$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft File: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json) Hash identifier: 36Kqxhje0PKXYSVuU+uduXMInorCGd9ylo93UHLGAj4= Subject key identifier: 11:5E:47:31:4A:D7:B4:B3:66:26:5C:60:38:C1:01:79:C2:56:B2:0C Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 Certificate issuer: /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Certificate serial: 0538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft Manifest number: 0530 Signing time: Mon 12 May 2025 23:17:32 +0000 Manifest this update: Mon 12 May 2025 23:17:31 +0000 Manifest next update: Mon 19 May 2025 23:17:31 +0000 Files and hashes: 1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: zt46GeVgYJuzsbpa20wf4MrFVQNuzn4d70sbdY5NW6s=) 2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: IJTuUd/n8OCJ5dJ8YqUV7DdTVdb9JOIyqBQaxiAGn2k=) 3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: ZpRAboF0Zy0eld2L5SbNx4a1RdCdtnze/MEYgH64xko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1336 (0x538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4 Validity Not Before: May 12 23:17:31 2025 GMT Not After : May 19 23:17:31 2025 GMT Subject: CN=6822818b-2abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:a3:d4:d8:0f:8b:56:3c:46:0c:a4:2d:bb: a1:6e:72:8a:00:31:15:f8:6f:b6:0f:e7:2b:c4:68: 83:45:a0:c9:34:e0:63:b3:3b:d9:93:81:e7:a0:b6: e3:ea:d2:10:13:03:fa:cd:1c:8a:1d:a1:f0:7b:bf: ca:ec:ad:e9:88:95:4b:e5:b3:d9:5d:7a:cf:99:f3: 2a:ce:75:ab:e9:c3:d8:1e:c6:0d:17:cf:7c:8a:c9: e6:91:59:af:b1:ac:0f:59:dd:9a:b7:fd:cd:93:4a: a8:03:19:09:9c:2a:e0:42:c1:84:e5:b7:f2:4a:a4: e2:14:99:e8:84:9e:b1:3b:54:f3:d1:ca:3f:bb:26: 1b:7a:a8:b6:cf:f4:83:84:c7:2d:49:b1:2d:4e:a9: 64:80:af:31:df:b4:74:c6:cc:7f:bb:da:b3:e1:fe: 26:a5:4d:fe:18:7b:6f:d9:33:09:1f:8c:a3:f5:46: ac:fa:50:40:96:a9:9e:65:b8:f5:29:a4:0d:49:3b: 8f:d8:c8:10:d2:e4:59:71:6d:79:21:76:78:c3:60: 0e:a8:0a:13:6b:6e:1b:62:9a:23:f4:ac:e7:1a:dc: 09:5b:95:60:06:51:0d:1c:38:07:f3:23:fe:2b:04: 4a:8f:f2:fd:09:9a:26:1b:f2:79:4d:34:fa:ba:c6: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5E:47:31:4A:D7:B4:B3:66:26:5C:60:38:C1:01:79:C2:56:B2:0C X509v3 Authority Key Identifier: keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:2d:9c:21:a3:58:97:fe:c0:15:ef:ff:6e:a9:92:fd:a9:bf: fd:c9:13:2b:cf:3c:92:37:eb:dc:28:b8:e2:e2:39:45:aa:3e: 0d:5a:2e:54:f1:31:c5:6b:31:ee:03:a7:07:11:f5:9d:32:9a: bc:c2:71:82:00:73:24:2c:7a:03:20:3e:ff:54:b4:f9:be:ef: 37:88:36:cb:57:2c:87:40:71:3c:06:1c:a2:47:64:4a:70:24: b9:b7:02:42:d1:5e:52:3d:8b:7b:1d:f2:74:73:5a:e0:a1:16: 72:6c:51:64:25:ec:03:e4:2e:9e:09:22:70:30:4e:b6:3d:af: 38:55:3c:53:d2:eb:ed:07:b1:66:7e:1e:6d:fa:95:58:b6:ba: 2e:6a:f2:2a:79:8b:2c:ad:c0:a0:cd:36:ac:b6:5b:42:9d:a9: 4e:19:be:d3:b0:98:4c:93:32:df:0b:f0:a8:f1:a6:17:5d:5d: 63:93:45:31:df:91:05:4a:37:d2:d1:3b:03:06:77:e2:12:fa: 37:bd:08:2f:78:9f:7c:b6:a0:f3:66:a8:52:44:30:ca:09:f3: 8a:a1:b8:2c:b3:3f:44:17:69:77:2f:31:d1:40:cf:2e:bb:fb: 4c:3a:93:c5:a4:df:7a:9b:2b:45:54:d4:f3:7c:cb:04:ca:75: 50:ac:fe:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyNTExMTAvBgNVBAUTKDUzRDVEQjg3MEU1Q0NENDhFOThENzM1NjBEQkQ1RTY1 OTQ2QzJERDQwHhcNMjUwNTEyMjMxNzMxWhcNMjUwNTE5MjMxNzMxWjAYMRYwFAYD VQQDEw02ODIyODE4Yi0yYWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Zqj1NgPi1Y8RgykLbuhbnKKADEV+G+2D+crxGiDRaDJNOBjszvZk4HnoLbj 6tIQEwP6zRyKHaHwe7/K7K3piJVL5bPZXXrPmfMqznWr6cPYHsYNF898isnmkVmv sawPWd2at/3Nk0qoAxkJnCrgQsGE5bfySqTiFJnohJ6xO1Tz0co/uyYbeqi2z/SD hMctSbEtTqlkgK8x37R0xsx/u9qz4f4mpU3+GHtv2TMJH4yj9Uas+lBAlqmeZbj1 KaQNSTuP2MgQ0uRZcW15IXZ4w2AOqAoTa24bYpoj9KznGtwJW5VgBlENHDgH8yP+ KwRKj/L9CZomG/J5TTT6usYX3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFeRzFK 17SzZiZcYDjBAXnCVrIMMB8GA1UdIwQYMBaAFFPV24cOXM1I6Y1zVg29XmWUbC3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTI1MS9EOTNENzk2MEY3 NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pVanBqWE5XRGIxZVpaUnNM ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U5WGJodzVjelVqcGpYTldEYjFlWlpSc0xkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTI1MS9EOTNENzk2MEY3NDgxMUVCQTc1RkNDMTNDNEY5QUUwMi9VOVhiaHc1Y3pV anBqWE5XRGIxZVpaUnNMZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDLZwho1iX/sAV7/9uqZL9qb/9yRMrzzySN+vcKLji4jlFqj4NWi5U 8THFazHuA6cHEfWdMpq8wnGCAHMkLHoDID7/VLT5vu83iDbLVyyHQHE8BhyiR2RK cCS5twJC0V5SPYt7HfJ0c1rgoRZybFFkJewD5C6eCSJwME62Pa84VTxT0uvtB7Fm fh5t+pVYtrouavIqeYssrcCgzTastltCnalOGb7TsJhMkzLfC/Co8aYXXV1jk0Ux 35EFSjfS0TsDBnfiEvo3vQgveJ98tqDzZqhSRDDKCfOKobgssz9EF2l3LzHRQM8u u/tMOpPFpN96mytFVNTzfMsEynVQrP62 -----END CERTIFICATE-----Generated at Wed May 14 10:29:28 2025 by rpki-client