$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: zSK7L1NYGb28lerAWIB8NYDR94akQ8r6jzLeK0XR3Pw= Subject key identifier: 06:4A:EE:F4:BE:15:D0:BC:70:1C:BE:5C:A6:77:53:7E:FD:C7:0A:6E Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 09D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 09AA Signing time: Fri 16 May 2025 20:23:24 +0000 Manifest this update: Fri 16 May 2025 20:23:24 +0000 Manifest next update: Fri 23 May 2025 20:23:24 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: rZW6j5LUQb7/aqoopnTIgbjs55jLWEhsPPuXFv14RSk=) 2: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (hash: XqCmEMVbctn80tZMWt9KBtSYiAl81CKhVgV+0CIH65c=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: 5hNv554rReK06N20/FH9rDWPnZEfKsGbqYpiIu4Udbg=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: SpBt7sDt3PRONHBV0bfhwVMq6dMRxKdSE97eOEgTO/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2514 (0x9d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: May 16 20:23:24 2025 GMT Not After : May 23 20:23:24 2025 GMT Subject: CN=68279ebc-a65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e4:d9:e3:bf:ee:5b:5f:3c:17:95:85:c0:cc: 59:22:d0:5c:0f:6a:fa:f5:35:71:61:9d:18:e3:50: 06:0f:c9:27:f5:32:7d:a8:59:17:fd:99:2a:98:55: 01:6a:48:bc:3a:a9:3d:11:66:b7:4f:be:0a:d1:d2: 4e:98:06:fc:13:b9:90:de:8c:59:a5:38:98:8d:fd: 5f:d5:83:71:98:2a:94:88:5e:79:0e:f6:f9:ab:7b: 4d:44:d9:9c:aa:f3:07:42:67:cd:19:9b:d1:03:34: 89:5e:48:4f:d9:23:1e:52:75:a5:02:49:5e:f6:ac: ba:36:f8:4f:38:2e:fd:14:3b:c0:82:31:73:6d:8e: 33:c1:52:14:db:de:11:77:85:a2:c6:51:fc:bf:f2: 2c:bf:77:5d:d1:14:dd:f5:06:0d:a3:77:c3:2c:69: 6d:fa:7f:36:1d:85:9f:43:61:4f:d7:5f:73:29:00: 45:0e:18:1f:59:18:be:6c:52:46:18:31:bb:01:4e: 7b:65:56:23:0c:82:4a:27:96:ba:20:c4:79:4f:7c: 69:41:2a:2d:ec:f8:2f:9a:a7:e5:8b:00:5a:91:2a: 15:13:1e:c4:ab:0c:f6:16:53:c8:42:33:5d:29:fa: 19:0c:d3:97:de:c0:b0:3e:7b:43:25:29:ca:1c:f2: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4A:EE:F4:BE:15:D0:BC:70:1C:BE:5C:A6:77:53:7E:FD:C7:0A:6E X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:94:06:08:1d:0a:b4:d7:21:4a:4a:b2:65:71:13:f5:d6:e0: c4:fa:93:97:b7:79:3a:5f:e8:50:13:a0:a0:7f:8c:a7:31:2f: ea:2b:aa:b3:bd:c8:f9:58:01:d3:6b:e1:f0:e3:a2:75:87:bb: de:aa:82:86:88:37:0a:ef:d5:4f:ff:b4:96:c2:93:aa:57:91: 46:0d:33:2f:22:69:25:cb:d2:f4:d7:e5:5f:56:89:cd:c5:f0: fd:21:05:8a:73:2f:be:e8:d8:cb:ad:c2:13:bf:f7:d6:6e:4b: d7:61:4d:59:6e:da:41:0a:5e:59:3b:00:4c:03:82:4c:43:34: eb:28:32:46:2c:d0:b6:31:8e:3b:9e:fb:c3:9a:e8:60:d1:85: cd:91:89:49:1b:0d:d7:f1:0a:5d:41:c8:67:b9:d3:a0:9a:5b: 5e:d8:ca:e9:40:0b:e8:74:b6:81:16:45:6b:2d:59:21:3b:97: f4:89:1f:ad:a8:d2:1b:b9:6d:ea:0a:62:75:95:22:bc:06:11: 04:3e:fd:60:77:80:5b:20:28:30:95:f4:c5:df:19:9b:15:52: f9:8c:ea:e7:82:d5:41:59:fb:ac:6d:4d:7d:46:49:fd:c1:e3: ae:93:80:0a:c6:82:9d:36:cb:c0:7e:bc:2f:34:a9:87:2d:7d: 6e:cb:e9:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUwNTE2MjAyMzI0WhcNMjUwNTIzMjAyMzI0WjAYMRYwFAYD VQQDEw02ODI3OWViYy1hNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+TZ47/uW188F5WFwMxZItBcD2r69TVxYZ0Y41AGD8kn9TJ9qFkX/ZkqmFUB aki8Oqk9EWa3T74K0dJOmAb8E7mQ3oxZpTiYjf1f1YNxmCqUiF55Dvb5q3tNRNmc qvMHQmfNGZvRAzSJXkhP2SMeUnWlAkle9qy6NvhPOC79FDvAgjFzbY4zwVIU294R d4WixlH8v/Isv3dd0RTd9QYNo3fDLGlt+n82HYWfQ2FP119zKQBFDhgfWRi+bFJG GDG7AU57ZVYjDIJKJ5a6IMR5T3xpQSot7PgvmqfliwBakSoVEx7Eqwz2FlPIQjNd KfoZDNOX3sCwPntDJSnKHPLxHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZK7vS+ FdC8cBy+XKZ3U379xwpuMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBglAYIHQq01yFKSrJlcRP11uDE+pOXt3k6X+hQE6Cgf4ynMS/qK6qz vcj5WAHTa+Hw46J1h7veqoKGiDcK79VP/7SWwpOqV5FGDTMvImkly9L01+VfVonN xfD9IQWKcy++6NjLrcITv/fWbkvXYU1ZbtpBCl5ZOwBMA4JMQzTrKDJGLNC2MY47 nvvDmuhg0YXNkYlJGw3X8QpdQchnudOgmlte2MrpQAvodLaBFkVrLVkhO5f0iR+t qNIbuW3qCmJ1lSK8BhEEPv1gd4BbICgwlfTF3xmbFVL5jOrngtVBWfusbU19Rkn9 weOuk4AKxoKdNsvAfrwvNKmHLX1uy+kY -----END CERTIFICATE-----Generated at Sat May 17 13:29:42 2025 by rpki-client