$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft File: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft (raw, json) Hash identifier: eErY2gi0PlPsZXII2tw+c2vjA+m8EwFqlypVSE9HAhU= Subject key identifier: 58:72:FD:48:47:8E:32:80:B8:20:42:0A:BF:EA:81:A4:4C:3A:98:D6 Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E Certificate issuer: /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Certificate serial: 0653 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft Manifest number: 0647 Signing time: Sat 10 May 2025 22:14:14 +0000 Manifest this update: Sat 10 May 2025 22:14:13 +0000 Manifest next update: Sat 17 May 2025 22:14:13 +0000 Files and hashes: 1: PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl (hash: 76QFQ0rCwgECZapWFiJ4DnPL+I0xIKuLvX46ClADtg0=) 2: 98D205F01A4611ECAD279D86C4F9AE02.roa (hash: kTnNlxGzV54r4KPZAQuINu1i12sln6cK8TaYfF0XXkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BBA, serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Validity Not Before: May 10 22:14:13 2025 GMT Not After : May 17 22:14:13 2025 GMT Subject: CN=681fcfb6-48fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:04:a3:3a:1b:03:9a:4a:5a:e9:41:f4:b7:b2: aa:e7:78:fe:73:4b:54:cd:28:39:53:7f:35:ee:6c: 2a:26:93:0f:20:1c:79:c6:b0:78:d9:7e:dc:f9:c1: 20:6b:02:63:47:ba:80:b5:b1:33:77:11:b1:95:64: 56:92:71:93:0d:44:f3:90:51:f7:74:82:fa:8f:17: 6f:f1:68:0b:a6:c2:1b:f0:fe:27:22:e6:4b:70:83: 8e:29:05:dc:cf:99:6b:ae:f9:36:9b:25:31:f0:bc: 39:6a:7c:ab:8f:1a:c4:8b:c9:25:5b:e7:d6:b7:ad: d2:c1:ec:85:b6:c3:39:06:c9:39:5f:d3:2b:c1:7c: d9:cf:99:a5:a9:67:c2:eb:08:60:3a:f1:ba:ed:61: 10:13:9c:e8:0c:84:f3:f4:bb:15:7c:f5:62:2a:8e: 8d:1d:30:41:87:f7:ca:d8:50:6d:ae:b4:c1:a0:79: a9:7d:d0:dc:dc:7e:65:bb:9f:ec:15:b5:30:9f:e7: 29:86:49:8b:bb:fe:f8:89:e3:56:90:af:e2:5a:3c: fd:76:1a:04:f9:cc:4a:35:21:7a:f4:82:ad:60:f8: d5:de:fe:f6:0d:ef:d9:b1:77:ed:82:54:86:09:4a: c2:56:cd:5d:19:6f:c3:ac:f9:5c:77:b2:0d:d2:1e: 04:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:72:FD:48:47:8E:32:80:B8:20:42:0A:BF:EA:81:A4:4C:3A:98:D6 X509v3 Authority Key Identifier: keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d2:2e:5e:e9:19:d5:de:1f:cb:66:d4:7b:34:5a:d3:4e:71: 3d:e7:71:85:0a:f7:0a:81:ef:15:0c:43:1b:c9:c9:63:eb:57: eb:f3:16:5a:f3:09:7a:a4:2a:40:ef:6e:8f:73:e7:1a:f5:39: da:2f:4b:00:c5:80:08:ce:83:89:b1:d0:c9:98:66:96:2b:30: 14:4e:20:16:b3:01:a6:01:40:29:6b:fe:b9:ef:5d:5d:85:54: 97:96:1a:28:d9:2d:4c:20:8a:7b:8b:4d:35:d9:3a:c7:2e:a8: 62:76:22:b3:5b:c4:ea:fd:63:6a:a4:a6:cb:69:5d:db:55:41: 2b:b0:27:1e:3b:66:0f:f0:f2:db:a9:6b:6f:51:d9:32:e8:39: d0:22:46:31:fd:14:67:00:f3:cf:1e:3e:12:24:4a:40:fb:8b: ae:c0:44:aa:30:a0:80:26:c9:37:fa:c3:a0:05:43:8a:82:ff: d4:23:f0:89:0a:8c:d1:ef:0a:27:9b:22:78:dd:4c:1e:37:d5: 0f:ed:4d:0e:06:1b:5b:a7:47:51:be:67:c3:93:01:05:f9:eb: b8:3a:97:a8:8b:4a:de:82:6f:0b:7c:bc:0d:59:0c:f8:65:79: 84:8b:1e:62:7d:87:0a:51:b3:bb:53:19:82:86:8a:f4:2c:dc: 8e:a4:78:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCQkExMTAvBgNVBAUTKDNFRDk5RDJBQTY4MDg2MUQwQTdCNTlDNkQxQkIyQTVC RjRDQjJFNkUwHhcNMjUwNTEwMjIxNDEzWhcNMjUwNTE3MjIxNDEzWjAYMRYwFAYD VQQDEw02ODFmY2ZiNi00OGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gSjOhsDmkpa6UH0t7Kq53j+c0tUzSg5U3817mwqJpMPIBx5xrB42X7c+cEg awJjR7qAtbEzdxGxlWRWknGTDUTzkFH3dIL6jxdv8WgLpsIb8P4nIuZLcIOOKQXc z5lrrvk2myUx8Lw5anyrjxrEi8klW+fWt63SweyFtsM5Bsk5X9MrwXzZz5mlqWfC 6whgOvG67WEQE5zoDITz9LsVfPViKo6NHTBBh/fK2FBtrrTBoHmpfdDc3H5lu5/s FbUwn+cphkmLu/74ieNWkK/iWjz9dhoE+cxKNSF69IKtYPjV3v72De/ZsXftglSG CUrCVs1dGW/DrPlcd7IN0h4EvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhy/UhH jjKAuCBCCr/qgaRMOpjWMB8GA1UdIwQYMBaAFD7ZnSqmgIYdCntZxtG7Klv0yy5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJCQS9CREZFQ0RDMjhE NzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWhoMEtlMW5HMGJzcVdfVExM bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B0bWRLcWFBaGgwS2UxbkcwYnNxV19UTExtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkJCQS9CREZFQ0RDMjhENzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWho MEtlMW5HMGJzcVdfVExMbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB50i5e6RnV3h/LZtR7NFrTTnE953GFCvcKge8VDEMbyclj61fr8xZa 8wl6pCpA726Pc+ca9TnaL0sAxYAIzoOJsdDJmGaWKzAUTiAWswGmAUApa/65711d hVSXlhoo2S1MIIp7i0012TrHLqhidiKzW8Tq/WNqpKbLaV3bVUErsCceO2YP8PLb qWtvUdky6DnQIkYx/RRnAPPPHj4SJEpA+4uuwESqMKCAJsk3+sOgBUOKgv/UI/CJ CozR7wonmyJ43UweN9UP7U0OBhtbp0dRvmfDkwEF+eu4Opeoi0regm8LfLwNWQz4 ZXmEix5ifYcKUbO7UxmChor0LNyOpHiX -----END CERTIFICATE-----Generated at Sun May 11 11:49:34 2025 by rpki-client