$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: K/PZknOcrlfGxYkUcKsDgTh3cFUq9k23D78jeVxknfE= Subject key identifier: B0:09:85:02:39:0C:DE:54:DD:05:FA:A6:3F:F6:0D:36:AD:6F:7B:96 Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 03B7 Signing time: Sat 17 May 2025 00:56:00 +0000 Manifest this update: Sat 17 May 2025 00:56:00 +0000 Manifest next update: Sat 24 May 2025 00:56:00 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: nNSB/ov0Jw3vvdiQL21doRIlxwY9hny/xKLrJ4I7uAQ=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: BUnFVKWXS5jIu8y5GkL7bgepdNyRdvPBw8U/+IQhx6g=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: +5J/6WRU15WkYWy0ca5x0funlOBTzCAMAXyUc4i4gAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 00:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: May 17 00:56:00 2025 GMT Not After : May 24 00:56:00 2025 GMT Subject: CN=6827dea0-a703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:82:67:74:3f:31:a8:7f:f3:1e:c8:36:80: 86:75:4d:4f:b2:46:c6:6a:61:2d:03:29:ff:f2:93: 5f:77:a1:76:12:30:0f:16:80:1d:f4:44:a9:77:f4: d5:07:ef:03:3d:4d:24:2d:e3:ee:6c:aa:34:ce:04: db:7c:3e:19:fa:c8:4c:d5:61:08:47:1b:2e:2a:bd: f6:f6:d1:9a:f4:10:bd:5e:83:74:9e:06:74:a9:83: 8a:40:e1:b2:39:71:0d:e9:50:9a:15:9a:29:91:d6: 57:d8:9b:a4:45:0a:fc:d2:f2:ad:8d:21:ef:b7:3b: 91:95:1f:ec:ef:7b:2d:93:4d:ad:48:f2:2a:c3:4f: 93:6c:4e:5f:5c:20:2e:a5:43:11:f3:cc:88:36:c9: a7:7b:e5:6f:49:12:1f:9e:b5:62:43:b1:7b:e1:fb: 67:16:ed:47:16:86:e7:ea:33:ec:a5:86:1c:60:02: 04:4a:10:61:70:e1:ea:ef:c5:86:f2:33:8a:7d:8d: 83:2a:d3:e9:c5:63:3f:88:dd:ab:5f:5f:d7:ad:74: c6:34:9a:57:50:32:5f:32:22:8f:d2:c0:bb:54:7d: cc:a2:1e:ee:20:35:b2:c3:da:3d:05:64:45:60:1e: 34:64:d0:89:90:1d:7b:86:50:da:3a:5a:d6:17:4c: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:85:02:39:0C:DE:54:DD:05:FA:A6:3F:F6:0D:36:AD:6F:7B:96 X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e4:49:fa:ef:53:ed:a8:2b:45:c3:17:9a:73:cc:ce:7c:72: 4c:04:54:0a:5e:d5:1e:37:ad:13:80:7f:30:91:1c:e3:ea:a8: 15:82:eb:5f:e2:70:5c:9a:7e:fa:03:98:ed:91:d7:d1:6e:23: 37:a7:4b:82:0d:51:ca:ed:0e:de:4f:a2:10:03:8e:5c:0f:dc: 6c:a7:93:44:22:78:00:50:f5:7e:25:7e:35:77:1d:49:ac:94: 21:76:c4:c2:cb:49:4c:cb:2c:6c:0b:6f:a8:95:d1:ff:d3:25: 66:11:5d:04:fb:2a:3b:23:0d:5f:1e:23:bf:f8:1b:5d:92:a6: a5:db:9f:01:0c:cf:0c:5a:e7:74:9a:5e:47:ae:1f:84:c6:4a: a4:25:21:c9:52:18:d6:14:d2:08:7f:0b:c9:94:c2:c6:7e:4d: 07:df:e3:73:b3:ec:73:a8:b7:a1:77:ae:d0:2f:ce:7b:cc:ef: db:6b:bb:d2:c3:c9:88:7b:eb:f1:ac:d7:8d:b8:1f:6e:da:08: 2a:63:b0:2f:ef:99:4a:32:b0:ff:6a:e9:73:6a:e2:23:13:3d: 85:51:4f:83:db:91:23:b5:d5:eb:3f:58:94:11:bc:ce:94:b4: d9:56:24:6c:19:81:f6:6d:2d:0b:5d:4e:cb:d6:45:b4:db:67: b1:87:02:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjUwNTE3MDA1NjAwWhcNMjUwNTI0MDA1NjAwWjAYMRYwFAYD VQQDEw02ODI3ZGVhMC1hNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodWCZ3Q/Mah/8x7INoCGdU1PskbGamEtAyn/8pNfd6F2EjAPFoAd9ESpd/TV B+8DPU0kLePubKo0zgTbfD4Z+shM1WEIRxsuKr329tGa9BC9XoN0ngZ0qYOKQOGy OXEN6VCaFZopkdZX2JukRQr80vKtjSHvtzuRlR/s73stk02tSPIqw0+TbE5fXCAu pUMR88yINsmne+VvSRIfnrViQ7F74ftnFu1HFobn6jPspYYcYAIEShBhcOHq78WG 8jOKfY2DKtPpxWM/iN2rX1/XrXTGNJpXUDJfMiKP0sC7VH3Moh7uIDWyw9o9BWRF YB40ZNCJkB17hlDaOlrWF0ySHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAJhQI5 DN5U3QX6pj/2DTatb3uWMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO5En671PtqCtFwxeac8zOfHJMBFQKXtUeN60TgH8wkRzj6qgVgutf 4nBcmn76A5jtkdfRbiM3p0uCDVHK7Q7eT6IQA45cD9xsp5NEIngAUPV+JX41dx1J rJQhdsTCy0lMyyxsC2+oldH/0yVmEV0E+yo7Iw1fHiO/+Btdkqal258BDM8MWud0 ml5Hrh+ExkqkJSHJUhjWFNIIfwvJlMLGfk0H3+Nzs+xzqLehd67QL857zO/ba7vS w8mIe+vxrNeNuB9u2ggqY7Av75lKMrD/aulzauIjEz2FUU+D25EjtdXrP1iUEbzO lLTZViRsGYH2bS0LXU7L1kW022exhwKR -----END CERTIFICATE-----Generated at Sat May 17 08:00:54 2025 by rpki-client