$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: NHQRSVVHzJHVK95+2rMGWRnhe+PrZd+Neo85+rY0j/o= Subject key identifier: E7:2A:38:2F:3B:AE:72:0E:B5:78:92:00:28:E6:E5:90:E6:1D:CC:11 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 0151 Signing time: Tue 13 May 2025 03:27:49 +0000 Manifest this update: Tue 13 May 2025 03:27:48 +0000 Manifest next update: Tue 20 May 2025 03:27:48 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: QhhFPpE1wuWFnVKNRJA2ZaLcEUgNIq6YGh7jMBqot+8=) 2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: kgaZFM6PEa7OxBpQNYQJyC2BXzh6kZmUunDtbxoanho=) 3: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: vxzRpo3gFHIybngZJMla9i3xRZ+JSBWrRy4xi4ckalM=) 4: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: D8dAG/9CmCMBEAtiY945ZqCN3MyX7EsagCsHQSrxDDU=) 5: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: uxmO0Zu81b9ijLgJWFAnqvmhDLc0ZfCAbuCH6EbXLi0=) 6: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: SpJD8GcSBoUz5MPi6PJr9VjMBRC58LFgHcmGttoe0yo=) 7: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: G4Dla87V8rtQVoFrowa7K0BJ1dHwJVBSq0/2lBCHVpo=) 8: E9874B2A16D011EF90793868C4F9AE02.roa (hash: ViBEiXsjPtwDWgjWAoRfyKQaAhEvEFxJcWrERgHGyz4=) 9: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: sVe/dlsdpYGwjAAFXOmmuTaA1ya2H4hHFG6dxtS3qXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: May 13 03:27:48 2025 GMT Not After : May 20 03:27:48 2025 GMT Subject: CN=6822bc35-041d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:01:61:5c:49:cb:8e:1e:ba:9d:3f:f1:71: 43:ea:37:b1:6f:92:68:41:ea:43:f8:9a:9c:16:a3: 82:ad:c1:cb:3b:cb:59:51:4b:72:e0:5f:65:f9:e5: 5f:b8:91:21:bb:38:aa:6a:36:ad:48:47:d7:97:1d: e2:09:e1:78:02:06:8c:49:2b:da:6d:c3:cb:bb:a0: 75:57:8e:b9:6a:fc:9c:6c:51:ec:4f:d3:ba:52:0c: b8:be:06:0f:61:6c:66:a7:4c:34:67:bb:de:cf:f0: 8e:99:f2:91:bb:d9:35:88:d2:80:f0:b6:bd:db:41: 8f:24:a8:e7:45:e1:1b:60:0c:b6:1c:67:54:b9:8f: 95:3f:4c:d3:5b:f6:37:ec:a9:79:31:56:74:2f:b8: 30:af:5f:1e:35:95:61:49:1b:1e:1d:4b:b7:3d:db: 4b:0b:2c:fd:eb:b4:ce:08:86:85:a5:d1:eb:42:25: 13:4d:30:a6:6c:91:aa:57:a5:79:b7:12:b1:b7:eb: a6:43:50:aa:bd:dc:d5:76:f2:56:08:c1:22:b3:b3: eb:d2:21:0a:52:2f:80:4d:a0:92:97:75:e6:3a:b5: 0a:6c:5c:3c:d0:30:bc:73:9d:10:a3:a4:64:d0:29: 5b:b9:92:0b:a6:8d:2d:a4:bf:2a:9e:f8:86:15:77: cf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2A:38:2F:3B:AE:72:0E:B5:78:92:00:28:E6:E5:90:E6:1D:CC:11 X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:d4:65:4a:01:48:62:03:ff:8f:b4:a4:e3:d7:04:df:db:5b: 64:7f:ec:25:ef:b7:4d:7e:4a:d0:c9:5c:5b:cf:13:2f:fe:2e: 4b:ca:69:22:46:7e:ee:8b:74:25:a7:6d:de:b3:b5:40:5a:3e: a5:92:fc:49:6c:de:89:9f:7b:16:61:ab:a4:7e:15:b2:b8:30: 47:62:06:91:c5:ed:56:73:ca:47:f8:80:d5:1e:90:9b:69:ee: 6a:56:40:20:41:1a:a6:63:ef:84:41:9b:0c:bb:5d:64:e3:c1: c3:d9:84:d9:ae:db:9c:a2:17:bb:21:84:5d:3c:f7:8e:67:dd: f1:64:aa:c5:0e:aa:70:51:7e:e9:19:80:15:9b:ec:b0:af:22: da:9d:65:f4:1b:1c:1a:ab:8a:eb:91:d9:9b:53:59:d6:6a:8f: 17:d2:e4:08:09:68:46:26:86:36:2d:c0:90:d7:f1:49:0b:87: 6f:8e:98:32:e5:12:3c:3b:42:3b:6f:f8:d0:3d:90:dc:3d:1e: 32:80:fa:43:f8:88:fc:34:ff:6e:5b:6e:8b:f4:f1:98:58:8c: d5:26:0a:bd:c8:9f:0c:6f:e2:7b:73:0d:e2:f4:14:86:d9:78: be:9d:70:9a:de:11:0a:c7:ab:7f:08:0a:4f:22:cb:cf:7f:79: 27:90:4f:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjUwNTEzMDMyNzQ4WhcNMjUwNTIwMDMyNzQ4WjAYMRYwFAYD VQQDEw02ODIyYmMzNS0wNDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslABYVxJy44eup0/8XFD6jexb5JoQepD+JqcFqOCrcHLO8tZUUty4F9l+eVf uJEhuziqajatSEfXlx3iCeF4AgaMSSvabcPLu6B1V465avycbFHsT9O6Ugy4vgYP YWxmp0w0Z7vez/COmfKRu9k1iNKA8La920GPJKjnReEbYAy2HGdUuY+VP0zTW/Y3 7Kl5MVZ0L7gwr18eNZVhSRseHUu3PdtLCyz967TOCIaFpdHrQiUTTTCmbJGqV6V5 txKxt+umQ1CqvdzVdvJWCMEis7Pr0iEKUi+ATaCSl3XmOrUKbFw80DC8c50Qo6Rk 0ClbuZILpo0tpL8qnviGFXfPUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcqOC87 rnIOtXiSACjm5ZDmHcwRMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC1GVKAUhiA/+PtKTj1wTf21tkf+wl77dNfkrQyVxbzxMv/i5Lymki Rn7ui3Qlp23es7VAWj6lkvxJbN6Jn3sWYaukfhWyuDBHYgaRxe1Wc8pH+IDVHpCb ae5qVkAgQRqmY++EQZsMu11k48HD2YTZrtucohe7IYRdPPeOZ93xZKrFDqpwUX7p GYAVm+ywryLanWX0Gxwaq4rrkdmbU1nWao8X0uQICWhGJoY2LcCQ1/FJC4dvjpgy 5RI8O0I7b/jQPZDcPR4ygPpD+Ij8NP9uW26L9PGYWIzVJgq9yJ8Mb+J7cw3i9BSG 2Xi+nXCa3hEKx6t/CApPIsvPf3knkE8a -----END CERTIFICATE-----Generated at Wed May 14 08:00:34 2025 by rpki-client