$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json) Hash identifier: gH4KtVzPa7uRmyo92DzRCnFw6OQpkL1xq/GnF7qQrq0= Subject key identifier: 05:A3:C2:53:76:CE:49:5D:B0:E4:88:D9:5E:08:FD:AE:2E:6C:CE:7A Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Certificate serial: 0653 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft Manifest number: 064E Signing time: Sat 10 May 2025 22:08:06 +0000 Manifest this update: Sat 10 May 2025 22:08:06 +0000 Manifest next update: Sat 17 May 2025 22:08:06 +0000 Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: 4feEg3SZPNmhAc80D2eouZoQnKeKGBGO7eaRnCbybxI=) 2: 813CF67A858111EB914A5377C4F9AE02.roa (hash: 2UAH62vhovHfVInK3kBSxO9/fkF3O7N3riizPynzOa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Validity Not Before: May 10 22:08:06 2025 GMT Not After : May 17 22:08:06 2025 GMT Subject: CN=681fce46-a1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:ac:e8:a7:63:ed:c9:53:49:0a:15:13:c2: 21:f8:8f:ff:9c:b2:05:76:eb:cb:1e:5d:c0:82:e0: 94:55:77:25:c2:41:d5:5a:9f:da:f7:fe:3f:83:7d: 57:80:2a:df:fe:5e:45:6f:22:bf:ce:be:38:4d:0d: eb:16:cb:34:45:af:29:0b:29:d9:d8:ef:35:9c:64: f3:e5:1f:7e:96:a2:5f:c6:aa:a5:87:d0:8a:53:ed: 24:99:42:6a:79:88:d5:f3:79:1b:d5:fd:84:0a:77: f2:89:40:47:dd:79:b0:af:20:4f:8a:d3:3d:58:fa: 52:ba:6a:34:b1:7e:d0:b7:74:3e:d8:fa:c2:dd:00: 77:43:49:6a:4c:9d:0e:a5:c6:2e:35:45:aa:d3:94: b8:73:34:c9:39:e5:26:30:3c:f6:71:aa:a5:8b:6a: 63:a6:a7:c9:d5:36:82:4b:75:30:72:a0:7a:66:8d: b2:19:ac:5a:96:6c:ea:6c:13:74:61:26:56:61:cb: 40:32:8f:fd:dd:4d:9d:1d:80:b8:de:60:3f:0a:03: ab:d9:da:7a:c2:49:33:ca:07:ab:8a:55:90:c1:09: aa:e4:0e:1b:6d:11:7c:5e:bc:e9:c2:1d:60:a3:f4: d3:53:cf:ce:18:d5:96:60:9e:5e:2a:c1:a7:6a:17: 11:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A3:C2:53:76:CE:49:5D:B0:E4:88:D9:5E:08:FD:AE:2E:6C:CE:7A X509v3 Authority Key Identifier: keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7f:48:c0:00:16:a4:2a:49:7e:9f:a8:31:e9:71:4d:9c:5b: 6f:3c:26:90:71:65:90:a8:87:6e:bb:65:62:d5:ac:14:1c:52: 4a:36:bc:c9:d8:6e:38:4f:03:49:91:de:83:ac:34:11:b6:8f: c8:ad:28:c1:f2:a5:96:4f:2c:ab:46:05:52:76:ae:44:25:b4: 65:8c:aa:7b:53:ff:bb:55:4c:ed:af:90:9d:ba:b6:0d:e0:ac: a6:e4:30:f5:06:a3:03:3c:cd:03:1a:a7:ff:d6:ef:d1:01:48: f5:79:55:b2:0d:41:e6:89:8e:18:c1:8a:4e:67:6f:98:60:b1: a1:1a:f7:b7:7b:d5:37:75:17:a2:7c:5a:b7:d9:02:ce:28:f2: 03:6f:24:77:ee:ba:65:2e:21:89:5c:c8:5a:90:05:a6:04:55: 4f:ef:7f:f9:92:7b:12:f3:3b:93:af:7c:7f:2b:c7:d4:83:28: 53:4d:cc:2d:78:7a:f0:0c:97:78:60:66:2f:3a:57:17:42:27: 2a:7b:8b:58:e9:8e:dc:39:fb:bc:42:db:bf:ee:ca:2b:d2:88: 56:59:28:a5:b5:0e:08:19:e9:d2:48:df:3c:9c:f5:09:6e:c5: 57:3e:01:fa:fc:ad:f3:71:d2:69:31:7e:0b:12:18:ba:21:a7: a3:94:b5:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw REZEQjM0MTEwHhcNMjUwNTEwMjIwODA2WhcNMjUwNTE3MjIwODA2WjAYMRYwFAYD VQQDEw02ODFmY2U0Ni1hMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqms6Kdj7clTSQoVE8Ih+I//nLIFduvLHl3AguCUVXclwkHVWp/a9/4/g31X gCrf/l5FbyK/zr44TQ3rFss0Ra8pCynZ2O81nGTz5R9+lqJfxqqlh9CKU+0kmUJq eYjV83kb1f2ECnfyiUBH3XmwryBPitM9WPpSumo0sX7Qt3Q+2PrC3QB3Q0lqTJ0O pcYuNUWq05S4czTJOeUmMDz2caqli2pjpqfJ1TaCS3UwcqB6Zo2yGaxalmzqbBN0 YSZWYctAMo/93U2dHYC43mA/CgOr2dp6wkkzygerilWQwQmq5A4bbRF8Xrzpwh1g o/TTU8/OGNWWYJ5eKsGnahcRJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWjwlN2 zkldsOSI2V4I/a4ubM56MB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1 N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv V08zZThHa01qbFVOX2JOQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaf0jAABakKkl+n6gx6XFNnFtvPCaQcWWQqIduu2Vi1awUHFJKNrzJ 2G44TwNJkd6DrDQRto/IrSjB8qWWTyyrRgVSdq5EJbRljKp7U/+7VUztr5CdurYN 4Kym5DD1BqMDPM0DGqf/1u/RAUj1eVWyDUHmiY4YwYpOZ2+YYLGhGve3e9U3dRei fFq32QLOKPIDbyR37rplLiGJXMhakAWmBFVP73/5knsS8zuTr3x/K8fUgyhTTcwt eHrwDJd4YGYvOlcXQicqe4tY6Y7cOfu8Qtu/7sor0ohWWSiltQ4IGenSSN88nPUJ bsVXPgH6/K3zcdJpMX4LEhi6IaejlLVt -----END CERTIFICATE-----Generated at Sun May 11 13:35:33 2025 by rpki-client