$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: T91qBG9znpBUBOex8IUY7YP92ieftG7Q3B7XEzWwxzs= Subject key identifier: 28:31:45:DA:AC:0D:85:03:7C:58:76:90:53:CF:3C:72:13:46:4C:F0 Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: 43 Signing time: Sun 11 May 2025 06:22:43 +0000 Manifest this update: Sun 11 May 2025 06:22:43 +0000 Manifest next update: Sun 18 May 2025 06:22:43 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: kANZeUdt1uD8h6DWjXNGD9TX59bVxW8NDFe7ru34BRg=) 2: 04241E3222F011F0B021396DC4F9AE02.roa (hash: 9kO0kni7kPsnzaPtvxx9OF7DZQab6VvydwUdZC1SpXA=) 3: C4A33CA4275711F0BA7C7752C4F9AE02.roa (hash: UodVJEZpG8jo//8K6ghcq6/5J2v+GWRbykcw2y9KJwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: May 11 06:22:43 2025 GMT Not After : May 18 06:22:43 2025 GMT Subject: CN=68204233-6696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:b4:14:42:94:17:5e:da:41:bc:e9:19:95: bd:e9:6f:dd:54:e4:e8:21:13:9a:3d:be:49:e7:12: 96:c9:6f:86:90:32:cf:79:47:cb:7d:f1:13:64:bb: b2:7f:c1:87:cc:b2:0c:c8:a1:f2:9c:91:0c:11:46: 40:20:77:d6:7b:8d:56:6a:21:bd:22:d1:69:93:f3: 53:85:46:af:18:e3:47:63:fe:00:be:c3:2c:ca:57: b4:50:1a:9e:da:77:a2:e2:25:5d:e2:92:0a:1b:59: c2:1d:3f:63:c9:69:7e:71:c8:6f:ae:d3:b3:c8:2f: 53:3c:fa:c4:c3:87:40:fc:db:92:d6:f7:d7:15:bb: 90:c6:21:33:8d:30:37:d1:fb:65:e1:4b:9b:4d:d0: 05:b4:1a:4f:a6:4e:dc:43:16:10:4c:f2:2f:6c:6b: d5:f0:e3:7f:f6:28:50:b9:b1:41:77:6f:7a:9b:b6: 40:1f:1c:43:34:ee:4f:42:03:2a:51:88:6f:9c:6c: ea:31:81:ca:5b:2b:46:22:b1:d7:b9:72:ea:a9:d5: 1e:7a:cb:e5:0e:37:73:85:07:46:4e:d9:14:66:9e: a0:d6:10:e7:e0:b5:55:c6:cb:b8:4c:42:53:76:47: a5:7f:c1:9b:2c:77:de:e1:b6:34:8c:2a:79:1d:91: 68:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:31:45:DA:AC:0D:85:03:7C:58:76:90:53:CF:3C:72:13:46:4C:F0 X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:6c:1b:1c:ef:bd:f0:6b:3e:c6:01:04:0f:65:35:f4:e4:c1: fe:34:8e:af:bd:5d:b9:f3:00:01:8e:bf:d8:5a:b7:95:c2:70: c9:70:6b:68:c7:75:ce:72:01:51:95:3e:e2:70:9d:78:99:c3: e1:bf:46:ae:b9:c9:02:9f:98:6f:73:64:7a:fb:57:da:e4:dc: bc:d3:42:0a:ec:06:1f:a0:94:62:14:41:a8:50:58:40:9e:c5: 36:a4:96:3c:93:a1:b1:2a:78:da:15:08:d3:b2:8a:04:3f:c1: 17:cc:2c:51:80:ba:9c:16:bc:59:83:48:61:bd:d4:81:14:46: 82:e1:d8:cf:c3:15:ec:1e:6d:28:d1:43:09:b0:bd:41:9b:b7: dd:a7:10:b1:81:c5:75:5c:d8:54:01:89:85:3b:a5:bd:f3:bd: e3:56:7c:e0:b3:a3:59:2d:b4:f8:e0:ad:84:73:83:47:42:57: e8:6b:51:50:9a:39:79:77:f6:03:e1:ef:b5:a0:09:ab:90:d2: 1e:05:cb:b1:53:72:76:84:2d:fb:f3:dc:3f:03:0d:ad:3e:a8: 73:42:d4:2e:72:a6:85:ac:a0:ba:88:a8:69:d6:38:15:62:1e: 8b:a8:a3:61:3e:19:27:b1:7c:81:80:40:9a:7c:74:d0:66:2c: ca:ec:39:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REVFQjExMC8GA1UEBRMoNkI2M0E2MEU3RDdGNTFEMDM4NzI4QzY0MjU5MDYwNDcw MTZDOTkwNDAeFw0yNTA1MTEwNjIyNDNaFw0yNTA1MTgwNjIyNDNaMBgxFjAUBgNV BAMTDTY4MjA0MjMzLTY2OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9GbQUQpQXXtpBvOkZlb3pb91U5OghE5o9vknnEpbJb4aQMs95R8t98RNku7J/ wYfMsgzIofKckQwRRkAgd9Z7jVZqIb0i0WmT81OFRq8Y40dj/gC+wyzKV7RQGp7a d6LiJV3ikgobWcIdP2PJaX5xyG+u07PIL1M8+sTDh0D825LW99cVu5DGITONMDfR +2XhS5tN0AW0Gk+mTtxDFhBM8i9sa9Xw43/2KFC5sUF3b3qbtkAfHEM07k9CAypR iG+cbOoxgcpbK0Yisde5cuqp1R56y+UON3OFB0ZO2RRmnqDWEOfgtVXGy7hMQlN2 R6V/wZssd97htjSMKnkdkWjVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKDFF2qwN hQN8WHaQU888chNGTPAwHwYDVR0jBBgwFoAUa2OmDn1/UdA4coxkJZBgRwFsmQQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJERUVCLzFFRTdGQTYwRTVG NDExRUZBQkQzOUQ3RUM0RjlBRTAyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21R US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTJPbURuMV9VZEE0Y294a0paQmdSd0ZzbVFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE RUVCLzFFRTdGQTYwRTVGNDExRUZBQkQzOUQ3RUM0RjlBRTAyL2EyT21EbjFfVWRB NGNveGtKWkJnUndGc21RUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHNsGxzvvfBrPsYBBA9lNfTkwf40jq+9XbnzAAGOv9hat5XCcMlwa2jH dc5yAVGVPuJwnXiZw+G/Rq65yQKfmG9zZHr7V9rk3LzTQgrsBh+glGIUQahQWECe xTakljyTobEqeNoVCNOyigQ/wRfMLFGAupwWvFmDSGG91IEURoLh2M/DFewebSjR QwmwvUGbt92nELGBxXVc2FQBiYU7pb3zveNWfOCzo1kttPjgrYRzg0dCV+hrUVCa OXl39gPh77WgCauQ0h4Fy7FTcnaELfvz3D8DDa0+qHNC1C5ypoWsoLqIqGnWOBVi Houoo2E+GSexfIGAQJp8dNBmLMrsOe8= -----END CERTIFICATE-----Generated at Sun May 11 15:49:54 2025 by rpki-client