$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: bhECvfberqeLFgwehWA6xpO64S2HwCgtZXAiMbPCENg= Subject key identifier: 0C:CE:5C:CE:73:75:91:D7:68:53:E8:E5:B3:DF:86:8C:F4:E4:CD:22 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 047B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 0465 Signing time: Tue 13 May 2025 00:00:53 +0000 Manifest this update: Tue 13 May 2025 00:00:53 +0000 Manifest next update: Tue 20 May 2025 00:00:53 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: pygM95vlQV+vXE9DEVndYEoxQzy8GiBKNWebX6qfBUc=) 2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: SXmEoVAwCuv2S1VkQaBNQLi7h8OwZxPvKiz0YPbjYQg=) 3: 4BA245C01F3711F0BFC63D0BC4F9AE02.roa (hash: gBd3TD5jRUsWy0YPJTKEnjjS1ownDJ8N6YJxz3eedfo=) 4: 8120226CBEE111ECBFC4F882C4F9AE02.roa (hash: cKv5ZDuMTRB1GZ6qDVjyr/DKInN5ROhN7fMypCO2t9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147 (0x47b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: May 13 00:00:53 2025 GMT Not After : May 20 00:00:53 2025 GMT Subject: CN=68228bb5-e103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c7:92:88:1b:28:28:a3:7d:e2:ab:91:a6:71: 3f:ba:30:9b:a4:4c:86:df:5f:ed:3c:09:5c:23:70: 1a:05:83:89:06:52:b6:95:b2:a5:7f:08:d0:43:51: 19:16:7b:af:48:83:36:9a:e0:8f:ba:ff:a6:16:09: 96:07:d5:c6:39:ee:e5:dc:78:73:f6:e9:41:a1:57: d0:23:8a:79:99:67:18:aa:a4:d6:c1:5e:68:e4:aa: 27:79:bb:4e:7b:a7:5c:73:42:ae:a6:1b:27:4e:a3: ab:99:30:89:b7:a9:0a:ff:5c:62:1d:aa:8f:41:68: 4f:61:26:a2:33:99:6e:4e:87:b8:18:31:a6:97:06: ce:bd:79:09:5f:46:56:e3:ea:81:1e:1d:35:57:f4: 19:ee:80:70:31:d5:35:cc:86:a1:34:a1:de:5a:84: 4e:97:04:39:37:c7:5a:44:aa:39:f0:45:e6:3d:5d: bb:fa:74:2b:37:3f:92:d7:46:53:c4:51:8c:eb:4f: 6d:a3:f5:e4:17:f5:27:14:23:fd:de:27:ad:57:a6: 30:bd:14:ab:ea:16:dc:c9:07:05:44:d4:58:72:ee: 88:db:8c:9d:3d:50:be:60:2a:d4:f8:2e:1c:07:13: e5:93:cb:ba:81:4e:24:b1:de:ed:d0:1a:ef:a0:d5: 98:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CE:5C:CE:73:75:91:D7:68:53:E8:E5:B3:DF:86:8C:F4:E4:CD:22 X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e8:e3:e0:d0:a7:28:fb:c8:03:1b:4c:41:f4:e9:74:08:62: cb:4e:0a:4d:8f:d7:f0:1a:a5:90:30:fb:ba:19:f7:0a:a9:61: 44:32:e2:14:30:7c:9e:40:61:c6:e0:74:37:43:50:0b:07:9e: 32:11:7f:9c:42:32:cd:92:ce:9c:cc:90:5f:0f:17:84:da:ef: 13:3a:2b:43:08:10:9d:dc:9a:cc:88:c2:da:7f:e3:7d:05:b4: bf:6c:47:c7:14:7e:c4:ec:e6:53:75:dd:3c:73:ad:a0:fd:e7: 49:9f:f2:ae:95:f2:da:3b:9e:4e:74:6f:4c:3c:f3:e4:6f:68: ed:66:9b:4e:4f:2e:4f:f5:20:7b:80:07:5e:bd:45:cb:35:74: 87:17:3d:53:f0:13:e4:b2:6e:25:07:c8:fe:da:36:3f:b3:de: 92:08:5f:fd:0d:82:62:67:65:83:d1:5d:db:e5:20:67:26:1d: b9:1c:1e:70:0c:c0:a4:18:d0:c9:de:bd:c4:33:5e:e8:a1:fa: 10:ab:bb:64:74:ae:14:f9:64:9c:32:0e:ab:c3:78:74:84:5e: 3e:58:ae:d2:40:1a:2d:e3:c0:44:c2:69:8b:25:7d:00:7b:fc: 4b:82:cf:28:23:18:e5:2e:7e:67:4a:61:1d:b0:0d:ee:da:36: af:09:4c:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjUwNTEzMDAwMDUzWhcNMjUwNTIwMDAwMDUzWjAYMRYwFAYD VQQDEw02ODIyOGJiNS1lMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlseSiBsoKKN94quRpnE/ujCbpEyG31/tPAlcI3AaBYOJBlK2lbKlfwjQQ1EZ FnuvSIM2muCPuv+mFgmWB9XGOe7l3Hhz9ulBoVfQI4p5mWcYqqTWwV5o5KonebtO e6dcc0KuphsnTqOrmTCJt6kK/1xiHaqPQWhPYSaiM5luToe4GDGmlwbOvXkJX0ZW 4+qBHh01V/QZ7oBwMdU1zIahNKHeWoROlwQ5N8daRKo58EXmPV27+nQrNz+S10ZT xFGM609to/XkF/UnFCP93ietV6YwvRSr6hbcyQcFRNRYcu6I24ydPVC+YCrU+C4c BxPlk8u6gU4ksd7t0BrvoNWYswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzOXM5z dZHXaFPo5bPfhoz05M0iMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq6OPg0Kco+8gDG0xB9Ol0CGLLTgpNj9fwGqWQMPu6GfcKqWFEMuIU MHyeQGHG4HQ3Q1ALB54yEX+cQjLNks6czJBfDxeE2u8TOitDCBCd3JrMiMLaf+N9 BbS/bEfHFH7E7OZTdd08c62g/edJn/KulfLaO55OdG9MPPPkb2jtZptOTy5P9SB7 gAdevUXLNXSHFz1T8BPksm4lB8j+2jY/s96SCF/9DYJiZ2WD0V3b5SBnJh25HB5w DMCkGNDJ3r3EM17oofoQq7tkdK4U+WScMg6rw3h0hF4+WK7SQBot48BEwmmLJX0A e/xLgs8oIxjlLn5nSmEdsA3u2javCUzy -----END CERTIFICATE-----Generated at Wed May 14 18:20:31 2025 by rpki-client