$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json) Hash identifier: 7AkiyMymISoFjt/qDMb5j0JK+bB55EGDLAUc7GmmOhI= Subject key identifier: DC:BF:CB:AD:2C:11:E8:4D:E1:B6:75:EF:03:BD:69:BE:AB:A0:26:48 Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft Manifest number: 08AC Signing time: Sat 10 May 2025 20:16:13 +0000 Manifest this update: Sat 10 May 2025 20:16:12 +0000 Manifest next update: Sat 17 May 2025 20:16:12 +0000 Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: 0ohehVtvHnT+TLAL1QyKpc+IrNxEBdyt44SKXVUArFU=) 2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: 23ndFVCcLg+/bCNKhL706A7YBuPjvG2i31lg9YjdTYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Validity Not Before: May 10 20:16:12 2025 GMT Not After : May 17 20:16:12 2025 GMT Subject: CN=681fb40d-a536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:2e:d9:92:a9:b5:f7:2b:ad:b9:e4:2e:22: 62:1c:06:3e:84:bd:00:dc:a7:07:91:50:35:b0:e3: db:22:a2:31:4f:25:d9:75:b9:36:b0:77:5d:5a:ee: 17:03:0c:48:9a:38:d7:11:fe:2c:9d:97:56:08:37: 56:36:2e:8c:be:4b:ef:93:3c:8f:15:0e:d5:1b:fa: a9:a1:4c:cc:db:65:8c:9b:a0:39:ae:df:20:7a:1c: d2:09:54:e4:c5:e2:97:5c:0a:22:3f:fb:4d:6e:f7: 6a:ba:3e:50:a7:98:9d:e9:ec:89:1a:29:1c:04:85: 6d:cf:37:ed:50:d1:19:e0:ee:29:05:80:d7:06:09: c1:bf:d7:74:7b:87:0d:2f:e9:d3:51:07:77:78:c2: de:a0:35:2d:87:e0:c5:00:5b:c2:a8:79:8c:79:06: 6e:c8:71:04:d4:35:ec:13:dc:28:b0:ac:23:93:9e: e2:1a:42:1c:bc:46:12:d8:f8:b4:33:11:45:f1:83: fe:30:4a:c7:49:d4:4d:49:b3:f9:aa:1b:58:5a:68: db:57:3c:0d:4d:65:6b:b6:a1:f9:f4:ef:79:39:49: ed:89:c9:45:d9:47:fa:2d:a1:45:ce:33:fb:60:06: 83:ad:55:01:15:84:e4:04:70:02:8e:de:cb:f0:78: 80:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BF:CB:AD:2C:11:E8:4D:E1:B6:75:EF:03:BD:69:BE:AB:A0:26:48 X509v3 Authority Key Identifier: keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:f9:de:c3:55:c3:7e:b5:45:11:04:92:35:08:bc:76:65:40: 3e:ae:ce:e0:a1:a3:3a:f6:64:76:3f:1c:af:19:7c:49:a1:cf: 75:55:56:4d:38:8c:bc:0d:5c:99:ad:b9:8f:ef:cc:90:61:7b: 28:06:43:e8:ef:67:4d:7d:78:5d:4b:41:4e:63:58:6a:61:03: 36:0e:8d:3b:55:40:0f:75:68:13:b2:ab:60:10:10:3d:d4:a3: fc:75:56:83:c5:4d:98:50:48:44:16:81:e1:ed:b3:23:d2:98: bd:73:04:82:78:e2:2b:96:ac:93:8f:ac:af:86:15:33:47:75: 54:8c:f8:15:6e:4b:7a:00:43:bd:4f:71:37:57:7c:6b:52:1c: 23:4a:28:29:d9:18:ed:f5:6b:27:a1:a7:38:c4:31:fc:ee:17: cb:f4:3d:8c:58:5f:90:2e:34:14:3a:73:b6:e2:16:50:b9:8a: 53:c6:e6:b7:49:90:fa:f1:42:cb:57:49:e8:85:2a:21:a1:96: d4:0b:a8:f3:f0:58:0f:b1:77:70:7d:49:9f:df:42:8a:42:f6: 96:be:93:53:e5:15:c6:8a:50:c6:28:d7:77:2e:cc:3f:d9:da: 0c:a5:ba:4f:0d:3e:06:95:70:b6:56:ff:d4:87:42:0e:8b:a0: 3b:2a:90:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDQ3MEE5MzQ0OUU2MTFGQTlBRDA1QTI4OUQ2MTg4MjIw QjVGQ0ZDM0EwHhcNMjUwNTEwMjAxNjEyWhcNMjUwNTE3MjAxNjEyWjAYMRYwFAYD VQQDEw02ODFmYjQwZC1hNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjAu2ZKptfcrrbnkLiJiHAY+hL0A3KcHkVA1sOPbIqIxTyXZdbk2sHddWu4X AwxImjjXEf4snZdWCDdWNi6MvkvvkzyPFQ7VG/qpoUzM22WMm6A5rt8gehzSCVTk xeKXXAoiP/tNbvdquj5Qp5id6eyJGikcBIVtzzftUNEZ4O4pBYDXBgnBv9d0e4cN L+nTUQd3eMLeoDUth+DFAFvCqHmMeQZuyHEE1DXsE9wosKwjk57iGkIcvEYS2Pi0 MxFF8YP+MErHSdRNSbP5qhtYWmjbVzwNTWVrtqH59O95OUnticlF2Uf6LaFFzjP7 YAaDrVUBFYTkBHACjt7L8HiApwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy/y60s EehN4bZ17wO9ab6roCZIMB8GA1UdIwQYMBaAFEcKk0SeYR+prQWiidYYgiC1/Pw6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yQjczMkU3MEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2bXRCYUtKMWhpQ0lMWDhf RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J3cVRSSjVoSDZtdEJhS0oxaGlDSUxYOF9Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yQjczMkU3MEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2 bXRCYUtKMWhpQ0lMWDhfRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS+d7DVcN+tUURBJI1CLx2ZUA+rs7goaM69mR2PxyvGXxJoc91VVZN OIy8DVyZrbmP78yQYXsoBkPo72dNfXhdS0FOY1hqYQM2Do07VUAPdWgTsqtgEBA9 1KP8dVaDxU2YUEhEFoHh7bMj0pi9cwSCeOIrlqyTj6yvhhUzR3VUjPgVbkt6AEO9 T3E3V3xrUhwjSigp2Rjt9Wsnoac4xDH87hfL9D2MWF+QLjQUOnO24hZQuYpTxua3 SZD68ULLV0nohSohoZbUC6jz8FgPsXdwfUmf30KKQvaWvpNT5RXGilDGKNd3Lsw/ 2doMpbpPDT4GlXC2Vv/Uh0IOi6A7KpCY -----END CERTIFICATE-----Generated at Sun May 11 04:06:18 2025 by rpki-client