$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft File: MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json) Hash identifier: I+wwv2cFNpACT1Ei74tj4YsfVgTE2R5hPozwHqqJ+LU= Subject key identifier: 50:0F:D9:4B:8D:08:A0:5C:EC:14:E6:B2:AB:44:3C:68:60:C0:A1:AC Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 Certificate issuer: /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft Manifest number: 01A8 Signing time: Thu 15 May 2025 02:56:54 +0000 Manifest this update: Thu 15 May 2025 02:56:53 +0000 Manifest next update: Thu 22 May 2025 02:56:53 +0000 Files and hashes: 1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: jVUQYe2z6WP/eBMzyEO689FV66Ifdm0ZpAVTJolDMPA=) 2: 7F52DF541CF011F0ACBEBD22C4F9AE02.roa (hash: T+JOCtPDki/xHSSeZ1AMylOFrQqsxCA9cKvI0yaY7C0=) 3: 73CB38E81CF011F0B59DB522C4F9AE02.roa (hash: llOCDx1EbOCJWqDxiCkgBWEB8PNLgQ3QGDsGfn8WZKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170 Validity Not Before: May 15 02:56:53 2025 GMT Not After : May 22 02:56:53 2025 GMT Subject: CN=682557f6-9032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:6a:5f:26:d8:38:c7:fb:bf:37:70:ee:79: a7:00:60:8b:8e:43:fc:fe:3c:ce:ee:1e:d3:7e:6d: 43:33:0b:b2:34:4b:84:cf:c8:3b:b0:ab:fe:b0:b6: 95:65:ad:6f:9d:22:2f:de:c3:df:4a:6f:e5:77:d8: f9:c1:95:52:07:f0:81:31:ea:78:f0:91:88:b3:37: 01:8e:c6:e3:a0:fd:96:44:29:dc:91:48:7f:ba:46: cb:e6:82:47:57:fc:f7:ed:c4:3e:2c:b9:4a:6b:cb: ab:2f:61:97:b6:15:fb:88:45:87:4d:b6:b8:03:ba: 4c:0c:7e:75:10:d2:82:bf:f4:a5:93:7b:4f:59:9b: fa:c7:d9:89:e6:c1:ec:01:53:86:2d:2e:87:7f:1b: 9d:85:61:7b:fb:3e:3e:78:15:94:90:8d:5a:87:d9: 57:64:c2:b7:ec:cf:4d:8c:76:f2:65:c2:69:20:fc: 39:79:cb:e3:1b:99:e9:b1:a2:61:27:9f:32:be:66: ba:79:cf:3c:19:81:54:36:00:77:26:9f:36:0a:b8: c3:98:84:d2:ea:4e:d1:9b:59:c2:7d:e4:8b:53:fc: 11:21:57:7e:d9:9b:6d:86:ce:91:aa:12:12:e8:38: 0f:69:e0:ee:0e:87:39:67:7c:61:cd:e1:c1:d5:7e: 0e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0F:D9:4B:8D:08:A0:5C:EC:14:E6:B2:AB:44:3C:68:60:C0:A1:AC X509v3 Authority Key Identifier: keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:bd:d9:07:06:30:09:2c:23:99:ff:0d:bd:87:d3:ef:7b:08: 5b:0d:1c:5b:66:85:cf:7c:38:5a:90:fe:40:23:dd:7d:87:35: e5:ce:4f:99:a7:3a:96:88:b4:f4:01:84:b0:f2:5e:20:e8:1b: 9b:50:de:53:c3:9a:4f:f1:4d:b5:4d:34:b4:c9:49:f2:28:53: 6a:44:ff:91:38:9e:b6:95:ae:d0:dc:93:4c:30:21:bb:1a:5c: 1d:ca:cc:58:61:c7:23:4b:5d:fb:68:88:90:c0:a7:a8:40:13: e6:91:f1:b7:fa:95:4a:38:4e:d9:63:7c:71:aa:ff:e4:88:2c: b4:aa:db:d9:ac:5c:6c:40:a0:1e:e4:1a:ba:71:c4:f9:59:b4: 5f:e8:27:e5:5c:54:fd:03:76:e5:41:bb:cf:63:63:83:d6:52: a7:30:02:a2:ed:c0:1f:ab:f0:85:b1:df:e4:46:e8:8e:0e:64: da:41:c9:63:25:bd:0f:14:b5:d1:84:bf:72:71:39:cf:4d:98: 80:12:5f:29:53:28:93:f7:64:e1:e8:33:88:fb:b9:04:e0:ee: 80:cd:d1:ae:6b:f8:a6:fd:dc:1e:4e:ea:80:90:9b:63:1c:f1: a8:e4:c3:41:a4:fb:df:09:34:f3:0f:d4:77:7e:01:d2:c9:3d: 9e:fb:0e:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5 OThEOUExNzAwHhcNMjUwNTE1MDI1NjUzWhcNMjUwNTIyMDI1NjUzWjAYMRYwFAYD VQQDEw02ODI1NTdmNi05MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiNqXybYOMf7vzdw7nmnAGCLjkP8/jzO7h7Tfm1DMwuyNEuEz8g7sKv+sLaV Za1vnSIv3sPfSm/ld9j5wZVSB/CBMep48JGIszcBjsbjoP2WRCnckUh/ukbL5oJH V/z37cQ+LLlKa8urL2GXthX7iEWHTba4A7pMDH51ENKCv/Slk3tPWZv6x9mJ5sHs AVOGLS6HfxudhWF7+z4+eBWUkI1ah9lXZMK37M9NjHbyZcJpIPw5ecvjG5npsaJh J58yvma6ec88GYFUNgB3Jp82CrjDmITS6k7Rm1nCfeSLU/wRIVd+2Ztths6RqhIS 6DgPaeDuDoc5Z3xhzeHB1X4ODQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAP2UuN CKBc7BTmsqtEPGhgwKGsMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJBQS8yQ0ZEMzcxMkNDRDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpX dExwZ292N1pjanVaalpvWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRvdkHBjAJLCOZ/w29h9PvewhbDRxbZoXPfDhakP5AI919hzXlzk+Z pzqWiLT0AYSw8l4g6BubUN5Tw5pP8U21TTS0yUnyKFNqRP+ROJ62la7Q3JNMMCG7 GlwdysxYYccjS137aIiQwKeoQBPmkfG3+pVKOE7ZY3xxqv/kiCy0qtvZrFxsQKAe 5Bq6ccT5WbRf6CflXFT9A3blQbvPY2OD1lKnMAKi7cAfq/CFsd/kRuiODmTaQclj Jb0PFLXRhL9ycTnPTZiAEl8pUyiT92Th6DOI+7kE4O6AzdGua/im/dweTuqAkJtj HPGo5MNBpPvfCTTzD9R3fgHSyT2e+w78 -----END CERTIFICATE-----Generated at Fri May 16 02:35:29 2025 by rpki-client