$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft File: cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json) Hash identifier: ayuySeyuDSFuY3N6vdyURmwo/9Sd51iXml/LsTpj7/c= Subject key identifier: 53:4F:5E:0C:84:09:9C:CB:78:CD:25:E6:BF:41:20:52:CB:56:41:B1 Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 Certificate issuer: /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft Manifest number: 62 Signing time: Thu 15 May 2025 06:20:07 +0000 Manifest this update: Thu 15 May 2025 06:20:06 +0000 Manifest next update: Thu 22 May 2025 06:20:06 +0000 Files and hashes: 1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: 8OE2mRBm8D3Mm4IDePHNv3VOHO0lN3kKiF+iu5qs5Dw=) 2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: +tAlw28NvGVDo5cCezaQKFVIMHfW8hqdMwBD9HYIeLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113 Validity Not Before: May 15 06:20:06 2025 GMT Not After : May 22 06:20:06 2025 GMT Subject: CN=68258797-b542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:25:58:84:64:01:20:a3:1c:9c:27:f7:5c: 5f:51:61:bb:22:1b:c6:1c:ba:82:44:56:68:3d:db: 68:4d:fd:13:7c:ac:dd:03:73:16:0c:ce:3c:72:5e: c6:1b:65:02:77:79:cc:2e:d2:0e:0d:1a:21:19:32: bb:1e:92:3b:77:87:55:70:d6:31:3a:28:6e:34:50: 53:67:2b:35:e6:af:ce:1a:08:aa:2d:0e:a3:82:ac: 8d:e4:46:67:79:21:e1:39:53:07:e7:03:b5:f1:0c: a1:4c:c1:41:c3:8c:cb:6b:43:fe:a5:d7:95:fc:c1: 1a:16:a2:7b:02:f8:cb:0c:06:99:5d:9a:a2:23:89: ff:ad:b6:d7:08:78:13:db:3d:c3:59:06:3c:05:2e: 84:af:33:10:b1:71:58:cd:fb:d3:75:62:8e:ea:bb: ce:01:1a:c7:1e:22:b2:c1:44:ed:da:14:1f:63:b7: 71:e6:d2:b9:2d:ab:83:cf:1d:98:8f:91:e5:b2:45: cf:03:0a:e0:06:4c:b3:42:6f:a4:1a:ec:6c:ef:e3: 78:85:61:52:b7:50:1d:b8:e4:23:10:b4:79:59:43: fc:f3:e1:0d:c5:e0:c3:f2:1c:0d:6f:6a:7d:bc:1c: cc:60:c3:97:dd:b2:0b:df:8a:25:e9:ed:7f:54:d6: b3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4F:5E:0C:84:09:9C:CB:78:CD:25:E6:BF:41:20:52:CB:56:41:B1 X509v3 Authority Key Identifier: keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:12:1e:41:46:c0:19:1c:f9:33:6c:8d:90:58:11:8b:ca:1b: 87:81:60:42:99:21:da:f7:25:10:b2:21:e0:51:a0:4f:2e:7b: 79:e9:f8:7f:b2:23:d4:73:a2:48:11:97:28:56:5e:56:6b:de: b7:01:20:35:8e:9a:b0:da:1f:50:48:db:99:5a:b9:ac:9a:5a: 9c:48:5c:6e:48:cd:e1:d9:e3:34:9a:1d:9a:ab:c1:64:4f:00: 8e:7c:d9:99:c3:93:42:12:8d:61:53:e5:4a:27:71:f9:7b:09: 74:23:0c:73:e2:79:a8:05:6f:89:54:ce:8f:30:c3:51:a8:16: fb:65:0a:e1:d0:9a:e9:00:26:29:7d:e9:af:46:be:e0:16:0d: 29:87:fa:8b:91:d0:f7:70:f8:04:ed:3b:1a:33:81:0f:dc:9f: 9c:4f:7f:13:0f:92:18:23:a4:d5:44:e1:2c:17:29:38:f2:67: 3c:3d:f8:5f:0e:45:da:f6:e1:4a:44:9c:3c:b0:5f:94:d0:3e: 10:a6:4b:c1:68:7d:de:f8:4e:46:65:d3:e0:d9:c4:4d:38:14: 21:e3:ba:b1:8a:ff:7d:f9:b9:54:64:01:9f:d0:d3:ef:1c:3f: 7f:bd:17:c1:0c:e2:d6:c6:3c:fb:ba:d1:57:6a:8d:15:ac:e6: 72:6a:01:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTk0MTExMC8GA1UEBRMoNzMxN0Q3NzdCREFBNjMzM0NEOTZBODEwNEI5NERFMEZB NDc1MjExMzAeFw0yNTA1MTUwNjIwMDZaFw0yNTA1MjIwNjIwMDZaMBgxFjAUBgNV BAMTDTY4MjU4Nzk3LWI1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe6CVYhGQBIKMcnCf3XF9RYbsiG8YcuoJEVmg922hN/RN8rN0DcxYMzjxyXsYb ZQJ3ecwu0g4NGiEZMrsekjt3h1Vw1jE6KG40UFNnKzXmr84aCKotDqOCrI3kRmd5 IeE5UwfnA7XxDKFMwUHDjMtrQ/6l15X8wRoWonsC+MsMBpldmqIjif+tttcIeBPb PcNZBjwFLoSvMxCxcVjN+9N1Yo7qu84BGsceIrLBRO3aFB9jt3Hm0rktq4PPHZiP keWyRc8DCuAGTLNCb6Qa7Gzv43iFYVK3UB245CMQtHlZQ/zz4Q3F4MPyHA1van28 HMxgw5fdsgvfiiXp7X9U1rOhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU09eDIQJ nMt4zSXmv0EgUstWQbEwHwYDVR0jBBgwFoAUcxfXd72qYzPNlqgQS5TeD6R1IRMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBOTQxLzlCM0QyNTQ4QTBB MDExRUY5MDUyMzI1RkM0RjlBRTAyL2N4ZlhkNzJxWXpQTmxxZ1FTNVRlRDZSMUlS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3hmWGQ3MnFZelBObHFnUVM1VGVENlIxSVJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB OTQxLzlCM0QyNTQ4QTBBMDExRUY5MDUyMzI1RkM0RjlBRTAyL2N4ZlhkNzJxWXpQ TmxxZ1FTNVRlRDZSMUlSTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAsSHkFGwBkc+TNsjZBYEYvKG4eBYEKZIdr3JRCyIeBRoE8ue3np+H+y I9RzokgRlyhWXlZr3rcBIDWOmrDaH1BI25lauayaWpxIXG5IzeHZ4zSaHZqrwWRP AI582ZnDk0ISjWFT5Uoncfl7CXQjDHPieagFb4lUzo8ww1GoFvtlCuHQmukAJil9 6a9GvuAWDSmH+ouR0Pdw+ATtOxozgQ/cn5xPfxMPkhgjpNVE4SwXKTjyZzw9+F8O Rdr24UpEnDywX5TQPhCmS8Fofd74TkZl0+DZxE04FCHjurGK/335uVRkAZ/Q0+8c P3+9F8EM4tbGPPu60VdqjRWs5nJqAWc= -----END CERTIFICATE-----Generated at Fri May 16 06:12:53 2025 by rpki-client