$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft File: fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json) Hash identifier: 5+VSZr3w05I11iBl/BuBMZfLdd8kbGZqJVz2J7XPIkA= Subject key identifier: 1F:F3:67:8F:8A:86:BF:A1:D9:CE:BB:A4:6A:2D:5C:CA:AF:B1:CC:0B Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 Certificate issuer: /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft Manifest number: 0121 Signing time: Sun 11 May 2025 03:38:48 +0000 Manifest this update: Sun 11 May 2025 03:38:47 +0000 Manifest next update: Sun 18 May 2025 03:38:47 +0000 Files and hashes: 1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: 6bWR6+BT6cmD+IGqHtyGqtVb7coELueaWu8rKbctzoM=) 2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc=) 3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Validity Not Before: May 11 03:38:47 2025 GMT Not After : May 18 03:38:47 2025 GMT Subject: CN=68201bc7-256f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:49:d7:18:68:e7:e8:4a:27:69:ee:25:76: 6b:3b:75:3a:d3:1f:6c:4b:1f:3b:83:52:c7:18:c3: 53:e2:0a:b8:a1:53:88:07:8e:19:e1:cb:49:d9:f4: cd:14:43:14:d8:f0:d5:dd:d1:d0:25:bb:ba:57:44: 4e:ef:a1:35:bf:58:66:4a:41:a1:ef:db:b3:3a:5c: eb:5a:5a:8d:15:7d:b0:d7:d9:9b:97:53:bf:4c:f6: 4f:bf:03:7b:9f:0c:ac:fe:47:f1:33:f0:94:2e:5e: fd:96:24:88:e0:87:cb:cc:36:33:a6:94:e3:96:08: 04:26:91:6f:f0:3d:18:67:82:0f:81:7d:f6:19:eb: 03:b6:ca:b5:2c:74:c1:2a:70:ca:ed:9c:cd:88:e9: fb:c7:70:31:79:fe:e5:99:70:c9:59:2c:40:62:2f: b5:e6:9f:f1:18:05:a4:24:b2:8f:0a:1d:c9:f6:c6: 02:d3:80:35:32:18:43:1a:5f:54:a2:fa:33:3c:c7: 18:64:c1:15:20:c5:7f:81:96:ba:43:a3:3d:46:3b: d8:ae:3e:29:98:41:39:a2:30:37:dc:2b:0f:45:a3: 93:c4:89:29:6b:39:8c:7f:20:f5:89:f6:c2:08:b8: 09:7d:19:aa:f1:69:86:98:01:96:b2:44:21:ea:7b: 5d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F3:67:8F:8A:86:BF:A1:D9:CE:BB:A4:6A:2D:5C:CA:AF:B1:CC:0B X509v3 Authority Key Identifier: keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:43:0e:dc:5a:39:e2:47:d3:db:e2:a0:c6:95:3d:43:be:2f: 3d:93:20:20:f0:ee:91:b6:2d:a5:e2:e2:43:40:1c:44:50:cb: 4e:50:e5:77:70:40:11:77:8d:ea:be:d4:d2:c3:d3:e2:0b:a5: 10:55:3d:d0:8a:f9:39:bc:2c:3c:7c:5e:ab:e5:12:37:f9:a5: f0:db:74:e3:ea:1f:bc:fe:25:71:1a:94:53:3b:c5:13:61:50: 39:cb:ab:13:05:b2:88:a7:c8:41:3d:45:e8:53:4c:6c:4c:70: 48:cd:da:f2:c0:d8:0c:39:e4:27:3d:d8:ba:fa:90:cb:d3:14: 91:f1:48:59:67:12:d4:ac:c4:99:b8:3e:19:b8:2f:e8:07:45: 28:40:b9:ad:f4:fe:aa:ff:b7:a4:00:30:e2:8e:55:7c:85:4f: 40:08:79:54:ff:46:f8:8b:67:21:13:68:66:94:1a:33:f9:91: 24:4e:c8:71:e0:ba:a6:5c:d0:f9:ac:db:f5:79:64:80:32:23: fa:59:a9:27:15:36:d3:5d:9e:f0:f0:e0:49:eb:3c:78:90:8b: 55:e3:39:fc:b9:e3:ac:bc:f5:67:84:f2:bb:c1:29:e9:61:c3: c4:84:cc:7a:78:b1:c0:17:3f:19:3f:bb:b2:5f:7d:49:91:bf: a2:90:ec:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1QUQxMTAvBgNVBAUTKDdGMzUyQTc2OTU2RDc3MDJGQzc3QUY2MEZDQzEyOUU2 MUZEQkVBMzIwHhcNMjUwNTExMDMzODQ3WhcNMjUwNTE4MDMzODQ3WjAYMRYwFAYD VQQDEw02ODIwMWJjNy0yNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4RJ1xho5+hKJ2nuJXZrO3U60x9sSx87g1LHGMNT4gq4oVOIB44Z4ctJ2fTN FEMU2PDV3dHQJbu6V0RO76E1v1hmSkGh79uzOlzrWlqNFX2w19mbl1O/TPZPvwN7 nwys/kfxM/CULl79liSI4IfLzDYzppTjlggEJpFv8D0YZ4IPgX32GesDtsq1LHTB KnDK7ZzNiOn7x3Axef7lmXDJWSxAYi+15p/xGAWkJLKPCh3J9sYC04A1MhhDGl9U ovozPMcYZMEVIMV/gZa6Q6M9RjvYrj4pmEE5ojA33CsPRaOTxIkpazmMfyD1ifbC CLgJfRmq8WmGmAGWskQh6ntdZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/zZ4+K hr+h2c67pGotXMqvscwLMB8GA1UdIwQYMBaAFH81KnaVbXcC/HevYPzBKeYf2+oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVBRC9COEI5MUM0NjdF MTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3TDhkNjlnX01FcDVoX2I2 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVBRC9COEI5MUM0NjdFMTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3 TDhkNjlnX01FcDVoX2I2akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrQw7cWjniR9Pb4qDGlT1Dvi89kyAg8O6Rti2l4uJDQBxEUMtOUOV3 cEARd43qvtTSw9PiC6UQVT3Qivk5vCw8fF6r5RI3+aXw23Tj6h+8/iVxGpRTO8UT YVA5y6sTBbKIp8hBPUXoU0xsTHBIzdrywNgMOeQnPdi6+pDL0xSR8UhZZxLUrMSZ uD4ZuC/oB0UoQLmt9P6q/7ekADDijlV8hU9ACHlU/0b4i2chE2hmlBoz+ZEkTshx 4LqmXND5rNv1eWSAMiP6WaknFTbTXZ7w8OBJ6zx4kItV4zn8ueOsvPVnhPK7wSnp YcPEhMx6eLHAFz8ZP7uyX31Jkb+ikOwq -----END CERTIFICATE-----Generated at Mon May 12 18:44:21 2025 by rpki-client