$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json) Hash identifier: z2hfVa92LAgmDh4YbosJ443OxrpbCqEpB02xgL7OCKE= Subject key identifier: 1C:C2:3A:4C:B3:7F:53:4F:E6:92:08:19:D6:B7:9B:E9:B8:D0:4A:FD Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 0A27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft Manifest number: 0A09 Signing time: Wed 14 May 2025 20:00:07 +0000 Manifest this update: Wed 14 May 2025 20:00:07 +0000 Manifest next update: Wed 21 May 2025 20:00:07 +0000 Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: aNm9iLv0mR2b/gPbsvMjUWbzHKBIrWzjoAlHCZNGUok=) 2: 59E4B0A81B9211F0A5D50649C4F9AE02.roa (hash: 6NSS3ImO+7MeAasEgP9eh6JpYdQNeKV6AFWR2pkbZBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2599 (0xa27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: May 14 20:00:07 2025 GMT Not After : May 21 20:00:07 2025 GMT Subject: CN=6824f647-5090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:bd:8b:3c:8a:b2:10:ec:88:0c:7c:45:64: d1:58:4b:12:b8:0f:27:58:ff:42:90:aa:4f:52:35: 34:b2:3c:2c:86:b4:27:9f:2d:74:5e:bb:dc:d0:ad: e9:02:d2:76:4a:8b:49:7a:a4:09:46:70:8b:4a:08: d8:a2:78:5e:1b:69:dd:29:0f:36:b0:64:11:f0:9a: e1:97:6c:61:5b:2b:2b:56:48:8b:81:43:5d:83:3d: 8d:93:b1:bf:92:e7:7e:43:7b:02:72:c4:7d:e0:b7: 9a:8e:be:12:52:06:2e:be:9a:0b:84:bb:12:72:28: 3d:eb:c2:04:b9:03:e4:13:10:d3:45:a1:77:eb:24: f3:bb:18:c1:99:cf:5f:9e:fe:3d:d3:45:b7:85:fb: a3:aa:e7:60:fe:c7:26:a9:89:e5:e3:da:1c:cc:0d: a0:74:87:b4:38:dd:e3:c4:25:d6:95:2f:eb:ea:7b: e6:39:f8:0d:2e:0e:cd:86:80:06:94:fa:24:74:38: 18:b1:85:95:af:04:24:2f:c2:7f:bd:76:c7:42:b2: 2f:51:ff:e7:79:51:68:23:8f:b5:c2:73:86:dc:0e: e9:67:f2:b2:20:89:9e:3a:54:78:e5:57:ab:26:2f: 7b:ce:fc:fe:44:7f:5d:92:6e:8e:46:a0:1a:0d:4e: 70:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C2:3A:4C:B3:7F:53:4F:E6:92:08:19:D6:B7:9B:E9:B8:D0:4A:FD X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:f3:ad:ae:53:17:60:f3:a9:bb:d9:6c:2b:84:e4:cf:2c:2b: a6:25:57:c4:17:fd:75:6c:28:6c:a6:5d:96:96:93:44:5b:c5: 23:71:0b:0b:74:c6:73:ab:6d:41:72:24:9c:7c:fc:4e:fa:50: 95:1b:f1:f6:2b:95:3b:ad:20:78:cb:53:bd:0d:1d:b2:4a:a4: e4:2d:d2:40:01:c7:52:a6:d2:9f:90:f2:91:bc:ca:7f:05:50: db:37:e3:e6:92:a5:ac:69:a7:be:38:4e:f8:ea:55:6d:68:27: 19:15:b1:ec:32:80:78:1c:a7:28:1e:d0:5d:4b:ea:68:b3:1e: 8c:5a:fc:a8:66:3b:a9:5b:8b:8e:cc:5c:5e:d0:ad:a7:bb:50: 6b:d0:c6:67:96:26:2e:b3:18:1e:e0:50:7c:91:17:30:91:1d: c9:7b:ce:5f:c4:30:9a:e3:02:23:5d:c8:e3:b3:7d:8b:9d:a3: ff:cd:71:85:11:4e:ee:30:99:f9:6e:cc:36:0a:42:0d:4c:e4: 53:15:b7:2c:a5:b2:14:4a:c2:21:8d:30:a4:42:5f:36:f6:c0: 89:36:de:06:6c:c5:44:c5:62:d8:15:59:ec:4e:20:0a:89:2b: 98:1b:3c:66:10:5f:80:15:df:56:89:43:7a:e9:69:9c:b5:ab: fe:6e:2d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjUwNTE0MjAwMDA3WhcNMjUwNTIxMjAwMDA3WjAYMRYwFAYD VQQDEw02ODI0ZjY0Ny01MDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcG9izyKshDsiAx8RWTRWEsSuA8nWP9CkKpPUjU0sjwshrQnny10Xrvc0K3p AtJ2SotJeqQJRnCLSgjYonheG2ndKQ82sGQR8Jrhl2xhWysrVkiLgUNdgz2Nk7G/ kud+Q3sCcsR94Leajr4SUgYuvpoLhLsScig968IEuQPkExDTRaF36yTzuxjBmc9f nv4900W3hfujqudg/scmqYnl49oczA2gdIe0ON3jxCXWlS/r6nvmOfgNLg7NhoAG lPokdDgYsYWVrwQkL8J/vXbHQrIvUf/neVFoI4+1wnOG3A7pZ/KyIImeOlR45Ver Ji97zvz+RH9dkm6ORqAaDU5whwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzCOkyz f1NP5pIIGda3m+m40Er9MB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5 dy1MR3BJcFZTWXEzelZaZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF862uUxdg86m72WwrhOTPLCumJVfEF/11bChspl2WlpNEW8UjcQsL dMZzq21BciScfPxO+lCVG/H2K5U7rSB4y1O9DR2ySqTkLdJAAcdSptKfkPKRvMp/ BVDbN+PmkqWsaae+OE746lVtaCcZFbHsMoB4HKcoHtBdS+posx6MWvyoZjupW4uO zFxe0K2nu1Br0MZnliYusxge4FB8kRcwkR3Je85fxDCa4wIjXcjjs32LnaP/zXGF EU7uMJn5bsw2CkINTORTFbcspbIUSsIhjTCkQl829sCJNt4GbMVExWLYFVnsTiAK iSuYGzxmEF+AFd9WiUN66Wmctav+bi2P -----END CERTIFICATE-----Generated at Thu May 15 22:30:44 2025 by rpki-client