$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: QY1OgPWeeGVJkM51NUDhmFsOxtalypHSdRBjVX+eB5M= Subject key identifier: C6:C3:6B:14:CD:A6:0C:20:BA:FE:F6:6B:1C:CA:B7:D6:61:FF:8F:74 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 34AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 3492 Signing time: Sun 04 May 2025 14:53:33 +0000 Manifest this update: Sun 04 May 2025 14:53:32 +0000 Manifest next update: Sun 11 May 2025 14:53:32 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: xP5seVBFWFeCM5RWVuMqQ3YeQc+2VxlLgZhVrKvkwQI=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: sDAVT78GpTIvV3Pk7DGbULa+i4kn7uu7qVMnxNmpH28=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: XuAw72l1y8+xZhjG02bLa91Tpql6DxMPw1rT8RJ+tTY=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: ZplEo/zP0jHGZr0dLBLSTaxCxcoclbSDg8qfGUwBkSQ=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: KUnun5lZEQw4kuW5EOrvbt/fHn0giqX+CGkWFRK4Ts8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: May 4 14:53:32 2025 GMT Not After : May 11 14:53:32 2025 GMT Subject: CN=68177f6d-1899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:ad:42:bc:a8:30:8d:fb:78:5c:0d:dd:dd: 06:4a:92:85:4d:69:31:ec:e3:ce:5a:06:d6:89:c3: cc:fd:21:84:dd:69:b2:97:89:73:cd:1d:4b:a9:f9: 83:02:b9:e8:75:53:e5:16:10:4f:af:b7:5d:6e:f9: 75:4a:a4:4c:b0:9a:d2:c9:e3:99:ea:53:fc:27:60: 60:44:ed:eb:a2:c7:f7:47:91:2a:9d:ee:04:51:6a: 9e:06:38:f3:ed:dc:d7:9f:5b:d6:61:5a:0a:67:cf: 00:82:3b:ac:97:da:0d:fe:e4:8b:68:54:ef:1d:21: ea:f1:c2:62:7c:92:ee:ba:a6:eb:1e:62:11:d1:67: 4c:c6:eb:54:39:d4:80:97:bc:45:aa:d4:dc:9f:e2: 42:7f:92:b9:a6:e8:79:58:f7:f4:73:ff:87:23:3d: 78:7e:a5:26:a2:dc:03:de:7a:cb:ef:13:f5:58:6a: b8:9f:13:a5:0d:ed:f6:cd:15:16:2d:cc:fa:50:05: 86:1a:3a:44:15:f5:3a:8d:80:a4:0c:a1:8d:40:8e: de:0d:f9:6f:31:58:92:e3:eb:f5:63:9b:4c:4a:f2: 2f:a4:fa:b4:be:c7:14:e9:63:ea:8a:bc:a7:a7:f4: d3:ff:be:86:93:db:6e:9c:f4:46:63:67:18:69:1b: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C3:6B:14:CD:A6:0C:20:BA:FE:F6:6B:1C:CA:B7:D6:61:FF:8F:74 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:11:ef:ad:ce:51:e1:fc:d1:9c:35:13:3b:d2:7b:0f:3f:7d: 02:60:83:57:5a:62:b6:67:2d:42:13:ad:4e:ed:c4:fa:c6:43: 2c:65:c3:0c:78:b0:6c:82:0b:2c:b8:b5:be:c0:eb:d3:f4:c8: ab:ef:60:e8:7e:2a:96:75:d7:6b:a6:90:52:a4:03:f4:89:fe: ff:cd:6c:5f:ea:7b:67:d5:1e:a5:91:9a:2e:50:a4:36:d7:5d: 2b:08:91:77:8b:4b:44:10:87:a0:38:f4:f5:87:ac:31:c6:9a: 57:5f:8d:f1:0e:b8:52:96:62:aa:a2:3d:4d:f0:a8:4d:8b:4b: 1c:47:81:eb:73:55:3d:5f:b4:e0:31:f7:da:ca:bb:87:5e:48: 8e:ad:8e:13:66:1f:36:b4:6f:9e:82:25:e3:b3:68:2b:99:f3: 2e:e8:a3:73:21:52:9c:5b:de:90:54:f2:63:ba:c9:14:cf:aa: 5d:3e:80:09:09:14:ba:e1:89:9d:e6:c0:e3:9c:80:70:be:73: 30:58:12:bc:46:6b:46:4b:67:04:d9:e2:e9:7b:c8:d9:d2:c6: 58:cb:eb:c2:77:21:6c:f6:fc:e6:b8:61:27:1f:f3:43:fd:ae: a9:09:ce:da:2c:54:5e:d8:c3:28:6c:8d:ea:a8:f3:40:96:99: f1:1a:f5:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUwNTA0MTQ1MzMyWhcNMjUwNTExMTQ1MzMyWjAYMRYwFAYD VQQDEw02ODE3N2Y2ZC0xODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuumtQryoMI37eFwN3d0GSpKFTWkx7OPOWgbWicPM/SGE3Wmyl4lzzR1LqfmD ArnodVPlFhBPr7ddbvl1SqRMsJrSyeOZ6lP8J2BgRO3rosf3R5Eqne4EUWqeBjjz 7dzXn1vWYVoKZ88Agjusl9oN/uSLaFTvHSHq8cJifJLuuqbrHmIR0WdMxutUOdSA l7xFqtTcn+JCf5K5puh5WPf0c/+HIz14fqUmotwD3nrL7xP1WGq4nxOlDe32zRUW Lcz6UAWGGjpEFfU6jYCkDKGNQI7eDflvMViS4+v1Y5tMSvIvpPq0vscU6WPqiryn p/TT/76Gk9tunPRGY2cYaRtUOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbDaxTN pgwguv72axzKt9Zh/490MB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtEe+tzlHh/NGcNRM70nsPP30CYINXWmK2Zy1CE61O7cT6xkMsZcMM eLBsggssuLW+wOvT9Mir72DofiqWdddrppBSpAP0if7/zWxf6ntn1R6lkZouUKQ2 110rCJF3i0tEEIegOPT1h6wxxppXX43xDrhSlmKqoj1N8KhNi0scR4Hrc1U9X7Tg MffayruHXkiOrY4TZh82tG+egiXjs2grmfMu6KNzIVKcW96QVPJjuskUz6pdPoAJ CRS64Ymd5sDjnIBwvnMwWBK8RmtGS2cE2eLpe8jZ0sZYy+vCdyFs9vzmuGEnH/ND /a6pCc7aLFRe2MMobI3qqPNAlpnxGvWR -----END CERTIFICATE-----Generated at Mon May 5 12:36:11 2025 by rpki-client