$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: D2B4WhZwfzY0kBcKPi+Y5hJFH8Su0i2fR569p+PNrOE= Subject key identifier: D5:5B:05:02:27:A8:A6:C5:48:77:67:F2:82:7A:0B:29:DE:7B:17:EB Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 0FD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 0FC7 Signing time: Sat 10 May 2025 17:22:54 +0000 Manifest this update: Sat 10 May 2025 17:22:53 +0000 Manifest next update: Sat 17 May 2025 17:22:53 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: YatGbEx8PiIEay38QdFXtIww1OvvV2c3J8fR8ObhDu0=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: jZa47LQUiVvIxoLDSyE/2t1CJaYFtRO42+/jeT3MONo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4051 (0xfd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: May 10 17:22:53 2025 GMT Not After : May 17 17:22:53 2025 GMT Subject: CN=681f8b6d-d1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:04:4b:a6:5e:38:74:d0:28:44:08:e1:56: e7:56:99:e9:57:fd:2a:00:a5:ea:1b:bd:08:ec:62: 66:92:8a:5f:1b:0f:86:22:2c:87:5b:a7:85:16:39: 39:7f:48:cc:e9:72:ca:6c:46:a0:5b:ab:92:2c:71: 79:bb:60:8e:d4:20:2f:21:f1:88:22:f7:d2:a7:66: fe:b8:f6:24:3b:0d:52:af:72:f2:56:7a:fa:08:d0: c9:38:b0:64:12:9d:84:76:6b:c1:cd:63:2e:1b:42: a0:cd:b1:37:f8:5f:23:57:16:43:44:1d:e5:74:ac: 85:84:72:42:80:1a:9e:93:4f:34:88:9b:1f:b3:a7: 15:a4:46:89:f3:8c:ff:69:1b:62:61:5f:9c:c2:89: 71:63:fa:64:9c:97:0d:d7:99:b4:5f:f3:d2:c0:5e: 29:cc:48:b9:ca:5b:39:ab:f3:49:cf:36:d9:fe:7e: ba:ea:b4:61:fb:53:a7:b7:f4:bf:1c:7b:cb:71:8c: e4:45:d2:59:69:53:48:a4:51:f5:dc:d9:7b:28:11: b9:fa:2c:a2:74:94:b5:b8:30:42:12:bf:33:cc:4b: 52:5e:93:72:eb:88:c1:26:17:4e:a6:21:fa:bf:21: c6:32:ca:93:bf:e5:16:36:cb:8a:02:5c:fe:8a:dc: 9a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5B:05:02:27:A8:A6:C5:48:77:67:F2:82:7A:0B:29:DE:7B:17:EB X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:30:0e:ce:a3:e1:8e:a0:66:2f:8c:8c:44:56:9e:7f:d5:9f: a4:5f:6c:1b:b9:b8:42:16:09:48:56:16:92:f9:b2:20:80:f2: ab:34:c0:9f:f4:e0:f8:98:4d:d5:5c:c8:1a:93:89:4b:78:e0: 9e:0d:db:71:3e:28:2b:0d:a2:1d:b9:9c:7c:39:21:c6:0d:51: a5:5f:4e:e6:2e:84:2a:1f:24:5a:13:bc:aa:24:31:2d:9a:09: 89:96:2c:f6:71:f1:a3:9e:2c:6e:59:d8:8b:11:aa:c4:48:b4: f3:65:0a:22:f7:0f:90:b4:97:34:28:21:eb:66:46:76:66:9d: 65:33:2c:e8:2b:39:21:a3:40:ad:1a:2f:3d:7c:17:85:8d:1e: dc:32:9d:d4:e6:05:2e:02:4b:ba:7d:82:29:a6:5c:5a:74:76: 0f:ea:6f:2e:d0:5b:a5:f6:c7:6e:fa:f5:1e:b7:0c:33:f8:aa: 4f:e1:65:a4:56:26:33:f3:7a:a7:c5:c9:bf:51:bd:eb:69:66: 72:8b:0a:93:df:c2:3d:08:61:e1:25:55:a2:7d:29:52:39:11: 58:bf:b5:8a:b3:67:f0:0e:fe:58:17:c7:e9:9a:54:2b:3b:0b: 04:08:c7:d5:dd:6c:8e:c1:f1:b3:2a:20:9e:0d:dd:99:ea:0e: 33:b3:d7:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUwNTEwMTcyMjUzWhcNMjUwNTE3MTcyMjUzWjAYMRYwFAYD VQQDEw02ODFmOGI2ZC1kMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLIES6ZeOHTQKEQI4VbnVpnpV/0qAKXqG70I7GJmkopfGw+GIiyHW6eFFjk5 f0jM6XLKbEagW6uSLHF5u2CO1CAvIfGIIvfSp2b+uPYkOw1Sr3LyVnr6CNDJOLBk Ep2EdmvBzWMuG0KgzbE3+F8jVxZDRB3ldKyFhHJCgBqek080iJsfs6cVpEaJ84z/ aRtiYV+cwolxY/pknJcN15m0X/PSwF4pzEi5yls5q/NJzzbZ/n666rRh+1Ont/S/ HHvLcYzkRdJZaVNIpFH13Nl7KBG5+iyidJS1uDBCEr8zzEtSXpNy64jBJhdOpiH6 vyHGMsqTv+UWNsuKAlz+ityaGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVbBQIn qKbFSHdn8oJ6CyneexfrMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQMA7Oo+GOoGYvjIxEVp5/1Z+kX2wbubhCFglIVhaS+bIggPKrNMCf 9OD4mE3VXMgak4lLeOCeDdtxPigrDaIduZx8OSHGDVGlX07mLoQqHyRaE7yqJDEt mgmJliz2cfGjnixuWdiLEarESLTzZQoi9w+QtJc0KCHrZkZ2Zp1lMyzoKzkho0Ct Gi89fBeFjR7cMp3U5gUuAku6fYIpplxadHYP6m8u0Ful9sdu+vUetwwz+KpP4WWk ViYz83qnxcm/Ub3raWZyiwqT38I9CGHhJVWifSlSORFYv7WKs2fwDv5YF8fpmlQr OwsECMfV3WyOwfGzKiCeDd2Z6g4zs9eo -----END CERTIFICATE-----Generated at Sun May 11 15:04:51 2025 by rpki-client