$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: D1s9kGnZ0muUAj/EF1azzmrHhh1wwozfrHL7LmZZWZY= Subject key identifier: 65:3D:18:1C:57:4C:94:C8:9B:47:F6:09:C6:4A:49:5C:7E:89:B1:74 Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 348E Signing time: Fri 16 May 2025 14:46:47 +0000 Manifest this update: Fri 16 May 2025 14:46:47 +0000 Manifest next update: Fri 23 May 2025 14:46:47 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: hJgZsLlHpm8lUDkhbCDtbgTtVPigAuUbb7fR14mYhTY=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: joFpQbUhhuICq9lMSQUwGZiftmapGwfxicrZ76+a/Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 14:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: May 16 14:46:47 2025 GMT Not After : May 23 14:46:47 2025 GMT Subject: CN=68274fd7-7e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:59:cf:cb:fe:94:25:9d:d5:ab:95:55:c0:e9: a8:11:b6:fd:b0:d0:92:a3:e8:2d:f5:88:46:91:2e: ea:57:72:4e:7b:b4:6f:d4:75:d9:bf:55:e0:eb:90: 97:40:80:d6:20:ba:c4:bd:0c:29:d7:5e:07:ac:38: 93:e2:be:95:ba:1a:ee:df:eb:c1:b1:65:70:c1:ef: a8:bf:33:67:0a:69:3d:af:e0:58:24:97:a6:d9:03: 8e:00:2a:aa:8a:b9:27:cd:e6:dc:cb:2d:b9:cc:f4: 16:78:10:ac:a2:86:2c:76:05:bf:70:47:b4:e4:5d: f6:4f:3f:2b:24:b9:a9:5b:31:60:a6:fc:f9:25:8b: b6:cc:e5:2a:bb:3c:03:7e:65:7a:d5:8b:f7:48:c0: 0f:2b:5c:18:4e:94:25:35:ac:94:1f:55:2c:af:39: df:5b:8d:46:b4:c5:53:1c:50:75:c7:2b:f8:1b:15: 4f:1c:73:be:f2:04:54:0c:51:a7:f4:51:1f:e9:59: cf:cd:97:fb:a6:92:e5:66:a5:4a:f1:c8:81:8e:25: 99:1a:d1:09:b2:d6:cf:9e:a0:a2:2b:84:ab:9f:59: a8:4b:56:d0:50:29:c3:10:04:ba:02:23:52:fe:b6: 97:33:3f:48:9f:d4:4c:0d:5e:3e:45:de:01:03:1b: 92:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3D:18:1C:57:4C:94:C8:9B:47:F6:09:C6:4A:49:5C:7E:89:B1:74 X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:68:21:fb:16:8b:d1:76:34:48:c0:f9:fe:1b:18:76:cd:ce: 12:76:bd:70:d2:50:ce:36:5b:1b:04:ae:fe:fe:ef:f6:ad:20: 6f:03:08:bd:9f:97:dc:56:86:48:4d:91:e2:1d:a4:09:66:b6: 08:bf:8b:5c:9b:51:2d:57:66:a5:2a:e2:2c:59:7f:1f:eb:29: 50:77:df:47:5e:73:9d:45:d6:3b:42:59:81:94:d2:e4:b1:b0: 14:a6:21:64:8d:d5:ff:a9:61:66:f5:e9:87:18:0d:7d:6a:b1: 99:79:e4:79:fe:ef:c0:3a:cc:31:45:8d:d0:c5:5e:85:d7:c5: 5f:e5:aa:40:3c:4a:bf:d5:84:1c:f8:2f:c8:aa:aa:19:c2:2c: 98:55:27:2f:97:2b:bb:ee:51:22:da:7d:64:b7:d3:20:8e:b2: 73:6a:0e:55:d2:d8:24:d1:2c:84:cf:57:ea:a6:a0:58:1e:82: ad:2b:38:27:b3:46:1d:06:24:f9:49:08:ed:f7:9d:f0:82:90: 92:8e:80:95:3d:68:37:65:5c:77:87:ea:a7:f1:8a:af:df:91: 66:d7:c0:96:09:d3:d2:3f:50:59:62:e1:2f:8a:af:1f:82:96: cc:ba:a2:ba:2f:9d:05:23:05:11:9a:15:f9:05:c2:82:0b:ae: a1:73:f4:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjUwNTE2MTQ0NjQ3WhcNMjUwNTIzMTQ0NjQ3WjAYMRYwFAYD VQQDEw02ODI3NGZkNy03ZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1nPy/6UJZ3Vq5VVwOmoEbb9sNCSo+gt9YhGkS7qV3JOe7Rv1HXZv1Xg65CX QIDWILrEvQwp114HrDiT4r6Vuhru3+vBsWVwwe+ovzNnCmk9r+BYJJem2QOOACqq irknzebcyy25zPQWeBCsooYsdgW/cEe05F32Tz8rJLmpWzFgpvz5JYu2zOUquzwD fmV61Yv3SMAPK1wYTpQlNayUH1UsrznfW41GtMVTHFB1xyv4GxVPHHO+8gRUDFGn 9FEf6VnPzZf7ppLlZqVK8ciBjiWZGtEJstbPnqCiK4Srn1moS1bQUCnDEAS6AiNS /raXMz9In9RMDV4+Rd4BAxuSXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGU9GBxX TJTIm0f2CcZKSVx+ibF0MB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWaCH7FovRdjRIwPn+Gxh2zc4Sdr1w0lDONlsbBK7+/u/2rSBvAwi9 n5fcVoZITZHiHaQJZrYIv4tcm1EtV2alKuIsWX8f6ylQd99HXnOdRdY7QlmBlNLk sbAUpiFkjdX/qWFm9emHGA19arGZeeR5/u/AOswxRY3QxV6F18Vf5apAPEq/1YQc +C/IqqoZwiyYVScvlyu77lEi2n1kt9MgjrJzag5V0tgk0SyEz1fqpqBYHoKtKzgn s0YdBiT5SQjt953wgpCSjoCVPWg3ZVx3h+qn8Yqv35Fm18CWCdPSP1BZYuEviq8f gpbMuqK6L50FIwURmhX5BcKCC66hc/Sc -----END CERTIFICATE-----Generated at Sun May 18 02:11:40 2025 by rpki-client