$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json) Hash identifier: w7uSyuxQcauz8+1rauiyE3EUKWvObitXNlXll+7TWVg= Subject key identifier: D8:41:64:8E:98:77:95:6F:A9:66:A4:0D:E8:03:4D:25:A9:24:AC:1B Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Certificate serial: 17CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft Manifest number: 17BF Signing time: Mon 12 May 2025 16:30:27 +0000 Manifest this update: Mon 12 May 2025 16:30:27 +0000 Manifest next update: Mon 19 May 2025 16:30:27 +0000 Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: jdniU/y7xZsYOosMcrQXufYNDJzC/HLuE9lGghcL6Hw=) 2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: veiSAA57yRrgqocVJ9kM0ybPgWzL/JzbGINmTfwNHX8=) 3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: zCpY8nx1qxvRAvrVO7S1BXfjXPbBU6CC+eJhv6+dkZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6091 (0x17cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Validity Not Before: May 12 16:30:27 2025 GMT Not After : May 19 16:30:27 2025 GMT Subject: CN=68222223-776d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:58:9d:30:d4:69:ca:52:e1:47:62:6a:f9: 82:3a:3d:6b:5d:34:0c:21:11:6c:69:ed:39:36:98: 72:34:76:9c:98:cd:81:4e:0f:58:b3:42:44:f0:82: 0a:e4:b0:e7:01:90:ab:02:8f:3f:f6:bc:4d:6f:64: 7e:c8:a3:21:18:f1:2e:eb:0f:90:4b:13:88:ab:1f: 5b:38:d9:23:a0:86:e7:95:ce:81:b7:4a:ed:57:98: b0:e1:5f:2b:1e:6f:14:a2:b8:6e:f4:d5:f9:1a:54: 05:42:12:d0:11:b9:21:85:d1:fd:a1:f2:50:4b:04: 82:1d:09:77:c9:84:98:16:9b:0e:0a:3f:92:bb:3d: 9b:a0:35:db:8e:f0:bf:c0:1b:eb:f1:88:13:fd:9a: 28:dd:f6:09:e3:62:09:a3:c3:7c:ea:1c:24:68:9a: 9d:11:53:5a:dd:90:88:15:c2:39:4d:a8:74:1b:ce: ec:b9:18:fa:9e:13:ff:13:92:47:cb:40:63:e9:af: 81:67:bf:93:86:b8:82:6d:d9:fd:01:34:25:47:c3: 02:ba:e3:d4:b0:6a:77:ca:96:da:e6:d0:10:e9:bc: 45:c8:35:70:1f:ea:a2:fc:c9:69:c0:97:7a:0b:1b: 51:80:d5:11:20:ff:8d:39:b9:1c:02:f6:fb:bd:02: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:41:64:8E:98:77:95:6F:A9:66:A4:0D:E8:03:4D:25:A9:24:AC:1B X509v3 Authority Key Identifier: keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:cd:b8:7a:44:cf:bb:f8:53:fb:4e:08:ae:09:b9:f2:9b:03: 01:f8:c4:63:aa:a0:57:6d:76:a4:f8:e2:15:d5:40:b6:ec:de: 78:5a:8e:5f:22:b1:07:b0:b8:88:51:29:ea:28:04:d1:3c:cc: 90:ce:c1:4b:68:42:1d:03:7f:b3:25:43:c1:83:84:76:90:bc: d0:16:b7:5c:b1:69:f7:81:0a:07:50:13:11:8a:f1:42:d7:f6: 56:a8:2a:ca:93:44:64:c8:98:6b:1c:fe:40:e4:2d:bf:d6:d1: ad:ed:eb:1f:0d:07:b9:bf:d6:03:ef:f5:3a:1b:60:35:6b:68: 0a:d6:ae:a4:09:a4:8f:a8:7c:35:b9:e5:b4:b2:82:da:51:dd: e9:ae:49:2e:70:42:aa:98:9f:75:f3:56:4a:01:54:df:d7:29: ee:6e:87:df:0d:52:32:ca:ef:f6:6d:b1:7c:51:5f:59:14:52: 67:d2:aa:d3:03:6c:89:c8:35:85:34:0e:c8:95:af:4b:73:f1: a8:86:49:ff:fa:9a:31:bc:83:94:72:39:1e:2f:b0:c6:a9:24: 63:f7:dc:51:69:4e:0a:de:79:d2:a0:02:a6:8c:d2:c2:0e:17: 22:4f:11:83:ed:76:13:94:7d:d4:13:f8:89:04:fd:61:05:4e: 54:57:56:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzQ0ExMTAvBgNVBAUTKEJCOTMyNTZFNjA3RDQyRUI2RTM0MjBEQ0M3MTM3RjIw Qjg0RDBDOEEwHhcNMjUwNTEyMTYzMDI3WhcNMjUwNTE5MTYzMDI3WjAYMRYwFAYD VQQDEw02ODIyMjIyMy03NzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSRYnTDUacpS4UdiavmCOj1rXTQMIRFsae05NphyNHacmM2BTg9Ys0JE8IIK 5LDnAZCrAo8/9rxNb2R+yKMhGPEu6w+QSxOIqx9bONkjoIbnlc6Bt0rtV5iw4V8r Hm8Uorhu9NX5GlQFQhLQEbkhhdH9ofJQSwSCHQl3yYSYFpsOCj+Suz2boDXbjvC/ wBvr8YgT/Zoo3fYJ42IJo8N86hwkaJqdEVNa3ZCIFcI5Tah0G87suRj6nhP/E5JH y0Bj6a+BZ7+ThriCbdn9ATQlR8MCuuPUsGp3ypba5tAQ6bxFyDVwH+qi/MlpwJd6 CxtRgNURIP+NObkcAvb7vQK2dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhBZI6Y d5VvqWakDegDTSWpJKwbMB8GA1UdIwQYMBaAFLuTJW5gfULrbjQg3McTfyC4TQyK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjNDQS9FRjRGOTM3Q0Mz QTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1dHVOQ0RjeHhOX0lMaE5E SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1TWxibUI5UXV0dU5DRGN4eE5fSUxoTkRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjNDQS9FRjRGOTM3Q0MzQTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1 dHVOQ0RjeHhOX0lMaE5ESW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkzbh6RM+7+FP7TgiuCbnymwMB+MRjqqBXbXak+OIV1UC27N54Wo5f IrEHsLiIUSnqKATRPMyQzsFLaEIdA3+zJUPBg4R2kLzQFrdcsWn3gQoHUBMRivFC 1/ZWqCrKk0RkyJhrHP5A5C2/1tGt7esfDQe5v9YD7/U6G2A1a2gK1q6kCaSPqHw1 ueW0soLaUd3prkkucEKqmJ9181ZKAVTf1ynuboffDVIyyu/2bbF8UV9ZFFJn0qrT A2yJyDWFNA7Ila9Lc/Gohkn/+poxvIOUcjkeL7DGqSRj99xRaU4K3nnSoAKmjNLC DhciTxGD7XYTlH3UE/iJBP1hBU5UV1Zx -----END CERTIFICATE-----Generated at Tue May 13 01:44:26 2025 by rpki-client