$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json) Hash identifier: vxpw00ppcuWZNwY/FyhIxwGsvN8w0wqbaxYCQ2QGWEk= Subject key identifier: 26:5B:59:CC:15:88:DC:D2:72:83:0A:C4:CE:36:E0:15:2B:EB:8A:3D Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft Manifest number: 04D4 Signing time: Mon 12 May 2025 23:35:52 +0000 Manifest this update: Mon 12 May 2025 23:35:52 +0000 Manifest next update: Mon 19 May 2025 23:35:52 +0000 Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: o2xDn9ROxRnuc4uD/WtclJFNxjjRKu3xxDNKziGrWhA=) 2: D3001978D03B11ECA7C18D2DC4F9AE02.roa (hash: vi6p9KgYknGhreGBPh3kN54oohxRsUYwMbP9umzMvS4=) 3: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: VeKl0MHR8TI54m6waTajw/toZ1ifpbQZ1lUNcn/xegU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: May 12 23:35:52 2025 GMT Not After : May 19 23:35:52 2025 GMT Subject: CN=682285d8-037c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:97:bc:13:e7:4e:6b:e8:2a:c5:96:47:85: 51:bf:96:96:36:3a:fb:3f:f8:14:2d:c6:bd:5d:ff: ab:63:f5:77:e0:0a:d2:51:d6:ea:3a:4e:b0:bb:9f: b7:3e:be:e8:7f:3d:ea:1c:7d:71:74:db:34:cb:2e: 4d:76:2a:7d:0b:da:47:e2:2a:19:82:41:5a:cb:e9: ca:d3:a3:6f:7d:7a:fb:83:f2:d7:1a:d8:6a:ec:4f: ca:e3:2b:c4:d7:56:8f:36:04:81:a3:a3:8a:5a:1f: 68:5f:91:7a:d8:fe:87:c0:62:66:6d:20:3a:ae:40: df:ba:a5:f9:9a:ad:da:f8:0c:11:f7:2f:13:a2:f8: 0d:9e:17:5a:ba:70:eb:04:6f:32:d1:38:fc:4f:2b: df:17:f7:30:19:33:d2:95:c1:b4:af:be:22:b8:ff: 75:48:2c:0f:17:08:18:49:24:c0:d1:05:22:4d:11: f2:a1:5e:74:23:40:e8:16:e7:c3:25:ce:be:41:ba: 3d:96:1e:ad:7d:95:6b:00:79:75:10:59:fa:a5:26: 56:56:94:3f:cd:a1:63:e3:ae:9b:ae:79:a2:93:6e: 21:df:7c:e8:bd:60:74:9e:2f:59:6c:71:db:14:ed: a5:18:59:54:0d:ac:c0:5a:7b:38:1a:b5:7f:e2:3a: 69:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5B:59:CC:15:88:DC:D2:72:83:0A:C4:CE:36:E0:15:2B:EB:8A:3D X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:d3:a4:fc:45:04:8d:c7:37:48:38:7e:41:15:b3:6a:53:fb: 63:d8:b4:12:4b:d3:9a:35:bb:87:28:c6:c7:b1:57:f6:63:d3: 87:45:9f:68:06:c5:d4:15:c3:e5:14:34:b0:c5:9c:bb:d7:dd: 58:f7:d1:4d:85:0e:5d:73:62:5a:ca:4f:fc:79:17:7b:f7:26: 84:e0:6b:4d:55:ef:36:91:0f:15:a7:76:52:91:77:80:28:73: bf:46:57:d0:30:d6:d9:a7:5a:8e:c2:95:0e:09:fb:44:d1:4c: 0c:20:0d:c3:99:44:31:b8:a9:5c:7d:ad:a6:3e:f6:8c:4b:4e: 15:6b:34:2d:06:e2:36:cd:d4:14:71:db:99:7a:e5:8d:12:2f: 38:fa:61:80:fb:9e:d4:8e:02:f6:3c:1f:26:a9:17:a6:11:00: a9:e0:35:6e:76:b4:61:7e:ac:1c:87:94:e5:91:8a:40:ed:61: 67:b1:29:1a:cd:48:23:72:21:d0:ed:45:04:fe:51:10:92:78: c3:0f:b3:b3:12:f0:61:7b:ce:21:b3:82:9f:4f:21:9b:2d:ca: 95:c7:48:aa:e8:6f:20:89:2c:5a:9d:8d:ca:b4:95:20:4f:f5: 3f:41:26:b4:b7:84:20:b8:b5:b0:32:c0:84:e6:8b:f1:c9:3c: 05:db:c7:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjUwNTEyMjMzNTUyWhcNMjUwNTE5MjMzNTUyWjAYMRYwFAYD VQQDEw02ODIyODVkOC0wMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKiXvBPnTmvoKsWWR4VRv5aWNjr7P/gULca9Xf+rY/V34ArSUdbqOk6wu5+3 Pr7ofz3qHH1xdNs0yy5Ndip9C9pH4ioZgkFay+nK06NvfXr7g/LXGthq7E/K4yvE 11aPNgSBo6OKWh9oX5F62P6HwGJmbSA6rkDfuqX5mq3a+AwR9y8TovgNnhdaunDr BG8y0Tj8TyvfF/cwGTPSlcG0r74iuP91SCwPFwgYSSTA0QUiTRHyoV50I0DoFufD Jc6+Qbo9lh6tfZVrAHl1EFn6pSZWVpQ/zaFj466brnmik24h33zovWB0ni9ZbHHb FO2lGFlUDazAWns4GrV/4jppbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZbWcwV iNzScoMKxM424BUr64o9MB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG Mm1FQkNBLVlNaS05WlpHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz06T8RQSNxzdIOH5BFbNqU/tj2LQSS9OaNbuHKMbHsVf2Y9OHRZ9o BsXUFcPlFDSwxZy7191Y99FNhQ5dc2Jayk/8eRd79yaE4GtNVe82kQ8Vp3ZSkXeA KHO/RlfQMNbZp1qOwpUOCftE0UwMIA3DmUQxuKlcfa2mPvaMS04VazQtBuI2zdQU cduZeuWNEi84+mGA+57UjgL2PB8mqRemEQCp4DVudrRhfqwch5TlkYpA7WFnsSka zUgjciHQ7UUE/lEQknjDD7OzEvBhe84hs4KfTyGbLcqVx0iq6G8giSxanY3KtJUg T/U/QSa0t4QguLWwMsCE5ovxyTwF28e4 -----END CERTIFICATE-----Generated at Tue May 13 04:12:47 2025 by rpki-client