$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: ubabgDUOawNLJS4SrjKD3LzsbLmsI99lPudOl8wuMa8= Subject key identifier: 4B:9A:66:AD:04:79:C1:2B:6C:3C:B9:1D:BB:37:62:59:EE:15:1D:DE Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 18ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 18E3 Signing time: Mon 12 May 2025 16:24:12 +0000 Manifest this update: Mon 12 May 2025 16:24:12 +0000 Manifest next update: Mon 19 May 2025 16:24:12 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: 8QFkVHA5BlOs3KkcOomee6wa6XwhrCd8ITJ7TUY7PR0=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: CS+09tEdeSx7uIOBkaLSiPeVYQX/xw7ybPJk0cnYVHY=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: mbcYtTY7pzkjLAPzzBYkqLR1semAFFI9aiFhIVq/OQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6381 (0x18ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: May 12 16:24:12 2025 GMT Not After : May 19 16:24:12 2025 GMT Subject: CN=682220ac-c3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:c9:2a:ab:cd:be:70:c4:d1:16:5b:e3:dd: 56:46:e6:8e:c4:55:e4:fb:b7:cf:36:58:44:e8:70: e9:cc:52:a2:81:5e:46:ce:80:22:15:68:b4:a6:2f: d4:d5:f3:94:68:3f:8a:eb:56:ac:e7:e5:3c:da:73: b9:58:2b:da:f9:0e:c7:18:9e:8b:ff:3d:c5:5a:89: 6f:03:65:bd:4b:34:bd:7f:44:60:46:37:ac:22:26: 4b:7a:fc:a5:7d:1c:2b:69:13:61:71:60:97:c9:31: 41:e6:d2:1c:32:4e:e8:61:4f:8e:c3:5c:14:f8:0e: 2a:49:aa:b0:04:5d:83:ef:c2:db:67:5a:78:5a:36: ac:5f:2e:4f:56:3c:70:37:55:20:c7:cb:e4:a4:32: 10:59:ed:2b:ae:ae:9a:81:75:47:9b:cb:e4:35:d2: 7c:a5:4f:18:2c:05:48:a2:ad:5b:79:5f:7a:2a:2c: 05:29:ae:bf:3f:7a:bf:d7:11:cc:a5:1a:1b:f8:5d: bd:89:75:4f:f8:f3:be:4c:14:47:fa:2d:a7:63:d0: ec:cb:c8:ff:ea:35:28:37:ea:51:40:7f:5b:2e:76: 5a:c2:fa:16:b4:cf:c0:f5:59:95:29:60:65:76:de: 0b:a8:73:e9:ea:9b:b4:72:28:f0:f4:cd:50:a4:23: 0b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9A:66:AD:04:79:C1:2B:6C:3C:B9:1D:BB:37:62:59:EE:15:1D:DE X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:59:7d:6c:a9:bf:dc:2f:6d:ad:11:0f:d8:d1:b9:8e:2c:39: 4e:2c:60:86:11:2c:2d:a5:f3:c2:40:6e:3e:70:32:73:b5:00: fb:72:b5:14:46:11:6b:b1:7f:bd:19:8f:49:75:7f:fd:df:8a: 40:43:1f:57:a4:c4:90:58:d7:12:12:a4:1a:76:4b:a4:f4:ff: b4:02:13:fd:65:62:c3:df:00:2c:15:8d:e8:eb:11:63:6e:09: 8f:a0:55:1a:be:16:83:c4:e8:ce:64:2d:cd:5b:c6:f3:a5:7c: 92:55:a4:86:4b:c3:45:bd:82:c0:24:80:be:7b:1c:7e:6c:7a: a7:61:22:38:09:3f:96:49:1d:05:a0:68:3f:1c:3d:4c:3f:08: 1f:5b:a5:e1:99:9f:d3:50:c7:12:ab:9b:fa:82:e3:60:fa:52: 43:e5:51:b5:f7:da:43:8e:38:59:c4:18:8f:c1:6b:3e:ac:b6: 09:2d:b9:ac:20:bf:fd:dc:22:e9:52:c4:0c:16:99:ca:69:72: 69:c3:e4:22:9a:4c:95:79:d3:25:c3:42:81:86:b6:da:b1:e0: 6b:c5:c1:0d:c4:e2:87:f9:16:4e:94:bb:3b:ad:2c:7c:bf:98: f4:62:4e:d1:60:9f:c2:f7:5c:a6:5d:73:b8:72:9e:72:ec:96: cd:05:0c:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjUwNTEyMTYyNDEyWhcNMjUwNTE5MTYyNDEyWjAYMRYwFAYD VQQDEw02ODIyMjBhYy1jM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN/JKqvNvnDE0RZb491WRuaOxFXk+7fPNlhE6HDpzFKigV5GzoAiFWi0pi/U 1fOUaD+K61as5+U82nO5WCva+Q7HGJ6L/z3FWolvA2W9SzS9f0RgRjesIiZLevyl fRwraRNhcWCXyTFB5tIcMk7oYU+Ow1wU+A4qSaqwBF2D78LbZ1p4WjasXy5PVjxw N1Ugx8vkpDIQWe0rrq6agXVHm8vkNdJ8pU8YLAVIoq1beV96KiwFKa6/P3q/1xHM pRob+F29iXVP+PO+TBRH+i2nY9Dsy8j/6jUoN+pRQH9bLnZawvoWtM/A9VmVKWBl dt4LqHPp6pu0cijw9M1QpCMLHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuaZq0E ecErbDy5Hbs3YlnuFR3eMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXWX1sqb/cL22tEQ/Y0bmOLDlOLGCGESwtpfPCQG4+cDJztQD7crUU RhFrsX+9GY9JdX/934pAQx9XpMSQWNcSEqQadkuk9P+0AhP9ZWLD3wAsFY3o6xFj bgmPoFUavhaDxOjOZC3NW8bzpXySVaSGS8NFvYLAJIC+exx+bHqnYSI4CT+WSR0F oGg/HD1MPwgfW6XhmZ/TUMcSq5v6guNg+lJD5VG199pDjjhZxBiPwWs+rLYJLbms IL/93CLpUsQMFpnKaXJpw+QimkyVedMlw0KBhrbaseBrxcENxOKH+RZOlLs7rSx8 v5j0Yk7RYJ/C91ymXXO4cp5y7JbNBQyn -----END CERTIFICATE-----Generated at Wed May 14 15:27:17 2025 by rpki-client