$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json) Hash identifier: 5/YQmHvpGxHUZ8LLIRdYSmZ2ivcn/kZbIHmKCDpxMZ0= Subject key identifier: 95:9C:11:1E:3E:6B:B9:7C:02:B8:A1:28:3F:1D:08:CB:69:69:BC:11 Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4 Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft Manifest number: 0177 Signing time: Sun 11 May 2025 02:48:36 +0000 Manifest this update: Sun 11 May 2025 02:48:35 +0000 Manifest next update: Sun 18 May 2025 02:48:35 +0000 Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: RQL8ugy2Num4bSd5Xol6EVs/J4Fgk8E/fkh9tIhGVpY=) 2: 9F79846406E911EE88450147C4F9AE02.roa (hash: VUMq+AnQ5vAh9348tyFEWeU9Ep6U+LrIKC3PKZ58L3M=) 3: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: xqi0fyo9pYw63B4k/7OwfLMW8Zv6WUfvY5OXteBY87I=) 4: E5925096093911EEABCFA170C4F9AE02.roa (hash: 9se4h5DVwbqK4ocwNJG41tqNbygd7PqouTQTwTnQqOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4 Validity Not Before: May 11 02:48:35 2025 GMT Not After : May 18 02:48:35 2025 GMT Subject: CN=68201003-ae32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:61:76:2e:ac:c8:56:69:8d:cb:ce:db:29: 0e:4e:c5:8f:ec:06:24:26:3d:f4:23:49:ec:45:c3: f6:b2:ec:15:6a:41:f7:da:e3:db:4a:a8:ae:6b:97: 74:56:1a:b2:f2:38:6b:f6:41:5b:cc:d0:f6:1f:40: 70:ab:41:32:e6:6e:4b:f3:b6:a9:3b:f2:91:1d:90: d0:34:8a:1d:89:62:17:c2:b7:80:07:aa:c2:a2:c5: 72:88:8d:de:6d:b0:81:8c:1c:1a:1c:b4:4f:01:c8: 03:07:75:63:f3:d2:cd:1a:9e:c6:2e:18:b5:7c:b8: 7d:dc:16:f9:eb:80:0e:b8:5a:bd:d6:ee:0e:3b:75: a2:f9:48:41:bb:61:df:45:f6:3f:ff:f8:2d:5f:e9: 38:24:02:93:76:a8:11:6a:6d:ad:11:c9:00:b9:ac: 61:2f:e0:c9:14:3d:4d:a3:d6:22:89:b8:a2:ea:46: d5:11:24:1d:1e:a4:be:a0:e0:eb:7b:f2:07:a1:fb: 70:90:e0:d5:a9:d3:06:49:f0:b1:39:b7:d9:da:4b: 4b:44:45:49:29:90:7c:a8:62:f6:ab:39:57:42:03: 45:3c:36:19:0b:fa:6c:c2:23:9a:1f:b4:af:5c:da: 8c:27:e8:48:de:b6:9b:13:8a:ea:da:93:0a:9c:76: 97:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9C:11:1E:3E:6B:B9:7C:02:B8:A1:28:3F:1D:08:CB:69:69:BC:11 X509v3 Authority Key Identifier: keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9a:72:67:ed:90:f6:46:42:4b:ca:52:95:5f:23:2a:78:7d: 64:30:a4:cc:34:55:ac:e8:5d:cd:dc:57:b3:80:af:28:e9:02: 66:c2:31:ba:19:51:0b:e7:db:8e:d4:4e:25:ff:85:b1:eb:02: 6a:aa:49:2f:ee:8b:94:4c:98:05:19:86:11:c7:14:29:29:bb: 0d:5d:c9:4e:b4:9a:59:7b:48:a8:dd:42:34:35:12:31:75:00: c8:7a:2c:85:0f:7c:6f:ab:0d:2c:ee:69:e0:e3:f2:ce:1b:2b: 92:ab:3d:d6:8b:0f:a4:b7:29:9e:f6:7b:4f:86:30:2f:14:3c: 83:81:23:59:4e:b6:fd:a1:8b:81:e5:a8:c0:45:32:43:75:a5: de:9f:09:f3:5d:2d:30:a8:58:e4:07:e8:aa:d2:a8:9b:61:7c: da:f3:43:a5:ea:01:af:dc:b8:e0:a8:e1:10:58:5d:2a:4b:c0: fd:3b:0a:69:02:69:5c:ad:fa:06:3f:ca:15:4a:e0:7b:60:43: 54:c2:ca:f9:a7:f6:43:8b:6f:3d:15:f1:97:95:90:f7:ba:a3: 5b:72:11:b7:bb:92:87:02:ec:a0:18:fa:e6:86:f7:a7:c4:79: d2:ae:32:d8:80:ca:d2:38:93:ea:c4:a5:fb:13:89:c4:f6:bd: 3a:b5:4f:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx MjcwQTI0QzQwHhcNMjUwNTExMDI0ODM1WhcNMjUwNTE4MDI0ODM1WjAYMRYwFAYD VQQDEw02ODIwMTAwMy1hZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXRhdi6syFZpjcvO2ykOTsWP7AYkJj30I0nsRcP2suwVakH32uPbSqiua5d0 Vhqy8jhr9kFbzND2H0Bwq0Ey5m5L87apO/KRHZDQNIodiWIXwreAB6rCosVyiI3e bbCBjBwaHLRPAcgDB3Vj89LNGp7GLhi1fLh93Bb564AOuFq91u4OO3Wi+UhBu2Hf RfY///gtX+k4JAKTdqgRam2tEckAuaxhL+DJFD1No9Yiibii6kbVESQdHqS+oODr e/IHoftwkODVqdMGSfCxObfZ2ktLREVJKZB8qGL2qzlXQgNFPDYZC/pswiOaH7Sv XNqMJ+hI3rabE4rq2pMKnHaXAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWcER4+ a7l8ArihKD8dCMtpabwRMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2 OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTgxOC82OEVBNzNFQzA2OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNP MFVqSlBWbExiME1TY0tKTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+mnJn7ZD2RkJLylKVXyMqeH1kMKTMNFWs6F3N3FezgK8o6QJmwjG6 GVEL59uO1E4l/4Wx6wJqqkkv7ouUTJgFGYYRxxQpKbsNXclOtJpZe0io3UI0NRIx dQDIeiyFD3xvqw0s7mng4/LOGyuSqz3Wiw+ktyme9ntPhjAvFDyDgSNZTrb9oYuB 5ajARTJDdaXenwnzXS0wqFjkB+iq0qibYXza80Ol6gGv3LjgqOEQWF0qS8D9Owpp AmlcrfoGP8oVSuB7YENUwsr5p/ZDi289FfGXlZD3uqNbchG3u5KHAuygGPrmhven xHnSrjLYgMrSOJPqxKX7E4nE9r06tU90 -----END CERTIFICATE-----Generated at Mon May 12 19:10:14 2025 by rpki-client