$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: IGn341JYb9fcH2NzU3FpfNiYbKVLcWkT2v1oOAn0/LE= Subject key identifier: A1:78:05:62:9E:C9:08:7B:53:1D:79:47:54:F6:2F:1C:4B:78:6C:08 Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 03E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 03E2 Signing time: Sun 11 May 2025 00:06:20 +0000 Manifest this update: Sun 11 May 2025 00:06:20 +0000 Manifest next update: Sun 18 May 2025 00:06:19 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: FefsdjtHNy4wOwsn8qseyL2JDysbpNHfYGoYKoG3Rro=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: May 11 00:06:20 2025 GMT Not After : May 18 00:06:19 2025 GMT Subject: CN=681fe9fc-9bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:09:78:8e:a3:17:13:f5:37:8f:45:f1:85:4e: 32:f3:68:96:f7:ff:91:9c:eb:d1:69:bd:a2:64:d6: 59:08:04:ad:fa:b5:8e:99:32:fb:8f:d1:d0:ba:06: 75:01:06:2d:a7:9f:4f:5d:b8:98:cf:ef:14:96:cf: 68:22:e9:3c:3e:6c:3d:4c:9e:d9:9b:e5:f7:24:73: c7:37:0c:a3:89:bc:ea:69:1d:4b:67:26:5f:0c:a4: 44:93:cd:d2:0f:63:23:48:66:13:13:f8:22:93:61: 7f:b6:8a:0a:ec:1c:20:d0:cb:ae:0f:8b:74:ce:a7: 63:ce:3a:38:11:13:ac:70:1e:2c:89:ea:4b:b2:aa: 9d:11:1c:e7:92:9b:44:70:d2:be:19:31:6a:ad:61: 52:71:0e:ed:ec:dd:6b:bc:67:29:5e:d8:28:7b:d4: a4:00:8a:67:ad:32:69:bc:8c:ba:e8:2a:6b:09:6e: 03:09:38:43:1d:b2:87:f2:ea:a9:9f:54:79:e0:c9: 95:78:b5:fb:ea:9d:02:68:2b:17:ee:91:ab:c8:7e: 68:01:3e:63:d0:0a:cd:61:11:07:ef:87:00:1e:26: de:27:be:51:7f:16:33:dd:d9:94:8d:a5:55:c0:88: 5c:40:ba:bc:7e:f5:c4:e5:ad:84:a4:ca:51:2e:42: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:78:05:62:9E:C9:08:7B:53:1D:79:47:54:F6:2F:1C:4B:78:6C:08 X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:82:5a:be:81:2a:b5:0f:b3:5a:e9:78:d3:10:b4:39:ad:c5: d1:08:2c:af:8e:4a:f6:eb:3a:3c:f8:95:f8:fe:50:94:ec:d1: cc:d9:52:06:23:18:24:d9:ee:c6:7e:86:95:d6:e5:e2:11:04: ab:a0:aa:a3:58:0e:29:aa:e4:4c:20:a7:89:26:dc:a8:46:c9: 44:e8:87:14:fe:a9:c8:54:bc:58:af:75:cd:55:b0:2c:52:c7: 9a:45:58:dd:87:7e:f5:4d:ff:c3:c1:db:4d:c4:bf:1b:58:7b: 08:5f:9d:f1:cb:c6:5b:13:44:bd:bd:be:e1:dc:cd:59:9b:bc: 10:c7:f5:b0:2b:50:58:f7:b0:6b:41:24:f0:be:ff:c1:9c:a3: aa:d8:25:97:6c:1c:ed:f8:42:91:fa:67:cf:82:66:39:a2:ba: be:ee:f7:fa:5b:4a:a2:43:28:73:2c:a4:9c:a6:c5:a9:bc:5f: 83:9a:61:a5:a3:5c:fa:91:ff:08:f9:8a:19:7c:9f:cd:84:1a: 19:8d:79:e1:d0:bd:a5:e5:ce:f3:77:b0:2e:03:fa:48:9d:d7: 48:52:69:34:f5:71:6d:30:cd:d8:7e:2a:be:d6:c0:8f:7b:5b: ea:40:35:cb:e6:36:72:9d:9a:19:62:9c:3e:31:34:e8:c0:5d: cc:ce:49:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjUwNTExMDAwNjIwWhcNMjUwNTE4MDAwNjE5WjAYMRYwFAYD VQQDEw02ODFmZTlmYy05YmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ql4jqMXE/U3j0XxhU4y82iW9/+RnOvRab2iZNZZCASt+rWOmTL7j9HQugZ1 AQYtp59PXbiYz+8Uls9oIuk8Pmw9TJ7Zm+X3JHPHNwyjibzqaR1LZyZfDKREk83S D2MjSGYTE/gik2F/tooK7Bwg0MuuD4t0zqdjzjo4EROscB4siepLsqqdERznkptE cNK+GTFqrWFScQ7t7N1rvGcpXtgoe9SkAIpnrTJpvIy66CprCW4DCThDHbKH8uqp n1R54MmVeLX76p0CaCsX7pGryH5oAT5j0ArNYREH74cAHibeJ75RfxYz3dmUjaVV wIhcQLq8fvXE5a2EpMpRLkLCcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKF4BWKe yQh7Ux15R1T2LxxLeGwIMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcglq+gSq1D7Na6XjTELQ5rcXRCCyvjkr26zo8+JX4/lCU7NHM2VIG Ixgk2e7GfoaV1uXiEQSroKqjWA4pquRMIKeJJtyoRslE6IcU/qnIVLxYr3XNVbAs UseaRVjdh371Tf/DwdtNxL8bWHsIX53xy8ZbE0S9vb7h3M1Zm7wQx/WwK1BY97Br QSTwvv/BnKOq2CWXbBzt+EKR+mfPgmY5orq+7vf6W0qiQyhzLKScpsWpvF+DmmGl o1z6kf8I+YoZfJ/NhBoZjXnh0L2l5c7zd7AuA/pInddIUmk09XFtMM3Yfiq+1sCP e1vqQDXL5jZynZoZYpw+MTTowF3MzknW -----END CERTIFICATE-----Generated at Mon May 12 07:20:23 2025 by rpki-client