$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json) Hash identifier: 8FAQeI1978f1AQKCZTydQEGXLGjiHLfeaLp5nDmAwyU= Subject key identifier: CE:A4:F8:03:4C:22:10:D4:3F:45:4E:36:D0:AE:DC:D3:26:A2:3B:9F Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft Manifest number: 7B Signing time: Sun 11 May 2025 05:27:42 +0000 Manifest this update: Sun 11 May 2025 05:27:42 +0000 Manifest next update: Sun 18 May 2025 05:27:42 +0000 Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: C4bbhCoQNWxl4eyEHvGOkTZghT5Sg0dC+j4+xpBzaQo=) 2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: T+wmuYYMTFF61NV8D+auleLzw90NK0dFwG6cz8qIwGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Validity Not Before: May 11 05:27:42 2025 GMT Not After : May 18 05:27:42 2025 GMT Subject: CN=6820354e-fc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:f9:fa:db:d5:fa:5e:6d:fe:22:b4:0c:51: ca:7b:ab:a7:fa:dd:6d:89:d8:97:9a:9e:45:fb:67: b0:23:c3:a4:f3:5b:4b:34:6b:7e:43:8c:95:63:2a: 56:de:a1:23:36:ce:fc:02:ea:a3:50:62:5a:7a:92: 5f:5c:9e:bf:84:e6:0d:69:f1:97:45:9e:8f:f8:e7: 11:2f:5f:ee:42:51:76:15:2d:72:11:0f:45:d4:ff: 39:df:b5:c0:3b:23:49:94:7a:be:db:ce:27:35:62: 6d:41:3e:bd:19:8c:a5:08:af:5d:ad:f3:43:98:68: 26:2c:2f:49:d2:4b:3a:37:55:f6:c6:e9:1e:b9:06: 89:f7:08:90:97:fa:2e:d3:ab:ba:f2:4b:f0:e4:21: 5a:6e:c9:c9:1a:01:e3:f1:b6:7a:8a:97:c7:25:bc: d5:ff:1b:8a:cc:ea:42:f8:2d:0c:a9:c4:17:f9:de: e7:34:4a:e5:93:20:59:4a:01:21:89:1c:58:1e:61: 13:4b:7e:7e:08:eb:cd:fb:e2:96:a4:50:70:9f:22: 3e:e3:46:a5:11:9f:8d:c4:c7:ef:08:08:2b:16:f5: 38:40:57:ac:14:3e:9c:ed:bb:12:bb:fe:d7:1e:10: 72:18:68:9d:44:4d:cf:9b:ca:6c:71:c2:5c:18:34: 99:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A4:F8:03:4C:22:10:D4:3F:45:4E:36:D0:AE:DC:D3:26:A2:3B:9F X509v3 Authority Key Identifier: keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:de:e4:1c:c6:c7:c0:1a:8d:a8:07:b5:22:53:27:0e:84:84: 69:a3:9b:3e:20:45:ae:7b:5b:10:8e:09:f0:5e:93:8a:53:14: 51:1d:54:16:94:db:92:ca:6e:3e:2b:a3:58:5d:d5:94:5c:d2: 3b:4d:58:aa:94:b9:fb:4d:61:b9:43:7c:03:b6:3e:53:43:02: bd:1c:e9:2c:50:76:2c:61:91:a9:12:c0:7a:9b:0d:49:bc:fb: 49:17:60:9a:be:2b:e9:df:af:17:6f:3f:4e:a0:88:5e:55:46: df:87:d0:ed:90:d0:86:01:0a:4a:16:2e:9e:ec:a1:92:d5:3f: da:a7:cf:34:32:66:7b:bc:31:b4:e7:d1:40:82:96:ca:1d:9b: 2d:dc:dd:fc:3a:34:b1:3b:29:2a:65:40:24:c9:11:73:c4:fa: 50:0c:97:38:d1:25:0b:d0:b0:bb:3f:5d:7a:a1:51:6e:84:39: bc:cb:c0:74:c7:9a:c7:77:d6:b0:01:2f:b9:00:c0:1e:cd:2f: 2a:c2:14:1c:69:69:42:69:0c:9a:6c:7d:e4:de:ef:30:d8:7a: 4f:74:f1:53:fa:3a:d3:be:b5:a8:e4:37:d2:64:85:62:34:39: f3:9c:a8:8a:8e:d8:6a:72:60:25:5a:cf:09:61:13:a8:0c:c9: 8c:c4:66:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTkyRjExMC8GA1UEBRMoNDU3REI3NjZFMUIwRDZBNERDQzdGOUFFQ0QyODdENERD M0U3MEM5RTAeFw0yNTA1MTEwNTI3NDJaFw0yNTA1MTgwNTI3NDJaMBgxFjAUBgNV BAMTDTY4MjAzNTRlLWZjNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe6Pn629X6Xm3+IrQMUcp7q6f63W2J2JeankX7Z7Ajw6TzW0s0a35DjJVjKlbe oSM2zvwC6qNQYlp6kl9cnr+E5g1p8ZdFno/45xEvX+5CUXYVLXIRD0XU/znftcA7 I0mUer7bzic1Ym1BPr0ZjKUIr12t80OYaCYsL0nSSzo3VfbG6R65Bon3CJCX+i7T q7ryS/DkIVpuyckaAePxtnqKl8clvNX/G4rM6kL4LQypxBf53uc0SuWTIFlKASGJ HFgeYRNLfn4I68374pakUHCfIj7jRqURn43Ex+8ICCsW9ThAV6wUPpztuxK7/tce EHIYaJ1ETc+bymxxwlwYNJntAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzqT4A0wi ENQ/RU420K7c0yaiO58wHwYDVR0jBBgwFoAURX23ZuGw1qTcx/muzSh9TcPnDJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTJGLzEyMDg1RDE4NzQw QjExRUY5RTlDMDMzNkM0RjlBRTAyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUlgyM1p1R3cxcVRjeF9tdXpTaDlUY1BuREo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OTJGLzEyMDg1RDE4NzQwQjExRUY5RTlDMDMzNkM0RjlBRTAyL1JYMjNadUd3MXFU Y3hfbXV6U2g5VGNQbkRKNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIve5BzGx8AajagHtSJTJw6EhGmjmz4gRa57WxCOCfBek4pTFFEdVBaU 25LKbj4ro1hd1ZRc0jtNWKqUuftNYblDfAO2PlNDAr0c6SxQdixhkakSwHqbDUm8 +0kXYJq+K+nfrxdvP06giF5VRt+H0O2Q0IYBCkoWLp7soZLVP9qnzzQyZnu8MbTn 0UCClsodmy3c3fw6NLE7KSplQCTJEXPE+lAMlzjRJQvQsLs/XXqhUW6EObzLwHTH msd31rABL7kAwB7NLyrCFBxpaUJpDJpsfeTe7zDYek908VP6OtO+tajkN9JkhWI0 OfOcqIqO2GpyYCVazwlhE6gMyYzEZvI= -----END CERTIFICATE-----Generated at Mon May 12 19:53:07 2025 by rpki-client