$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: S+FCmIa2vRbTq/5g9NE8R3SmUhI6/q2Qp3RLLrPO3DY= Subject key identifier: EC:07:0F:80:28:A5:02:BC:EB:A1:5A:CC:C6:EF:E8:66:A1:E5:0C:FA Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0CCF Signing time: Mon 12 May 2025 18:00:24 +0000 Manifest this update: Mon 12 May 2025 18:00:23 +0000 Manifest next update: Mon 19 May 2025 18:00:23 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: ZAnoI/9qOTv6Rz/o9CWB18ABTzwc7tebLXwQXiucuIs=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: May 12 18:00:23 2025 GMT Not After : May 19 18:00:23 2025 GMT Subject: CN=68223737-7b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:e7:8f:9f:3b:a5:92:84:09:2b:55:f9:17: eb:0b:b8:9d:e3:ac:e7:c9:c8:ae:88:f9:aa:83:02: 88:3d:dd:1b:f4:57:60:3a:c3:2b:c4:b9:fd:bf:b9: cc:c0:91:d1:dd:87:ba:42:03:72:09:d1:a7:b1:12: ed:b8:68:40:14:b0:7b:91:f7:00:3a:33:c6:fc:61: ef:8c:8c:d5:6c:d8:f7:36:05:fa:c2:2a:0b:fd:7f: 8c:f9:18:af:d9:60:39:9b:ac:55:7f:17:93:53:e8: 99:72:f5:ec:da:54:a1:7c:84:68:98:a7:ef:a0:5d: b8:cf:1f:59:7d:0e:4c:05:4e:cf:af:79:1c:d6:de: c0:23:89:02:3b:53:4f:91:2e:bc:8c:b1:e9:6a:3e: 75:f2:0b:2d:cc:c6:e4:78:39:f6:5e:2b:87:a2:8e: 72:3c:5f:b9:28:f7:1e:fc:79:58:08:03:34:20:07: f7:b8:78:5a:2e:27:7c:2d:ce:3c:a9:10:0f:c2:d6: 65:38:9f:e5:da:86:81:84:ca:b4:7e:69:88:29:5e: 5b:3b:e9:8c:e6:06:da:0e:55:f1:eb:55:ef:71:d3: 73:40:28:6f:b9:27:db:56:6d:6f:55:bb:c0:6d:ed: df:9f:a8:d1:d6:b3:5a:eb:e1:45:40:08:32:3b:6c: c8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:07:0F:80:28:A5:02:BC:EB:A1:5A:CC:C6:EF:E8:66:A1:E5:0C:FA X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9d:c7:d5:0f:be:a3:d1:d2:13:02:4f:2f:5f:95:a1:53:e7: 18:c9:fb:fe:5a:ad:0a:ca:ad:29:50:5c:fd:42:42:a4:c9:80: a1:09:ae:33:6a:97:72:00:76:bd:ee:bd:8f:cb:f9:e1:5c:38: 4f:c4:ff:5f:ac:b3:29:8b:e6:44:3e:a7:5b:41:70:94:e6:d3: 1a:82:ad:86:3d:73:86:42:51:54:f8:29:e9:e9:bf:b1:06:74: 0f:c5:b5:f6:8f:a3:b5:ed:e4:01:06:e6:94:c9:f7:bf:8c:df: 65:59:33:65:4b:1f:5e:a2:10:1a:f8:5e:6a:2d:83:5c:5e:07: df:82:19:bd:d2:ec:55:3e:e0:27:cc:61:10:5d:55:e0:95:58: 7f:31:75:29:4c:40:73:8d:1e:c0:ef:fa:82:a7:b7:ce:8c:00: ba:45:16:c7:ea:34:73:32:56:00:f8:18:b7:7d:d9:66:10:08: 7c:e1:b8:16:b0:39:ec:53:a4:96:21:1c:92:d5:e3:aa:89:75: f2:4c:ed:f6:d3:91:fd:b0:25:7a:ed:c2:bf:2c:e0:a2:d5:21: 7f:74:26:a5:3b:b5:6a:9d:95:7b:ac:ac:df:ab:32:f3:5c:4d: c6:d9:cc:a8:9f:53:c4:be:25:de:37:f1:8c:f1:3c:f9:57:31: 11:1d:0e:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUwNTEyMTgwMDIzWhcNMjUwNTE5MTgwMDIzWjAYMRYwFAYD VQQDEw02ODIyMzczNy03YjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVXnj587pZKECStV+RfrC7id46znyciuiPmqgwKIPd0b9FdgOsMrxLn9v7nM wJHR3Ye6QgNyCdGnsRLtuGhAFLB7kfcAOjPG/GHvjIzVbNj3NgX6wioL/X+M+Riv 2WA5m6xVfxeTU+iZcvXs2lShfIRomKfvoF24zx9ZfQ5MBU7Pr3kc1t7AI4kCO1NP kS68jLHpaj518gstzMbkeDn2XiuHoo5yPF+5KPce/HlYCAM0IAf3uHhaLid8Lc48 qRAPwtZlOJ/l2oaBhMq0fmmIKV5bO+mM5gbaDlXx61XvcdNzQChvuSfbVm1vVbvA be3fn6jR1rNa6+FFQAgyO2zIdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwHD4Ao pQK866FazMbv6Gah5Qz6MB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuncfVD76j0dITAk8vX5WhU+cYyfv+Wq0Kyq0pUFz9QkKkyYChCa4z apdyAHa97r2Py/nhXDhPxP9frLMpi+ZEPqdbQXCU5tMagq2GPXOGQlFU+Cnp6b+x BnQPxbX2j6O17eQBBuaUyfe/jN9lWTNlSx9eohAa+F5qLYNcXgffghm90uxVPuAn zGEQXVXglVh/MXUpTEBzjR7A7/qCp7fOjAC6RRbH6jRzMlYA+Bi3fdlmEAh84bgW sDnsU6SWIRyS1eOqiXXyTO3205H9sCV67cK/LOCi1SF/dCalO7VqnZV7rKzfqzLz XE3G2cyon1PEviXeN/GM8Tz5VzERHQ6i -----END CERTIFICATE-----Generated at Tue May 13 10:32:39 2025 by rpki-client