$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft File: x52oqmnxJno4UemSoGnAL1DoArw.mft (raw, json) Hash identifier: zrHXbLa9sl1CQT36vtxptw04DgVjNYaa1xotPBv0v+I= Subject key identifier: F3:05:FF:1F:09:63:68:97:AA:35:2A:37:8E:D6:6F:AD:13:42:F5:C5 Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC Certificate issuer: /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft Manifest number: 0151 Signing time: Sun 11 May 2025 03:03:08 +0000 Manifest this update: Sun 11 May 2025 03:03:07 +0000 Manifest next update: Sun 18 May 2025 03:03:07 +0000 Files and hashes: 1: x52oqmnxJno4UemSoGnAL1DoArw.crl (hash: Z7wWmBdaS2Dn7GBupm3q+nergnWI6LyjLLkM8aQKb5M=) 2: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (hash: ljYZPmOEJ2gVmqt+FLp/8ARO8gytp4GPuoxvLwL03ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC524, serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Validity Not Before: May 11 03:03:07 2025 GMT Not After : May 18 03:03:07 2025 GMT Subject: CN=6820136c-f182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:31:42:0d:31:a8:e9:76:59:c7:72:9a:a7:c7: fd:b2:ec:c0:a9:8d:63:bd:18:94:48:ce:a9:d8:5a: cd:d1:a5:76:64:1e:99:cf:e1:bf:a3:9e:49:18:37: ea:4d:b5:2c:15:f2:99:23:75:4f:2c:bb:61:cd:59: 7f:5b:f8:5b:34:17:08:41:0e:96:6b:bd:3c:5c:df: 7c:97:05:26:c7:9d:26:6b:62:8b:3d:d2:be:38:f0: 0c:e3:d9:5f:00:65:d4:19:2a:f3:af:9d:f3:9c:03: 64:df:b3:e7:71:87:f8:f2:96:db:e5:9f:1d:ce:94: 58:8d:69:b0:94:f2:2d:c0:c0:b4:ce:8c:52:53:fb: 98:f8:bb:9c:ae:fc:31:88:ef:61:bc:d1:c0:38:9c: 9a:5d:76:93:8f:44:49:be:b6:89:8d:6d:77:1a:9e: 45:ce:e2:4e:12:51:40:5d:fc:f7:19:8a:65:9b:12: 99:1b:43:4e:41:05:c4:74:a2:c3:77:fe:d1:ed:d6: 94:7d:85:f7:19:65:89:28:ec:e0:27:ca:51:61:c6: 4d:83:51:e1:8b:21:92:a6:d9:01:1a:a2:11:2b:50: 24:5a:1f:75:cb:39:f6:e4:31:b2:36:26:19:fc:1f: 40:90:09:ac:fd:83:6a:ad:6d:9c:44:16:1c:4a:27: c7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:05:FF:1F:09:63:68:97:AA:35:2A:37:8E:D6:6F:AD:13:42:F5:C5 X509v3 Authority Key Identifier: keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b9:d7:f3:04:2e:8c:85:6b:03:e3:16:36:ab:47:c0:8c:10: 5a:91:dd:5d:4c:44:49:ec:c8:79:e3:2e:6b:b2:a5:0a:5c:7d: 5d:fa:25:8c:3b:de:5d:98:0f:df:b9:73:2c:f2:61:5c:d2:88: 51:34:d5:01:17:4d:a2:df:de:86:1c:93:7b:7f:a5:fd:56:ba: e3:f8:56:99:bb:5a:92:83:1e:01:a7:b8:a1:95:8e:87:b9:3e: e0:d5:29:0e:df:54:35:1f:6e:c0:f9:12:cd:33:a4:08:5c:b9: 6d:5c:60:d6:b2:aa:58:55:fd:03:45:9d:5d:58:27:1e:8a:9c: 43:d8:0b:b1:d4:60:84:5d:76:07:39:5d:3d:e4:62:2e:db:3c: 48:c7:4d:31:b9:2b:2f:ed:2f:56:0a:77:dd:f2:97:c3:97:9a: d0:be:d4:a7:ce:68:c2:e1:a5:c4:4f:dc:27:2b:48:44:17:a7: a3:d0:85:61:90:1b:37:8f:ab:13:1a:87:c2:e4:42:07:1d:b1: fe:16:10:6c:17:64:5c:23:7a:5f:fc:9f:ca:02:96:94:3b:e8: 67:0e:26:eb:e9:26:f6:12:57:eb:40:82:44:7d:78:6c:b9:5c: 2f:d0:7e:da:4c:79:1e:94:24:ac:90:ae:7f:0c:e5:0b:f9:36: c3:d7:9e:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1MjQxMTAvBgNVBAUTKEM3OURBOEFBNjlGMTI2N0EzODUxRTk5MkEwNjlDMDJG NTBFODAyQkMwHhcNMjUwNTExMDMwMzA3WhcNMjUwNTE4MDMwMzA3WjAYMRYwFAYD VQQDEw02ODIwMTM2Yy1mMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DFCDTGo6XZZx3Kap8f9suzAqY1jvRiUSM6p2FrN0aV2ZB6Zz+G/o55JGDfq TbUsFfKZI3VPLLthzVl/W/hbNBcIQQ6Wa708XN98lwUmx50ma2KLPdK+OPAM49lf AGXUGSrzr53znANk37PncYf48pbb5Z8dzpRYjWmwlPItwMC0zoxSU/uY+Lucrvwx iO9hvNHAOJyaXXaTj0RJvraJjW13Gp5FzuJOElFAXfz3GYplmxKZG0NOQQXEdKLD d/7R7daUfYX3GWWJKOzgJ8pRYcZNg1HhiyGSptkBGqIRK1AkWh91yzn25DGyNiYZ /B9AkAms/YNqrW2cRBYcSifHkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMF/x8J Y2iXqjUqN47Wb60TQvXFMB8GA1UdIwQYMBaAFMedqKpp8SZ6OFHpkqBpwC9Q6AK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzUyNC9CNUMyQjczNDJD NTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpubzRVZW1Tb0duQUwxRG9B cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1Mm9xbW54Sm5vNFVlbVNvR25BTDFEb0Fydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzUyNC9CNUMyQjczNDJDNTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpu bzRVZW1Tb0duQUwxRG9BcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGudfzBC6MhWsD4xY2q0fAjBBakd1dTERJ7Mh54y5rsqUKXH1d+iWM O95dmA/fuXMs8mFc0ohRNNUBF02i396GHJN7f6X9Vrrj+FaZu1qSgx4Bp7ihlY6H uT7g1SkO31Q1H27A+RLNM6QIXLltXGDWsqpYVf0DRZ1dWCceipxD2Aux1GCEXXYH OV095GIu2zxIx00xuSsv7S9WCnfd8pfDl5rQvtSnzmjC4aXET9wnK0hEF6ej0IVh kBs3j6sTGofC5EIHHbH+FhBsF2RcI3pf/J/KApaUO+hnDibr6Sb2ElfrQIJEfXhs uVwv0H7aTHkelCSskK5/DOUL+TbD155a -----END CERTIFICATE-----Generated at Sun May 11 22:11:21 2025 by rpki-client