$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft File: RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json) Hash identifier: tz8i2CVIUw1HjgLmPFO9BLbEcQSYWzLRda9JlTl+THY= Subject key identifier: C6:73:66:DF:44:AF:F3:FD:11:9D:80:0D:4C:50:B3:C3:10:95:09:9D Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 Certificate issuer: /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft Manifest number: 0272 Signing time: Thu 15 May 2025 01:42:10 +0000 Manifest this update: Thu 15 May 2025 01:42:09 +0000 Manifest next update: Thu 22 May 2025 01:42:09 +0000 Files and hashes: 1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: XqRnn+Se7LgTLsn9Yy5puDeCxq7qYPiNNMWCnm/B4p0=) 2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: 9zqxhpOangW9769mdxLoJSN4Rv/Y8CMGWvMe+D0Ah7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7, serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Validity Not Before: May 15 01:42:09 2025 GMT Not After : May 22 01:42:09 2025 GMT Subject: CN=68254672-4609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:8a:6d:be:80:20:b5:ba:95:8b:aa:3c:53: 5e:7c:cd:03:bd:19:dc:64:8c:a7:fd:f0:c2:2f:cd: 1a:6e:94:dd:57:20:48:20:ab:98:ea:f8:f7:c6:f8: ec:4f:3a:fe:ec:e2:bc:eb:9b:c8:97:df:e2:45:b9: 06:83:d5:32:66:fb:76:95:6d:dc:27:dc:3c:60:c4: b7:b7:35:5f:25:33:9d:57:0c:36:04:36:d9:0a:09: 44:75:88:b6:89:2d:0d:2f:5a:a0:55:f0:8a:20:9b: aa:9e:cc:76:58:20:f0:f8:f4:e7:25:d3:0d:ad:5d: 56:e0:64:19:59:d6:c6:ea:70:b3:99:b4:39:18:95: 34:31:cd:03:ca:e2:03:6b:86:df:13:1a:3d:aa:99: 61:21:11:c2:a9:fe:12:47:c8:ce:88:07:a5:27:55: a3:77:7b:e4:8e:f8:32:e7:3d:c5:8f:35:fe:1e:9c: 48:0d:d6:bc:f5:30:47:eb:10:89:e6:01:a4:9e:fb: 69:66:07:94:e4:ad:7d:a9:2a:2b:ff:80:85:66:22: cf:de:44:e0:1f:d7:f1:62:ad:de:ca:d0:98:20:f9: f5:c9:f4:9d:ce:18:52:81:30:c5:14:11:0d:cc:21: 67:b4:62:9a:c0:1a:74:05:6b:04:2f:f6:c3:ce:ab: a3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:73:66:DF:44:AF:F3:FD:11:9D:80:0D:4C:50:B3:C3:10:95:09:9D X509v3 Authority Key Identifier: keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:6a:c3:88:27:63:0c:e8:e3:3a:cc:ca:9d:dc:ae:e8:9f:e5: eb:a4:3c:ef:cb:cc:dc:43:2b:e4:9a:d2:9c:02:b3:87:a3:36: c0:84:3d:39:3b:94:fd:f0:b6:9c:f9:3b:24:dc:32:cf:75:be: 06:19:7e:f8:e6:35:c2:a6:79:5f:51:ee:05:49:39:94:45:14: 3a:15:7b:30:36:b8:c7:b9:c3:3a:87:36:0f:03:5e:32:ca:23: 20:40:8f:93:37:7d:06:62:bd:c8:09:66:35:e8:b4:e9:2f:77: 49:af:bd:20:a4:45:91:dc:98:6c:91:c6:80:c4:71:c5:99:5b: 49:99:f8:2f:52:ee:bf:be:5b:1b:56:20:86:d1:52:17:df:35: 63:6f:e3:aa:d4:49:4f:c6:a4:02:e2:2c:64:81:85:54:26:b4: 86:c2:ba:ec:2f:65:fa:9d:29:8d:aa:d0:73:31:33:84:5b:36: f8:d8:3f:21:ac:9c:f4:a6:ec:4a:46:66:44:f5:03:e4:5b:be: 9b:96:99:51:fa:1f:9e:65:ea:2f:25:5c:3e:18:3e:79:5c:a4: 1d:a2:36:f9:57:da:c4:e9:10:89:d1:fe:3f:ac:d0:8e:cb:a3: c1:a4:34:22:15:fc:b7:86:df:2f:8b:bc:16:92:77:2b:0b:0b: 1c:0d:06:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDQ1MzM3REM1RTQ4MzlFNDk4MTkxMjlERUEyQTk0NjFC MDIxQ0QxOTAwHhcNMjUwNTE1MDE0MjA5WhcNMjUwNTIyMDE0MjA5WjAYMRYwFAYD VQQDEw02ODI1NDY3Mi00NjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8eKbb6AILW6lYuqPFNefM0DvRncZIyn/fDCL80abpTdVyBIIKuY6vj3xvjs Tzr+7OK865vIl9/iRbkGg9UyZvt2lW3cJ9w8YMS3tzVfJTOdVww2BDbZCglEdYi2 iS0NL1qgVfCKIJuqnsx2WCDw+PTnJdMNrV1W4GQZWdbG6nCzmbQ5GJU0Mc0DyuID a4bfExo9qplhIRHCqf4SR8jOiAelJ1Wjd3vkjvgy5z3FjzX+HpxIDda89TBH6xCJ 5gGknvtpZgeU5K19qSor/4CFZiLP3kTgH9fxYq3eytCYIPn1yfSdzhhSgTDFFBEN zCFntGKawBp0BWsEL/bDzqujyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZzZt9E r/P9EZ2ADUxQs8MQlQmdMB8GA1UdIwQYMBaAFEUzfcXkg55JgZEp3qKpRhsCHNGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy8xMDRCMTk0NjBD QkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5rbUJrU25lb3FsR0d3SWMw WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JUTjl4ZVNEbmttQmtTbmVvcWxHR3dJYzBaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy8xMDRCMTk0NjBDQkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5r bUJrU25lb3FsR0d3SWMwWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwasOIJ2MM6OM6zMqd3K7on+XrpDzvy8zcQyvkmtKcArOHozbAhD05 O5T98Lac+Tsk3DLPdb4GGX745jXCpnlfUe4FSTmURRQ6FXswNrjHucM6hzYPA14y yiMgQI+TN30GYr3ICWY16LTpL3dJr70gpEWR3JhskcaAxHHFmVtJmfgvUu6/vlsb ViCG0VIX3zVjb+Oq1ElPxqQC4ixkgYVUJrSGwrrsL2X6nSmNqtBzMTOEWzb42D8h rJz0puxKRmZE9QPkW76blplR+h+eZeovJVw+GD55XKQdojb5V9rE6RCJ0f4/rNCO y6PBpDQiFfy3ht8vi7wWkncrCwscDQZf -----END CERTIFICATE-----Generated at Fri May 16 10:19:40 2025 by rpki-client