$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft File: bBl9pJIs_dxOmMiEbgOn19DkC3E.mft (raw, json) Hash identifier: MzmQIlksFR1sc9ixlncty4mb+I2WZqEhPRTrnKuSyK8= Subject key identifier: 2B:84:8E:00:F8:2C:75:A2:7A:E3:22:09:05:53:F1:64:44:C9:34:56 Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft Manifest number: 0660 Signing time: Sat 10 May 2025 22:01:48 +0000 Manifest this update: Sat 10 May 2025 22:01:48 +0000 Manifest next update: Sat 17 May 2025 22:01:48 +0000 Files and hashes: 1: bBl9pJIs_dxOmMiEbgOn19DkC3E.crl (hash: 8OuSBteXT4gq+tmDFrng02zvvOKF1hTGR3SyGW1MzCU=) 2: ECCDCA04809A11EB9093216EC4F9AE02.roa (hash: qTJ268wwQytdjg2xmDrgJYTCKvbgN+TXWt8f/k8okt0=) 3: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (hash: zfaY1cNWt+kwCxFOi06ByxEpzX/DlmwX7UsrdOWHxWY=) 4: 7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (hash: MuS1D/2+8EGkgIkIccTnkaRbLVS0UhbQOaZ6Z/zRhQ0=) 5: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (hash: IpyajZd4jSVUSR24GGQE7LMlZvvtmRcKtdSc4wuIgfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF2E1, serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Validity Not Before: May 10 22:01:48 2025 GMT Not After : May 17 22:01:48 2025 GMT Subject: CN=681fcccc-9a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:b9:61:1d:69:12:fd:46:fd:ca:d5:70:08: d6:11:c3:dd:33:6c:b5:1e:2f:6a:52:e6:7c:e3:8d: 09:e6:6f:a5:23:84:be:34:31:df:a4:64:24:b5:b9: 32:fd:e4:5b:8a:38:bc:69:1c:96:6c:1d:6e:b8:76: 9d:42:7a:f2:ae:e5:6a:a7:ae:7f:45:73:42:a7:88: a7:af:0b:d4:2a:14:ef:fc:9e:57:31:58:af:b0:f8: 8f:24:ae:f2:a4:b1:7a:bc:08:40:34:5e:ba:a8:a2: 3e:b1:de:1b:71:78:3b:4d:35:88:79:96:64:32:3c: d7:ac:50:53:62:db:1f:4b:f4:37:1b:3b:e8:bb:eb: ee:70:a6:ad:d4:b2:55:e5:6a:48:e7:e6:91:b3:1d: db:29:85:f6:9d:53:bc:3a:03:fc:4c:19:91:2c:f6: 1c:1e:5d:53:2f:ff:3a:0e:37:f7:b3:08:2a:90:6e: 5a:ba:8f:6f:02:66:8e:df:39:48:dd:5f:60:18:dc: 52:25:c8:df:61:c9:1f:28:a9:46:35:e1:9b:6c:b5: 95:db:c9:2b:0c:5a:0f:b4:44:c2:58:73:88:ee:e2: 2f:0f:d2:2e:40:45:dd:f9:d6:3a:18:da:41:1f:ec: 1e:ac:2a:f4:8b:90:91:b0:ac:81:54:15:79:f6:40: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:84:8E:00:F8:2C:75:A2:7A:E3:22:09:05:53:F1:64:44:C9:34:56 X509v3 Authority Key Identifier: keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b2:ba:5c:cf:5a:92:03:a8:80:40:6b:2b:57:ea:29:1d:17: 3a:28:05:c3:ae:2d:94:18:cc:19:9d:d5:f4:e8:95:c0:a9:21: 38:d0:eb:34:ab:50:55:ea:0c:76:bb:99:8b:66:1a:6c:26:69: 5b:d0:44:65:de:1d:69:58:e3:19:46:f4:09:68:53:a2:7e:0c: 7c:40:f2:21:77:06:49:86:72:fd:ce:1a:60:cd:6a:b5:50:b1: 69:f0:dd:f1:6b:ea:53:d4:5f:f2:f8:b2:9f:b1:e4:07:2c:2d: be:e0:33:b4:6f:2c:a1:38:1f:b0:c8:eb:ac:a8:cf:b9:f6:17: 77:96:0b:36:92:df:02:c2:1f:29:ba:25:15:66:7c:a6:b7:dc: e7:ad:94:a3:ff:70:89:dc:32:2d:8c:89:85:e2:79:54:c9:1a: 84:3a:70:0a:37:f5:26:82:e5:7b:43:7a:a1:25:54:ae:57:84: 99:23:07:4d:a6:a8:f7:cf:e2:a6:c1:b9:a4:8c:a2:e5:59:c5: b6:6c:44:af:81:a4:e9:73:77:7a:e5:08:5d:e9:36:48:49:bb: 72:0a:26:4e:36:df:27:3a:86:e0:9d:f1:71:ce:bd:a7:f5:3b: 67:a6:46:4d:25:c9:7e:96:8f:29:d6:4f:ec:2d:3b:88:55:ee: c8:c6:d9:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3 RDBFNDBCNzEwHhcNMjUwNTEwMjIwMTQ4WhcNMjUwNTE3MjIwMTQ4WjAYMRYwFAYD VQQDEw02ODFmY2NjYy05YTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1me5YR1pEv1G/crVcAjWEcPdM2y1Hi9qUuZ8440J5m+lI4S+NDHfpGQktbky /eRbiji8aRyWbB1uuHadQnryruVqp65/RXNCp4inrwvUKhTv/J5XMVivsPiPJK7y pLF6vAhANF66qKI+sd4bcXg7TTWIeZZkMjzXrFBTYtsfS/Q3Gzvou+vucKat1LJV 5WpI5+aRsx3bKYX2nVO8OgP8TBmRLPYcHl1TL/86Djf3swgqkG5auo9vAmaO3zlI 3V9gGNxSJcjfYckfKKlGNeGbbLWV28krDFoPtETCWHOI7uIvD9IuQEXd+dY6GNpB H+werCr0i5CRsKyBVBV59kByDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuEjgD4 LHWieuMiCQVT8WREyTRWMB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjJFMS8zRjY5Q0M2NjdGMDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19k eE9tTWlFYmdPbjE5RGtDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAsrpcz1qSA6iAQGsrV+opHRc6KAXDri2UGMwZndX06JXAqSE40Os0 q1BV6gx2u5mLZhpsJmlb0ERl3h1pWOMZRvQJaFOifgx8QPIhdwZJhnL9zhpgzWq1 ULFp8N3xa+pT1F/y+LKfseQHLC2+4DO0byyhOB+wyOusqM+59hd3lgs2kt8Cwh8p uiUVZnymt9znrZSj/3CJ3DItjImF4nlUyRqEOnAKN/UmguV7Q3qhJVSuV4SZIwdN pqj3z+KmwbmkjKLlWcW2bESvgaTpc3d65Qhd6TZISbtyCiZONt8nOobgnfFxzr2n 9TtnpkZNJcl+lo8p1k/sLTuIVe7Ixtm1 -----END CERTIFICATE-----Generated at Mon May 12 08:23:16 2025 by rpki-client