$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft File: fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json) Hash identifier: 9CLzwCDpsSBH+CS7RAm0LJ0VALi9/9JjfRAzcrVG2ZU= Subject key identifier: 73:65:0A:DD:F9:C8:F6:FF:BF:7D:91:FF:D4:E9:A5:14:3E:E8:3F:EF Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Certificate serial: 090F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft Manifest number: 1ED3 Signing time: Wed 14 May 2025 16:51:25 +0000 Manifest this update: Wed 14 May 2025 16:51:25 +0000 Manifest next update: Wed 21 May 2025 16:51:25 +0000 Files and hashes: 1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: EiOMKoMZ/MBtvpvY7dcjKklEPScdFYK6VeUNSEz54vA=) 2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: vKmmh6WIOEqHjc9HRB9xmdHJEo2LxIyyZG3CXzn2ZyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2319 (0x90f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Validity Not Before: May 14 16:51:25 2025 GMT Not After : May 21 16:51:25 2025 GMT Subject: CN=6824ca0d-9cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:9c:07:a3:a4:d6:0f:b9:a8:08:3a:56:69: 73:37:3b:d6:69:d4:04:56:d6:7d:67:65:5c:47:f4: 61:0d:34:04:93:51:9f:88:b1:50:b2:b8:52:12:b3: f3:b6:15:05:96:50:3b:bf:48:80:fd:8e:35:ee:d6: b8:b5:aa:1f:fa:e9:1e:1f:d9:3c:28:0e:40:2c:49: de:57:f7:52:89:23:d3:e5:7f:f3:3d:b5:84:8d:7e: 41:0a:ac:1c:58:41:8b:e9:d8:92:45:6e:94:65:5f: 29:7e:97:2f:4d:2a:44:db:e9:f9:c4:53:22:57:3f: b4:43:45:34:96:7b:58:69:4a:9b:63:2c:91:cf:0d: 9b:6f:50:0b:84:76:16:1f:f8:35:20:3b:84:9f:d0: 14:19:f4:ba:96:e4:b5:fa:13:f0:26:dc:23:5a:24: 2c:2a:c1:87:15:46:c4:94:98:0b:ed:fd:da:f5:57: 71:50:53:01:53:31:02:d0:a7:d0:5c:f1:43:3f:80: 6c:09:e9:91:e9:a1:91:3d:ff:be:40:be:8c:4e:09: c2:0f:1d:a0:56:83:59:1c:b9:6a:c9:5c:dd:a7:c5: fb:44:5a:2c:1f:fd:6b:3a:04:f6:a4:0f:22:71:b9: f5:a4:73:b4:0c:85:5c:5f:cc:80:fd:d4:4f:22:6b: b0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:65:0A:DD:F9:C8:F6:FF:BF:7D:91:FF:D4:E9:A5:14:3E:E8:3F:EF X509v3 Authority Key Identifier: keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f6:00:d8:b5:f8:15:57:31:e6:45:c3:da:9b:02:7e:0f:52: b6:65:71:d7:e2:62:a7:64:b5:c5:6a:d1:ce:e9:b1:96:d0:6e: 2b:f7:c0:07:65:2f:e8:a1:a0:b8:ba:f9:c6:15:79:fa:2a:b9: f1:8d:27:e6:ed:07:d8:46:d7:a1:80:1f:16:e4:99:90:60:3a: 5f:f2:e9:35:83:8a:22:85:ea:f3:13:56:0a:83:a0:37:8b:3e: de:09:13:8b:fc:5c:85:32:93:c8:b5:2f:0b:ea:5f:73:d0:71: 9c:ea:31:0c:f9:ae:00:c1:62:df:f8:15:ab:c2:8a:bd:c5:88: 08:ce:0c:0e:fb:b8:d9:74:5b:c3:6d:97:79:ad:ca:2b:50:4a: ab:cb:fc:aa:bb:3d:b0:c8:5f:3b:a1:e6:c8:f9:7e:25:c2:67: 90:67:95:40:ef:df:66:70:a0:34:89:83:31:3a:84:13:91:fc: 9d:ff:16:3b:b6:67:f2:b5:59:b3:7f:b5:c7:bd:08:1a:d4:a7: 46:d0:12:e1:80:d8:0c:4e:fd:73:a5:55:32:7e:25:a0:29:91: 8e:4a:ce:18:a0:c8:51:7d:01:7e:a6:e1:9b:ec:76:70:cc:e8: 71:4e:32:3b:b0:18:0f:85:7c:b5:d9:ea:16:33:61:a3:ec:57: 84:c6:95:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlEMDQxMTAvBgNVBAUTKDdFNjdFODhDQzQwMzc4QTk3MDQ2M0RGMkQwQjA2MDg4 RTY1REI5QjAwHhcNMjUwNTE0MTY1MTI1WhcNMjUwNTIxMTY1MTI1WjAYMRYwFAYD VQQDEw02ODI0Y2EwZC05Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySOcB6Ok1g+5qAg6VmlzNzvWadQEVtZ9Z2VcR/RhDTQEk1GfiLFQsrhSErPz thUFllA7v0iA/Y417ta4taof+ukeH9k8KA5ALEneV/dSiSPT5X/zPbWEjX5BCqwc WEGL6diSRW6UZV8pfpcvTSpE2+n5xFMiVz+0Q0U0lntYaUqbYyyRzw2bb1ALhHYW H/g1IDuEn9AUGfS6luS1+hPwJtwjWiQsKsGHFUbElJgL7f3a9VdxUFMBUzEC0KfQ XPFDP4BsCemR6aGRPf++QL6MTgnCDx2gVoNZHLlqyVzdp8X7RFosH/1rOgT2pA8i cbn1pHO0DIVcX8yA/dRPImuwCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNlCt35 yPb/v32R/9TppRQ+6D/vMB8GA1UdIwQYMBaAFH5n6IzEA3ipcEY98tCwYIjmXbmw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQwNC83MTY2RjM4RTIz NUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVLbHdSajN5MExCZ2lPWmR1 YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZtZm9qTVFEZUtsd1JqM3kwTEJnaU9aZHViQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQwNC83MTY2RjM4RTIzNUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVL bHdSajN5MExCZ2lPWmR1YkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT9gDYtfgVVzHmRcPamwJ+D1K2ZXHX4mKnZLXFatHO6bGW0G4r98AH ZS/ooaC4uvnGFXn6KrnxjSfm7QfYRtehgB8W5JmQYDpf8uk1g4oiherzE1YKg6A3 iz7eCROL/FyFMpPItS8L6l9z0HGc6jEM+a4AwWLf+BWrwoq9xYgIzgwO+7jZdFvD bZd5rcorUEqry/yquz2wyF87oebI+X4lwmeQZ5VA799mcKA0iYMxOoQTkfyd/xY7 tmfytVmzf7XHvQga1KdG0BLhgNgMTv1zpVUyfiWgKZGOSs4YoMhRfQF+puGb7HZw zOhxTjI7sBgPhXy12eoWM2Gj7FeExpUA -----END CERTIFICATE-----Generated at Thu May 15 21:53:41 2025 by rpki-client