$ rpki-client -vvf rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft File: M4vXge0h5dsUBXs3uQOipAjiQgI.mft (raw, json) Hash identifier: 61caD3KoM73FjX/RJ7NXzkMQZSh4uolP/eosBMMfRZc= Subject key identifier: 26:36:CB:52:75:07:E2:74:23:26:CE:BF:E8:DD:2C:8B:6D:01:A8:C6 Authority key identifier: 33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 Certificate issuer: /CN=A91E38C1/serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Certificate serial: 34B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft Manifest number: 3493 Signing time: Mon 12 May 2025 14:50:55 +0000 Manifest this update: Mon 12 May 2025 14:50:54 +0000 Manifest next update: Mon 19 May 2025 14:50:54 +0000 Files and hashes: 1: M4vXge0h5dsUBXs3uQOipAjiQgI.crl (hash: qZ0wTqZAcV2/tQ3UiuntTFFOA6MGdlKzdOEmhcXJxo4=) 2: 5F114FB2C28811EB8BB7245FC4F9AE02.roa (hash: pXEz96c+FVbRFmjMAW4nQjRzz8DkZXAExn9Bfi/pywo=) 3: 5DF144D4C28811EB8BB7245FC4F9AE02.roa (hash: kVq2GG+edCw3+lxLsij1CON1KgLPy95QS1vRV3TSyB8=) 4: 5CD84EBCC28811EB8BB7245FC4F9AE02.roa (hash: bfUpyNZCPyo9G8/socIyydOZMRYa1GRdtd4ssZfl3Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13495 (0x34b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E38C1, serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Validity Not Before: May 12 14:50:54 2025 GMT Not After : May 19 14:50:54 2025 GMT Subject: CN=68220acf-4507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:2b:34:75:4d:2a:b2:2f:ef:53:97:13:a3: 53:19:b5:5c:69:ce:ce:df:56:f8:3a:ef:f4:49:eb: 59:80:13:dd:05:a0:a8:7f:eb:f8:f3:b0:14:44:e8: 2e:ec:db:6b:f3:5b:4c:65:5e:77:83:0e:3f:95:fe: 91:e1:52:16:90:3d:53:92:9f:f9:f0:b6:7e:fb:10: 7f:75:e2:40:28:39:9f:96:76:67:70:9d:cd:d9:ce: 31:9a:e7:a9:d8:a5:1d:00:e4:0b:ee:db:34:ed:97: f7:65:8d:16:2f:ec:c9:2f:eb:9d:78:f3:71:3e:28: f4:36:05:e3:7e:db:e6:ad:59:7d:86:f7:53:d2:de: 47:5a:f7:62:02:c6:03:70:0b:48:a5:ef:46:78:4b: ea:90:dd:f1:a9:6a:0b:64:14:ee:67:8d:3a:a8:5c: a6:e1:ee:fa:9a:90:0b:bb:94:fc:be:c2:81:6b:c6: fc:ca:eb:0e:d4:d0:72:cb:f9:c3:28:9d:f8:11:94: 8d:f0:e5:a3:56:82:bf:10:eb:40:5e:97:68:d9:12: ef:57:74:af:33:09:52:75:ed:9e:17:1b:4f:40:70: 91:d7:d9:c8:7d:04:1d:9a:1a:8c:b2:90:86:dd:2c: c7:8f:25:42:40:c6:fe:03:2d:59:ac:0b:d5:46:60: 1f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:36:CB:52:75:07:E2:74:23:26:CE:BF:E8:DD:2C:8B:6D:01:A8:C6 X509v3 Authority Key Identifier: keyid:33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:99:c0:d5:d9:c0:95:11:d9:c7:7b:68:58:e7:04:3b:16:51: e5:df:33:a2:32:9d:97:c1:49:10:b8:39:30:b6:0e:5a:f9:45: 9d:00:d8:d5:88:f2:94:64:6b:32:dd:2e:73:14:48:ba:d4:17: 9e:b6:de:f1:1e:89:fa:04:19:b9:de:51:c1:1d:e2:fc:d9:be: 0c:99:4c:5a:bc:70:6e:42:89:3c:c5:9c:13:91:41:09:d8:2e: 91:ae:0d:50:b7:a7:2b:b5:fc:b5:78:10:7f:d6:f4:de:38:5c: b5:ba:1a:e5:5e:bc:94:8a:02:3f:fc:22:2f:2b:6d:7d:96:45: 2f:d1:aa:cc:f5:9e:a6:13:6c:7d:f8:79:1c:15:05:b5:c2:20: 08:4f:dd:af:6f:93:6e:02:14:cb:1a:64:b6:b1:e6:96:c5:d9: c0:f2:46:f3:98:0d:9a:80:f5:b2:4b:df:79:15:e8:9c:26:43: d4:b5:9c:e9:9d:38:d8:f7:43:37:81:bd:c5:66:a8:c0:b1:2d: 25:d2:a4:7d:a3:cb:ab:00:d1:61:ab:23:1d:aa:81:27:d5:fe: df:5a:83:f4:ac:be:23:2d:92:ba:90:f6:86:40:c0:ca:84:1b: 5a:21:92:b5:ee:a4:1b:79:27:05:a4:bd:97:28:3b:5e:ed:e3: 9b:a2:06:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4QzExMTAvBgNVBAUTKDMzOEJENzgxRUQyMUU1REIxNDA1N0IzN0I5MDNBMkE0 MDhFMjQyMDIwHhcNMjUwNTEyMTQ1MDU0WhcNMjUwNTE5MTQ1MDU0WjAYMRYwFAYD VQQDEw02ODIyMGFjZi00NTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxMrNHVNKrIv71OXE6NTGbVcac7O31b4Ou/0SetZgBPdBaCof+v487AUROgu 7Ntr81tMZV53gw4/lf6R4VIWkD1Tkp/58LZ++xB/deJAKDmflnZncJ3N2c4xmuep 2KUdAOQL7ts07Zf3ZY0WL+zJL+udePNxPij0NgXjftvmrVl9hvdT0t5HWvdiAsYD cAtIpe9GeEvqkN3xqWoLZBTuZ406qFym4e76mpALu5T8vsKBa8b8yusO1NByy/nD KJ34EZSN8OWjVoK/EOtAXpdo2RLvV3SvMwlSde2eFxtPQHCR19nIfQQdmhqMspCG 3SzHjyVCQMb+Ay1ZrAvVRmAfMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY2y1J1 B+J0IybOv+jdLIttAajGMB8GA1UdIwQYMBaAFDOL14HtIeXbFAV7N7kDoqQI4kIC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzhDMS9FNzVBQzI2MjFE OTcxMUUyOEVGODkyODEwOEIwMkNEMi9NNHZYZ2UwaDVkc1VCWHMzdVFPaXBBamlR Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL000dlhnZTBoNWRzVUJYczN1UU9pcEFqaVFnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzhDMS9FNzVBQzI2MjFEOTcxMUUyOEVGODkyODEwOEIwMkNEMi9NNHZYZ2UwaDVk c1VCWHMzdVFPaXBBamlRZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFmcDV2cCVEdnHe2hY5wQ7FlHl3zOiMp2XwUkQuDkwtg5a+UWdANjV iPKUZGsy3S5zFEi61Beett7xHon6BBm53lHBHeL82b4MmUxavHBuQok8xZwTkUEJ 2C6Rrg1Qt6crtfy1eBB/1vTeOFy1uhrlXryUigI//CIvK219lkUv0arM9Z6mE2x9 +HkcFQW1wiAIT92vb5NuAhTLGmS2seaWxdnA8kbzmA2agPWyS995FeicJkPUtZzp nTjY90M3gb3FZqjAsS0l0qR9o8urANFhqyMdqoEn1f7fWoP0rL4jLZK6kPaGQMDK hBtaIZK17qQbeScFpL2XKDte7eObogZF -----END CERTIFICATE-----Generated at Wed May 14 11:39:25 2025 by rpki-client