$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: X+fwjjlMGfw6G0YR33utmrwm6fCcgEndhTcVhtYDTAM= Subject key identifier: 63:81:C0:49:5B:8B:EE:33:18:6C:48:6B:0A:FB:07:0F:EC:E3:31:F0 Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: D5 Signing time: Mon 05 May 2025 04:29:46 +0000 Manifest this update: Mon 05 May 2025 04:29:45 +0000 Manifest next update: Mon 12 May 2025 04:29:45 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: nYaYFrGqXh/CTmawJ7nLR0mwbUodpdDdh8AwupCse5Y=) 2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: RkusyxzR0xrFJ6VFvMv+nvMkxMfB3sdBezjBg1WbNLo=) 3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: vTspr7D2Mh9Ado1Qi+7w7sbqMv4hKB0CPd1WNZ4I3co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: May 5 04:29:45 2025 GMT Not After : May 12 04:29:45 2025 GMT Subject: CN=68183eb9-771b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:9d:6b:ea:23:9f:d6:41:3d:b1:63:45:d7: 52:16:b8:25:9c:b5:1b:3e:0e:11:66:37:66:13:7d: 4a:19:67:94:ea:d7:7f:6c:e3:c5:29:28:d9:3f:4e: 06:b2:b4:ef:22:5c:0c:44:7c:a4:4b:6c:19:55:d0: d2:62:31:5e:57:ac:66:20:b7:84:d1:8f:c6:90:e8: 2e:b2:5e:61:cd:cb:58:02:40:82:c3:d5:1b:da:a2: 37:5c:55:66:a6:b7:33:76:e6:4a:8a:08:86:95:2d: 03:25:fd:e7:1e:43:b9:5c:2d:ac:db:09:ea:f3:a7: b6:7a:0a:a4:b0:df:f9:0b:47:2d:1a:b8:d1:71:3e: 12:92:44:44:0e:d4:3b:f4:b7:c2:dc:92:db:77:32: 42:c7:fd:21:24:c2:8d:ee:a8:53:a3:90:68:af:36: e8:fd:f7:de:1c:ea:06:d1:63:01:3b:16:fc:6c:03: 31:f7:58:74:02:77:2d:63:8a:7b:c2:1d:18:fd:f6: 5e:5c:7d:59:88:9e:e8:8f:09:28:0c:a2:e1:ec:e9: 70:c7:ec:ac:d1:87:87:41:a0:5c:35:2d:be:de:e3: 65:12:cf:b2:21:e1:33:51:52:9d:98:59:34:1a:16: 78:3b:20:e7:36:e3:21:45:63:a7:d9:09:be:70:b8: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:81:C0:49:5B:8B:EE:33:18:6C:48:6B:0A:FB:07:0F:EC:E3:31:F0 X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:91:df:76:96:2e:48:c6:2f:02:f7:f6:3e:f5:57:52:df:cc: f3:1b:5a:62:a8:a8:b8:6a:44:c4:f3:2c:f7:03:78:d2:2b:5a: 5c:82:ed:20:61:af:09:31:d9:fb:d6:9d:ce:f0:3d:e2:91:c6: 19:54:4e:ee:87:79:95:27:e2:43:a8:28:8b:a7:92:4d:80:db: c8:ca:a6:29:f6:8c:9c:31:e6:e1:2c:90:1a:28:c6:6e:b8:5b: b8:99:b8:3e:63:21:7a:c4:cd:60:11:77:c8:f4:a9:c2:8a:bb: 53:96:6a:db:9f:bb:b2:58:87:68:0f:be:e0:9e:a6:fb:70:53: e4:ce:1c:f8:90:7c:1f:4b:d7:a9:a2:1c:7a:d3:a0:5b:00:cd: bb:64:e7:39:90:24:ff:dd:d8:16:aa:a3:8f:09:9e:54:77:1e: c9:de:08:aa:e8:b6:ce:08:b8:eb:e1:d0:5a:a1:6b:03:9b:82: 6d:22:07:1a:fd:04:bc:8d:73:ff:c9:9f:a8:8b:6b:f6:39:5b: 02:80:28:5d:eb:e1:d5:41:2b:df:8e:e5:6e:b8:7f:2e:91:d2: 1a:dc:92:50:08:20:db:b0:50:df:88:b9:b0:68:44:4c:63:8e: df:41:17:2c:2f:27:2e:76:b6:b8:65:a8:cc:b0:73:73:87:25: 54:a7:48:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBMjQxMTAvBgNVBAUTKDQ3MTBFNERFNjQxNUM0OEU4QjUzMUI1OUNENDdBNDFD RDc5MzQ1NUUwHhcNMjUwNTA1MDQyOTQ1WhcNMjUwNTEyMDQyOTQ1WjAYMRYwFAYD VQQDEw02ODE4M2ViOS03NzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuida+ojn9ZBPbFjRddSFrglnLUbPg4RZjdmE31KGWeU6td/bOPFKSjZP04G srTvIlwMRHykS2wZVdDSYjFeV6xmILeE0Y/GkOgusl5hzctYAkCCw9Ub2qI3XFVm prczduZKigiGlS0DJf3nHkO5XC2s2wnq86e2egqksN/5C0ctGrjRcT4SkkREDtQ7 9LfC3JLbdzJCx/0hJMKN7qhTo5Borzbo/ffeHOoG0WMBOxb8bAMx91h0AnctY4p7 wh0Y/fZeXH1ZiJ7ojwkoDKLh7Olwx+ys0YeHQaBcNS2+3uNlEs+yIeEzUVKdmFk0 GhZ4OyDnNuMhRWOn2Qm+cLh0YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOBwElb i+4zGGxIawr7Bw/s4zHwMB8GA1UdIwQYMBaAFEcQ5N5kFcSOi1MbWc1HpBzXk0Ve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUEyNC85Mzk4NENGMkU2 NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJNkxVeHRaelVla0hOZVRS VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJ NkxVeHRaelVla0hOZVRSVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBakd92li5Ixi8C9/Y+9VdS38zzG1piqKi4akTE8yz3A3jSK1pcgu0g Ya8JMdn71p3O8D3ikcYZVE7uh3mVJ+JDqCiLp5JNgNvIyqYp9oycMebhLJAaKMZu uFu4mbg+YyF6xM1gEXfI9KnCirtTlmrbn7uyWIdoD77gnqb7cFPkzhz4kHwfS9ep ohx606BbAM27ZOc5kCT/3dgWqqOPCZ5Udx7J3giq6LbOCLjr4dBaoWsDm4JtIgca /QS8jXP/yZ+oi2v2OVsCgChd6+HVQSvfjuVuuH8ukdIa3JJQCCDbsFDfiLmwaERM Y47fQRcsLycudra4ZajMsHNzhyVUp0iQ -----END CERTIFICATE-----Generated at Mon May 5 20:48:38 2025 by rpki-client