$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json) Hash identifier: bQw4TK2ypKqqzFE/4grXqnVVlgxTPJwG4rL9/hHymbU= Subject key identifier: 11:EA:17:A2:5A:29:BD:F1:28:07:14:4F:BB:0B:AE:50:92:13:8A:A9 Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft Manifest number: 010E Signing time: Sun 11 May 2025 03:53:35 +0000 Manifest this update: Sun 11 May 2025 03:53:34 +0000 Manifest next update: Sun 18 May 2025 03:53:34 +0000 Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: lU4FUvqRlShiIGYgRIsmUPtBUxFbACcVgyO9jArYvhE=) 2: D4F8CEB8FE4211EF958ABE3BC4F9AE02.roa (hash: e+itOOHa2GS7haggfAySbnRHvgH3I9TscI3l9ZgslXk=) 3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: pCYjff74rDvqaSSHh6b2YJXJxIU8kNQvxw7uQ6aFFQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Validity Not Before: May 11 03:53:34 2025 GMT Not After : May 18 03:53:34 2025 GMT Subject: CN=68201f3e-f081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:9c:30:8e:ea:aa:a1:9c:d4:65:c3:3c:45: 3e:3e:de:f4:2e:1b:af:d3:3d:5d:e1:21:d1:9f:c7: 13:d2:65:9a:8c:4d:95:f2:9a:1a:1c:fc:88:20:72: e4:bd:4a:68:5a:d9:22:ec:01:fa:ba:00:c0:1b:60: a7:37:25:2f:a2:3d:12:1b:a2:07:90:f8:c0:6f:d6: 67:6b:0b:df:cf:32:f4:e8:0d:55:42:f5:30:76:43: f5:f7:cc:47:88:3f:65:9e:d6:3b:41:ae:fa:5d:6c: d3:33:45:ba:60:74:04:87:79:b5:2d:4c:3a:f4:a7: ab:94:92:f8:73:7b:37:f8:e7:d5:e0:cf:df:6c:6b: 71:35:81:6e:12:7d:39:9e:81:9c:88:66:b6:18:db: 30:28:2f:4d:6a:47:8a:8d:c2:21:71:a1:47:0b:e8: f9:03:d1:70:d8:cf:78:4c:c0:12:5d:18:bf:66:27: c3:85:ea:7f:ea:38:73:27:c0:de:01:0d:a9:9f:a7: 5d:7c:ef:3e:65:fd:77:3c:ae:4e:7e:17:4a:3a:61: d0:95:bd:e8:75:73:c4:01:24:30:f7:b7:0c:9f:33: 4f:55:5c:94:90:a7:b2:37:85:5e:f8:75:1e:c5:6f: 56:81:84:5a:b4:8d:d7:67:eb:c6:11:f0:a5:95:31: 38:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EA:17:A2:5A:29:BD:F1:28:07:14:4F:BB:0B:AE:50:92:13:8A:A9 X509v3 Authority Key Identifier: keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:a7:de:4e:80:94:5d:5d:8b:26:b8:24:56:94:97:f1:01:be: 10:1a:31:20:36:fb:f8:d3:50:1c:92:f9:d2:9a:d5:ad:85:4d: 9d:a9:94:4a:44:10:a2:d7:fa:a1:84:ad:e3:b0:3a:b3:bc:fe: 3d:4c:c2:81:aa:a7:d9:61:6e:e6:4b:12:a8:db:70:63:6d:24: d0:30:09:a6:21:3e:1c:f2:1c:9f:15:6c:5b:56:95:7c:0a:b6: f5:1c:5d:c5:6a:a6:d6:bf:a5:69:c7:02:78:8e:49:c1:b7:75: c3:dc:4c:9b:46:a3:d0:40:7d:a3:45:16:05:50:ef:ab:dc:0c: e2:47:0f:a9:66:04:bf:ed:5c:6a:1d:20:b9:05:26:cc:4c:e7: 8c:31:42:a7:6e:9e:23:d1:a5:b2:64:f1:50:6b:17:de:e7:ca: c1:28:82:53:25:b9:c5:09:ac:85:ba:24:28:41:1d:70:e4:10: 86:9b:3f:31:ae:25:88:40:21:f4:e9:a5:40:1a:c1:09:ca:07: 27:9c:bb:c3:74:84:7a:33:69:c2:74:79:f0:cd:bc:68:10:7e: 62:dc:ee:b8:c8:6f:59:ff:cf:f3:33:c0:ba:ce:72:77:43:be: 36:39:71:03:52:f5:4b:2b:68:73:ac:2b:a8:e6:56:a8:af:98: cc:12:26:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4 MDgwRTk3MzAwHhcNMjUwNTExMDM1MzM0WhcNMjUwNTE4MDM1MzM0WjAYMRYwFAYD VQQDEw02ODIwMWYzZS1mMDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIGcMI7qqqGc1GXDPEU+Pt70Lhuv0z1d4SHRn8cT0mWajE2V8poaHPyIIHLk vUpoWtki7AH6ugDAG2CnNyUvoj0SG6IHkPjAb9ZnawvfzzL06A1VQvUwdkP198xH iD9lntY7Qa76XWzTM0W6YHQEh3m1LUw69KerlJL4c3s3+OfV4M/fbGtxNYFuEn05 noGciGa2GNswKC9NakeKjcIhcaFHC+j5A9Fw2M94TMASXRi/ZifDhep/6jhzJ8De AQ2pn6ddfO8+Zf13PK5OfhdKOmHQlb3odXPEASQw97cMnzNPVVyUkKeyN4Ve+HUe xW9WgYRatI3XZ+vGEfCllTE4SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHqF6Ja Kb3xKAcUT7sLrlCSE4qpMB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE eVFBUFpmY0Z5VzZBZ09sekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgp95OgJRdXYsmuCRWlJfxAb4QGjEgNvv401AckvnSmtWthU2dqZRK RBCi1/qhhK3jsDqzvP49TMKBqqfZYW7mSxKo23BjbSTQMAmmIT4c8hyfFWxbVpV8 Crb1HF3FaqbWv6VpxwJ4jknBt3XD3EybRqPQQH2jRRYFUO+r3AziRw+pZgS/7Vxq HSC5BSbMTOeMMUKnbp4j0aWyZPFQaxfe58rBKIJTJbnFCayFuiQoQR1w5BCGmz8x riWIQCH06aVAGsEJygcnnLvDdIR6M2nCdHnwzbxoEH5i3O64yG9Z/8/zM8C6znJ3 Q742OXEDUvVLK2hzrCuo5laor5jMEiZ5 -----END CERTIFICATE-----Generated at Mon May 12 11:02:23 2025 by rpki-client