$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: z8pFUGHFWHHwYsY1u/32JM+jPRKjR537EMqVMHrU4gw= Subject key identifier: 19:FB:B3:DD:12:02:AB:E0:09:05:EA:BF:90:79:24:CA:47:88:53:17 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0956 Signing time: Wed 14 May 2025 20:47:32 +0000 Manifest this update: Wed 14 May 2025 20:47:32 +0000 Manifest next update: Wed 21 May 2025 20:47:32 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: Pwjomb1psnaYA025XKf/t+/pgfpAV+PkVj2ZRrf2a1c=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: AnxZMWG1/qyOSRCk3a+YCfaArWrcp/mUCUyzTLKhm8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: May 14 20:47:32 2025 GMT Not After : May 21 20:47:32 2025 GMT Subject: CN=68250164-58d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:a2:62:fc:58:bd:73:1b:05:4c:82:77:bd: 64:b3:40:96:6d:4a:3e:62:1f:2b:fd:e7:d2:a7:e1: ae:ef:3e:02:e9:38:85:e3:34:63:5a:6d:6f:62:e8: a9:89:64:7e:61:1e:06:2b:f2:16:9b:c7:16:45:1e: 21:a3:f6:5d:ce:9f:68:6f:fa:ce:3f:c7:61:3a:97: e1:f9:e3:86:51:ac:91:9a:d5:c8:40:34:28:d6:1d: 5a:d2:e7:c1:c8:d6:a3:59:7e:a7:03:e5:ae:f5:31: d1:6a:0c:63:d8:c2:12:d1:b1:9a:15:03:77:00:ea: 5e:f7:b3:3f:c1:11:97:c5:c9:a0:8c:d4:26:d9:72: 25:5c:bb:80:6b:cd:b4:8e:2d:2c:ab:9c:df:65:ec: 14:8e:12:2d:ff:2e:47:77:b1:bd:ba:08:7a:b0:99: a6:ab:45:09:fb:bd:2e:3d:5f:22:16:fc:35:f8:77: 0f:fb:d9:32:02:4d:b9:7c:45:56:85:48:be:a0:2b: bc:60:1d:a4:3f:68:80:7c:15:3b:3c:18:0b:74:c8: 4e:e6:6b:14:71:9a:2c:8c:0d:4a:8a:c0:3c:25:c3: 17:60:bc:e7:a7:51:83:57:57:53:7a:38:0e:20:1a: 8f:6b:fe:0e:2f:c4:29:ca:b5:77:7a:51:4a:76:17: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FB:B3:DD:12:02:AB:E0:09:05:EA:BF:90:79:24:CA:47:88:53:17 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7e:12:26:4f:ce:80:90:01:66:04:58:97:05:0e:ba:c6:2c: fc:fe:73:95:67:63:ab:ec:12:19:6f:5a:90:c7:f1:4e:3a:c6: 6f:2c:22:fe:03:6f:40:ab:7a:0f:03:38:44:30:12:24:5a:13: 51:2f:7e:f8:f2:32:4d:40:05:33:0f:99:02:22:5d:57:bd:b4: 0f:b8:b4:99:65:a9:41:7d:12:53:a8:72:eb:b0:c6:12:1d:c7: 52:2f:c8:49:ba:41:2d:ae:43:d6:2b:3c:a1:79:f8:de:89:c4: 3e:dd:fd:f9:ea:04:30:ca:c6:11:88:3c:1a:d8:77:63:6c:b0: cc:24:e8:a3:d2:ae:d8:26:08:aa:b7:42:5f:9d:eb:61:88:09: 47:b6:b7:b0:ac:29:0c:2c:5e:2b:05:cb:46:73:16:02:17:26: 36:3a:eb:e3:7d:3f:ef:4d:d9:2f:d6:45:ff:42:76:bb:10:35: 59:48:81:a1:bf:c1:b7:57:23:16:70:da:70:dd:fd:1f:25:05: c8:ff:1f:7d:2f:4b:b3:1e:c0:ef:79:b5:f4:b6:53:c3:7d:ae: bc:48:b6:8e:e0:0b:6c:b9:ea:62:22:db:15:56:74:33:94:af: 71:08:2c:4d:69:23:79:89:9d:20:6c:dc:41:8e:42:0a:ac:3a: 84:0f:14:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjUwNTE0MjA0NzMyWhcNMjUwNTIxMjA0NzMyWjAYMRYwFAYD VQQDEw02ODI1MDE2NC01OGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs22iYvxYvXMbBUyCd71ks0CWbUo+Yh8r/efSp+Gu7z4C6TiF4zRjWm1vYuip iWR+YR4GK/IWm8cWRR4ho/Zdzp9ob/rOP8dhOpfh+eOGUayRmtXIQDQo1h1a0ufB yNajWX6nA+Wu9THRagxj2MIS0bGaFQN3AOpe97M/wRGXxcmgjNQm2XIlXLuAa820 ji0sq5zfZewUjhIt/y5Hd7G9ugh6sJmmq0UJ+70uPV8iFvw1+HcP+9kyAk25fEVW hUi+oCu8YB2kP2iAfBU7PBgLdMhO5msUcZosjA1KisA8JcMXYLznp1GDV1dTejgO IBqPa/4OL8QpyrV3elFKdheBFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBn7s90S AqvgCQXqv5B5JMpHiFMXMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdfhImT86AkAFmBFiXBQ66xiz8/nOVZ2Or7BIZb1qQx/FOOsZvLCL+ A29Aq3oPAzhEMBIkWhNRL3748jJNQAUzD5kCIl1XvbQPuLSZZalBfRJTqHLrsMYS HcdSL8hJukEtrkPWKzyhefjeicQ+3f356gQwysYRiDwa2HdjbLDMJOij0q7YJgiq t0JfnethiAlHtrewrCkMLF4rBctGcxYCFyY2OuvjfT/vTdkv1kX/Qna7EDVZSIGh v8G3VyMWcNpw3f0fJQXI/x99L0uzHsDvebX0tlPDfa68SLaO4AtsuepiItsVVnQz lK9xCCxNaSN5iZ0gbNxBjkIKrDqEDxTF -----END CERTIFICATE-----Generated at Thu May 15 12:30:27 2025 by rpki-client