$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft File: 64E_WXYcfGsa4oxHgWfiBhq1ys8.mft (raw, json) Hash identifier: Vz7R5nrYGRwa8sCcPiPRYHlmeTk5FazuvfjusVSnmVo= Subject key identifier: 44:2A:AA:E3:B3:4D:A8:12:03:47:CE:56:B2:10:60:17:01:42:1D:46 Authority key identifier: EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF Certificate issuer: /CN=A91DD75B/serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft Manifest number: 028A Signing time: Mon 05 May 2025 01:09:50 +0000 Manifest this update: Mon 05 May 2025 01:09:49 +0000 Manifest next update: Mon 12 May 2025 01:09:49 +0000 Files and hashes: 1: 64E_WXYcfGsa4oxHgWfiBhq1ys8.crl (hash: waZB2Cv60jp5zke89gSvSRBblk91+KrfYmYgAlBh5V4=) 2: D6A658CE01DE11ED8236F073C4F9AE02.roa (hash: kmjWEDePak7RaIzaM2s6P+tZd0JsQcs5f1UxF22C33k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD75B, serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Validity Not Before: May 5 01:09:49 2025 GMT Not After : May 12 01:09:49 2025 GMT Subject: CN=68180fdd-95bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:39:bb:31:2a:50:b8:64:ca:8e:d3:b4:35: 38:98:04:06:d5:ec:ad:df:7f:23:ab:7e:f1:59:67: 8b:d1:6c:78:85:9a:aa:04:81:eb:cd:b9:a9:d6:69: 0d:a8:85:7f:66:ec:5e:5c:5c:55:02:1a:d6:54:05: 3f:0b:59:f3:6c:d5:a3:10:1b:e2:a8:70:36:fa:d7: 81:ae:61:72:4c:5a:e5:ce:8c:69:1a:2f:b3:34:d2: d8:16:db:bf:bb:37:48:84:8c:cf:8d:e9:ad:e1:b5: f1:7f:7d:91:85:6f:ba:88:0c:d9:4c:bd:95:d9:30: 66:8f:73:bb:8b:c1:da:6c:9d:5f:aa:40:c5:22:90: 6b:c4:a1:c2:0b:e4:9d:ee:e3:3c:77:e3:a9:28:da: bb:1f:89:86:5c:b6:cd:f0:b6:82:b9:36:6f:e7:a2: 73:1a:d3:0c:1d:d2:d9:25:2b:85:b9:c4:09:1d:41: 56:5c:9e:3e:ff:ef:60:61:5d:1f:e1:4d:c2:c3:08: 56:d5:7c:a4:a8:b9:70:69:80:b4:01:6c:75:8b:9b: 6b:5a:db:78:80:f6:60:76:80:27:bc:14:b3:31:d4: 49:6b:43:c4:b7:1e:02:b1:f3:bf:bb:a7:ba:ce:b7: bb:71:6c:53:69:1a:ff:3a:81:58:43:29:d7:4e:8d: ab:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2A:AA:E3:B3:4D:A8:12:03:47:CE:56:B2:10:60:17:01:42:1D:46 X509v3 Authority Key Identifier: keyid:EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e4:64:8d:b9:75:96:0d:37:ee:4e:51:59:a4:76:df:a9:6d: 69:ce:8f:d1:5a:a3:79:0c:ae:63:d8:eb:d0:af:f3:72:bd:c7: 67:b6:61:99:80:ea:77:0a:68:32:a9:9b:6d:c0:9a:48:a9:c6: 78:72:4e:ce:6e:0e:f2:85:7d:71:ce:b7:e9:69:4c:33:2e:d3: 17:48:f2:29:9d:10:ff:66:41:66:a1:b2:3f:63:29:a1:d7:a0: 6d:a5:36:a5:d9:fc:1b:9f:b5:00:a0:44:11:28:0d:96:ea:6a: 46:cc:78:18:39:aa:10:74:72:ea:e0:16:87:4d:e1:45:64:5e: 4b:21:82:37:1a:fd:82:e9:c5:97:11:1e:df:59:80:db:9c:ef: dd:7c:02:1d:a9:d3:47:27:8a:2b:cc:1a:32:81:84:7e:6c:39: 1f:2f:c4:23:7b:7d:49:4f:f0:54:a4:6a:31:86:41:aa:15:44: 39:38:8d:2a:16:80:40:32:d2:c3:67:12:04:58:ac:5f:58:9e: b7:cf:dd:a4:de:25:a9:43:55:a1:98:b8:f3:b0:b8:ab:bc:2b: ba:d1:52:9d:79:d6:f6:fb:f5:13:a4:f7:71:10:bc:2b:35:7b: 55:fc:92:9d:07:77:23:4d:42:12:41:99:ed:e8:6d:c1:eb:19: 14:cc:9a:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3NUIxMTAvBgNVBAUTKEVCODEzRjU5NzYxQzdDNkIxQUUyOEM0NzgxNjdFMjA2 MUFCNUNBQ0YwHhcNMjUwNTA1MDEwOTQ5WhcNMjUwNTEyMDEwOTQ5WjAYMRYwFAYD VQQDEw02ODE4MGZkZC05NWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+M5uzEqULhkyo7TtDU4mAQG1eyt338jq37xWWeL0Wx4hZqqBIHrzbmp1mkN qIV/ZuxeXFxVAhrWVAU/C1nzbNWjEBviqHA2+teBrmFyTFrlzoxpGi+zNNLYFtu/ uzdIhIzPjemt4bXxf32RhW+6iAzZTL2V2TBmj3O7i8HabJ1fqkDFIpBrxKHCC+Sd 7uM8d+OpKNq7H4mGXLbN8LaCuTZv56JzGtMMHdLZJSuFucQJHUFWXJ4+/+9gYV0f 4U3CwwhW1XykqLlwaYC0AWx1i5trWtt4gPZgdoAnvBSzMdRJa0PEtx4CsfO/u6e6 zre7cWxTaRr/OoFYQynXTo2r/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQqquOz TagSA0fOVrIQYBcBQh1GMB8GA1UdIwQYMBaAFOuBP1l2HHxrGuKMR4Fn4gYatcrP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc1Qi82NEExREE0ODAx REMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZHc2E0b3hIZ1dmaUJocTF5 czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RV9XWFljZkdzYTRveEhnV2ZpQmhxMXlzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc1Qi82NEExREE0ODAxREMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZH c2E0b3hIZ1dmaUJocTF5czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm5GSNuXWWDTfuTlFZpHbfqW1pzo/RWqN5DK5j2OvQr/NyvcdntmGZ gOp3CmgyqZttwJpIqcZ4ck7Obg7yhX1xzrfpaUwzLtMXSPIpnRD/ZkFmobI/Yymh 16BtpTal2fwbn7UAoEQRKA2W6mpGzHgYOaoQdHLq4BaHTeFFZF5LIYI3Gv2C6cWX ER7fWYDbnO/dfAIdqdNHJ4orzBoygYR+bDkfL8Qje31JT/BUpGoxhkGqFUQ5OI0q FoBAMtLDZxIEWKxfWJ63z92k3iWpQ1WhmLjzsLirvCu60VKdedb2+/UTpPdxELwr NXtV/JKdB3cjTUISQZnt6G3B6xkUzJr0 -----END CERTIFICATE-----Generated at Mon May 5 03:16:03 2025 by rpki-client