$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft File: a81u0JpBbl_k7lre97FQ8syr6To.mft (raw, json) Hash identifier: gONZz1thFTplOHBv/nth8pETnVx1ZlIwMkb2SZ720RQ= Subject key identifier: 91:BA:BD:71:92:2E:8F:D4:8C:4D:7B:5D:3B:AA:15:30:1D:BC:5E:0B Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A Certificate issuer: /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Certificate serial: 0B95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft Manifest number: 0B87 Signing time: Sat 10 May 2025 18:48:39 +0000 Manifest this update: Sat 10 May 2025 18:48:38 +0000 Manifest next update: Sat 17 May 2025 18:48:38 +0000 Files and hashes: 1: a81u0JpBbl_k7lre97FQ8syr6To.crl (hash: 45bf+AuyHoRGQDOX/KStrTBgI/nopkdZBVjbOXTTNzs=) 2: 84B6E12A312911EEBE440C7FC4F9AE02.roa (hash: i5Nf027GIvkDTNfygplCNBH1Tfi56MOYYL7UyT8iFDw=) 3: 777A546212E511EFB071A31CC4F9AE02.roa (hash: yxZWVQX9GhcgWV+yYaDkt3bP+W4v1/S4wiH9fdwmAXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2965 (0xb95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Validity Not Before: May 10 18:48:38 2025 GMT Not After : May 17 18:48:38 2025 GMT Subject: CN=681f9f87-86ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:a8:f4:99:ec:a5:37:10:19:f4:e9:fd:03: 94:64:90:ed:b1:4b:73:86:b5:33:a9:01:80:78:7b: 0e:73:6b:7a:75:bd:ca:8d:7b:f4:0c:f2:75:64:fa: 7f:7c:78:1f:d1:66:bc:ed:a0:8a:8a:92:c6:bb:de: a5:5a:27:bf:f4:04:4b:40:37:29:b9:98:83:52:33: 95:3c:ff:dc:68:bf:87:fe:9a:5f:fd:33:27:ba:4b: 00:3e:04:29:5d:cb:fa:21:a1:7f:82:e8:28:16:79: 88:46:75:e7:ea:aa:8c:5d:8a:da:24:65:95:b9:8f: 86:ec:b1:55:af:d8:11:ff:eb:d9:57:2f:be:5c:6d: b3:31:8a:37:fa:c1:45:ff:ca:cc:7c:11:b6:8b:23: 63:2f:85:9f:f9:8c:79:b0:a1:b3:87:88:19:87:74: 37:3d:3a:d4:3a:a6:a4:4e:46:9d:98:d7:04:db:06: 13:a1:00:e2:b5:d7:fa:f8:5b:f6:ec:8b:f1:5f:12: 90:9f:67:ae:82:bd:31:b5:be:24:b1:e4:85:41:62: 4f:93:23:0e:b0:42:68:dc:94:98:09:9b:9f:6e:da: 89:d1:9e:0e:23:a6:6f:f1:a6:c3:cd:eb:0b:2f:92: 5b:56:22:35:63:51:3e:e6:71:89:88:9a:6e:b4:ed: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BA:BD:71:92:2E:8F:D4:8C:4D:7B:5D:3B:AA:15:30:1D:BC:5E:0B X509v3 Authority Key Identifier: keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:97:f5:c4:8e:51:ae:db:67:1f:ac:23:04:85:a0:09:43:03: d9:18:89:ae:80:d9:fa:20:78:66:97:91:a4:8b:72:d7:1d:1e: ce:6d:29:98:02:be:07:36:78:0e:e5:69:8c:5c:4c:e6:43:30: f5:76:a0:38:b2:cf:7f:58:1d:de:88:8b:a1:81:26:14:31:79: f7:58:ef:d7:15:f5:e1:f8:67:f2:b7:de:a3:47:91:15:2d:1d: f4:0a:e5:71:a3:54:3b:a9:04:6b:ca:6b:59:b8:30:fa:fd:ba: c8:2f:fe:e8:16:58:ed:91:e4:61:83:74:dc:c9:9d:22:ef:e0: 5f:c8:9b:1c:18:1b:27:18:67:06:df:3a:8b:f1:44:56:08:11: 48:51:ed:e5:b2:50:51:6d:49:89:3b:8a:d8:3c:9a:46:7f:d0: fd:d6:dd:a2:3b:73:26:09:33:d9:bb:ba:3b:f2:e9:c1:ac:c2: 93:24:49:e8:7f:77:cf:06:39:1b:59:a0:d3:ff:9b:1e:bf:57: a2:b3:e8:d9:d1:68:f5:1c:21:08:f1:85:e9:96:6c:02:9e:c4: f1:85:b2:08:21:3c:2b:3c:7d:73:90:8c:8b:81:3d:06:00:86: 4d:54:83:26:7c:1c:6f:4d:aa:1c:b4:cc:e2:57:01:2f:64:ef: b6:e3:39:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGMTIxMTAvBgNVBAUTKDZCQ0Q2RUQwOUE0MTZFNUZFNEVFNUFERUY3QjE1MEYy Q0NBQkU5M0EwHhcNMjUwNTEwMTg0ODM4WhcNMjUwNTE3MTg0ODM4WjAYMRYwFAYD VQQDEw02ODFmOWY4Ny04NmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ6o9JnspTcQGfTp/QOUZJDtsUtzhrUzqQGAeHsOc2t6db3KjXv0DPJ1ZPp/ fHgf0Wa87aCKipLGu96lWie/9ARLQDcpuZiDUjOVPP/caL+H/ppf/TMnuksAPgQp Xcv6IaF/gugoFnmIRnXn6qqMXYraJGWVuY+G7LFVr9gR/+vZVy++XG2zMYo3+sFF /8rMfBG2iyNjL4Wf+Yx5sKGzh4gZh3Q3PTrUOqakTkadmNcE2wYToQDitdf6+Fv2 7IvxXxKQn2eugr0xtb4kseSFQWJPkyMOsEJo3JSYCZufbtqJ0Z4OI6Zv8abDzesL L5JbViI1Y1E+5nGJiJputO2+kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG6vXGS Lo/UjE17XTuqFTAdvF4LMB8GA1UdIwQYMBaAFGvNbtCaQW5f5O5a3vexUPLMq+k6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREYxMi9DRkE1MjU5QTI4 QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJsX2s3bHJlOTdGUThzeXI2 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4MXUwSnBCYmxfazdscmU5N0ZROHN5cjZUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REYxMi9DRkE1MjU5QTI4QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJs X2s3bHJlOTdGUThzeXI2VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1l/XEjlGu22cfrCMEhaAJQwPZGImugNn6IHhml5Gki3LXHR7ObSmY Ar4HNngO5WmMXEzmQzD1dqA4ss9/WB3eiIuhgSYUMXn3WO/XFfXh+Gfyt96jR5EV LR30CuVxo1Q7qQRrymtZuDD6/brIL/7oFljtkeRhg3TcyZ0i7+BfyJscGBsnGGcG 3zqL8URWCBFIUe3lslBRbUmJO4rYPJpGf9D91t2iO3MmCTPZu7o78unBrMKTJEno f3fPBjkbWaDT/5sev1eis+jZ0Wj1HCEI8YXplmwCnsTxhbIIITwrPH1zkIyLgT0G AIZNVIMmfBxvTaoctMziVwEvZO+24zkc -----END CERTIFICATE-----Generated at Sun May 11 17:11:48 2025 by rpki-client