$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json) Hash identifier: rsbjbaSPwcZxfD8E/wmzftNEs5fQT9SVs9rmu3OIyvM= Subject key identifier: B6:1D:E7:56:A3:56:FC:D1:E3:4B:41:2A:50:18:B6:57:61:95:DB:37 Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Certificate serial: 1049 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft Manifest number: 1042 Signing time: Wed 14 May 2025 17:31:02 +0000 Manifest this update: Wed 14 May 2025 17:31:01 +0000 Manifest next update: Wed 21 May 2025 17:31:01 +0000 Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: I9Vf5hSWA/nrd9SUBrBLholJyG5XKsD/69VSvyaHCuc=) 2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: Xl08iUFukXE24X8fvGUzm4LLhTQ/xSXJRNuZF2QZScI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4169 (0x1049) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Validity Not Before: May 14 17:31:01 2025 GMT Not After : May 21 17:31:01 2025 GMT Subject: CN=6824d355-4dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:6d:46:87:8a:16:6d:89:25:45:f2:55:ca: 09:25:ae:72:bc:43:db:5e:d7:d6:a8:1e:54:ed:e3: c7:3f:2d:7e:fa:57:8d:b4:b8:f7:0c:d3:47:bd:19: 0d:ff:ef:15:c0:01:68:cb:cc:2b:dd:08:21:8d:e9: 02:1e:0b:df:e0:6b:a3:ec:aa:47:96:7f:2a:bb:11: c4:b5:32:5c:89:88:2b:d1:23:ec:9f:40:3e:ef:9f: 23:c6:8f:2f:06:4b:43:80:bd:dc:a8:0d:de:6f:ea: 52:b2:70:96:f9:d3:cf:09:24:6d:e9:b7:e8:ba:61: c3:24:3f:b3:cf:57:7f:10:ba:7e:16:48:2b:41:f3: ff:d2:53:cd:9c:cb:75:25:99:bb:a6:38:4e:c1:16: 30:a3:c8:d0:a0:80:06:1f:85:f3:52:09:da:57:c1: 9f:1e:b0:d0:32:15:42:e9:3b:42:67:e1:be:4d:4b: fc:80:ea:aa:08:19:7c:3b:ef:a5:ee:9f:3b:33:fe: 73:1d:ac:d3:9f:a9:6e:9c:ac:3c:df:77:8b:ef:7e: bc:db:ee:2e:f6:fd:0c:b4:39:62:4d:79:b5:fb:92: 5e:fa:d7:0f:49:dc:47:f1:00:40:d3:ea:30:f6:17: 07:2a:89:13:53:54:8c:ad:86:36:ea:3c:0a:24:7e: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1D:E7:56:A3:56:FC:D1:E3:4B:41:2A:50:18:B6:57:61:95:DB:37 X509v3 Authority Key Identifier: keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:96:da:a8:8f:c3:74:78:14:f7:33:bd:f3:af:88:28:ee:2d: 47:bc:1e:17:cc:61:e3:41:77:62:21:f0:de:9f:60:29:29:95: 5f:bb:ac:ee:5d:cc:dc:45:7c:19:d5:8d:4c:e0:a7:43:41:52: b1:c8:91:c6:8b:bb:bd:65:97:06:b1:4c:05:b2:a5:0f:1e:d4: 3c:9c:35:34:2b:7a:6f:1d:82:13:79:63:fc:60:66:50:b6:de: 25:be:5b:f9:74:c0:91:42:db:e1:18:53:bf:d9:39:d2:3b:5a: e7:eb:2d:4e:8a:e6:24:b2:f8:ca:e0:74:5f:d4:b2:d2:f2:32: 03:12:4c:8d:02:9e:e4:83:3a:14:e9:8f:45:ec:99:db:b1:51: cc:5d:f8:86:5f:00:f6:ff:45:04:cb:41:c4:67:49:36:f2:2f: 60:61:df:c3:06:d4:1f:72:dc:97:81:09:f4:44:a4:49:e5:5f: 9f:5b:34:61:b7:93:aa:ec:ce:65:7b:b6:c3:4a:3e:28:30:e6: 09:2f:af:98:2a:70:cf:72:84:d3:f2:82:e3:61:62:4a:83:f5: 72:b6:7a:cf:b5:a1:3c:13:bb:8b:9d:f3:c2:5f:98:1e:ab:c1: 2b:ad:db:a2:32:04:b2:65:5d:22:5b:d6:cb:c2:04:ae:68:17: e4:b2:36:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxQTcxMTAvBgNVBAUTKDZBQzc3OTc0REZFNDUwODA3MzVDREI5MDY2QTdFMjQ2 OTYwNDkyQjcwHhcNMjUwNTE0MTczMTAxWhcNMjUwNTIxMTczMTAxWjAYMRYwFAYD VQQDEw02ODI0ZDM1NS00ZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtb5tRoeKFm2JJUXyVcoJJa5yvEPbXtfWqB5U7ePHPy1++leNtLj3DNNHvRkN /+8VwAFoy8wr3QghjekCHgvf4Guj7KpHln8quxHEtTJciYgr0SPsn0A+758jxo8v BktDgL3cqA3eb+pSsnCW+dPPCSRt6bfoumHDJD+zz1d/ELp+FkgrQfP/0lPNnMt1 JZm7pjhOwRYwo8jQoIAGH4XzUgnaV8GfHrDQMhVC6TtCZ+G+TUv8gOqqCBl8O++l 7p87M/5zHazTn6lunKw833eL73682+4u9v0MtDliTXm1+5Je+tcPSdxH8QBA0+ow 9hcHKokTU1SMrYY26jwKJH6xVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYd51aj VvzR40tBKlAYtldhlds3MB8GA1UdIwQYMBaAFGrHeXTf5FCAc1zbkGan4kaWBJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFBNy83QjBCNjc4NDM5 QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJQnpYTnVRWnFmaVJwWUVr cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzZDVkTl9rVUlCelhOdVFacWZpUnBZRWtyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzFBNy83QjBCNjc4NDM5QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJ QnpYTnVRWnFmaVJwWUVrcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsltqoj8N0eBT3M73zr4go7i1HvB4XzGHjQXdiIfDen2ApKZVfu6zu XczcRXwZ1Y1M4KdDQVKxyJHGi7u9ZZcGsUwFsqUPHtQ8nDU0K3pvHYITeWP8YGZQ tt4lvlv5dMCRQtvhGFO/2TnSO1rn6y1OiuYksvjK4HRf1LLS8jIDEkyNAp7kgzoU 6Y9F7JnbsVHMXfiGXwD2/0UEy0HEZ0k28i9gYd/DBtQfctyXgQn0RKRJ5V+fWzRh t5Oq7M5le7bDSj4oMOYJL6+YKnDPcoTT8oLjYWJKg/VytnrPtaE8E7uLnfPCX5ge q8ErrduiMgSyZV0iW9bLwgSuaBfksja2 -----END CERTIFICATE-----Generated at Fri May 16 18:06:58 2025 by rpki-client