$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: 3tY2kXqGPzTiFDWPzDWT0BHOnlIGnHL4+/rSdUDyElE= Subject key identifier: B9:A9:DF:41:4D:BD:DC:1F:D3:60:06:5D:0D:2E:89:A0:C0:F9:3B:A2 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0906 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 1260 Signing time: Mon 12 May 2025 19:55:45 +0000 Manifest this update: Mon 12 May 2025 19:55:45 +0000 Manifest next update: Mon 19 May 2025 19:55:45 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: i+jLBrF1oDgK2pEXkJRTbhRrBXq/TPnu1SZsdwjAbWw=) 2: 38548A62EDC011EF82A1C85BC4F9AE02.roa (hash: NR90n3hD0iN+wJNiZGZM+dVTFYNLmapWU9u6Yuwslvs=) 3: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: zfbAmczU0TvDg++Ahlw3nwgh74bmLp4RT834l0v2hLY=) 4: 2944DC90B57E11EFB31B630FC4F9AE02.roa (hash: LIT5TNu9i//v3laD/Jx0lP/RjQSe9WAE0qoyMHUVSVc=) 5: F585B320A4ED11EFBA65C13CC4F9AE02.roa (hash: svSsv7iDDsESPj4djUfhOIqdOSSzOy7GY2n53ZHUYRM=) 6: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: yTR181mMOhFtz0/zNI7qM2KlctQHTJXyuSeldVEFcuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2310 (0x906) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: May 12 19:55:45 2025 GMT Not After : May 19 19:55:45 2025 GMT Subject: CN=68225241-33c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:e3:fe:10:a3:04:65:20:db:3b:f3:bf:ad: 29:79:98:18:ec:0f:4f:96:15:39:32:7d:9a:1d:0f: 7e:35:67:e9:ff:5a:88:48:ae:c7:15:3a:06:b2:60: 77:27:33:4b:4c:50:3c:09:9d:44:97:8c:2a:fe:cf: f3:09:35:9d:bd:8f:84:42:5e:24:2d:32:71:26:13: 27:a5:a8:73:76:44:9f:d3:0a:14:a1:5a:02:0f:d5: cf:6b:19:5c:ba:17:40:62:1a:1e:3e:fc:66:35:6c: bb:4d:ff:ae:c3:bb:37:30:04:d9:b3:f9:9a:fb:ca: 1d:3d:88:e2:35:c4:87:47:22:cd:f5:35:52:f8:63: 39:fc:48:b0:9b:04:e7:c9:54:3b:5c:7c:0c:bd:79: ca:c2:f2:45:d1:87:cd:64:be:71:48:35:b8:30:97: 3c:cf:fd:dc:a4:9b:3b:88:23:04:94:e7:2c:da:d5: ea:5a:d3:a0:3d:a6:2b:98:f5:b9:7d:7d:a7:0f:2f: 42:be:76:ce:05:3f:b5:26:56:58:79:c2:bc:3c:a5: 9b:58:8c:34:dc:27:b9:05:cf:2e:03:0e:76:91:ed: b5:cb:df:57:88:75:44:ac:c0:7c:11:62:e7:a9:5d: d2:83:f3:8b:7a:9f:4c:2c:e9:68:21:89:6b:a5:90: b7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A9:DF:41:4D:BD:DC:1F:D3:60:06:5D:0D:2E:89:A0:C0:F9:3B:A2 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2a:d3:85:33:b7:97:04:cc:d5:ba:46:b7:10:91:22:6d:93: 18:e1:71:4e:fa:84:f5:f9:b9:d7:90:57:3e:41:05:c6:21:61: cc:53:c3:14:78:83:cf:ff:21:bf:7a:d8:86:8d:e1:37:e0:69: b5:cc:ad:d1:d7:ee:aa:89:66:c8:16:f3:02:4d:18:86:33:7a: 55:de:ff:eb:1f:18:a8:7f:43:5a:69:03:87:db:9d:5f:99:f1: c1:b6:71:9d:4b:b6:e2:60:87:3a:e0:32:69:02:ae:93:ae:7b: a2:1c:0f:b2:f7:2e:fa:29:c9:53:b7:c7:da:27:90:c3:f7:bf: 7e:73:dc:23:3b:95:e8:73:6c:c0:91:75:35:d8:42:f5:a3:61: f5:05:15:19:3f:11:28:12:3b:36:d4:67:e8:c1:be:28:8c:9b: fd:87:c6:b8:cd:67:ee:d3:df:da:0a:f2:26:e5:8e:e0:eb:f6: a3:73:ab:d4:55:2f:46:82:a8:53:d8:f1:5c:4b:83:89:9f:a9: 01:00:9d:11:b6:d8:e1:3f:a1:12:d9:8b:96:47:fe:39:ed:10: 42:c6:93:b5:1d:4a:5b:65:aa:83:16:5d:80:c0:7c:9b:3a:8b: 28:61:ce:0f:53:ff:d8:43:44:3f:a0:eb:f2:97:ec:3b:aa:51: d9:e6:f8:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwNTEyMTk1NTQ1WhcNMjUwNTE5MTk1NTQ1WjAYMRYwFAYD VQQDEw02ODIyNTI0MS0zM2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09Tj/hCjBGUg2zvzv60peZgY7A9PlhU5Mn2aHQ9+NWfp/1qISK7HFToGsmB3 JzNLTFA8CZ1El4wq/s/zCTWdvY+EQl4kLTJxJhMnpahzdkSf0woUoVoCD9XPaxlc uhdAYhoePvxmNWy7Tf+uw7s3MATZs/ma+8odPYjiNcSHRyLN9TVS+GM5/EiwmwTn yVQ7XHwMvXnKwvJF0YfNZL5xSDW4MJc8z/3cpJs7iCMElOcs2tXqWtOgPaYrmPW5 fX2nDy9CvnbOBT+1JlZYecK8PKWbWIw03Ce5Bc8uAw52ke21y99XiHVErMB8EWLn qV3Sg/OLep9MLOloIYlrpZC3FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmp30FN vdwf02AGXQ0uiaDA+TuiMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbKtOFM7eXBMzVuka3EJEibZMY4XFO+oT1+bnXkFc+QQXGIWHMU8MU eIPP/yG/etiGjeE34Gm1zK3R1+6qiWbIFvMCTRiGM3pV3v/rHxiof0NaaQOH251f mfHBtnGdS7biYIc64DJpAq6TrnuiHA+y9y76KclTt8faJ5DD979+c9wjO5Xoc2zA kXU12EL1o2H1BRUZPxEoEjs21Gfowb4ojJv9h8a4zWfu09/aCvIm5Y7g6/ajc6vU VS9GgqhT2PFcS4OJn6kBAJ0RttjhP6ES2YuWR/457RBCxpO1HUpbZaqDFl2AwHyb OosoYc4PU//YQ0Q/oOvyl+w7qlHZ5viJ -----END CERTIFICATE-----Generated at Tue May 13 11:49:06 2025 by rpki-client