$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft File: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft (raw, json) Hash identifier: 5e9RMqGfo6sxWHrGFclR5sRMeQvANtPhzOqaOeWw5nk= Subject key identifier: 3B:32:B6:3E:F6:8F:A2:64:1C:3E:24:F5:A8:3D:77:0C:D7:54:3C:1B Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Certificate serial: 05EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft Manifest number: 05D5 Signing time: Wed 14 May 2025 23:07:30 +0000 Manifest this update: Wed 14 May 2025 23:07:30 +0000 Manifest next update: Wed 21 May 2025 23:07:30 +0000 Files and hashes: 1: UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl (hash: Zrzum8d9rUeyUT9TswJJ8uQ3jyigF6GataXy5hNPlN8=) 2: F44E1EECCD8411EF88CD1464C4F9AE02.roa (hash: Uj/tJ2o/egSIWJbBUqkfA8auaTm16HYRNl+nWPDfAoI=) 3: F4C73FCACD8411EF88CD1464C4F9AE02.roa (hash: PxDO4VTqkJE0qh5LgB+HtLTymtGod5Csv1yR3jaUe74=) 4: 2DA0EDF6D08211EE80549C7AC4F9AE02.roa (hash: 73co3C0iTnetW8JGAPxK20O1CS3CEBA8PjgSk19an5E=) 5: F559B7E2CD8411EF88CD1464C4F9AE02.roa (hash: jc65tVH8VKeTvFl9hbBbitAygl32MCK4pl0R8W9pDPs=) 6: 044C4ED6A26711ED8095F74DC4F9AE02.roa (hash: AWVqUvaQKvhhdFl5DbWgiaCZR2uWcOJNrG+aDzp0leA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1516 (0x5ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211 Validity Not Before: May 14 23:07:30 2025 GMT Not After : May 21 23:07:30 2025 GMT Subject: CN=68252232-edfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:23:2d:02:52:f0:fe:1e:ca:53:53:e5:d2:f6: 35:40:68:7a:0a:12:cd:40:fd:2a:36:6f:cf:fd:6e: 3c:8f:f7:29:ce:55:55:20:1f:60:fc:eb:e6:b5:38: 8a:ae:af:3a:7f:86:da:0f:25:06:fc:52:7d:6a:26: 08:79:64:eb:f3:c2:9e:62:bf:d7:f3:04:b7:76:a7: 95:ed:4f:9f:d2:ad:83:73:d6:b3:94:a0:e6:68:a7: 74:11:11:84:a4:fe:20:d4:22:ca:0c:bc:82:13:aa: 99:ba:27:e2:b4:a7:10:a9:ff:f9:b9:ac:a0:0f:e3: d4:0c:03:ae:dd:68:cf:eb:8c:69:c1:c1:00:b7:08: 2d:b9:2c:90:06:38:84:8f:ca:f1:6f:be:52:59:99: 18:de:75:c0:17:84:bd:ec:d9:c7:95:cd:77:49:18: a6:f1:23:a2:eb:67:91:8e:e5:ef:45:1d:49:dd:9f: ef:3e:fe:58:a7:57:5c:34:9b:a9:33:08:5b:40:18: 6d:aa:40:1a:d5:cc:02:5b:99:01:45:82:09:7a:0f: d1:d3:9a:7f:f9:b4:50:57:23:c8:b8:5f:b3:3c:c1: 28:97:f2:14:8e:37:20:d4:78:b5:6e:27:a0:c5:a8: e0:53:ba:99:51:69:d2:9d:72:1b:4a:d3:7d:0a:48: 57:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:32:B6:3E:F6:8F:A2:64:1C:3E:24:F5:A8:3D:77:0C:D7:54:3C:1B X509v3 Authority Key Identifier: keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:02:d9:68:0b:fd:85:a4:36:7d:f7:57:aa:84:35:06:63:61: 07:10:a3:83:f1:9a:45:82:a0:4a:01:62:a1:0f:e9:31:80:a8: 66:a7:d3:7e:ac:66:27:ec:1a:be:d1:a7:3f:83:8b:d4:48:ad: 07:e9:e9:c5:1b:82:42:37:87:91:8b:82:54:5d:c3:30:57:fe: 5a:a0:2a:ad:34:66:61:fd:85:80:a4:e1:69:e5:09:db:0c:d4: cc:11:10:bc:e0:4a:47:6a:0b:b6:4f:e2:1a:16:ac:39:ca:51: dc:cc:50:07:b6:a6:02:93:f7:67:8b:4d:58:c3:5e:de:d3:20: 1d:d0:bf:9f:a0:81:e4:5c:a8:c0:db:a7:8a:6e:e2:17:62:4b: 10:ab:33:54:33:2f:b6:5d:2f:5f:fe:95:55:76:4b:4b:ae:f6: ad:e8:5e:db:cc:97:71:a9:da:63:12:c0:4c:6a:fa:62:f7:b9: 67:51:cc:df:ff:c6:f5:ac:33:b1:1f:73:ff:a9:d6:c6:6c:c3: 60:6a:40:ac:70:d0:aa:85:41:0c:af:08:c2:c4:87:29:11:0b: d9:9d:ad:81:66:66:ec:61:ce:24:2e:83:f6:49:13:5c:e5:96: 1f:ce:45:c3:0b:94:2d:6b:5a:b1:14:1a:9a:af:d6:f5:2f:97: f2:67:b4:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG MDVCQUYyMTEwHhcNMjUwNTE0MjMwNzMwWhcNMjUwNTIxMjMwNzMwWjAYMRYwFAYD VQQDEw02ODI1MjIzMi1lZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7yMtAlLw/h7KU1Pl0vY1QGh6ChLNQP0qNm/P/W48j/cpzlVVIB9g/OvmtTiK rq86f4baDyUG/FJ9aiYIeWTr88KeYr/X8wS3dqeV7U+f0q2Dc9azlKDmaKd0ERGE pP4g1CLKDLyCE6qZuifitKcQqf/5uaygD+PUDAOu3WjP64xpwcEAtwgtuSyQBjiE j8rxb75SWZkY3nXAF4S97NnHlc13SRim8SOi62eRjuXvRR1J3Z/vPv5Yp1dcNJup MwhbQBhtqkAa1cwCW5kBRYIJeg/R05p/+bRQVyPIuF+zPMEol/IUjjcg1Hi1bieg xajgU7qZUWnSnXIbStN9CkhX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsytj72 j6JkHD4k9ag9dwzXVDwbMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzc2MS8wRTRCOTE2OEJEMzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4 bFZGSjlYWWhHUVR3VzY4aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgAtloC/2FpDZ991eqhDUGY2EHEKOD8ZpFgqBKAWKhD+kxgKhmp9N+ rGYn7Bq+0ac/g4vUSK0H6enFG4JCN4eRi4JUXcMwV/5aoCqtNGZh/YWApOFp5Qnb DNTMERC84EpHagu2T+IaFqw5ylHczFAHtqYCk/dni01Yw17e0yAd0L+foIHkXKjA 26eKbuIXYksQqzNUMy+2XS9f/pVVdktLrvat6F7bzJdxqdpjEsBMavpi97lnUczf /8b1rDOxH3P/qdbGbMNgakCscNCqhUEMrwjCxIcpEQvZna2BZmbsYc4kLoP2SRNc 5ZYfzkXDC5Qta1qxFBqar9b1L5fyZ7Qa -----END CERTIFICATE-----Generated at Thu May 15 18:16:02 2025 by rpki-client