$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: VjCdbVGG7EximF2SP341fSjAqerdZnj1UyozSRNqK3U= Subject key identifier: 53:5D:8D:51:61:36:BB:77:02:DA:B7:C2:B3:44:BA:4A:0F:5C:98:18 Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0F6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0F63 Signing time: Sat 10 May 2025 17:26:43 +0000 Manifest this update: Sat 10 May 2025 17:26:43 +0000 Manifest next update: Sat 17 May 2025 17:26:43 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: LiiyKam9Lac/kf5+VCPe9Y2NeuMtEX3o/Oztjl54CCw=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3946 (0xf6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: May 10 17:26:43 2025 GMT Not After : May 17 17:26:43 2025 GMT Subject: CN=681f8c53-e004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:43:08:4d:14:cd:d4:78:2b:79:bf:b0:a7: ee:8e:d5:b6:fb:88:42:29:46:2c:51:d9:07:6d:dc: 93:7e:ba:2d:bd:b1:a1:b9:c3:76:48:51:0f:b0:4c: e3:29:8e:0a:cd:cd:7a:02:d8:dc:22:c5:b9:04:e5: 99:8b:9c:ab:6f:b8:42:80:79:16:c0:32:a6:e4:07: 5d:6f:07:e7:2a:a8:96:bd:fa:71:e3:79:31:f8:bb: 90:b5:ab:07:4e:90:d3:1e:ed:2b:7f:cb:2a:34:fe: c9:7b:30:be:54:da:b8:87:15:de:8f:6d:fa:00:bd: 03:5e:27:12:d7:ef:07:36:57:75:06:bd:89:e3:6b: 21:0d:27:13:6d:27:87:70:65:83:ce:98:35:73:f3: 9c:ad:2a:cc:a5:d9:62:59:aa:a2:40:45:e2:8b:06: 6d:cc:69:34:69:20:91:c9:5f:5b:ec:0e:e1:df:23: e1:7a:4b:fe:2c:26:5b:86:6a:e8:0a:0e:6d:fa:6e: 0a:d3:3a:81:e2:19:56:ed:2f:07:d8:c5:d9:65:9b: f4:d9:69:96:4f:d2:bb:4f:50:e4:54:80:e3:39:10: 07:ca:d6:e0:67:9c:07:92:d9:62:fe:11:6a:27:37: 43:ff:90:87:ca:c0:ed:76:62:3d:5a:76:ed:b9:5b: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5D:8D:51:61:36:BB:77:02:DA:B7:C2:B3:44:BA:4A:0F:5C:98:18 X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4c:ff:f9:ee:2b:28:f1:78:dc:5c:eb:97:62:c6:89:a9:26: a3:c3:05:2b:f9:b4:17:fd:59:79:12:5a:56:65:ca:cd:15:19: 90:a9:fd:58:00:15:56:53:24:b7:cc:63:03:f4:02:52:e6:74: 49:5d:28:2f:fe:70:d2:6e:a6:21:00:0c:e4:b7:e7:6e:03:2d: 6b:8d:57:b0:27:5c:ff:2a:d5:76:5c:c0:ca:9b:5a:a7:ee:24: ef:d1:c5:80:7e:2d:b4:1d:87:72:5f:9e:3a:12:19:57:2b:7d: 46:b6:fc:0a:8f:a8:b7:07:a3:f0:9e:e8:d0:92:7f:f1:45:0f: d5:a3:65:1a:0e:7e:5f:f2:b3:96:f5:0c:23:fe:af:be:e1:3e: 29:60:52:d6:c0:3b:e3:7a:05:cd:35:76:fd:76:eb:7b:91:96: 5d:a3:c9:dc:25:00:66:38:40:b7:64:48:4b:a8:2a:f3:9a:70: 89:7b:d4:d6:d0:09:d5:6b:00:e1:e8:4f:86:a2:da:34:9d:ee: 92:fa:48:86:e6:f8:49:1b:80:d8:fb:17:32:2a:e1:77:b7:29: 5c:da:6f:f2:dc:bf:27:c8:9b:00:6a:d1:6e:31:77:b5:1d:d3: 52:0c:98:9d:e0:1e:fd:a5:8a:9c:05:9f:bd:af:a1:7d:93:b6: fe:26:d7:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUwNTEwMTcyNjQzWhcNMjUwNTE3MTcyNjQzWjAYMRYwFAYD VQQDEw02ODFmOGM1My1lMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5NDCE0UzdR4K3m/sKfujtW2+4hCKUYsUdkHbdyTfrotvbGhucN2SFEPsEzj KY4Kzc16AtjcIsW5BOWZi5yrb7hCgHkWwDKm5AddbwfnKqiWvfpx43kx+LuQtasH TpDTHu0rf8sqNP7JezC+VNq4hxXej236AL0DXicS1+8HNld1Br2J42shDScTbSeH cGWDzpg1c/OcrSrMpdliWaqiQEXiiwZtzGk0aSCRyV9b7A7h3yPhekv+LCZbhmro Cg5t+m4K0zqB4hlW7S8H2MXZZZv02WmWT9K7T1DkVIDjORAHytbgZ5wHktli/hFq JzdD/5CHysDtdmI9WnbtuVsJ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNdjVFh Nrt3Atq3wrNEukoPXJgYMB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqTP/57iso8XjcXOuXYsaJqSajwwUr+bQX/Vl5ElpWZcrNFRmQqf1Y ABVWUyS3zGMD9AJS5nRJXSgv/nDSbqYhAAzkt+duAy1rjVewJ1z/KtV2XMDKm1qn 7iTv0cWAfi20HYdyX546EhlXK31GtvwKj6i3B6PwnujQkn/xRQ/Vo2UaDn5f8rOW 9Qwj/q++4T4pYFLWwDvjegXNNXb9dut7kZZdo8ncJQBmOEC3ZEhLqCrzmnCJe9TW 0AnVawDh6E+Goto0ne6S+kiG5vhJG4DY+xcyKuF3tylc2m/y3L8nyJsAatFuMXe1 HdNSDJid4B79pYqcBZ+9r6F9k7b+Jtdc -----END CERTIFICATE-----Generated at Sun May 11 12:23:38 2025 by rpki-client