$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft File: -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json) Hash identifier: ckjJ3wtBnY6dVy5LwJx1Ot6keCdyksAP5Y+03Nc0HeY= Subject key identifier: FA:66:2E:66:61:D2:08:E6:56:A1:02:30:A4:7B:49:4E:B0:44:82:C6 Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 Certificate issuer: /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft Manifest number: 01D1 Signing time: Thu 15 May 2025 02:18:14 +0000 Manifest this update: Thu 15 May 2025 02:18:13 +0000 Manifest next update: Thu 22 May 2025 02:18:13 +0000 Files and hashes: 1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: utBiuH3dTbnAPTEcAbi68hl/anucRLe3v2rP8gRI/Qg=) 2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: mfCo7xBHkX9UIyrOsrP0XEhPqQke0cTzgybKkz4msYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Validity Not Before: May 15 02:18:13 2025 GMT Not After : May 22 02:18:13 2025 GMT Subject: CN=68254ee5-ab2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:d6:9c:fa:20:f2:72:ad:19:f0:41:bc:3d: 7d:0e:cf:ae:b0:51:34:e8:6a:aa:eb:10:c0:b4:ed: cf:ef:b4:3d:47:dd:9c:93:ef:48:37:de:37:06:cd: 51:ba:23:a9:87:66:35:9f:1e:6b:80:8b:d4:1b:b9: 9f:ad:c2:a1:b6:3e:51:d3:2f:26:f4:4f:90:79:57: 00:0d:4c:96:c0:f6:ef:e0:f2:13:89:49:65:91:eb: da:a8:08:06:c7:c3:10:b7:6f:ae:44:90:31:ce:9b: d9:2f:80:99:e9:a3:5a:e7:b3:df:88:82:a5:73:02: 64:0b:ee:06:0a:81:fd:19:ff:35:41:a4:32:77:ea: 04:04:a1:db:68:47:e8:48:e7:ce:43:88:f7:8a:c0: 80:ef:53:72:d1:f3:33:19:ab:b5:c8:54:e5:bd:6f: d1:24:59:3d:42:8a:d8:f3:0b:85:2c:cd:c4:91:38: 2a:66:9d:64:7d:6e:4f:99:bc:95:86:3b:e5:8f:8f: a3:4f:fa:d2:91:3a:90:6a:5a:71:c4:93:8b:90:41: 2f:d1:40:f3:24:20:1f:f5:8e:81:24:6c:64:0b:c1: 06:03:5d:d0:1e:b0:ea:fa:12:75:ee:03:dc:e8:f0: 23:2c:3b:41:fa:8f:4e:4f:bc:f5:f9:fd:47:b6:8a: db:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:66:2E:66:61:D2:08:E6:56:A1:02:30:A4:7B:49:4E:B0:44:82:C6 X509v3 Authority Key Identifier: keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:0d:43:f9:47:28:e1:b9:63:1b:0f:90:ff:ca:7b:71:45:fd: c2:ee:78:3c:a7:31:c5:c6:51:0a:55:c0:07:a6:7d:bf:24:27: 32:e2:d4:f2:98:f6:d7:02:c2:5b:7b:53:f6:85:7d:82:33:21: a5:8c:c1:e0:eb:94:3b:ff:f7:7d:02:dc:aa:a4:a7:4e:2d:1b: aa:b5:6f:f1:b9:8d:88:64:87:6e:8d:dd:4f:45:b6:4d:58:d2: 48:0e:47:be:05:82:5a:ab:09:13:aa:70:4a:08:bd:03:62:ca: 7f:a1:d1:52:a7:be:c0:25:d6:10:2f:72:a1:2c:5f:07:bb:ee: 7b:a0:c4:f1:d7:2c:31:4e:a5:13:b5:2b:37:d0:82:f1:59:0c: 51:be:82:5b:22:e7:9f:e9:4d:4c:b6:5f:2f:44:0e:a4:3c:69: 3d:ed:99:c1:5f:0b:03:be:0b:94:e4:ec:31:0b:d5:e2:48:34: 8b:8b:17:c5:ab:b2:18:bd:36:20:a7:91:1e:fc:e0:32:17:8d: 91:7d:8f:61:04:e9:e1:8d:ba:14:b9:6e:96:81:7a:39:e2:42: d1:49:d8:28:4f:0a:16:18:c2:98:ba:b2:04:09:10:c9:52:93: 10:b8:de:a0:0e:45:24:5c:ea:25:d6:ca:2a:b9:dc:69:25:5b: b8:1d:49:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxQTMxMTAvBgNVBAUTKEZCOUMzQTkwRDBDRDZCOTJCRTMxNjAzMjVEQTdDMjZD N0Y0RTU5MDAwHhcNMjUwNTE1MDIxODEzWhcNMjUwNTIyMDIxODEzWjAYMRYwFAYD VQQDEw02ODI1NGVlNS1hYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutvWnPog8nKtGfBBvD19Ds+usFE06Gqq6xDAtO3P77Q9R92ck+9IN943Bs1R uiOph2Y1nx5rgIvUG7mfrcKhtj5R0y8m9E+QeVcADUyWwPbv4PITiUllkevaqAgG x8MQt2+uRJAxzpvZL4CZ6aNa57PfiIKlcwJkC+4GCoH9Gf81QaQyd+oEBKHbaEfo SOfOQ4j3isCA71Ny0fMzGau1yFTlvW/RJFk9QorY8wuFLM3EkTgqZp1kfW5PmbyV hjvlj4+jT/rSkTqQalpxxJOLkEEv0UDzJCAf9Y6BJGxkC8EGA13QHrDq+hJ17gPc 6PAjLDtB+o9OT7z1+f1Htorb1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpmLmZh 0gjmVqECMKR7SU6wRILGMB8GA1UdIwQYMBaAFPucOpDQzWuSvjFgMl2nwmx/TlkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTFBMy84QjlEQkJDRTY4 OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1Sy1NV0F5WGFmQ2JIOU9X UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy01dzZrTkROYTVLLU1XQXlYYWZDYkg5T1dRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTFBMy84QjlEQkJDRTY4OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1 Sy1NV0F5WGFmQ2JIOU9XUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZDUP5RyjhuWMbD5D/yntxRf3C7ng8pzHFxlEKVcAHpn2/JCcy4tTy mPbXAsJbe1P2hX2CMyGljMHg65Q7//d9AtyqpKdOLRuqtW/xuY2IZIdujd1PRbZN WNJIDke+BYJaqwkTqnBKCL0DYsp/odFSp77AJdYQL3KhLF8Hu+57oMTx1ywxTqUT tSs30ILxWQxRvoJbIuef6U1Mtl8vRA6kPGk97ZnBXwsDvguU5OwxC9XiSDSLixfF q7IYvTYgp5Ee/OAyF42RfY9hBOnhjboUuW6WgXo54kLRSdgoTwoWGMKYurIECRDJ UpMQuN6gDkUkXOol1soqudxpJVu4HUkx -----END CERTIFICATE-----Generated at Fri May 16 22:54:39 2025 by rpki-client