$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json) Hash identifier: gsKdHEfFVj2F4BT2dUcx3R1r/7DmIQnMk28z9/2GsT4= Subject key identifier: 10:7E:66:75:B8:39:C6:A5:F2:4F:C2:77:C6:CE:43:EA:3D:E5:44:F4 Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 088A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft Manifest number: 1377 Signing time: Sat 10 May 2025 19:04:22 +0000 Manifest this update: Sat 10 May 2025 19:04:22 +0000 Manifest next update: Sat 17 May 2025 19:04:22 +0000 Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: 3ikCsyjyKQ52uYUWtbL/mxTasVaZpLtEFlN+phd3hiE=) 2: 4445E492F38311EFB9CFE778C4F9AE02.roa (hash: po16q7mMxuSy83RBdcCv6la/VQUCUZDbH+zFus3/YQI=) 3: 98DE3894CCE411EFA6203F26C4F9AE02.roa (hash: VEO00g9Wl0SGw0f2i0cGvp6jjnbdvIYaLuu58A6mseU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2186 (0x88a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: May 10 19:04:22 2025 GMT Not After : May 17 19:04:22 2025 GMT Subject: CN=681fa336-8d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e6:da:4b:6b:3b:84:ee:23:7e:79:c1:de:f5: 79:87:44:97:ed:b7:10:68:23:30:58:16:13:b7:cd: 0f:65:45:7a:a4:40:aa:6f:77:71:81:ae:98:e7:3b: 8d:2a:66:a8:ae:3a:9f:49:04:fa:f4:32:c6:50:01: 66:bb:e1:41:ee:99:a1:07:e9:c3:28:b9:7f:a1:58: 6d:fd:cb:b3:bf:d3:37:95:3f:b1:04:90:b1:7c:82: b7:44:28:06:a9:82:21:c4:02:61:f6:a4:1b:ed:8e: 21:80:f8:70:5f:8e:2b:b1:5e:45:94:3b:3e:9f:8a: 1f:64:11:fc:0a:69:84:fb:91:14:36:3b:27:e3:19: af:0c:3f:1f:5a:95:60:b3:2e:ac:50:5f:d9:f7:01: de:aa:8e:21:bc:4a:cc:28:c3:10:ee:75:69:74:dd: 08:ad:5b:9a:b3:e6:9f:89:44:98:82:26:da:e1:da: b4:82:cf:fb:c2:00:8e:a9:63:cc:ba:d8:bd:40:cd: 2a:29:29:51:eb:de:90:f6:c8:44:4e:ac:98:5c:9b: e2:a0:43:e3:c3:13:39:cd:80:07:71:32:34:1d:14: fa:dc:6d:ff:4e:d4:e4:5a:7f:7c:a5:0e:ec:c6:07: 17:05:97:48:79:74:f3:e1:26:64:95:83:cc:cd:00: e7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7E:66:75:B8:39:C6:A5:F2:4F:C2:77:C6:CE:43:EA:3D:E5:44:F4 X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:bc:ea:b6:8a:94:a5:2c:d0:5d:f0:be:b4:3b:16:4e:7e:3a: 97:09:0a:05:8c:46:3a:42:94:cc:f3:0a:3e:b4:a1:c4:f3:04: 61:8b:55:40:b6:5b:b7:5f:3a:a6:cf:1c:49:5a:8a:22:97:3c: e8:9d:e3:e3:d1:a7:36:26:87:56:5a:47:36:84:71:cd:e1:57: 04:c8:2f:27:71:a9:98:70:2e:fe:09:20:1f:55:67:cb:b9:57: 8c:d9:af:7f:88:dd:94:3b:d3:85:1d:1e:4d:d7:b6:63:d5:e6: 06:fd:cf:b6:1c:0c:d1:b4:2e:1a:16:05:b1:87:6f:22:5e:34: 0b:e3:c1:a2:c0:5e:76:7c:81:fc:a0:a4:cd:50:7a:29:6f:a6: 5d:14:38:81:d0:c4:18:22:89:aa:73:b4:ac:9e:b5:41:85:9b: 7b:22:e0:98:b9:6d:ad:ed:8d:01:8c:e6:09:87:91:16:2c:3c: a1:86:c1:6b:3c:cd:fa:f7:89:4f:c4:fe:ef:06:b2:64:b2:60: 9c:b0:81:0e:db:15:74:c2:a8:17:84:fd:ce:a9:1e:63:ff:55: ed:0e:89:0a:f3:bd:10:0c:b8:9d:a8:33:f3:00:92:e2:ad:bf: e9:19:e4:35:ce:96:8f:b8:19:69:e3:58:ab:dd:f6:29:69:70: 8d:72:b1:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjUwNTEwMTkwNDIyWhcNMjUwNTE3MTkwNDIyWjAYMRYwFAYD VQQDEw02ODFmYTMzNi04ZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwebaS2s7hO4jfnnB3vV5h0SX7bcQaCMwWBYTt80PZUV6pECqb3dxga6Y5zuN KmaorjqfSQT69DLGUAFmu+FB7pmhB+nDKLl/oVht/cuzv9M3lT+xBJCxfIK3RCgG qYIhxAJh9qQb7Y4hgPhwX44rsV5FlDs+n4ofZBH8CmmE+5EUNjsn4xmvDD8fWpVg sy6sUF/Z9wHeqo4hvErMKMMQ7nVpdN0IrVuas+afiUSYgiba4dq0gs/7wgCOqWPM uti9QM0qKSlR696Q9shETqyYXJvioEPjwxM5zYAHcTI0HRT63G3/TtTkWn98pQ7s xgcXBZdIeXTz4SZklYPMzQDnjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB+ZnW4 Ocal8k/Cd8bOQ+o95UT0MB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXvOq2ipSlLNBd8L60OxZOfjqXCQoFjEY6QpTM8wo+tKHE8wRhi1VA tlu3XzqmzxxJWooilzzonePj0ac2JodWWkc2hHHN4VcEyC8ncamYcC7+CSAfVWfL uVeM2a9/iN2UO9OFHR5N17Zj1eYG/c+2HAzRtC4aFgWxh28iXjQL48GiwF52fIH8 oKTNUHopb6ZdFDiB0MQYIomqc7SsnrVBhZt7IuCYuW2t7Y0BjOYJh5EWLDyhhsFr PM3694lPxP7vBrJksmCcsIEO2xV0wqgXhP3OqR5j/1XtDokK870QDLidqDPzAJLi rb/pGeQ1zpaPuBlp41ir3fYpaXCNcrEP -----END CERTIFICATE-----Generated at Mon May 12 07:17:29 2025 by rpki-client