$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft File: Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json) Hash identifier: 2/UQAc0QiWz6xi0jhzJ+00taSnxwo5lgDJNqgQFCV0c= Subject key identifier: B9:90:AD:C5:BE:51:FE:8F:DF:E3:8E:CF:D9:A2:03:1F:4C:99:1D:69 Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Certificate serial: 0D78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft Manifest number: 0D6C Signing time: Sat 10 May 2025 17:49:34 +0000 Manifest this update: Sat 10 May 2025 17:49:33 +0000 Manifest next update: Sat 17 May 2025 17:49:33 +0000 Files and hashes: 1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: +QyfM2P7P/8LMYnRtdUttC19gBJ+DrJ7VJhqyGaG7BM=) 2: 4EEE01FCE15611EF9560323EC4F9AE02.roa (hash: 9Nz/F+iPTsdfTjIzxhDauJBST5Z1hrA/MujlPAQ3LmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3448 (0xd78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Validity Not Before: May 10 17:49:33 2025 GMT Not After : May 17 17:49:33 2025 GMT Subject: CN=681f91ad-ae8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:06:34:0a:fc:9e:d1:52:2b:0f:5f:58:70:a4: b8:8f:76:4f:83:22:84:d4:14:60:3d:2b:7a:c3:43: 68:d2:a5:ed:44:ac:4a:e3:25:4e:47:76:78:e2:df: 93:cf:70:26:61:49:90:a2:a2:14:87:7c:9e:47:f3: 71:4a:97:f7:b3:7c:94:2d:db:46:ff:42:69:4d:32: 1a:11:af:ed:d6:89:1f:3c:b4:d2:1a:76:96:23:82: da:6e:5d:52:40:9c:42:ba:9a:ed:84:2b:40:ce:38: 76:e7:07:a1:16:bf:01:e5:f6:93:6c:fc:bd:15:ae: 75:41:02:5f:1e:2c:66:61:52:64:fb:91:a8:35:fd: 46:c2:1e:42:bf:d5:f9:2b:fe:03:33:a4:89:89:08: 65:71:bb:8b:e6:09:8f:bd:75:5d:db:8a:67:ea:c4: 03:93:bd:d1:a3:6d:7a:5b:37:7b:ee:96:d4:2c:33: 5c:d9:a0:0d:ee:6d:a1:5b:6a:3b:d0:eb:05:e0:e6: 84:1a:d7:35:ad:96:01:58:8e:67:ff:27:a9:e1:72: 33:8a:50:30:80:a0:45:26:53:59:d0:b4:6e:1d:15: d9:78:34:20:16:d3:cb:84:46:5d:e7:06:44:85:bf: f0:af:5d:f0:81:97:2a:45:b0:7f:3e:ef:f0:fc:de: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:90:AD:C5:BE:51:FE:8F:DF:E3:8E:CF:D9:A2:03:1F:4C:99:1D:69 X509v3 Authority Key Identifier: keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e4:37:84:97:f6:7e:72:c3:ac:a9:67:78:04:6b:9a:44:ce: be:bb:87:97:4c:32:07:38:93:03:61:f8:79:f0:db:23:0a:9b: d2:9d:94:4b:2c:40:7c:55:b5:b0:79:f2:86:b1:7b:aa:8f:da: a2:4a:bc:f8:4b:4b:6f:a0:79:1d:0a:af:b3:98:ec:cf:24:15: 29:43:8b:36:11:c7:19:39:f1:52:a9:28:a0:a5:ef:9e:bc:56: a1:58:3e:2a:84:4e:40:2f:b2:60:25:8b:d5:12:3e:37:f6:4f: 3d:eb:e9:95:c1:45:53:6d:05:57:3d:5c:79:9a:35:1a:59:6b: 57:9c:46:67:8a:6d:f4:23:1e:9d:af:c5:76:5f:47:0f:66:30: cc:3d:0d:88:9e:5e:68:1c:3f:ab:c2:58:8d:3e:85:16:b7:39: 76:16:b3:6a:d1:15:c0:a6:c8:28:0f:e6:3b:62:b8:09:9a:f0: ed:d6:76:8c:15:c5:e8:a8:05:3d:4f:57:50:e6:7a:7d:4c:c1: 05:a9:b3:26:06:43:d9:0f:af:86:b6:73:02:e1:53:be:6b:3d: 97:3d:88:32:83:0a:8f:c0:15:48:cb:0f:be:cd:e8:d2:94:79: bf:5e:42:bf:0c:74:63:3e:11:02:67:b8:4b:45:e8:69:b5:9d: ed:04:a7:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwOTYxMTAvBgNVBAUTKDBBMkU1REYxQjJDM0Q3OTdERUExNTM2N0ZBQTlEQzM4 ODRDRDFCMzMwHhcNMjUwNTEwMTc0OTMzWhcNMjUwNTE3MTc0OTMzWjAYMRYwFAYD VQQDEw02ODFmOTFhZC1hZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gY0Cvye0VIrD19YcKS4j3ZPgyKE1BRgPSt6w0No0qXtRKxK4yVOR3Z44t+T z3AmYUmQoqIUh3yeR/NxSpf3s3yULdtG/0JpTTIaEa/t1okfPLTSGnaWI4Labl1S QJxCuprthCtAzjh25wehFr8B5faTbPy9Fa51QQJfHixmYVJk+5GoNf1Gwh5Cv9X5 K/4DM6SJiQhlcbuL5gmPvXVd24pn6sQDk73Ro216Wzd77pbULDNc2aAN7m2hW2o7 0OsF4OaEGtc1rZYBWI5n/yep4XIzilAwgKBFJlNZ0LRuHRXZeDQgFtPLhEZd5wZE hb/wr13wgZcqRbB/Pu/w/N6gMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmQrcW+ Uf6P3+OOz9miAx9MmR1pMB8GA1UdIwQYMBaAFAouXfGyw9eX3qFTZ/qp3DiEzRsz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA5Ni9FNTA0MkMyQUNB MzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1ZmVvVk5uLXFuY09JVE5H ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpNWQ4YkxEMTVmZW9WTm4tcW5jT0lUTkd6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA5Ni9FNTA0MkMyQUNBMzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1 ZmVvVk5uLXFuY09JVE5Hek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA5DeEl/Z+csOsqWd4BGuaRM6+u4eXTDIHOJMDYfh58NsjCpvSnZRL LEB8VbWwefKGsXuqj9qiSrz4S0tvoHkdCq+zmOzPJBUpQ4s2EccZOfFSqSigpe+e vFahWD4qhE5AL7JgJYvVEj439k896+mVwUVTbQVXPVx5mjUaWWtXnEZnim30Ix6d r8V2X0cPZjDMPQ2Inl5oHD+rwliNPoUWtzl2FrNq0RXApsgoD+Y7YrgJmvDt1naM FcXoqAU9T1dQ5np9TMEFqbMmBkPZD6+GtnMC4VO+az2XPYgygwqPwBVIyw++zejS lHm/XkK/DHRjPhECZ7hLRehptZ3tBKeJ -----END CERTIFICATE-----Generated at Mon May 12 15:57:05 2025 by rpki-client