$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft File: CekFd0f2O6Ciga54ATZozt6kCrQ.mft (raw, json) Hash identifier: 6OJbBPydGfkO40NXVDaVUpu/Mzq8igLdFAk+pkcP21U= Subject key identifier: E4:67:07:62:96:48:10:E6:86:9B:F6:D2:82:B2:22:23:22:A3:5A:0A Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft Manifest number: 016A Signing time: Tue 13 May 2025 03:05:19 +0000 Manifest this update: Tue 13 May 2025 03:05:19 +0000 Manifest next update: Tue 20 May 2025 03:05:19 +0000 Files and hashes: 1: CekFd0f2O6Ciga54ATZozt6kCrQ.crl (hash: vQVRBGqI/upXS51JBPSwJcZgGHLHH0Xq6bSee0KHrzI=) 2: 2815D106041A11EEA67A6B4DC4F9AE02.roa (hash: BGY/uPAB8s6bOk+iTJOiyTH1PPXIxJM6rQPQkuaz0DI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDAFB, serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Validity Not Before: May 13 03:05:19 2025 GMT Not After : May 20 03:05:19 2025 GMT Subject: CN=6822b6ef-48f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a1:df:77:37:7e:7e:3e:8a:0c:89:a5:79:ff: d8:13:82:84:81:3c:dd:4d:ba:4d:29:06:a5:8a:94: b6:36:51:c8:3f:c3:96:0a:8e:ff:28:55:0a:88:57: ab:79:4f:88:a2:36:aa:02:a3:b7:98:da:e6:3c:9e: b8:5b:89:a3:be:83:85:49:6e:a3:c6:9a:01:01:4d: 68:6a:cb:14:0e:a8:7e:10:1d:98:da:16:84:b3:9f: 6d:10:59:a1:52:22:6f:bc:01:3f:17:60:1a:e4:0d: 52:70:71:e1:d1:39:cc:f0:18:99:2c:a1:4a:91:94: a9:c4:2f:58:e4:bb:ed:1a:8c:29:b9:9c:d9:cd:80: 35:98:89:9f:44:47:58:63:d9:aa:2d:7b:cf:7a:0f: e5:20:e7:b9:fc:1f:f1:75:4d:f9:14:9c:4e:9f:84: 33:75:ad:e7:2f:e7:d9:8c:3a:b6:02:0d:f4:35:e2: 56:a6:6d:18:2e:bb:a0:01:1b:e6:1c:39:b2:65:30: 2d:f9:ee:68:1f:4c:7c:39:5d:5b:d6:18:cb:76:fb: 66:24:65:e9:19:83:61:14:3a:b3:23:db:09:81:75: cf:4b:a8:4c:36:5a:a8:12:21:56:1e:50:e2:a1:03: c6:69:2b:08:4a:fe:85:88:15:fd:71:bf:f4:53:ad: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:07:62:96:48:10:E6:86:9B:F6:D2:82:B2:22:23:22:A3:5A:0A X509v3 Authority Key Identifier: keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:08:6e:5f:ab:e7:3e:70:b2:1e:00:31:bb:93:9b:de:42:dd: 9b:e7:34:ff:04:19:42:1f:e8:00:ac:4b:e1:29:27:64:28:a5: f3:7f:d9:a0:04:37:0f:1d:fc:66:1e:2d:d3:06:42:99:d3:02: d7:7f:62:96:c0:4d:d9:e5:8d:87:23:16:1f:76:33:4f:bd:6d: 33:32:ff:41:d8:5a:1f:09:08:0e:05:14:b6:8c:17:98:56:22: 6a:ab:ea:80:c3:3d:e6:5a:ec:cb:d8:7d:bf:4f:ef:ac:74:67: 96:2c:af:47:ea:ef:f2:31:4e:ba:ab:2c:77:b7:79:3d:bb:ac: c9:fd:75:86:15:15:26:cf:a6:74:dd:65:74:3a:54:2c:f6:fe: fb:84:4a:fd:ec:67:3a:0c:83:e2:9a:89:4f:d3:c5:fb:46:74: a3:c4:69:bb:e6:79:5d:f9:01:36:dd:56:96:53:ae:e5:b5:7a: 9f:f8:dd:9b:fe:8c:33:e2:fb:ea:5d:b4:d5:2b:51:ff:f8:4b: 63:11:62:80:a6:f0:e7:97:98:23:8a:8b:54:57:42:db:55:f1: c3:04:c7:52:c3:56:da:51:16:0d:20:c7:c1:3f:70:03:13:d5: 88:c8:d4:3c:3d:db:7b:4d:33:59:69:7c:60:b4:a8:fc:14:df: cb:0e:a1:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RBRkIxMTAvBgNVBAUTKDA5RTkwNTc3NDdGNjNCQTBBMjgxQUU3ODAxMzY2OENF REVBNDBBQjQwHhcNMjUwNTEzMDMwNTE5WhcNMjUwNTIwMDMwNTE5WjAYMRYwFAYD VQQDEw02ODIyYjZlZi00OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7qHfdzd+fj6KDImlef/YE4KEgTzdTbpNKQalipS2NlHIP8OWCo7/KFUKiFer eU+IojaqAqO3mNrmPJ64W4mjvoOFSW6jxpoBAU1oassUDqh+EB2Y2haEs59tEFmh UiJvvAE/F2Aa5A1ScHHh0TnM8BiZLKFKkZSpxC9Y5LvtGowpuZzZzYA1mImfREdY Y9mqLXvPeg/lIOe5/B/xdU35FJxOn4Qzda3nL+fZjDq2Ag30NeJWpm0YLrugARvm HDmyZTAt+e5oH0x8OV1b1hjLdvtmJGXpGYNhFDqzI9sJgXXPS6hMNlqoEiFWHlDi oQPGaSsISv6FiBX9cb/0U62oLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORnB2KW SBDmhpv20oKyIiMio1oKMB8GA1UdIwQYMBaAFAnpBXdH9jugooGueAE2aM7epAq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREFGQi9FQzBGNkEzODAz NDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82Q2lnYTU0QVRab3p0NmtD clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nla0ZkMGYyTzZDaWdhNTRBVFpvenQ2a0NyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REFGQi9FQzBGNkEzODAzNDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82 Q2lnYTU0QVRab3p0NmtDclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjCG5fq+c+cLIeADG7k5veQt2b5zT/BBlCH+gArEvhKSdkKKXzf9mg BDcPHfxmHi3TBkKZ0wLXf2KWwE3Z5Y2HIxYfdjNPvW0zMv9B2FofCQgOBRS2jBeY ViJqq+qAwz3mWuzL2H2/T++sdGeWLK9H6u/yMU66qyx3t3k9u6zJ/XWGFRUmz6Z0 3WV0OlQs9v77hEr97Gc6DIPimolP08X7RnSjxGm75nld+QE23VaWU67ltXqf+N2b /owz4vvqXbTVK1H/+EtjEWKApvDnl5gjiotUV0LbVfHDBMdSw1baURYNIMfBP3AD E9WIyNQ8Pdt7TTNZaXxgtKj8FN/LDqEX -----END CERTIFICATE-----Generated at Wed May 14 20:27:46 2025 by rpki-client