$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: AoM6WDpQBalrBwHzqe/ihUScCpgmLAPSa2Mk8u4XKLU= Subject key identifier: 43:B9:54:38:80:4C:77:4F:A2:89:AE:C1:77:D3:15:6F:4C:DA:F9:54 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 0890 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 0889 Signing time: Sat 10 May 2025 20:18:42 +0000 Manifest this update: Sat 10 May 2025 20:18:41 +0000 Manifest next update: Sat 17 May 2025 20:18:41 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: wucoCmIPSz9xjXYy6fK3MQqvoOxX6zdqnTKT8FOqtHE=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: jrXgAGT3lqn2oPe4fiJJc8FiNv+5i0XvozNfLQNBQxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2192 (0x890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: May 10 20:18:41 2025 GMT Not After : May 17 20:18:41 2025 GMT Subject: CN=681fb4a1-68ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:51:2b:bd:26:ea:2c:d7:dd:61:54:d9:42:db: 17:b2:18:ca:9c:ac:75:a2:34:20:35:e0:a5:ee:bb: 37:5d:c5:2f:c0:e0:1f:5e:5b:2f:62:d9:4d:6d:55: 31:68:14:bb:a0:06:b8:b2:bc:ab:af:cd:e5:39:67: c2:33:7f:b6:a1:4a:5a:1f:71:10:80:80:67:6b:e9: d9:e7:d1:ff:b7:e2:2a:e8:53:54:e6:7a:f4:ea:07: 39:39:11:53:39:99:7b:84:b1:2b:3f:b5:03:fb:e9: 90:e4:af:b4:97:c0:6b:1a:7d:07:ad:55:da:bb:2d: 84:b2:85:a2:80:c8:74:36:ad:64:71:c4:ca:0b:a9: fa:88:8f:25:cd:de:e7:d1:4b:a7:cf:4b:46:44:7c: 5b:32:ec:25:34:74:2a:cd:9f:cd:5c:dd:c1:a0:87: dc:77:16:d1:a2:e9:18:94:26:b5:26:0d:30:42:45: a6:63:04:78:e1:8d:de:44:3e:97:6c:0c:cc:a6:f9: 03:c9:5f:ed:77:8e:d5:fc:f6:83:b0:aa:26:0f:57: ac:f5:95:58:13:d1:7b:25:14:3c:b1:0c:81:e0:7b: 47:d4:e8:0b:04:97:93:4e:0d:12:3e:62:ca:de:6d: de:3d:4b:5e:cc:bd:ff:bb:69:c8:a2:dd:d6:00:a8: 05:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B9:54:38:80:4C:77:4F:A2:89:AE:C1:77:D3:15:6F:4C:DA:F9:54 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:79:25:f4:19:fe:d6:56:61:90:2b:61:4e:5e:bb:b6:ef:73: 76:4d:b3:64:5b:5a:5c:25:59:94:bb:5e:a0:e7:26:ff:08:5d: 09:9e:07:7e:62:ef:44:9b:7c:72:d0:4c:af:87:5f:2f:10:dd: af:46:69:93:b7:46:a1:9c:60:7d:c8:ed:13:b3:41:b0:50:7b: ec:a3:ca:bb:36:bd:2f:e6:ec:b6:dc:3e:36:32:f1:25:41:32: b5:2a:31:9a:4d:a7:e1:a0:2f:80:37:45:23:51:ec:58:03:5b: ca:77:18:05:31:a8:6e:6f:e5:71:40:29:cd:20:b5:f8:13:95: a6:f4:60:ae:23:bb:27:be:3d:d7:26:18:40:1e:76:03:6a:93: 0d:25:ae:43:06:75:8d:e0:69:ae:46:52:59:49:02:52:6e:56: 83:a3:0a:c3:d5:59:60:92:dd:fc:01:39:da:49:92:fc:c2:e7: 2a:a2:44:6b:db:2d:e5:e9:c8:95:12:b2:1d:ee:b9:2f:1e:f1: a6:0b:f8:0d:94:48:47:db:e7:00:8e:1f:e0:9b:6b:6f:51:e6: f7:5a:46:62:a1:a1:fe:c3:4e:ba:18:10:f4:6e:8d:88:ff:66: e9:0c:66:3f:59:9c:e3:43:f2:78:84:f2:cf:54:a4:89:d1:8d: 3a:89:9c:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjUwNTEwMjAxODQxWhcNMjUwNTE3MjAxODQxWjAYMRYwFAYD VQQDEw02ODFmYjRhMS02OGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51ErvSbqLNfdYVTZQtsXshjKnKx1ojQgNeCl7rs3XcUvwOAfXlsvYtlNbVUx aBS7oAa4sryrr83lOWfCM3+2oUpaH3EQgIBna+nZ59H/t+Iq6FNU5nr06gc5ORFT OZl7hLErP7UD++mQ5K+0l8BrGn0HrVXauy2EsoWigMh0Nq1kccTKC6n6iI8lzd7n 0Uunz0tGRHxbMuwlNHQqzZ/NXN3BoIfcdxbRoukYlCa1Jg0wQkWmYwR44Y3eRD6X bAzMpvkDyV/td47V/PaDsKomD1es9ZVYE9F7JRQ8sQyB4HtH1OgLBJeTTg0SPmLK 3m3ePUtezL3/u2nIot3WAKgF8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEO5VDiA THdPoomuwXfTFW9M2vlUMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmeSX0Gf7WVmGQK2FOXru273N2TbNkW1pcJVmUu16g5yb/CF0Jngd+ Yu9Em3xy0Eyvh18vEN2vRmmTt0ahnGB9yO0Ts0GwUHvso8q7Nr0v5uy23D42MvEl QTK1KjGaTafhoC+AN0UjUexYA1vKdxgFMahub+VxQCnNILX4E5Wm9GCuI7snvj3X JhhAHnYDapMNJa5DBnWN4GmuRlJZSQJSblaDowrD1Vlgkt38ATnaSZL8wucqokRr 2y3l6ciVErId7rkvHvGmC/gNlEhH2+cAjh/gm2tvUeb3WkZioaH+w066GBD0bo2I /2bpDGY/WZzjQ/J4hPLPVKSJ0Y06iZyl -----END CERTIFICATE-----Generated at Sun May 11 10:23:18 2025 by rpki-client