 88:65:34:2f:26:40:51:7f:14:40:3e:eb:08:0b:21:17:9a:0e: fd:b7:99:bd:e6:a2:fd:d4:fd:9f:9d:55:e9:81:c3:d2:73:55: 61:e1:ce:8b:e8:68:90:6f:24:fb:9f:ce:3b:fd:e0:0e:b3:49: f1:4e:2f:e8:da:d9:46:58:c1:77:8a:57:41:6a:25:c1:14:0a: c3:09:bb:dd:98:ff:8b:4c:ca:12:a8:aa:28:60:2a:e9:d5:10: 99:87:9b:be:e7:69:9d:70:2c:9e:a4:3b:cc:b7:69:96:cd:5e: 2f:87:e1:0e:68:fe:e3:ef:a5:b3:23:11:12:6b:69:9c:a2:45: 4c:2c:92:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjUwNTEwMTgwMTU2WhcNMjUwNTE3MTgwMTU2WjAYMRYwFAYD VQQDEw02ODFmOTQ5NC1kMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQxz+Alj5XYKdsKotnM4WNz3HCSysTtoBzPzWst6YXrlpJmp6FVAmMPKm7pZ YRsRSxwTHV5aotwPfG+zMFBBuUmjChBvDPL95WwMKTCmOwI//S1A0lwe9CuVKYfp ej5W+e8RHcZbuvyyJMiJ3+hnNTzprgdzxS58m3OBSHjODnO4ylegmf0KKPa3I1kb GCj/DObLiGsNxlak7xKjiGfui/r2y6utMVzDyhz8Zeyjh8KnSr0wiJJ2awQ4w2hV uTm/qQEYtWu5QltrynDHrhxovaz/iUwY2CCVmjm3snAyObLFXZ/VQPqiu16wZYPq 1Uy/Jt7cjQsuCkjTvtEAk7Z9TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFT9Mx5L JaBRdGRIkb6jB43nCdXlMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3a5dQBZJ6HpXu3EAzuaMwFczXyP0rbC9xnetywlXBiqTSW6CuZGl3 muIh4JUWuy9eCYeR9ftWHxB94D9+pXiQNYcNn91/n75xrL6UGb4TbO17uJrHQ3T0 lbpo+KJtqo2IIlnNrMBXGRgcloKCycvUHW9pVcXYh34U1ekIUv2IZTQvJkBRfxRA PusICyEXmg79t5m95qL91P2fnVXpgcPSc1Vh4c6L6GiQbyT7n847/eAOs0nxTi/o 2tlGWMF3ildBaiXBFArDCbvdmP+LTMoSqKooYCrp1RCZh5u+52mdcCyepDvMt2mW zV4vh+EOaP7j76WzIxESa2mcokVMLJIT -----END CERTIFICATE-----Generated at Sat May 10 19:31:47 2025 by rpki-client