$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft File: PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json) Hash identifier: NBors2Oy1vsbLsJL5EklnS/Y9NTiFoWlNIomg3R2XIQ= Subject key identifier: 5F:83:03:86:0A:0F:49:61:7A:D8:8A:FE:8B:26:A2:C3:36:F4:07:1E Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Certificate serial: 0BF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft Manifest number: 0BEF Signing time: Wed 14 May 2025 18:53:45 +0000 Manifest this update: Wed 14 May 2025 18:53:44 +0000 Manifest next update: Wed 21 May 2025 18:53:44 +0000 Files and hashes: 1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: d8PBmJ2pbb5vfGVPERYyG3w3pRHSX79svy90hwmOsHc=) 2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: RpJ/3A2zXQw9C0hNB2vN4upiPschgzxuaxvOtctAWMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3063 (0xbf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Validity Not Before: May 14 18:53:44 2025 GMT Not After : May 21 18:53:44 2025 GMT Subject: CN=6824e6b9-ca5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:cc:45:53:89:64:3b:c2:b3:07:c3:76:ce: d1:09:f5:40:3a:26:ff:44:fd:86:d0:e9:f3:32:62: 53:f9:cc:81:83:4e:d1:51:93:d1:7a:9f:00:f6:be: a4:d9:f0:b1:6d:a1:be:37:da:43:05:d1:8f:92:d7: 35:35:4a:3f:b6:f7:b4:38:df:79:d6:c1:1a:11:10: cb:dd:59:17:bd:15:6d:dc:a7:59:a9:dd:a4:42:72: 65:fd:76:a3:04:79:fe:ab:9a:7f:ca:9d:32:9a:b2: 97:09:bc:04:cb:40:17:a3:85:62:80:8f:9c:6a:63: 63:5d:c9:ea:ed:d7:e7:5a:6a:e9:2e:8b:8b:20:39: 65:4e:9a:98:97:ef:e9:47:23:3a:ad:b6:4d:01:60: cc:f1:eb:cd:96:28:03:39:ef:93:c8:fd:98:9b:21: 12:10:1d:7d:9c:df:c1:10:cb:77:91:23:b1:f7:87: 93:42:ac:24:96:0c:57:db:66:d9:e8:d2:ee:cb:9c: bf:3b:03:6b:a1:b2:61:d8:6f:fa:81:ff:29:26:a2: e7:e6:68:c9:87:96:0f:f0:d0:6b:f8:a2:d7:bd:17: 96:b6:30:6b:6e:0e:6d:23:07:29:a2:35:80:26:29: 80:8d:d2:ba:ce:31:6c:a4:84:26:56:e9:4c:eb:a6: eb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:83:03:86:0A:0F:49:61:7A:D8:8A:FE:8B:26:A2:C3:36:F4:07:1E X509v3 Authority Key Identifier: keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:36:b6:e1:09:a3:e1:38:02:c0:ea:42:04:c6:5e:87:e6:9d: cc:d9:c1:ef:29:94:29:e5:0c:74:1c:c5:64:f2:1f:a4:cd:27: 8a:42:1b:71:0b:0c:06:7d:e5:89:63:be:94:40:c9:b5:10:e0: d4:8e:b7:16:e6:8d:a0:e9:8c:dd:c5:db:4e:aa:31:78:ab:12: 85:ec:55:e2:95:42:02:fe:eb:ec:19:d8:f8:3e:90:20:84:1e: a8:be:94:8f:d5:41:82:fc:8c:94:2b:73:15:c7:78:9a:8b:38: 59:72:8a:b4:6d:6a:d6:41:29:6a:9e:93:99:21:d0:e5:a0:39: 9d:a5:15:08:c8:36:7c:00:e4:01:d8:9b:a0:97:8c:60:9a:35: 19:33:51:96:7f:66:d5:d2:22:a6:e0:3e:30:5d:d3:94:4b:05: d2:1f:84:7e:5e:f5:84:2a:0d:ef:95:bb:0b:0f:63:aa:e8:4e: 37:e5:92:ce:02:e6:9b:a9:b7:07:ff:ad:13:da:f3:d2:dc:f5: dc:16:cf:27:f8:1d:ff:1f:1f:34:ba:04:02:81:55:e9:7b:94: 52:5b:74:0e:74:2a:77:1b:13:ed:c2:8a:c8:1f:38:8e:c5:2d: b9:a1:65:db:6e:e2:13:59:3b:68:82:54:11:c5:9a:ea:d5:38: ab:d9:3a:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5 OEExMjExM0YwHhcNMjUwNTE0MTg1MzQ0WhcNMjUwNTIxMTg1MzQ0WjAYMRYwFAYD VQQDEw02ODI0ZTZiOS1jYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aPMRVOJZDvCswfDds7RCfVAOib/RP2G0OnzMmJT+cyBg07RUZPRep8A9r6k 2fCxbaG+N9pDBdGPktc1NUo/tve0ON951sEaERDL3VkXvRVt3KdZqd2kQnJl/Xaj BHn+q5p/yp0ymrKXCbwEy0AXo4VigI+camNjXcnq7dfnWmrpLouLIDllTpqYl+/p RyM6rbZNAWDM8evNligDOe+TyP2YmyESEB19nN/BEMt3kSOx94eTQqwklgxX22bZ 6NLuy5y/OwNrobJh2G/6gf8pJqLn5mjJh5YP8NBr+KLXvReWtjBrbg5tIwcpojWA JimAjdK6zjFspIQmVulM66brCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+DA4YK D0lhetiK/osmosM29AceMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkJGNS85RDBCNDIyMjEzRjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3 dkNvUVlUQ0plZmVZb1NFVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpNrbhCaPhOALA6kIExl6H5p3M2cHvKZQp5Qx0HMVk8h+kzSeKQhtx CwwGfeWJY76UQMm1EODUjrcW5o2g6YzdxdtOqjF4qxKF7FXilUIC/uvsGdj4PpAg hB6ovpSP1UGC/IyUK3MVx3iaizhZcoq0bWrWQSlqnpOZIdDloDmdpRUIyDZ8AOQB 2Jugl4xgmjUZM1GWf2bV0iKm4D4wXdOUSwXSH4R+XvWEKg3vlbsLD2Oq6E435ZLO AuabqbcH/60T2vPS3PXcFs8n+B3/Hx80ugQCgVXpe5RSW3QOdCp3GxPtworIHziO xS25oWXbbuITWTtoglQRxZrq1Tir2TpN -----END CERTIFICATE-----Generated at Fri May 16 05:28:44 2025 by rpki-client