$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft File: MSRAIBsu90t8rGwx-4X0HpxGhqA.mft (raw, json) Hash identifier: E7XVDsEaFkuegPAbkYVJBZsu0RMWZ0Ou/cQzPNvx/bw= Subject key identifier: B7:C0:38:89:D4:24:45:62:09:72:4A:5A:0A:16:B6:78:AD:11:F3:3D Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft Manifest number: 2A Signing time: Thu 15 May 2025 07:07:28 +0000 Manifest this update: Thu 15 May 2025 07:07:27 +0000 Manifest next update: Thu 22 May 2025 07:07:27 +0000 Files and hashes: 1: MSRAIBsu90t8rGwx-4X0HpxGhqA.crl (hash: bHna6VTM16qm2AZ/bSfhC2lHOcAE22MBcY0pY4nmFZI=) 2: 070DB3BAFB6D11EFA5E39678C4F9AE02.roa (hash: q1x47yUs6U+uQS9ousQECTrxQCfwChHW+mjdafLrJuY=) 3: 2178DCD2FF3E11EF8D834053C4F9AE02.roa (hash: JSwC8LvkFFx+csBawa+WzjqR/g3wGIngxuIt67ID3sc=) 4: F5FC39B600F811F0BD702A69C4F9AE02.roa (hash: 8uwpV2NMP0utQgRKFvrYO1IhjVauGOu4rc/6wACuwjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0 Validity Not Before: May 15 07:07:27 2025 GMT Not After : May 22 07:07:27 2025 GMT Subject: CN=682592b0-9fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:da:76:d8:32:31:64:92:6a:93:4e:51:56: 82:40:b9:54:2d:ad:6f:49:5f:8b:49:1d:5b:05:a5: 02:11:c8:ba:17:8c:cc:9c:90:9d:74:08:86:22:3d: 5c:ae:34:11:f7:31:35:7d:e8:8f:1f:ba:65:f8:de: 9d:05:1a:6b:ef:93:33:56:56:9e:4d:d1:5e:22:e7: 8c:1f:e1:22:c5:c4:e4:4a:66:81:5c:e3:af:1d:66: 35:0e:42:49:1e:d1:af:50:5a:e5:ef:e9:9f:2f:c8: a0:41:d0:fc:ab:ef:ed:20:9a:61:0b:a4:a0:38:d6: a7:c7:39:88:89:8d:04:90:15:2d:c5:15:5e:9b:5d: 85:d3:3e:bb:de:87:11:84:83:08:f9:0a:da:f0:33: bc:8a:9e:c2:c5:7d:6a:1f:a1:4e:93:90:36:8b:17: 24:6c:ce:6b:ac:4a:93:87:35:ba:34:d9:0e:07:51: e2:d0:34:3d:7a:9a:93:04:74:71:2f:ce:30:d2:e9: 1c:1e:f6:6c:07:10:5e:a4:7d:15:c0:95:d4:6e:66: de:56:31:2f:8b:f7:c4:21:58:90:e6:41:81:8e:cd: 65:38:02:fd:ba:05:55:df:54:9a:67:19:88:90:03: 34:0c:57:6c:ad:c4:92:03:c4:37:e8:5e:77:39:68: c9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C0:38:89:D4:24:45:62:09:72:4A:5A:0A:16:B6:78:AD:11:F3:3D X509v3 Authority Key Identifier: keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:c6:40:56:d3:16:45:0a:bb:38:44:a8:3d:cc:2c:ac:19:18: a3:12:7a:ff:d5:70:9d:b5:4d:2c:e4:ba:1e:41:f0:3e:81:d0: ca:e0:31:a7:67:18:cd:a1:e0:79:c3:9b:43:11:fc:19:46:00: 01:71:02:55:f2:50:b2:41:0f:9f:79:ba:cb:71:47:9b:c6:8b: 31:7e:b4:11:45:56:dd:d6:71:35:fd:3b:0a:8c:06:af:3e:e8: 2b:82:de:1f:7f:75:9f:21:91:6a:40:9d:0a:28:24:f1:d8:12: d3:60:52:c7:01:3e:5c:f3:73:5b:96:dc:01:f8:f8:2d:22:0b: a0:fa:14:7b:dd:8b:af:d4:36:48:70:88:ff:3e:9b:d5:7d:1e: 28:95:b7:19:cf:90:a8:b7:4d:a9:ab:ab:c8:ae:f3:c4:90:26: 77:54:cb:fd:a2:8c:c9:f9:e9:cd:3c:b4:fd:7c:2e:dc:3d:da: 42:5f:87:36:48:d8:f1:99:14:44:21:7a:ad:02:5a:b6:6b:1d: 9a:b7:40:cb:99:83:b5:3d:73:f1:6b:79:a4:eb:0c:85:3b:0a: 39:b7:30:1e:28:77:96:24:3b:ca:ee:b8:ae:b4:60:c7:46:84: d9:5f:9c:db:c8:69:13:93:c9:7d:dc:33:c3:e4:83:90:7f:bb: 71:77:8b:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTgwQzExMC8GA1UEBRMoMzEyNDQwMjAxQjJFRjc0QjdDQUM2QzMxRkI4NUY0MUU5 QzQ2ODZBMDAeFw0yNTA1MTUwNzA3MjdaFw0yNTA1MjIwNzA3MjdaMBgxFjAUBgNV BAMTDTY4MjU5MmIwLTlmZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaftp22DIxZJJqk05RVoJAuVQtrW9JX4tJHVsFpQIRyLoXjMyckJ10CIYiPVyu NBH3MTV96I8fumX43p0FGmvvkzNWVp5N0V4i54wf4SLFxORKZoFc468dZjUOQkke 0a9QWuXv6Z8vyKBB0Pyr7+0gmmELpKA41qfHOYiJjQSQFS3FFV6bXYXTPrvehxGE gwj5CtrwM7yKnsLFfWofoU6TkDaLFyRszmusSpOHNbo02Q4HUeLQND16mpMEdHEv zjDS6Rwe9mwHEF6kfRXAldRuZt5WMS+L98QhWJDmQYGOzWU4Av26BVXfVJpnGYiQ AzQMV2ytxJIDxDfoXnc5aMnPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt8A4idQk RWIJckpaCha2eK0R8z0wHwYDVR0jBBgwFoAUMSRAIBsu90t8rGwx+4X0HpxGhqAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBODBDL0RFOThFQUYwRkI2 NTExRUZBMzc2RTQ0OUM0RjlBRTAyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hx QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVNSQUlCc3U5MHQ4ckd3eC00WDBIcHhHaHFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB ODBDL0RFOThFQUYwRkI2NTExRUZBMzc2RTQ0OUM0RjlBRTAyL01TUkFJQnN1OTB0 OHJHd3gtNFgwSHB4R2hxQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAATGQFbTFkUKuzhEqD3MLKwZGKMSev/VcJ21TSzkuh5B8D6B0MrgMadn GM2h4HnDm0MR/BlGAAFxAlXyULJBD595ustxR5vGizF+tBFFVt3WcTX9OwqMBq8+ 6CuC3h9/dZ8hkWpAnQooJPHYEtNgUscBPlzzc1uW3AH4+C0iC6D6FHvdi6/UNkhw iP8+m9V9HiiVtxnPkKi3Tamrq8iu88SQJndUy/2ijMn56c08tP18Ltw92kJfhzZI 2PGZFEQheq0CWrZrHZq3QMuZg7U9c/FreaTrDIU7Cjm3MB4od5YkO8ruuK60YMdG hNlfnNvIaROTyX3cM8Pkg5B/u3F3izo= -----END CERTIFICATE-----Generated at Thu May 15 13:10:15 2025 by rpki-client