$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json) Hash identifier: ogLCwWVwLl+eceAU2fJmrYEnNn2DQn1bFNvnPZqmL/M= Subject key identifier: 54:AA:B6:91:0B:37:AB:94:7A:74:39:A0:31:79:58:5E:15:15:C5:63 Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft Manifest number: 09C8 Signing time: Wed 14 May 2025 20:34:39 +0000 Manifest this update: Wed 14 May 2025 20:34:39 +0000 Manifest next update: Wed 21 May 2025 20:34:39 +0000 Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: QZaG3B+IbCP9SPUmAXDy3fNh2I1T3YjZDNo6B4mcpOg=) 2: 2EC10CF4071C11EFAD19C863C4F9AE02.roa (hash: Y+jK0YiITj1fWstmg7VEHVKcSXHK5MXXLGNw5LXxFzk=) 3: C4DB3710B0BC11EFA44BCA7DC4F9AE02.roa (hash: gWIB+Y9hTKP+TMLvq+0rVTxIDDpRJJpgLYlkfQUCFsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: May 14 20:34:39 2025 GMT Not After : May 21 20:34:39 2025 GMT Subject: CN=6824fe5f-c86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2c:f6:90:9a:0a:2f:6b:5c:ee:9c:f0:e3:d1: 08:b1:f0:ab:86:19:25:d9:b6:eb:c8:2d:22:5a:3e: 1c:8f:a0:18:ff:15:87:33:39:4f:70:ba:ab:f2:74: b4:58:57:e2:da:62:3d:0f:b8:39:69:8d:24:12:a6: a8:24:89:8c:a2:54:cb:40:a3:3f:19:12:06:ca:75: a1:77:c4:7f:c2:f4:88:a6:fa:8c:4e:88:c1:d2:ad: fa:6d:0d:20:a8:53:25:45:62:7e:09:24:af:1c:37: 23:1f:48:1f:d9:7c:5f:49:ae:3b:ec:a9:cf:33:7f: 98:e3:75:da:e9:5f:08:8f:60:e1:b9:70:c7:01:5e: 07:e5:bb:70:ca:0b:35:63:ba:a5:a1:95:6d:68:87: d5:a5:37:dd:c5:85:f1:10:1f:9b:07:00:23:f5:99: 9d:83:0f:cd:cb:98:4e:10:f8:a9:9c:a6:e3:67:45: 35:79:2a:d2:eb:56:06:8e:fd:53:90:c7:79:5d:43: 01:a2:b3:3a:77:05:32:72:32:68:d4:fa:f9:d4:87: fc:72:57:c0:cc:3a:98:98:fd:fa:d0:ac:d6:42:9c: a9:df:ad:69:e5:4b:df:80:53:22:b4:6f:59:b8:fd: 98:6a:3f:5b:97:09:cb:15:95:37:18:54:44:5f:f3: 3f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AA:B6:91:0B:37:AB:94:7A:74:39:A0:31:79:58:5E:15:15:C5:63 X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:83:f4:f1:88:c7:82:e3:42:89:30:ef:31:21:60:2b:45:25: e5:14:65:e8:a0:18:9e:5c:9e:eb:be:c8:32:4a:10:f3:2f:4b: be:d6:02:95:4f:fe:9c:7b:67:ad:d2:cf:da:8e:87:9d:36:11: 21:d7:ae:d2:0b:c5:43:ed:f1:eb:c4:22:77:14:11:34:d7:51: db:5d:73:9f:9b:8e:11:b4:19:80:aa:d4:6a:42:25:b5:84:9f: 1f:53:99:b9:d4:7e:29:39:a3:c7:b8:5f:95:22:35:3a:dc:f2: 72:7e:00:b3:52:a5:e9:ae:e4:fe:13:95:04:4e:b4:6f:c0:57: 44:6c:17:f0:ba:02:a5:46:a6:be:ba:63:73:3d:0b:57:35:66: 82:c8:62:b4:99:ef:c5:d4:8e:4f:f9:04:83:62:79:77:5d:65: e1:0d:d9:28:16:5d:3c:00:72:8d:cc:13:1e:01:03:dc:47:fc: b8:fb:fb:06:d7:4f:82:49:e6:64:b2:82:8e:69:17:c6:10:59: bf:3a:49:ee:8c:da:52:1e:a8:5c:8d:48:55:ff:26:c5:d5:a8: 0d:46:e4:68:d9:b7:13:d5:89:99:7b:fc:8d:3a:0b:44:12:e5: 18:3b:00:47:0b:f1:d3:33:c2:82:b8:ef:e8:1e:fd:88:ad:c3: 3f:75:84:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw NTIxNEZDOUYwHhcNMjUwNTE0MjAzNDM5WhcNMjUwNTIxMjAzNDM5WjAYMRYwFAYD VQQDEw02ODI0ZmU1Zi1jODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yz2kJoKL2tc7pzw49EIsfCrhhkl2bbryC0iWj4cj6AY/xWHMzlPcLqr8nS0 WFfi2mI9D7g5aY0kEqaoJImMolTLQKM/GRIGynWhd8R/wvSIpvqMTojB0q36bQ0g qFMlRWJ+CSSvHDcjH0gf2XxfSa477KnPM3+Y43Xa6V8Ij2DhuXDHAV4H5btwygs1 Y7qloZVtaIfVpTfdxYXxEB+bBwAj9Zmdgw/Ny5hOEPipnKbjZ0U1eSrS61YGjv1T kMd5XUMBorM6dwUycjJo1Pr51If8clfAzDqYmP360KzWQpyp361p5UvfgFMitG9Z uP2Yaj9blwnLFZU3GFREX/M/zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSqtpEL N6uUenQ5oDF5WF4VFcVjMB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4 OXV2RVBBRUxrMTRGSVVfSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkg/TxiMeC40KJMO8xIWArRSXlFGXooBieXJ7rvsgyShDzL0u+1gKV T/6ce2et0s/ajoedNhEh167SC8VD7fHrxCJ3FBE011HbXXOfm44RtBmAqtRqQiW1 hJ8fU5m51H4pOaPHuF+VIjU63PJyfgCzUqXpruT+E5UETrRvwFdEbBfwugKlRqa+ umNzPQtXNWaCyGK0me/F1I5P+QSDYnl3XWXhDdkoFl08AHKNzBMeAQPcR/y4+/sG 10+CSeZksoKOaRfGEFm/OknujNpSHqhcjUhV/ybF1agNRuRo2bcT1YmZe/yNOgtE EuUYOwBHC/HTM8KCuO/oHv2IrcM/dYSc -----END CERTIFICATE-----Generated at Thu May 15 00:16:42 2025 by rpki-client