$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft File: dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json) Hash identifier: aOBQzD7HDjjoDcjVmcH5VnweD2YFFTv1WskwEYSq+Mk= Subject key identifier: F4:D4:93:F8:46:8A:A2:42:40:E4:9F:53:2A:12:D5:2E:DD:B3:1A:9D Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft Manifest number: 015E Signing time: Thu 15 May 2025 03:24:04 +0000 Manifest this update: Thu 15 May 2025 03:24:04 +0000 Manifest next update: Thu 22 May 2025 03:24:04 +0000 Files and hashes: 1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: iFvU1MluXGwTQBezl7o2nX665ZT5UKaTztvL4ZwcNP8=) 2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: CB6qYtIMERSezwGUEUv4T/r/K/tC4CWAUjSVJHYQH28=) 3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: wqZWqZ8fa4R6eMrcXZq1r/urB8kEflCs9S9caDMISYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Validity Not Before: May 15 03:24:04 2025 GMT Not After : May 22 03:24:04 2025 GMT Subject: CN=68255e54-5f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2e:85:3a:36:2e:bb:c0:f1:0e:ee:3c:2a:62: 63:96:15:ca:e8:fa:c6:4c:77:9d:47:9d:a2:c1:e3: 27:3d:52:28:97:7e:d6:16:6b:c3:94:6f:7b:c9:d9: cb:38:1d:2c:31:dc:35:f0:c9:3a:d1:61:7b:c6:f4: 32:0a:1e:e4:1b:18:22:88:a0:60:66:04:43:23:46: 6c:74:8f:b0:a1:69:cc:92:bf:fa:20:72:2f:30:18: f0:89:75:c6:e2:4b:d3:47:0c:28:28:a0:04:f0:6f: 32:55:a6:07:0d:d6:68:45:6e:6a:54:d1:8e:f5:be: 34:2d:59:a1:9b:93:0e:5a:e7:fc:54:3c:de:71:62: ff:7b:95:03:fb:10:eb:7c:fb:83:e2:93:83:3d:f3: 3b:81:27:d8:d5:c4:e0:1d:37:5b:c5:a2:4a:9a:a3: a2:dd:29:99:3e:e1:95:7f:13:1e:6f:ce:1e:45:50: db:b3:4d:ba:96:d6:8b:b3:2b:89:34:44:7b:95:48: 26:66:b6:38:c0:c2:66:2b:d1:22:b2:c3:c9:b0:1b: 6e:c3:25:37:7b:7b:9f:bb:45:73:8a:0d:cd:fd:aa: cc:51:fe:f7:31:4b:2e:69:26:2c:55:e8:cb:91:0f: 3b:7b:7f:e9:8b:f9:3a:b0:18:44:96:12:8c:28:9c: 8f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D4:93:F8:46:8A:A2:42:40:E4:9F:53:2A:12:D5:2E:DD:B3:1A:9D X509v3 Authority Key Identifier: keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:03:2e:5a:ea:ff:11:9e:b2:8d:73:80:06:26:03:03:5b:8a: df:bf:92:5e:93:d9:55:4b:cd:a7:ab:be:ea:52:13:ba:e0:23: d7:9b:2d:c1:09:08:bb:ad:cb:9b:4f:6c:ce:e8:69:16:47:e0: fe:4b:50:df:74:01:94:1f:42:b7:c2:a9:fa:26:d6:47:7a:52: 67:d8:aa:40:49:ac:1f:00:5c:e5:1f:7e:af:93:25:98:36:f8: 8f:50:4b:8e:0a:47:62:d6:f9:99:89:80:24:22:d2:20:ad:0f: 81:3f:03:49:a7:45:9e:fa:7e:5f:74:41:1d:ca:b1:32:04:b9: 89:d5:e9:bb:45:3d:3c:50:25:08:06:da:88:7f:6f:76:99:08: 83:2e:de:f6:e6:35:fe:09:f7:6e:2e:94:4c:84:58:ab:18:6e: 6d:94:5e:6e:eb:f7:2e:dc:30:f4:a5:76:24:49:5d:e1:8f:96: 8e:12:a0:fb:c3:f8:17:30:60:bc:d0:92:45:81:ca:f5:46:60: 15:5a:58:69:63:30:15:46:e1:b6:08:0a:bb:b8:02:1a:a4:b8: a6:61:0a:ef:67:81:7c:c4:d0:07:56:11:f3:60:a4:05:c4:e2: 59:5a:f1:e4:13:f1:93:31:47:79:e6:5a:f9:00:9c:44:ab:77: 85:ce:c2:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0 REM1NjRFRjUwHhcNMjUwNTE1MDMyNDA0WhcNMjUwNTIyMDMyNDA0WjAYMRYwFAYD VQQDEw02ODI1NWU1NC01ZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3S6FOjYuu8DxDu48KmJjlhXK6PrGTHedR52iweMnPVIol37WFmvDlG97ydnL OB0sMdw18Mk60WF7xvQyCh7kGxgiiKBgZgRDI0ZsdI+woWnMkr/6IHIvMBjwiXXG 4kvTRwwoKKAE8G8yVaYHDdZoRW5qVNGO9b40LVmhm5MOWuf8VDzecWL/e5UD+xDr fPuD4pODPfM7gSfY1cTgHTdbxaJKmqOi3SmZPuGVfxMeb84eRVDbs026ltaLsyuJ NER7lUgmZrY4wMJmK9EissPJsBtuwyU3e3ufu0Vzig3N/arMUf73MUsuaSYsVejL kQ87e3/pi/k6sBhElhKMKJyPjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTUk/hG iqJCQOSfUyoS1S7dsxqdMB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3 NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTY0MS83RDAyODdFQTE3NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZa c1hzODdZTVdUdlJOeFdUdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFAy5a6v8RnrKNc4AGJgMDW4rfv5Jek9lVS82nq77qUhO64CPXmy3B CQi7rcubT2zO6GkWR+D+S1DfdAGUH0K3wqn6JtZHelJn2KpASawfAFzlH36vkyWY NviPUEuOCkdi1vmZiYAkItIgrQ+BPwNJp0We+n5fdEEdyrEyBLmJ1em7RT08UCUI BtqIf292mQiDLt725jX+CfduLpRMhFirGG5tlF5u6/cu3DD0pXYkSV3hj5aOEqD7 w/gXMGC80JJFgcr1RmAVWlhpYzAVRuG2CAq7uAIapLimYQrvZ4F8xNAHVhHzYKQF xOJZWvHkE/GTMUd55lr5AJxEq3eFzsIU -----END CERTIFICATE-----Generated at Fri May 16 07:03:51 2025 by rpki-client