$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json) Hash identifier: wK7qaxg7jmkIUKJ+ziDimtPmwdy9OqWNoeYcVcGlV9E= Subject key identifier: 2E:8A:C9:FC:0A:3E:AE:D8:BD:57:FB:93:61:2F:A8:EE:E2:77:45:60 Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft Manifest number: 0199 Signing time: Tue 13 May 2025 02:38:18 +0000 Manifest this update: Tue 13 May 2025 02:38:17 +0000 Manifest next update: Tue 20 May 2025 02:38:17 +0000 Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: nOLsI26JLpngiKvV6nkbgTQjuGVXiu3Qfr53TPYbyRY=) 2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: ewiUnrO7XAgjqsA1wG//P3KoAbNdOVY4KG59Y9E54Tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864 Validity Not Before: May 13 02:38:17 2025 GMT Not After : May 20 02:38:17 2025 GMT Subject: CN=6822b099-a24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7e:d1:9d:1e:7e:ce:63:7c:5d:1c:9d:99:82: 6f:89:5c:34:0d:2d:90:1f:9a:04:a3:57:07:d4:19: ff:90:da:6a:ce:6f:33:bf:80:c4:c0:49:8d:bf:e9: c8:8b:41:9a:4e:13:4d:f4:5c:21:a8:8b:4d:58:f1: f5:c1:b0:43:e2:8f:a4:bd:2a:42:e4:76:79:a2:68: 1c:2a:39:09:6b:8e:fd:1c:a6:c5:86:bd:36:69:51: be:b9:f0:7d:2b:13:61:e5:19:ea:5e:9c:23:ea:c8: 2a:e5:a8:6c:df:58:d1:86:08:b5:83:65:19:56:69: da:50:2f:24:b9:e1:79:f6:e0:28:f8:a7:0f:f8:03: 57:5e:e6:d5:3e:76:23:25:bd:7e:7a:b2:21:fa:21: 40:a9:5e:89:31:3e:7f:9a:90:12:59:07:d5:3a:db: c1:7d:cc:e6:52:27:e6:1d:25:72:7c:e1:3e:a4:da: ca:e0:fd:df:5d:b8:a2:87:da:7b:5e:2a:86:c4:89: c6:cc:6d:b6:da:43:98:f2:e0:54:3d:06:bb:fb:30: 50:77:94:12:9b:23:fa:4a:c7:ee:9f:45:61:40:15: b2:70:51:a4:a1:40:16:a4:1b:d6:66:5c:ec:ea:06: 55:61:7f:92:b8:5f:f1:2b:94:e1:d5:01:e7:8e:7b: 29:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8A:C9:FC:0A:3E:AE:D8:BD:57:FB:93:61:2F:A8:EE:E2:77:45:60 X509v3 Authority Key Identifier: keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:e0:53:c4:7d:42:94:ad:71:d7:26:c1:47:0d:0c:b7:7a:6f: c0:11:7b:6b:e7:cc:2e:b9:47:97:03:ee:31:f5:1a:cf:ea:a9: f1:81:8e:1f:2f:37:37:52:29:55:40:52:e0:69:ad:6b:ac:a8: 28:04:48:cc:c4:3e:1b:ee:66:94:e5:cb:f1:04:ad:dd:bb:46: fd:13:84:c8:dd:cf:94:69:74:59:3d:3e:88:b5:8b:88:81:96: 25:94:6b:a0:d7:f4:e8:a8:9d:43:03:f3:b8:44:58:82:cd:ad: b6:d9:48:25:64:8d:5d:c7:b4:85:1f:04:f3:09:bd:7b:af:aa: 1a:d7:ca:6c:77:cf:3c:6a:14:f9:f7:52:6a:e3:06:02:01:86: 17:91:38:5c:9b:35:13:91:f1:66:40:85:6a:e8:e9:c7:53:d8: 39:1d:4e:f0:b7:84:b0:ea:7e:e0:e7:d0:04:d3:8b:7c:0d:df: 0a:4a:5b:88:a9:e0:8c:45:be:47:bc:7e:ec:4d:8f:d9:61:00: f9:ee:ee:20:8a:63:c4:82:35:8d:97:51:93:9a:3e:37:c9:18: 5e:08:b9:07:e8:7c:fc:a0:16:9c:c5:90:fa:32:74:1b:92:ea: 32:28:70:bc:0c:81:13:d8:dc:77:a3:f0:f0:79:62:6c:f3:2b: 3e:f2:7d:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5RjgxMTAvBgNVBAUTKDc2NEJCODQ3OEJGRjhDQzhCRkYxNEU4RkI2QUFEQzI4 RUQ1RTQ4NjQwHhcNMjUwNTEzMDIzODE3WhcNMjUwNTIwMDIzODE3WjAYMRYwFAYD VQQDEw02ODIyYjA5OS1hMjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4H7RnR5+zmN8XRydmYJviVw0DS2QH5oEo1cH1Bn/kNpqzm8zv4DEwEmNv+nI i0GaThNN9FwhqItNWPH1wbBD4o+kvSpC5HZ5omgcKjkJa479HKbFhr02aVG+ufB9 KxNh5RnqXpwj6sgq5ahs31jRhgi1g2UZVmnaUC8kueF59uAo+KcP+ANXXubVPnYj Jb1+erIh+iFAqV6JMT5/mpASWQfVOtvBfczmUifmHSVyfOE+pNrK4P3fXbiih9p7 XiqGxInGzG222kOY8uBUPQa7+zBQd5QSmyP6Ssfun0VhQBWycFGkoUAWpBvWZlzs 6gZVYX+SuF/xK5Th1QHnjnsp1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6KyfwK Pq7YvVf7k2EvqO7id0VgMB8GA1UdIwQYMBaAFHZLuEeL/4zIv/FOj7aq3CjtXkhk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTlGOC9DQUU2QjRDRUJD QTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pNaV84VTZQdHFyY0tPMWVT R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RrdTRSNHZfak1pXzhVNlB0cXJjS08xZVNHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTlGOC9DQUU2QjRDRUJDQTExMUVEQTM3MDc4MERDNEY5QUUwMi9ka3U0UjR2X2pN aV84VTZQdHFyY0tPMWVTR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA54FPEfUKUrXHXJsFHDQy3em/AEXtr58wuuUeXA+4x9RrP6qnxgY4f Lzc3UilVQFLgaa1rrKgoBEjMxD4b7maU5cvxBK3du0b9E4TI3c+UaXRZPT6ItYuI gZYllGug1/ToqJ1DA/O4RFiCza222UglZI1dx7SFHwTzCb17r6oa18psd888ahT5 91Jq4wYCAYYXkThcmzUTkfFmQIVq6OnHU9g5HU7wt4Sw6n7g59AE04t8Dd8KSluI qeCMRb5HvH7sTY/ZYQD57u4gimPEgjWNl1GTmj43yRheCLkH6Hz8oBacxZD6MnQb kuoyKHC8DIET2Nx3o/DweWJs8ys+8n2I -----END CERTIFICATE-----Generated at Wed May 14 03:09:16 2025 by rpki-client