$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft File: x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json) Hash identifier: sB5p4yiCIelW8z48iV5IuJUckn8mHM+WF8oPKM2iG5Q= Subject key identifier: 64:F7:52:77:F2:F5:99:6A:05:7A:D0:2F:EB:AD:45:26:3A:EF:B6:39 Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B Certificate issuer: /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Certificate serial: 0547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft Manifest number: 0543 Signing time: Wed 14 May 2025 23:29:21 +0000 Manifest this update: Wed 14 May 2025 23:29:20 +0000 Manifest next update: Wed 21 May 2025 23:29:20 +0000 Files and hashes: 1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: WJAj5WvfvWbeIoSFobjOvskmXS1htZl7GDQxLZmOHjQ=) 2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: l/5p1WINKz3TNzRuWnRaS5/CleEw3KzqgOzzW2+y1jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1351 (0x547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Validity Not Before: May 14 23:29:20 2025 GMT Not After : May 21 23:29:20 2025 GMT Subject: CN=68252750-708b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:7b:88:02:15:f0:be:76:ba:e0:15:22:a4: 0c:3c:82:1f:2e:d3:5f:48:23:93:15:1b:17:14:c5: f1:77:b0:ee:9b:fc:00:9c:1d:99:e5:a8:69:65:07: 69:c6:68:f4:5f:6e:45:f0:08:20:cf:c4:2b:80:cd: 46:44:37:5d:33:9b:99:af:84:f0:25:0b:10:98:43: 1d:8d:e5:75:98:8b:75:f8:a4:96:43:62:6f:8b:2c: 89:6c:84:55:d3:8e:62:f7:af:01:19:13:03:aa:a0: 97:9f:7b:ef:5b:3c:97:7f:7f:09:87:5a:bd:22:07: 3a:65:18:0d:81:f5:0c:eb:d3:06:28:a2:df:18:9c: 2a:8e:87:4e:9f:b0:4b:2b:61:66:c2:6c:8c:38:d7: 69:20:b1:7e:29:46:db:fe:34:44:41:a4:cd:e9:13: 23:e0:38:dc:b1:42:e2:fa:3d:f1:15:55:de:79:df: 0b:5c:3b:01:f9:e6:82:8e:4d:d0:a4:7d:7b:0d:6b: 2b:88:d9:55:6b:55:4a:9f:c2:20:c0:2d:57:85:ca: 42:4a:07:b3:cc:c7:20:58:c2:bf:e6:ac:10:8d:21: b9:ce:d4:ab:ef:14:05:8b:e4:82:d2:e6:d9:56:dd: e8:7b:4c:29:22:06:d4:d5:44:be:85:45:e2:ae:0d: 6f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F7:52:77:F2:F5:99:6A:05:7A:D0:2F:EB:AD:45:26:3A:EF:B6:39 X509v3 Authority Key Identifier: keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:04:94:90:73:b5:b9:df:40:f0:ed:79:63:91:52:25:60:8c: f9:99:61:c3:3d:79:d5:f3:98:03:65:52:b8:50:2a:38:41:05: 52:85:b6:a1:ee:7c:1d:50:90:aa:93:57:39:ea:e9:48:3a:9a: 29:28:9e:1f:be:0c:cc:ec:c9:f3:84:c8:19:fb:49:e7:71:ed: 4b:ad:d0:7e:4c:85:a3:87:c6:52:1c:c3:53:01:e6:db:1a:5a: 31:0d:2f:bd:e0:10:67:d0:cc:20:73:c3:83:ce:cd:09:b1:d7: 57:51:d4:f7:e3:fe:aa:ba:81:45:16:f4:32:8d:d8:5c:dd:12: fb:19:9b:67:eb:bf:47:ab:71:07:e8:9c:00:f3:3f:01:c8:e1: 22:8a:27:0e:7d:79:33:af:9c:0a:5a:bc:dd:ec:f9:9b:24:8b: c3:0c:3d:fa:06:2a:63:5a:59:a0:47:74:16:8a:7d:52:d5:4e: 4a:ae:06:eb:25:9d:b6:70:69:10:1c:71:7c:5c:f0:2f:59:e9: ff:6d:61:8a:a2:f0:b4:ad:5f:db:91:8e:4b:44:88:f6:c0:b8: 7b:a2:59:50:41:38:bc:04:49:12:5f:95:16:ff:1a:8b:90:4d: a3:1c:81:e8:ed:17:a9:2b:43:07:db:05:90:f0:8a:a2:f6:fa: 4c:de:34:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzNzcxMTAvBgNVBAUTKEM3N0MxMzA5RjRBMTUzMEVBMzk1NDE0NTI4ODE1RjlD NzY3QzUxNUIwHhcNMjUwNTE0MjMyOTIwWhcNMjUwNTIxMjMyOTIwWjAYMRYwFAYD VQQDEw02ODI1Mjc1MC03MDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKN7iAIV8L52uuAVIqQMPIIfLtNfSCOTFRsXFMXxd7Dum/wAnB2Z5ahpZQdp xmj0X25F8Aggz8QrgM1GRDddM5uZr4TwJQsQmEMdjeV1mIt1+KSWQ2JviyyJbIRV 045i968BGRMDqqCXn3vvWzyXf38Jh1q9Igc6ZRgNgfUM69MGKKLfGJwqjodOn7BL K2FmwmyMONdpILF+KUbb/jREQaTN6RMj4DjcsULi+j3xFVXeed8LXDsB+eaCjk3Q pH17DWsriNlVa1VKn8IgwC1XhcpCSgezzMcgWMK/5qwQjSG5ztSr7xQFi+SC0ubZ Vt3oe0wpIgbU1US+hUXirg1vqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGT3Unfy 9ZlqBXrQL+utRSY677Y5MB8GA1UdIwQYMBaAFMd8Ewn0oVMOo5VBRSiBX5x2fFFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzM3Ny82MEI3N0RBRUVG OEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3NmpsVUZGS0lGZm5IWjhV VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gzd1RDZlNoVXc2amxVRkZLSUZmbkhaOFVWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzM3Ny82MEI3N0RBRUVGOEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3 NmpsVUZGS0lGZm5IWjhVVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2BJSQc7W530Dw7XljkVIlYIz5mWHDPXnV85gDZVK4UCo4QQVShbah 7nwdUJCqk1c56ulIOpopKJ4fvgzM7MnzhMgZ+0nnce1LrdB+TIWjh8ZSHMNTAebb GloxDS+94BBn0Mwgc8ODzs0JsddXUdT34/6quoFFFvQyjdhc3RL7GZtn679Hq3EH 6JwA8z8ByOEiiicOfXkzr5wKWrzd7PmbJIvDDD36BipjWlmgR3QWin1S1U5Krgbr JZ22cGkQHHF8XPAvWen/bWGKovC0rV/bkY5LRIj2wLh7ollQQTi8BEkSX5UW/xqL kE2jHIHo7RepK0MH2wWQ8Iqi9vpM3jRI -----END CERTIFICATE-----Generated at Fri May 16 09:58:01 2025 by rpki-client