$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft File: 446z9aUQfjDwynHd6nWxcNCwMlY.mft (raw, json) Hash identifier: q4g9nQyALwzk03rRQYmUUGwGPDGLRFy64HZO8hnk5ss= Subject key identifier: 50:A6:C0:7C:1D:A7:A9:A6:81:D8:E5:E7:F0:25:19:AC:3D:0D:6D:16 Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 Certificate issuer: /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft Manifest number: BC Signing time: Sat 17 May 2025 05:30:37 +0000 Manifest this update: Sat 17 May 2025 05:30:36 +0000 Manifest next update: Sat 24 May 2025 05:30:36 +0000 Files and hashes: 1: 446z9aUQfjDwynHd6nWxcNCwMlY.crl (hash: 9uG7mO/TeDXzxJl8VisgyZTGZBuvNyA0dKNlO8ZMQ48=) 2: CEA2276C1AD511F0A8A8811CC4F9AE02.roa (hash: 2A1lG71X8xYaIUoTChjegPu89TboGvrn5Fad8OHtf1k=) 3: B84D6D3AF81811EFACB5925BC4F9AE02.roa (hash: OXnTHrIuW8lqh4Zru5Af4wCTMKEnL5QDhv8/K+4cKxI=) 4: F9ECF4A0295A11EFBECFCA7EC4F9AE02.roa (hash: NdbphxCCW/0QaYFIIuCoc2s3U5MsSxFLdZGoiC7E3Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Validity Not Before: May 17 05:30:36 2025 GMT Not After : May 24 05:30:36 2025 GMT Subject: CN=68281efc-0ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:e6:f4:77:3c:f6:93:f5:ab:02:a3:bd:54: 36:4b:18:b0:65:64:26:eb:66:ca:cb:61:93:1a:67: 98:17:94:ac:5e:0b:c0:03:ab:b7:1d:8b:89:a1:4e: 62:0d:29:00:c6:00:dc:f1:93:a1:40:ce:6b:05:b9: 48:16:3f:6a:ef:ec:8d:1e:b5:b9:9e:a8:04:3a:24: d4:7f:48:32:d7:dc:73:f2:ea:7b:ca:8c:d4:86:bb: 2e:05:f6:fc:2d:ea:ef:39:fb:47:54:7b:56:51:a9: 96:f7:b3:b5:a9:1c:46:b9:16:87:e6:4d:e2:e3:21: 1b:fb:36:00:f5:e9:c7:4e:c5:8b:da:4f:87:a2:d5: 73:e5:e4:e8:21:4c:bb:fa:45:57:64:5e:77:2b:26: 9d:c9:f0:31:22:46:ed:86:d3:08:61:67:20:72:8b: b2:e7:14:e0:e5:92:12:36:72:a4:ef:b3:6a:79:26: 91:7f:c3:70:f5:2e:2d:a8:59:6f:72:7a:c4:23:03: 3f:40:a9:11:98:50:ab:8c:b2:fd:cb:c3:e3:37:5c: 74:0e:d0:26:d4:aa:5c:c1:42:1b:05:15:c7:5e:1d: 1e:f4:60:b6:f0:fe:b4:a0:99:a9:23:33:80:6c:76: 8e:80:d7:7f:b6:d1:de:9d:88:dd:24:22:41:c2:f5: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A6:C0:7C:1D:A7:A9:A6:81:D8:E5:E7:F0:25:19:AC:3D:0D:6D:16 X509v3 Authority Key Identifier: keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:51:f6:26:fe:5a:13:3b:63:1f:fb:80:2b:04:bb:a8:9d:d7: 7a:ca:5d:2e:00:05:1b:d7:74:c7:6d:43:0a:2e:eb:fd:d2:09: 01:e0:ee:fe:ba:f9:5e:e5:23:f2:04:45:21:ff:c7:1c:de:f8: c4:1b:05:73:2c:ae:92:23:3d:a6:74:02:ba:5e:66:1c:1d:39: b5:21:ed:22:63:00:9b:96:dc:97:30:0a:d7:49:bc:f0:21:bf: da:82:fe:3b:4e:6c:8e:10:25:59:c8:cb:61:6c:c6:99:63:11: f2:3e:05:bd:5a:92:25:df:fa:6c:71:c7:f1:e6:c1:99:18:29: bd:15:2e:56:07:c8:8a:ae:22:ea:b4:0f:ae:ba:82:94:01:e4: 41:95:19:41:ba:92:19:ca:68:bb:ca:3d:7a:10:58:7c:1f:41: c0:38:b2:be:80:ed:6f:44:3d:e4:7c:bc:e4:44:35:ac:a2:23: ad:3b:56:74:9c:52:48:91:fb:a1:d0:a0:b8:06:13:ac:a3:56: ec:c6:de:d7:51:33:05:76:cb:0c:bf:69:5d:95:ca:69:4f:3a: 47:97:18:54:4f:f7:d6:02:13:9c:66:46:e1:7b:dc:70:ac:6a: 6e:15:59:a3:57:58:93:56:77:fe:2a:72:d9:4e:81:91:83:e7: b2:e8:79:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NjAxMTAvBgNVBAUTKEUzOEVCM0Y1QTUxMDdFMzBGMENBNzFEREVBNzVCMTcw RDBCMDMyNTYwHhcNMjUwNTE3MDUzMDM2WhcNMjUwNTI0MDUzMDM2WjAYMRYwFAYD VQQDEw02ODI4MWVmYy0wYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRrm9Hc89pP1qwKjvVQ2SxiwZWQm62bKy2GTGmeYF5SsXgvAA6u3HYuJoU5i DSkAxgDc8ZOhQM5rBblIFj9q7+yNHrW5nqgEOiTUf0gy19xz8up7yozUhrsuBfb8 LervOftHVHtWUamW97O1qRxGuRaH5k3i4yEb+zYA9enHTsWL2k+HotVz5eToIUy7 +kVXZF53KyadyfAxIkbthtMIYWcgcouy5xTg5ZISNnKk77NqeSaRf8Nw9S4tqFlv cnrEIwM/QKkRmFCrjLL9y8PjN1x0DtAm1KpcwUIbBRXHXh0e9GC28P60oJmpIzOA bHaOgNd/ttHenYjdJCJBwvV/pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCmwHwd p6mmgdjl5/AlGaw9DW0WMB8GA1UdIwQYMBaAFOOOs/WlEH4w8Mpx3ep1sXDQsDJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU2MC80QzNENkJDMDIx NkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZqRHd5bkhkNm5XeGNOQ3dN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0Nno5YVVRZmpEd3luSGQ2bld4Y05Dd01sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU2MC80QzNENkJDMDIxNkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZq RHd5bkhkNm5XeGNOQ3dNbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGUfYm/loTO2Mf+4ArBLuondd6yl0uAAUb13THbUMKLuv90gkB4O7+ uvle5SPyBEUh/8cc3vjEGwVzLK6SIz2mdAK6XmYcHTm1Ie0iYwCbltyXMArXSbzw Ib/agv47TmyOECVZyMthbMaZYxHyPgW9WpIl3/psccfx5sGZGCm9FS5WB8iKriLq tA+uuoKUAeRBlRlBupIZymi7yj16EFh8H0HAOLK+gO1vRD3kfLzkRDWsoiOtO1Z0 nFJIkfuh0KC4BhOso1bsxt7XUTMFdssMv2ldlcppTzpHlxhUT/fWAhOcZkbhe9xw rGpuFVmjV1iTVnf+KnLZToGRg+ey6HkM -----END CERTIFICATE-----Generated at Sat May 17 11:40:11 2025 by rpki-client