$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json) Hash identifier: dfImbNpG0IIMDChfhfED75FUMIeCqHXQYZe9JKpcWXI= Subject key identifier: 5A:C9:8C:5F:1E:06:A3:79:8A:18:C4:C5:D5:5D:61:EB:F8:30:21:56 Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 1661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft Manifest number: 1632 Signing time: Sat 10 May 2025 16:38:25 +0000 Manifest this update: Sat 10 May 2025 16:38:24 +0000 Manifest next update: Sat 17 May 2025 16:38:24 +0000 Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: cIJhtOj/vVUUYh6u5CexeV3tSsHYcLaZqITFwUGetfA=) 2: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: j99DqXIlX/DsX6CAhLDODI4Li/SA5fMocxzYjvHfoI0=) 3: 86BBD3DE994C11EC82BA3978C4F9AE02.roa (hash: 8Wwh2LGsfMleJz4kPXncR947wixaVvdi2YpWJ6WAnNA=) 4: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: /AMe5fWdVkNbiDNAX3rxonqHX2GWCAFeTm3WBDEgams=) 5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: C40oyBiTxjQqMGzoY7zwrfSLtJR/TE6dpDn0DYUL1uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5729 (0x1661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: May 10 16:38:24 2025 GMT Not After : May 17 16:38:24 2025 GMT Subject: CN=681f8100-bec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:57:dd:dd:41:34:34:85:e1:96:cd:7f:ee:fd: 85:3d:b6:36:d4:ac:b1:6e:aa:dc:b5:86:f0:85:12: 9f:eb:28:19:f1:7d:30:eb:c7:cb:2d:c6:6f:27:d8: a0:a5:66:c7:cc:20:32:18:80:78:38:59:d8:74:ed: 83:0e:a8:f8:a7:13:19:d3:d5:52:91:63:51:62:bc: 96:49:73:7b:6f:47:ef:b6:9b:00:7c:c7:e6:92:7c: 3f:f9:76:41:d4:b7:b9:e0:db:32:86:db:32:9e:8c: 38:06:31:3c:79:fd:ca:3f:65:7a:41:b8:06:39:6c: 78:2d:a4:a5:94:bc:f9:96:df:41:74:10:e3:e6:a7: d8:d6:af:86:9e:d0:2a:b8:ce:42:9e:d6:83:f7:63: 7a:b0:cb:62:7b:52:a6:b3:7d:41:49:8f:03:dd:b8: 73:90:ea:0d:7e:58:16:e8:6a:7a:9b:55:c4:73:42: 98:56:5d:ed:22:cf:f4:a0:5e:77:3d:fc:1f:30:66: 98:9a:fc:9e:7c:e2:88:91:e8:09:63:7f:9d:d8:f2: e9:d3:26:fe:1a:48:6d:78:a1:31:f9:71:0a:10:78: 89:71:f1:9f:66:ea:74:73:4e:bc:d7:b4:71:4e:ba: 8d:71:20:75:1b:4f:e1:fc:ae:81:0d:fd:d8:36:91: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C9:8C:5F:1E:06:A3:79:8A:18:C4:C5:D5:5D:61:EB:F8:30:21:56 X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3e:f8:11:c6:25:5b:8a:8a:e3:1e:a8:a6:39:b6:31:c8:0c: 8f:ff:54:08:e9:d3:a4:5a:04:c3:76:9d:18:89:2a:f5:ad:77: 5c:db:d9:58:00:84:b3:a3:d9:8b:9a:c5:a7:d8:3b:91:13:cf: 48:a3:8a:c1:10:c1:22:c9:f7:0b:33:31:de:4b:ea:95:df:62: 5a:92:b1:ed:49:a1:64:80:30:47:9c:a0:5a:05:19:3f:44:7c: 5e:6e:52:ec:c3:ba:9b:d7:14:de:ac:b8:18:00:4e:0f:8d:a8: 01:5b:21:c9:99:fa:e9:52:6f:a1:18:c6:c5:d8:46:b4:08:7d: 99:ea:a7:a1:e0:4a:58:f2:3e:2a:fb:08:00:b5:b0:f2:e5:34: 49:8a:c2:26:7a:34:01:4e:75:fd:9d:4e:bc:26:81:c6:00:19: 0e:fe:e9:5b:8a:27:e6:a6:5c:e3:84:46:d3:43:e6:ec:1d:7d: c9:44:d7:f8:4c:af:5c:46:54:82:75:af:a8:dc:ed:06:fc:94: 63:49:19:d1:7e:bf:78:b8:3f:44:fe:18:1c:08:f5:82:15:b0: 0f:d0:67:3e:3b:15:7e:77:5a:60:a9:76:d7:a5:b4:2a:04:43: 92:ca:85:ec:97:fa:c3:3f:dd:db:a7:8c:d0:ea:96:dd:2b:11: c5:f4:30:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjUwNTEwMTYzODI0WhcNMjUwNTE3MTYzODI0WjAYMRYwFAYD VQQDEw02ODFmODEwMC1iZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVfd3UE0NIXhls1/7v2FPbY21KyxbqrctYbwhRKf6ygZ8X0w68fLLcZvJ9ig pWbHzCAyGIB4OFnYdO2DDqj4pxMZ09VSkWNRYryWSXN7b0fvtpsAfMfmknw/+XZB 1Le54Nsyhtsynow4BjE8ef3KP2V6QbgGOWx4LaSllLz5lt9BdBDj5qfY1q+GntAq uM5CntaD92N6sMtie1Kms31BSY8D3bhzkOoNflgW6Gp6m1XEc0KYVl3tIs/0oF53 PfwfMGaYmvyefOKIkegJY3+d2PLp0yb+GkhteKEx+XEKEHiJcfGfZup0c06817Rx TrqNcSB1G0/h/K6BDf3YNpEVHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrJjF8e BqN5ihjExdVdYev4MCFWMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfPvgRxiVbiorjHqimObYxyAyP/1QI6dOkWgTDdp0YiSr1rXdc29lY AISzo9mLmsWn2DuRE89Io4rBEMEiyfcLMzHeS+qV32JakrHtSaFkgDBHnKBaBRk/ RHxeblLsw7qb1xTerLgYAE4PjagBWyHJmfrpUm+hGMbF2Ea0CH2Z6qeh4EpY8j4q +wgAtbDy5TRJisImejQBTnX9nU68JoHGABkO/ulbiifmplzjhEbTQ+bsHX3JRNf4 TK9cRlSCda+o3O0G/JRjSRnRfr94uD9E/hgcCPWCFbAP0Gc+OxV+d1pgqXbXpbQq BEOSyoXsl/rDP93bp4zQ6pbdKxHF9DDX -----END CERTIFICATE-----Generated at Mon May 12 17:50:50 2025 by rpki-client