$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft File: c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json) Hash identifier: np31eLh3hcz+n75aKub4d0Z4FIwXEpim3WjnRhE2QVc= Subject key identifier: C4:61:0C:CE:64:9B:79:85:E5:FF:07:A2:93:EF:C5:15:7A:19:F7:B0 Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 Certificate issuer: /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft Manifest number: 7E Signing time: Tue 13 May 2025 05:51:46 +0000 Manifest this update: Tue 13 May 2025 05:51:46 +0000 Manifest next update: Tue 20 May 2025 05:51:46 +0000 Files and hashes: 1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: nrJe0R8IjltCXF4qEhmrIFxRvGTmQxIzZccTocaZZeM=) 2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: MYqPgxBGfIGKCkX+SQW42+81sVWr8a9Nd2V6LH33Vw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9 Validity Not Before: May 13 05:51:46 2025 GMT Not After : May 20 05:51:46 2025 GMT Subject: CN=6822ddf2-55ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:73:59:e6:dc:16:f6:3a:46:ca:d5:21:02:7f: cb:a7:a5:d4:b7:0a:61:7e:27:ae:8d:cc:20:76:25: 2c:85:19:e3:65:22:d8:b3:a9:b3:7f:ee:79:ac:7e: d9:06:45:ff:58:e5:71:91:de:71:85:ea:a1:10:d1: c7:2a:43:8e:8d:62:06:32:88:6e:69:22:f9:51:87: 3a:e6:39:ac:80:7d:4b:d6:65:91:02:40:21:53:bb: eb:6b:46:49:96:44:de:9f:cd:fa:5a:9d:73:33:a9: 60:eb:2d:30:c6:cc:9d:c1:57:03:6e:47:50:cb:f9: 7c:6c:0d:ef:b3:d3:4e:4d:6c:84:3c:3d:d5:af:df: bd:2d:39:30:76:0a:a7:c2:59:cf:1d:b1:63:a4:7a: 33:a4:7f:00:bd:b7:e6:09:08:3d:63:83:59:e6:02: 70:46:d8:c7:8f:41:15:d2:9a:e1:b8:78:ed:22:7c: 2a:6f:7f:aa:22:61:1e:37:86:62:46:12:ed:56:04: bc:e9:7b:5d:10:de:d5:05:8a:f7:b0:11:d9:91:5b: fc:4b:29:cf:59:66:11:9d:53:fc:d6:65:03:06:b0: b3:82:49:4b:4c:a0:a5:a7:6d:d9:30:0a:29:41:16: a1:f5:12:b7:be:90:1a:d0:5f:14:ec:0e:12:49:81: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:61:0C:CE:64:9B:79:85:E5:FF:07:A2:93:EF:C5:15:7A:19:F7:B0 X509v3 Authority Key Identifier: keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8b:5f:c5:71:a2:53:a9:f9:e8:c3:76:d0:15:cd:f5:3b:b5: 21:82:bf:db:6e:55:3a:bd:01:f6:ec:97:b6:f5:17:1e:34:28: f5:d7:99:16:91:37:86:84:7f:e1:2b:b9:19:a6:f2:cf:b3:05: 10:ba:74:7e:a3:9a:fe:28:77:93:ef:50:80:35:45:cc:40:af: 51:92:55:15:d5:a5:8c:b8:1e:d4:00:f3:2b:40:f2:e0:e2:e2: 18:62:f1:61:05:54:61:74:79:f3:76:01:49:7c:d2:ed:32:da: 1c:0d:bb:b0:f4:92:16:db:9a:30:95:6b:d2:fd:5c:3c:69:c3: c5:16:f1:ff:62:e3:dc:c2:63:c3:3f:68:a4:0f:9d:c1:62:84: 1f:40:06:cd:aa:8e:c9:07:37:c6:35:9a:df:c8:e3:d3:c7:a9: 22:6c:f4:5b:81:bf:36:6c:b8:aa:4f:a5:54:dc:32:ab:48:30: c0:c1:aa:e5:c4:fc:bd:a0:56:57:c7:93:ff:8f:51:6f:a9:71: 1b:f5:cd:e4:a9:03:fc:ae:4a:59:36:5d:17:2a:79:ad:54:5f: 0b:cd:11:a3:b0:65:88:b1:bc:53:f7:30:5c:6d:25:5e:1a:2c: f2:d6:66:45:4a:fe:ce:29:03:a9:c2:f2:5f:fa:ec:2d:66:19: 2f:fa:83:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDJBQTExMC8GA1UEBRMoNzNFQjhBRDJBM0E1RjM4QUJGRTFBRTI4MDc0RjI4MzFD MjczMUJBOTAeFw0yNTA1MTMwNTUxNDZaFw0yNTA1MjAwNTUxNDZaMBgxFjAUBgNV BAMTDTY4MjJkZGYyLTU1YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAc1nm3Bb2OkbK1SECf8unpdS3CmF+J66NzCB2JSyFGeNlItizqbN/7nmsftkG Rf9Y5XGR3nGF6qEQ0ccqQ46NYgYyiG5pIvlRhzrmOayAfUvWZZECQCFTu+trRkmW RN6fzfpanXMzqWDrLTDGzJ3BVwNuR1DL+XxsDe+z005NbIQ8PdWv370tOTB2CqfC Wc8dsWOkejOkfwC9t+YJCD1jg1nmAnBG2MePQRXSmuG4eO0ifCpvf6oiYR43hmJG Eu1WBLzpe10Q3tUFivewEdmRW/xLKc9ZZhGdU/zWZQMGsLOCSUtMoKWnbdkwCilB FqH1Ere+kBrQXxTsDhJJgSwZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxGEMzmSb eYXl/weik+/FFXoZ97AwHwYDVR0jBBgwFoAUc+uK0qOl84q/4a4oB08oMcJzG6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MkFBL0U0MDdCMzMwNzAw MTExRUZCQkU4QTE1OEM0RjlBRTAyL2MtdUswcU9sODRxXzRhNG9CMDhvTWNKekc2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYy11SzBxT2w4NHFfNGE0b0IwOG9NY0p6RzZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MkFBL0U0MDdCMzMwNzAwMTExRUZCQkU4QTE1OEM0RjlBRTAyL2MtdUswcU9sODRx XzRhNG9CMDhvTWNKekc2ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ2LX8VxolOp+ejDdtAVzfU7tSGCv9tuVTq9Afbsl7b1Fx40KPXXmRaR N4aEf+EruRmm8s+zBRC6dH6jmv4od5PvUIA1RcxAr1GSVRXVpYy4HtQA8ytA8uDi 4hhi8WEFVGF0efN2AUl80u0y2hwNu7D0khbbmjCVa9L9XDxpw8UW8f9i49zCY8M/ aKQPncFihB9ABs2qjskHN8Y1mt/I49PHqSJs9FuBvzZsuKpPpVTcMqtIMMDBquXE /L2gVlfHk/+PUW+pcRv1zeSpA/yuSlk2XRcqea1UXwvNEaOwZYixvFP3MFxtJV4a LPLWZkVK/s4pA6nC8l/67C1mGS/6g5Q= -----END CERTIFICATE-----Generated at Wed May 14 20:50:52 2025 by rpki-client