$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft File: MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft (raw, json) Hash identifier: aw6rSGIoqXn+0wTLjiIz6ExuJxvckRI/57BE55pKAcs= Subject key identifier: 87:92:D1:D6:57:48:10:5F:5A:40:05:BD:87:FE:D8:C6:41:68:EB:CD Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Certificate serial: 0680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft Manifest number: 0670 Signing time: Sat 10 May 2025 21:57:55 +0000 Manifest this update: Sat 10 May 2025 21:57:55 +0000 Manifest next update: Sat 17 May 2025 21:57:55 +0000 Files and hashes: 1: MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl (hash: Oz/ARJ55WOYjo41s1BJWWX/gXQdGKqt3fCr6ufbXbVE=) 2: 74543474865311EFAD6A3A72C4F9AE02.roa (hash: tSsmwrABsD5su5pyP7TCNOYO6hRvgrJ+hDiXInlwpOE=) 3: 204B342ECEF111ED9D71580AC4F9AE02.roa (hash: V/douCj4U7M/9Bt5a7qzsCzrgcxHQH1b+ixRaTUpN4M=) 4: 1F8EE77ECEF111ED9D71580AC4F9AE02.roa (hash: elY+yIl1H3F26OUjA40A23dujn0CummnltINa5yusRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF04, serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38 Validity Not Before: May 10 21:57:55 2025 GMT Not After : May 17 21:57:55 2025 GMT Subject: CN=681fcbe3-5e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:06:7d:0e:4b:fb:e5:ab:dc:d7:90:8e:e0:e6: b9:0b:5f:07:c5:56:08:4a:e4:58:46:66:88:10:1e: c2:a0:c0:82:0a:2d:32:52:9c:d2:6a:d3:5a:17:1a: df:7c:00:cc:f9:c6:c9:10:91:e6:45:8f:68:01:e1: 83:a2:8d:b5:74:33:7b:0f:a0:86:9a:59:dd:b1:90: ec:ce:05:4b:0f:1e:46:0d:d9:9c:ab:2c:87:6f:04: ff:1e:b3:61:4a:0d:91:99:ca:e9:c3:38:a3:84:f8: 57:7c:b3:e5:95:aa:46:b5:bd:1c:b7:79:03:d5:57: 84:2d:f4:22:d0:45:f1:90:ae:d8:d7:d5:55:f5:e4: c2:26:92:fe:07:53:f5:79:89:24:2e:64:45:7c:dd: af:ff:6b:5a:87:cc:b2:82:4e:eb:f2:4d:6d:c6:bf: bb:88:96:59:70:bf:b7:27:ee:77:08:65:a2:c7:d0: b6:1d:a5:4c:07:21:54:83:a7:da:3e:96:40:59:8a: ac:98:d6:3f:ac:7c:5f:3a:d8:c9:58:e5:e8:8a:4a: 3f:2c:2e:f5:a6:d7:59:90:5c:8c:ef:05:e5:09:fc: 23:85:82:72:58:21:d1:5b:38:90:31:36:88:49:a2: 1a:e0:d8:ad:fa:d1:5c:ce:c1:25:e8:21:31:67:df: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:92:D1:D6:57:48:10:5F:5A:40:05:BD:87:FE:D8:C6:41:68:EB:CD X509v3 Authority Key Identifier: keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:69:27:e6:0c:ce:96:d7:14:12:f4:a6:07:77:7e:2b:cb:4b: 8a:f0:26:4f:bc:24:8b:cc:9d:42:b4:6a:96:25:7f:bf:82:da: e0:d7:1f:7a:8b:24:72:f7:8b:1b:cb:44:2e:07:c7:da:0e:e5: 5f:99:60:36:07:db:d5:0d:ca:0f:ee:ab:ce:50:1c:9b:a3:68: 28:a8:12:97:d3:47:50:18:f3:e6:5e:7a:41:51:7f:33:7f:b5: e0:89:30:70:2c:ad:93:c3:00:8c:d5:38:2b:57:e0:48:f4:90: 77:32:0a:81:a4:2c:0f:64:6d:4c:be:a4:3a:ae:ed:dc:8f:00: 03:1a:21:ac:68:71:e4:ce:d8:aa:66:7b:18:16:ca:82:7b:10: ae:e8:36:af:b0:9b:e7:45:19:cc:53:4d:9d:8c:d8:03:7e:3e: 11:79:fc:02:63:99:e9:19:5b:25:c8:58:9c:33:2f:5c:98:1a: 28:43:eb:0b:87:b6:a6:ef:bc:a7:a0:82:df:60:df:ea:ef:51: fe:32:62:67:4b:89:fd:91:ed:ac:db:b0:f8:69:d3:b3:fe:bf: f2:38:20:91:2f:79:3e:08:e1:8e:1b:df:b1:74:7a:94:25:8f: 44:d8:80:40:86:22:5b:8d:e6:b2:39:cf:98:cb:75:23:91:6a: aa:18:16:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGMDQxMTAvBgNVBAUTKDMxMTZFMDc1ODQwNTZDMTZGNTY4RjBFQzYwOThFN0RD NEY1MDRBMzgwHhcNMjUwNTEwMjE1NzU1WhcNMjUwNTE3MjE1NzU1WjAYMRYwFAYD VQQDEw02ODFmY2JlMy01ZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wZ9Dkv75avc15CO4Oa5C18HxVYISuRYRmaIEB7CoMCCCi0yUpzSatNaFxrf fADM+cbJEJHmRY9oAeGDoo21dDN7D6CGmlndsZDszgVLDx5GDdmcqyyHbwT/HrNh Sg2RmcrpwzijhPhXfLPllapGtb0ct3kD1VeELfQi0EXxkK7Y19VV9eTCJpL+B1P1 eYkkLmRFfN2v/2tah8yygk7r8k1txr+7iJZZcL+3J+53CGWix9C2HaVMByFUg6fa PpZAWYqsmNY/rHxfOtjJWOXoiko/LC71ptdZkFyM7wXlCfwjhYJyWCHRWziQMTaI SaIa4Nit+tFczsEl6CExZ98LfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeS0dZX SBBfWkAFvYf+2MZBaOvNMB8GA1UdIwQYMBaAFDEW4HWEBWwW9Wjw7GCY59xPUEo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUYwNC85OTFFQjc1QTdB QjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJCYjFhUERzWUpqbjNFOVFT amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SYmdkWVFGYkJiMWFQRHNZSmpuM0U5UVNqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUYwNC85OTFFQjc1QTdBQjAxMUVCQTAyN0JCN0ZDNEY5QUUwMi9NUmJnZFlRRmJC YjFhUERzWUpqbjNFOVFTamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1aSfmDM6W1xQS9KYHd34ry0uK8CZPvCSLzJ1CtGqWJX+/gtrg1x96 iyRy94sby0QuB8faDuVfmWA2B9vVDcoP7qvOUBybo2goqBKX00dQGPPmXnpBUX8z f7XgiTBwLK2TwwCM1TgrV+BI9JB3MgqBpCwPZG1MvqQ6ru3cjwADGiGsaHHkztiq ZnsYFsqCexCu6DavsJvnRRnMU02djNgDfj4RefwCY5npGVslyFicMy9cmBooQ+sL h7am77ynoILfYN/q71H+MmJnS4n9ke2s27D4adOz/r/yOCCRL3k+COGOG9+xdHqU JY9E2IBAhiJbjeayOc+Yy3UjkWqqGBaG -----END CERTIFICATE-----Generated at Sun May 11 22:09:30 2025 by rpki-client