$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: MRm3gl3aoQ35Hr0oWu4K4T6ike5+Dy1nGKKDoxQ3yY8= Subject key identifier: C1:43:ED:97:A4:A5:98:6D:EE:69:7E:52:0C:E8:A3:52:9E:EE:5A:43 Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 090E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 08D9 Signing time: Mon 12 May 2025 20:21:53 +0000 Manifest this update: Mon 12 May 2025 20:21:52 +0000 Manifest next update: Mon 19 May 2025 20:21:52 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: H8pVgWIvn+7a2PLMJclzvuWy2V+1PExkmUhOP+RFmjs=) 2: 46948AC87B8511EDB9E3E055C4F9AE02.roa (hash: ZxtXXsjPmgBn3QuaEolbOSfh14MSz6fJKNljAALoKTY=) 3: A69F92BE090911F084AAF925C4F9AE02.roa (hash: JAD+Foc1J+GOz5pKNPlHnr3Zrw5SjVxBWNoZZgDQ44M=) 4: 88252000B55C11ECA9565039C4F9AE02.roa (hash: ROM2aBA2uOLvGraWZ2OMfhtRxZ5DusfnSKSNI9N61E8=) 5: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: J9pnyjCXshJdQFSggqWmHXW0nySYEfDGHTCaX/EZOYk=) 6: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: Ejx3yVkwMIGPx4PH4VpagQp/pASvV9ahz0Vqhx7EKZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2318 (0x90e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: May 12 20:21:52 2025 GMT Not After : May 19 20:21:52 2025 GMT Subject: CN=68225861-3da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:29:f6:23:a3:9c:89:29:36:b9:8d:a2:21:51: c2:8f:18:86:69:07:78:c9:8f:96:f4:f5:f6:0d:e0: 1c:7b:5d:d4:20:b7:47:cb:27:d6:e2:f2:90:41:7a: c6:2d:d9:77:29:68:76:81:79:24:f0:1d:4b:9f:e7: 22:9b:74:6e:c3:f7:af:db:7a:e5:83:b7:a7:0f:ff: 1c:46:02:5b:53:d0:1d:29:de:90:68:26:64:cf:37: 82:bc:33:f5:08:f0:f8:e0:2b:22:9c:35:71:d9:44: d8:d0:88:cc:e6:42:f4:15:f9:fd:5b:ec:e9:44:36: a9:14:02:1a:c4:6a:30:e0:6a:4c:ac:0f:63:63:b5: 7d:b6:53:81:e2:62:03:35:52:28:6d:5a:8c:0b:0f: 07:74:2c:9e:1a:8e:36:20:24:c9:5a:cf:6a:ae:aa: d9:2b:ce:e7:8b:e9:37:cd:bb:a3:cd:96:fb:a5:68: a1:36:cf:19:16:25:10:84:98:56:5f:f1:f5:b5:37: 5f:a1:46:ae:ee:87:5f:68:9e:f9:e3:b6:d5:ca:4a: 6f:9b:42:5b:54:75:2c:78:f0:a2:ee:1a:62:66:43: ee:f8:ba:cc:d1:77:aa:c2:ba:31:07:3d:f8:dc:5c: f9:eb:7c:49:66:a1:e7:bb:8c:be:eb:ed:1b:6c:eb: 87:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:43:ED:97:A4:A5:98:6D:EE:69:7E:52:0C:E8:A3:52:9E:EE:5A:43 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:72:0b:3e:7f:ad:36:04:bc:d1:f0:d8:74:ca:d9:26:cf:4d: c9:40:8f:26:0a:e8:3f:56:63:24:59:5b:47:64:14:ef:72:d0: c0:9f:73:8a:7f:c8:b8:ad:36:ec:71:d3:e8:56:3b:34:8b:25: 10:76:d2:4f:6f:c3:6a:79:05:33:48:b2:b5:52:e0:58:5d:b8: d9:7a:13:53:4b:6e:55:cf:89:07:35:44:b3:4b:95:28:8d:fa: 5a:85:38:d4:cb:83:97:a5:c3:4e:e1:d5:f0:f2:12:58:a1:5c: 18:67:b4:cc:7a:7a:d3:ac:dc:ad:b7:d2:0c:16:1c:2d:d8:cb: 66:22:dc:6b:3d:56:cf:69:49:1f:43:49:af:94:c5:6a:51:eb: 9e:27:8e:72:05:9f:f9:ad:58:04:87:39:d5:06:5f:22:c1:d5: b7:bd:c5:fe:63:99:e5:f2:40:0a:0b:88:57:56:8c:cd:ec:82: 0d:9d:13:cf:f8:84:56:26:99:30:f6:94:84:78:fc:3d:fa:4e: 34:a6:81:ba:06:9f:36:13:72:9d:93:d4:ff:c3:c6:65:dc:41: 11:19:89:bf:98:d0:6e:03:45:c7:1f:92:2b:71:c1:d8:21:29: a9:d5:d2:37:29:19:38:29:bf:6c:aa:6a:83:10:4a:a4:e3:d6: 88:24:5f:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjUwNTEyMjAyMTUyWhcNMjUwNTE5MjAyMTUyWjAYMRYwFAYD VQQDEw02ODIyNTg2MS0zZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Cn2I6OciSk2uY2iIVHCjxiGaQd4yY+W9PX2DeAce13UILdHyyfW4vKQQXrG Ldl3KWh2gXkk8B1Ln+cim3Ruw/ev23rlg7enD/8cRgJbU9AdKd6QaCZkzzeCvDP1 CPD44CsinDVx2UTY0IjM5kL0Ffn9W+zpRDapFAIaxGow4GpMrA9jY7V9tlOB4mID NVIobVqMCw8HdCyeGo42ICTJWs9qrqrZK87ni+k3zbujzZb7pWihNs8ZFiUQhJhW X/H1tTdfoUau7odfaJ7547bVykpvm0JbVHUsePCi7hpiZkPu+LrM0XeqwroxBz34 3Fz563xJZqHnu4y+6+0bbOuHfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFD7Zek pZht7ml+Ugzoo1Ke7lpDMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtcgs+f602BLzR8Nh0ytkmz03JQI8mCug/VmMkWVtHZBTvctDAn3OK f8i4rTbscdPoVjs0iyUQdtJPb8NqeQUzSLK1UuBYXbjZehNTS25Vz4kHNUSzS5Uo jfpahTjUy4OXpcNO4dXw8hJYoVwYZ7TMenrTrNytt9IMFhwt2MtmItxrPVbPaUkf Q0mvlMVqUeueJ45yBZ/5rVgEhznVBl8iwdW3vcX+Y5nl8kAKC4hXVozN7IINnRPP +IRWJpkw9pSEePw9+k40poG6Bp82E3Kdk9T/w8Zl3EERGYm/mNBuA0XHH5IrccHY ISmp1dI3KRk4Kb9sqmqDEEqk49aIJF/M -----END CERTIFICATE-----Generated at Tue May 13 15:52:11 2025 by rpki-client