$ rpki-client -vvf rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft File: -rpT9D2gDiGn6veS1I_bdpV6gLw.mft (raw, json) Hash identifier: 5VK/+e3BxBcHHtKfbY92PbVUz3ChfDnjPdT0CJ4wXlM= Subject key identifier: B0:62:B5:03:30:54:2E:87:CD:5B:03:1F:09:DC:54:6A:20:C0:34:7A Authority key identifier: FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC Certificate issuer: /CN=A91D25E5/serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft Manifest number: 061A Signing time: Wed 14 May 2025 22:49:57 +0000 Manifest this update: Wed 14 May 2025 22:49:57 +0000 Manifest next update: Wed 21 May 2025 22:49:57 +0000 Files and hashes: 1: -rpT9D2gDiGn6veS1I_bdpV6gLw.crl (hash: ik1N1XiWMbWOydy4V+keRtpGSUpqbknQG7DAd84EvOk=) 2: EB8DE9B49B6411EBA08FBE84C4F9AE02.roa (hash: OXMHoo8Egs65FUqbV0ME5rvmbJEFphKa1wlI6laYOWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D25E5, serialNumber=FABA53F43DA00E21A7EAF792D48FDB76957A80BC Validity Not Before: May 14 22:49:57 2025 GMT Not After : May 21 22:49:57 2025 GMT Subject: CN=68251e15-4c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:75:46:47:87:e1:ca:c6:98:09:c3:69:6f: 48:09:5b:d0:ad:45:1b:0f:9f:d9:76:6b:3e:4f:9d: c3:80:d9:2c:2b:c0:ae:fd:7f:ac:71:03:2b:dd:c4: ae:43:46:1c:25:b1:d4:d9:57:e4:57:c2:27:18:35: 65:9c:3d:9a:de:67:6c:a4:e5:78:ab:1e:d7:37:0e: 6d:eb:2a:7e:b1:f7:f8:26:5c:b9:3e:f6:b4:a9:68: 6c:6a:0b:61:f6:a0:e2:c9:c3:fa:17:4b:fc:39:1a: 1d:bf:f7:88:a4:9d:30:10:bc:21:09:ec:7b:33:46: 45:2e:84:5f:df:53:b3:16:9f:46:d3:df:6b:dc:1b: 7c:59:35:78:31:26:59:23:9c:14:3d:86:be:bd:bc: 0d:fa:41:50:67:ce:80:9d:51:b4:77:cd:92:1f:32: 71:ab:d1:b8:03:04:d1:aa:f8:5e:75:10:fa:45:d8: 42:a8:58:6f:0b:55:6d:e5:97:82:e5:31:75:a7:ff: ed:01:01:9b:0b:08:f8:1b:dd:e9:cd:b1:cf:2c:39: 38:15:9f:f7:81:04:58:83:a2:5b:97:99:4d:95:52: 9b:e8:2c:0b:2c:57:94:bb:86:61:8c:1a:ea:e8:81: 79:41:ff:1a:75:ae:87:98:9a:9d:f6:eb:0d:6f:a7: 4a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:62:B5:03:30:54:2E:87:CD:5B:03:1F:09:DC:54:6A:20:C0:34:7A X509v3 Authority Key Identifier: keyid:FA:BA:53:F4:3D:A0:0E:21:A7:EA:F7:92:D4:8F:DB:76:95:7A:80:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rpT9D2gDiGn6veS1I_bdpV6gLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D25E5/ECBF00E89B4B11EB9730A154C4F9AE02/-rpT9D2gDiGn6veS1I_bdpV6gLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c5:35:1c:32:2c:77:fc:42:dd:29:71:9b:dc:90:b1:49:0c: 0d:ae:59:28:22:bb:38:ed:bb:b2:fe:0e:0b:53:9b:10:5c:6d: cd:23:6a:cc:91:8f:48:dd:f4:24:58:79:79:ec:6a:73:78:9f: 23:ee:51:59:7a:d0:ae:94:65:96:59:2c:0e:38:1d:28:fd:49: 9c:94:69:66:57:c9:80:4b:aa:50:d2:51:61:87:e1:9a:b8:74: 55:6b:5c:9a:52:f6:00:19:ac:88:31:a1:7f:6b:24:bc:49:54: a7:eb:47:be:1b:a8:2f:2c:0e:aa:25:0c:93:80:30:66:82:44: 85:65:2a:4a:a9:bc:b3:41:38:ea:6e:cf:48:df:be:9c:8e:22: 42:12:71:6e:db:86:27:8f:96:73:3c:97:bb:5d:46:2a:87:6f: 95:5a:4a:56:72:88:fb:a5:ea:c8:c5:22:2c:6e:91:87:a0:bc: b3:06:25:c7:50:85:35:36:67:03:e8:aa:51:d3:2f:27:48:f1: 9c:db:da:7f:b2:0f:bc:ae:53:68:01:dc:09:a6:2a:77:e7:f3: 09:15:d2:82:f8:cf:3d:6f:04:0f:f0:7e:32:a6:db:96:dc:95: 23:b3:09:0a:56:a5:b6:45:e4:80:b3:fa:57:b9:f5:72:7c:c1: df:f3:ec:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI1RTUxMTAvBgNVBAUTKEZBQkE1M0Y0M0RBMDBFMjFBN0VBRjc5MkQ0OEZEQjc2 OTU3QTgwQkMwHhcNMjUwNTE0MjI0OTU3WhcNMjUwNTIxMjI0OTU3WjAYMRYwFAYD VQQDEw02ODI1MWUxNS00YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm91RkeH4crGmAnDaW9ICVvQrUUbD5/Zdms+T53DgNksK8Cu/X+scQMr3cSu Q0YcJbHU2VfkV8InGDVlnD2a3mdspOV4qx7XNw5t6yp+sff4Jly5Pva0qWhsagth 9qDiycP6F0v8ORodv/eIpJ0wELwhCex7M0ZFLoRf31OzFp9G099r3Bt8WTV4MSZZ I5wUPYa+vbwN+kFQZ86AnVG0d82SHzJxq9G4AwTRqvhedRD6RdhCqFhvC1Vt5ZeC 5TF1p//tAQGbCwj4G93pzbHPLDk4FZ/3gQRYg6Jbl5lNlVKb6CwLLFeUu4ZhjBrq 6IF5Qf8ada6HmJqd9usNb6dK/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBitQMw VC6HzVsDHwncVGogwDR6MB8GA1UdIwQYMBaAFPq6U/Q9oA4hp+r3ktSP23aVeoC8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjVFNS9FQ0JGMDBFODlC NEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0RpR242dmVTMUlfYmRwVjZn THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ycFQ5RDJnRGlHbjZ2ZVMxSV9iZHBWNmdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjVFNS9FQ0JGMDBFODlCNEIxMUVCOTczMEExNTRDNEY5QUUwMi8tcnBUOUQyZ0Rp R242dmVTMUlfYmRwVjZnTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIxTUcMix3/ELdKXGb3JCxSQwNrlkoIrs47buy/g4LU5sQXG3NI2rM kY9I3fQkWHl57GpzeJ8j7lFZetCulGWWWSwOOB0o/UmclGlmV8mAS6pQ0lFhh+Ga uHRVa1yaUvYAGayIMaF/ayS8SVSn60e+G6gvLA6qJQyTgDBmgkSFZSpKqbyzQTjq bs9I376cjiJCEnFu24Ynj5ZzPJe7XUYqh2+VWkpWcoj7perIxSIsbpGHoLyzBiXH UIU1NmcD6KpR0y8nSPGc29p/sg+8rlNoAdwJpip35/MJFdKC+M89bwQP8H4yptuW 3JUjswkKVqW2ReSAs/pXufVyfMHf8+zP -----END CERTIFICATE-----Generated at Thu May 15 12:31:40 2025 by rpki-client