$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: JYL2V08fyz6zBpXFQD4ndYnD4Iwr8qe/2OyO/OOFg9M= Subject key identifier: CB:E2:29:19:30:42:79:BD:0A:0E:24:3F:AF:A8:A5:13:3A:77:2F:AA Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 2100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 20F4 Signing time: Fri 16 May 2025 16:09:51 +0000 Manifest this update: Fri 16 May 2025 16:09:50 +0000 Manifest next update: Fri 23 May 2025 16:09:50 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: sT1XXQYz9cZa744Fkav3BL6odx0qnzA6cUCP8Yqhdj0=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: BjqwppR+NMle1n/1OCoqadfW2SGArIC17ShPvDamqQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8448 (0x2100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: May 16 16:09:50 2025 GMT Not After : May 23 16:09:50 2025 GMT Subject: CN=6827634f-87dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:be:b7:61:44:3b:60:91:b0:f8:e9:82:08: 20:62:e0:e5:97:33:87:2f:dc:b4:a7:e8:25:a9:82: 77:da:e8:d5:6d:6a:90:64:c4:e7:d9:53:16:c9:b8: 26:f5:b0:2b:7c:22:d3:05:8b:6f:6c:9a:fe:ea:bf: df:bd:72:b9:31:65:39:b2:8e:93:37:c0:25:ec:b1: 26:27:c5:c8:e7:a0:a2:ca:e2:1f:76:de:8c:59:61: 90:c8:28:29:8e:26:70:32:00:b3:a5:63:cb:88:6f: e6:03:e2:30:4e:98:63:47:fe:f6:3b:56:10:e4:ca: 6d:81:dc:1b:cd:70:d1:5a:ba:c6:3c:53:f6:91:87: b7:b8:7a:e5:0e:e2:b6:16:b5:e7:7a:cc:99:7f:bf: 7b:82:74:69:73:9e:34:55:4c:51:28:1c:ce:ac:5c: b2:d5:1c:c0:d4:43:b7:bf:d3:2c:c0:97:23:ae:11: 86:51:20:28:55:68:dd:a8:a9:45:19:ff:60:99:9a: bb:78:34:c2:c9:7a:dc:8a:d5:b2:32:de:69:e5:88: 7b:2d:7a:97:80:f6:f8:b5:95:51:9b:f9:e5:6d:ba: 55:69:19:dd:41:a9:e3:ea:4f:6b:21:b7:43:61:8c: 86:1d:7d:5a:e9:8a:f3:a0:75:66:05:f5:d6:ce:2d: 93:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E2:29:19:30:42:79:BD:0A:0E:24:3F:AF:A8:A5:13:3A:77:2F:AA X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:44:bb:73:b8:46:2a:67:02:4b:20:40:02:dc:02:92:fd:7d: 0a:ac:39:10:70:6c:46:fb:7f:dd:f6:91:be:c9:23:24:7b:ed: 97:02:dc:13:c0:05:fc:18:b2:75:d4:b1:4e:be:d2:e2:b1:0d: 1b:93:83:68:89:6b:40:c7:f6:64:11:5d:94:8b:4d:82:ae:83: 94:e0:76:01:c5:23:b6:65:d6:f1:21:c5:70:1f:e4:6f:99:83: 29:e0:a8:b9:0a:27:17:32:55:a9:14:85:9b:e2:ff:fc:17:40: 94:24:6e:3a:b5:a6:99:75:52:47:a6:a2:8f:ed:7c:6a:15:ae: 8e:41:68:c6:fa:ac:dd:94:02:36:2c:e3:1e:4d:6a:f5:e1:bf: df:a4:18:37:ce:2a:30:2b:09:e6:26:10:0d:c3:41:7f:7a:87: 5f:76:a0:96:97:65:9a:58:d0:a5:5d:80:01:ec:3b:3a:81:ac: 0a:ac:1d:cb:31:03:ad:d7:3a:47:5b:a1:ba:84:a0:08:ba:82: 90:bf:01:d1:cd:93:e9:14:e1:46:16:6a:24:16:ae:7a:67:ce: 2b:30:b0:c0:f1:3f:0a:3a:43:a4:a9:95:bc:8c:30:91:ee:49: cb:41:d0:6b:d5:19:c8:82:bd:b3:89:20:38:43:39:45:50:f8: 72:36:a8:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjUwNTE2MTYwOTUwWhcNMjUwNTIzMTYwOTUwWjAYMRYwFAYD VQQDEw02ODI3NjM0Zi04N2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbe+t2FEO2CRsPjpggggYuDllzOHL9y0p+glqYJ32ujVbWqQZMTn2VMWybgm 9bArfCLTBYtvbJr+6r/fvXK5MWU5so6TN8Al7LEmJ8XI56CiyuIfdt6MWWGQyCgp jiZwMgCzpWPLiG/mA+IwTphjR/72O1YQ5MptgdwbzXDRWrrGPFP2kYe3uHrlDuK2 FrXnesyZf797gnRpc540VUxRKBzOrFyy1RzA1EO3v9MswJcjrhGGUSAoVWjdqKlF Gf9gmZq7eDTCyXrcitWyMt5p5Yh7LXqXgPb4tZVRm/nlbbpVaRndQanj6k9rIbdD YYyGHX1a6YrzoHVmBfXWzi2TjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMviKRkw Qnm9Cg4kP6+opRM6dy+qMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLRLtzuEYqZwJLIEAC3AKS/X0KrDkQcGxG+3/d9pG+ySMke+2XAtwT wAX8GLJ11LFOvtLisQ0bk4NoiWtAx/ZkEV2Ui02CroOU4HYBxSO2ZdbxIcVwH+Rv mYMp4Ki5CicXMlWpFIWb4v/8F0CUJG46taaZdVJHpqKP7XxqFa6OQWjG+qzdlAI2 LOMeTWr14b/fpBg3ziowKwnmJhANw0F/eodfdqCWl2WaWNClXYAB7Ds6gawKrB3L MQOt1zpHW6G6hKAIuoKQvwHRzZPpFOFGFmokFq56Z84rMLDA8T8KOkOkqZW8jDCR 7knLQdBr1RnIgr2ziSA4QzlFUPhyNqiY -----END CERTIFICATE-----Generated at Fri May 16 22:20:51 2025 by rpki-client