$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: 8GvCxSlw04lbEXKxkHz+MckStA5fS6PJciq/NlqZBys= Subject key identifier: 61:9A:91:A7:D4:37:85:22:43:7C:2F:D7:F6:62:05:E7:8F:CF:57:A7 Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0D22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0D0E Signing time: Sat 10 May 2025 17:54:43 +0000 Manifest this update: Sat 10 May 2025 17:54:43 +0000 Manifest next update: Sat 17 May 2025 17:54:43 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: cConW88BFcILIM48KmU/VHI3mNYn21J+hQ+FtXzTL6Q=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: tiA64s/MRKlR1BkumxbFlRLnmMmyLTM+IqS1j/mgdbk=) 3: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: yftNfagXlQP7kWCYM4or16TNugYWxYDf4262IfQW/IU=) 4: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: 9JHcHgmG+w7bGvnU6/Eo85gv0xWCdlnreQQjOwseAsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3362 (0xd22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: May 10 17:54:43 2025 GMT Not After : May 17 17:54:43 2025 GMT Subject: CN=681f92e3-a3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:cc:0a:fe:ab:39:27:a0:1b:d8:2e:05:2e: a3:47:01:28:1f:73:be:9b:2b:20:79:49:f6:f9:ec: 24:22:81:f5:60:3f:52:ce:4f:61:10:dc:14:49:a6: da:d9:32:a0:b7:01:f3:be:d4:9a:15:39:3e:0f:ba: 96:93:59:7b:13:94:ab:f9:7b:07:76:40:ce:8a:1c: a6:17:7e:0f:fe:d8:48:42:2f:b8:42:da:42:44:32: 31:ce:77:88:7e:85:18:a2:a1:da:fd:b9:a7:a8:d5: 94:3b:3a:ab:63:2b:76:f8:2c:02:9d:f5:e4:ce:99: 8a:cc:11:61:cd:23:b1:8e:a8:95:ec:b0:30:2c:13: 67:56:8a:0b:cd:da:fb:d6:c8:c2:8a:28:a5:53:5c: 9d:99:55:96:f6:d1:c1:3a:3f:b1:ba:d1:e9:b7:df: 52:b9:8e:a5:17:dc:ae:24:c7:04:77:35:ef:41:84: 71:5e:15:b6:a4:e7:d4:2f:59:7d:66:14:25:7e:e1: d9:1c:f3:90:02:89:d7:e9:a6:e4:70:a3:c8:75:17: 85:56:2f:8f:c4:af:b5:3f:45:97:73:fe:a1:ab:51: e2:db:80:2a:ba:a0:84:e5:7d:57:c6:6a:a8:a5:97: 47:66:bc:dd:44:ef:19:0e:6b:70:4a:c0:d9:8f:6d: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9A:91:A7:D4:37:85:22:43:7C:2F:D7:F6:62:05:E7:8F:CF:57:A7 X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:5d:5f:db:e2:1d:09:c9:22:74:bc:03:3c:39:2e:d3:e7:e8: 09:e0:88:00:77:f1:17:4a:d8:37:bc:f7:cd:8a:74:39:40:a3: fc:c3:c2:54:34:68:9f:b1:86:e6:5c:84:18:d7:4a:1e:32:3d: 91:51:c4:c7:64:2e:8c:b3:e1:4b:6f:d1:eb:90:eb:e9:a6:36: e8:95:cf:a1:a5:22:9f:e1:3b:4e:c1:f2:b9:5c:c8:0d:a4:20: ce:a0:00:c2:c8:e9:8e:6b:73:fc:d7:67:bb:d1:e7:d4:17:ff: 4a:7f:7d:18:a3:96:66:41:4c:ff:c4:51:03:d6:e8:93:e1:20: 79:07:5f:19:65:af:a2:e6:ad:0c:24:69:9c:5e:ba:8b:8f:cb: b2:30:e0:e3:21:ce:30:fb:7b:88:34:42:91:d1:b3:a0:ad:89: 7f:1a:9a:85:7f:dd:88:85:55:5f:0c:81:50:19:65:20:58:ae: e1:bd:36:9b:58:37:de:95:dc:32:32:26:a6:54:76:4e:30:c2: cb:9b:09:d0:90:c3:54:22:5c:3f:64:de:27:7a:54:83:8a:20: 67:e4:a3:3a:b6:67:f3:a5:c6:cf:43:50:59:e1:8e:2b:06:4e: d6:28:27:1b:c5:f9:2a:78:2a:21:f9:87:6b:f4:87:6d:67:bf: 9c:ed:22:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjUwNTEwMTc1NDQzWhcNMjUwNTE3MTc1NDQzWjAYMRYwFAYD VQQDEw02ODFmOTJlMy1hM2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSfMCv6rOSegG9guBS6jRwEoH3O+mysgeUn2+ewkIoH1YD9Szk9hENwUSaba 2TKgtwHzvtSaFTk+D7qWk1l7E5Sr+XsHdkDOihymF34P/thIQi+4QtpCRDIxzneI foUYoqHa/bmnqNWUOzqrYyt2+CwCnfXkzpmKzBFhzSOxjqiV7LAwLBNnVooLzdr7 1sjCiiilU1ydmVWW9tHBOj+xutHpt99SuY6lF9yuJMcEdzXvQYRxXhW2pOfUL1l9 ZhQlfuHZHPOQAonX6abkcKPIdReFVi+PxK+1P0WXc/6hq1Hi24AquqCE5X1Xxmqo pZdHZrzdRO8ZDmtwSsDZj23YtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGakafU N4UiQ3wv1/ZiBeePz1enMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+XV/b4h0JySJ0vAM8OS7T5+gJ4IgAd/EXStg3vPfNinQ5QKP8w8JU NGifsYbmXIQY10oeMj2RUcTHZC6Ms+FLb9HrkOvppjbolc+hpSKf4TtOwfK5XMgN pCDOoADCyOmOa3P812e70efUF/9Kf30Yo5ZmQUz/xFED1uiT4SB5B18ZZa+i5q0M JGmcXrqLj8uyMODjIc4w+3uINEKR0bOgrYl/GpqFf92IhVVfDIFQGWUgWK7hvTab WDfeldwyMiamVHZOMMLLmwnQkMNUIlw/ZN4nelSDiiBn5KM6tmfzpcbPQ1BZ4Y4r Bk7WKCcbxfkqeCoh+Ydr9IdtZ7+c7SJH -----END CERTIFICATE-----Generated at Mon May 12 11:24:22 2025 by rpki-client