$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: MkgtbQhP89P2iP2CXD3LLNYBIixLSM+RItjGMpQTuNU= Subject key identifier: C9:24:1E:87:E1:CA:BD:22:75:83:A8:C1:97:9C:17:B4:95:F2:31:8C Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 032C Signing time: Fri 09 May 2025 00:53:40 +0000 Manifest this update: Fri 09 May 2025 00:53:39 +0000 Manifest next update: Fri 16 May 2025 00:53:39 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: zhVlygFqfiPWcL9Sat73e0XVQzTNMLGEp1JKR6uZ7ys=) 2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: DOUqu1Qj+MU4+uk8We4DlL9rOQ0u7xDb2aWTGQZFr1c=) 3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GjwPBXkxZ4qE4L8GvWJPamMwvGLPmxgtpWoHImjgHS0=) 4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: 9wsSWlTIkEvdY3EgDoQza7/AJrOesuO9qQzI1IZGf8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: May 9 00:53:39 2025 GMT Not After : May 16 00:53:39 2025 GMT Subject: CN=681d5214-8cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d3:50:cf:7e:c8:5b:44:ee:8c:bb:f9:e3:ce: 4a:f0:5f:35:c0:29:fa:39:e9:4b:91:cb:99:7f:e5: 50:01:f6:fd:a8:d0:ee:6a:d0:e3:ca:3a:35:9e:93: 38:d8:6f:4e:2b:07:db:35:5e:68:4d:33:67:9c:c9: 96:c5:29:71:c2:00:57:b4:50:fb:3a:28:97:60:7a: 1a:20:7d:4f:75:17:d5:b1:85:5a:86:c8:04:84:6b: 0d:5c:17:b9:13:6b:51:14:b5:2c:c9:7d:ea:57:3a: 54:a1:7e:b1:5e:d3:af:25:2b:f6:70:20:4e:8d:86: 0d:81:04:7e:4b:00:ae:35:b8:34:04:4e:eb:3e:5f: bb:4f:7b:d9:32:7e:32:33:76:46:99:00:73:57:d2: fa:07:31:9c:e7:bd:33:fc:53:f5:d3:93:bc:d5:21: ea:f0:89:ed:08:28:dd:14:9b:08:ca:26:32:76:ca: b5:78:6f:e8:b9:9a:b8:43:a4:7f:fe:6a:95:f7:84: b3:66:74:a0:5c:d2:ec:c6:f3:d9:92:39:08:60:22: 61:bf:2a:5f:2d:1d:c6:29:f5:be:47:ab:80:b0:19: bb:ed:9a:77:c6:1b:e8:08:34:7d:51:d8:10:96:9b: a7:d2:f6:93:bd:33:76:33:00:0e:86:b0:d1:6e:d5: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:24:1E:87:E1:CA:BD:22:75:83:A8:C1:97:9C:17:B4:95:F2:31:8C X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:4c:f4:4b:19:e7:2e:86:88:75:3f:14:29:ed:fd:84:c1:4d: 49:55:f1:cc:ba:2e:cb:b7:1d:45:65:f1:62:0e:71:3d:23:23: ef:a1:21:ff:56:4d:64:2c:da:44:75:b3:71:72:3e:02:9a:b4: b6:85:b3:c5:15:82:b1:4a:61:ba:c6:90:e6:ca:f9:80:1c:85: 91:0d:90:2e:6d:82:33:bd:93:ac:1d:8e:6f:a4:69:a8:c0:ba: 8a:57:7c:d8:cf:97:81:67:c3:1f:e4:7b:58:2e:f1:19:00:dd: d6:a6:76:f9:fb:ca:51:57:11:21:a9:cc:c3:56:a2:1e:fa:95: 2f:f6:06:d3:e1:02:dd:7f:ad:c4:7c:96:6a:4c:37:dd:64:f3: c7:82:b0:19:26:6b:b6:4a:1a:8f:89:4c:a2:ae:1d:3e:43:8a: 46:1a:79:9e:f9:57:9b:a8:98:6b:83:e8:d1:31:e5:cd:e3:3d: 70:23:ce:af:d7:95:a7:c7:2d:35:96:ed:5a:aa:f2:87:5b:47: a5:d0:2c:bc:f1:5b:c4:74:95:94:20:08:60:73:a0:ca:0f:88: 7f:1f:85:0f:1d:b4:72:a7:9e:83:5a:e9:72:1d:58:71:aa:d9: 5d:03:fa:48:07:85:21:2d:17:c2:88:4e:22:d5:b1:12:7e:2b: 9e:a2:c6:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjUwNTA5MDA1MzM5WhcNMjUwNTE2MDA1MzM5WjAYMRYwFAYD VQQDEw02ODFkNTIxNC04Y2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtNQz37IW0TujLv5485K8F81wCn6OelLkcuZf+VQAfb9qNDuatDjyjo1npM4 2G9OKwfbNV5oTTNnnMmWxSlxwgBXtFD7OiiXYHoaIH1PdRfVsYVahsgEhGsNXBe5 E2tRFLUsyX3qVzpUoX6xXtOvJSv2cCBOjYYNgQR+SwCuNbg0BE7rPl+7T3vZMn4y M3ZGmQBzV9L6BzGc570z/FP105O81SHq8IntCCjdFJsIyiYydsq1eG/ouZq4Q6R/ /mqV94SzZnSgXNLsxvPZkjkIYCJhvypfLR3GKfW+R6uAsBm77Zp3xhvoCDR9UdgQ lpun0vaTvTN2MwAOhrDRbtW/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkkHofh yr0idYOowZecF7SV8jGMMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXTPRLGecuhoh1PxQp7f2EwU1JVfHMui7Ltx1FZfFiDnE9IyPvoSH/ Vk1kLNpEdbNxcj4CmrS2hbPFFYKxSmG6xpDmyvmAHIWRDZAubYIzvZOsHY5vpGmo wLqKV3zYz5eBZ8Mf5HtYLvEZAN3Wpnb5+8pRVxEhqczDVqIe+pUv9gbT4QLdf63E fJZqTDfdZPPHgrAZJmu2ShqPiUyirh0+Q4pGGnme+VebqJhrg+jRMeXN4z1wI86v 15Wnxy01lu1aqvKHW0el0Cy88VvEdJWUIAhgc6DKD4h/H4UPHbRyp56DWulyHVhx qtldA/pIB4UhLRfCiE4i1bESfiueosYa -----END CERTIFICATE-----Generated at Sun May 11 02:02:38 2025 by rpki-client