$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: e5iPCgcweY9cTIx1JXZd/dsRwurn2aPfYtjez4/rRAc= Subject key identifier: 93:14:50:DA:99:09:F5:BC:9D:B1:E8:7A:B9:A4:5A:76:42:5F:52:0C Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 04FC Signing time: Sat 10 May 2025 23:25:21 +0000 Manifest this update: Sat 10 May 2025 23:25:21 +0000 Manifest next update: Sat 17 May 2025 23:25:21 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: VdoOxJ9SerM5WaYKaBGjMzlFHx/C5cNcPeEsbcmsL5M=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: May 10 23:25:21 2025 GMT Not After : May 17 23:25:21 2025 GMT Subject: CN=681fe061-2d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:bc:55:33:60:7b:4b:9c:df:a0:e6:3f:db: e7:57:25:17:2a:b1:70:60:55:cf:3d:11:05:69:6a: 9f:70:5e:98:27:96:d3:a3:27:69:b2:b0:00:f2:8b: dd:66:fe:e3:66:17:38:3f:29:df:d8:e8:d8:09:ab: 61:d2:34:f3:da:65:f4:97:5e:11:3d:39:10:26:79: 9b:e9:a8:e1:15:46:cc:05:72:ba:63:1d:ff:b3:44: 9f:52:d3:03:ca:19:75:f7:d2:77:f6:25:03:8b:bb: 94:8e:9e:4f:4b:41:32:dd:e1:4a:ac:81:f9:e6:f7: 0b:60:14:09:6d:9c:8b:4a:08:c9:bd:bb:dc:cd:f5: 10:84:13:c6:65:54:48:71:62:1a:fa:7a:83:b6:aa: 0e:08:b4:9e:84:77:a2:e5:94:7a:f1:f6:ba:1a:9d: cc:11:6f:6c:94:13:2f:bc:a2:e4:4b:74:52:78:bf: a7:5b:1a:61:ed:d3:de:24:b4:39:6b:a4:6b:63:8f: 6d:71:89:7a:48:41:03:8f:35:8d:78:b5:77:cd:10: 13:4f:b7:bc:1d:bb:17:3c:9d:ac:56:99:3d:f9:e7: 16:06:36:96:05:2f:b2:dc:c8:d4:65:01:1b:21:f0: cd:a5:fe:59:f1:42:8e:b6:0f:34:8d:93:4a:4b:c5: e9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:14:50:DA:99:09:F5:BC:9D:B1:E8:7A:B9:A4:5A:76:42:5F:52:0C X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:40:33:6b:17:ba:6f:4a:15:2b:a5:7d:44:a1:bf:a3:a9:66: 4a:e6:76:d4:2b:da:7e:ec:6d:43:b4:16:46:ac:9f:89:9c:81: 64:dc:d1:68:f0:6f:fa:26:06:46:85:b6:77:d4:28:1a:f3:57: 1f:53:4b:2a:27:ff:29:f3:b0:58:6e:65:7d:a1:bd:d9:ec:4b: 89:65:c9:0c:da:8c:85:f6:c9:23:ef:07:c3:36:bc:d6:33:35: 04:62:32:12:9e:a3:99:c1:67:48:ba:c0:f7:4d:b8:17:2a:56: 6f:3c:23:35:c4:36:00:a7:c2:77:bd:1e:da:04:ac:1f:35:e2: 48:88:c1:78:7b:4c:3a:0a:f1:14:74:28:21:83:21:86:92:23: 31:a7:8b:b8:fb:44:06:50:f9:be:9c:8b:95:a2:58:e3:cc:56: 8f:1f:f8:29:46:ca:7f:44:9a:b3:8b:f9:da:2b:b9:e3:2b:f9: d4:09:2f:65:7e:b1:ea:c2:69:4a:38:bd:cb:ef:17:d9:88:35: 11:c7:03:37:97:42:c8:be:fa:80:32:b4:40:9d:76:cd:ef:bd: 9e:10:13:97:ad:d1:e5:4e:c3:27:bf:07:5e:90:84:65:ac:be: a3:9a:a6:3b:21:72:c1:58:3b:14:ab:6c:8c:7b:4e:92:19:16: ff:7b:a9:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUwNTEwMjMyNTIxWhcNMjUwNTE3MjMyNTIxWjAYMRYwFAYD VQQDEw02ODFmZTA2MS0yZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTO8VTNge0uc36DmP9vnVyUXKrFwYFXPPREFaWqfcF6YJ5bToydpsrAA8ovd Zv7jZhc4Pynf2OjYCath0jTz2mX0l14RPTkQJnmb6ajhFUbMBXK6Yx3/s0SfUtMD yhl199J39iUDi7uUjp5PS0Ey3eFKrIH55vcLYBQJbZyLSgjJvbvczfUQhBPGZVRI cWIa+nqDtqoOCLSehHei5ZR68fa6Gp3MEW9slBMvvKLkS3RSeL+nWxph7dPeJLQ5 a6RrY49tcYl6SEEDjzWNeLV3zRATT7e8HbsXPJ2sVpk9+ecWBjaWBS+y3MjUZQEb IfDNpf5Z8UKOtg80jZNKS8XphQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMUUNqZ CfW8nbHoermkWnZCX1IMMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoQDNrF7pvShUrpX1Eob+jqWZK5nbUK9p+7G1DtBZGrJ+JnIFk3NFo 8G/6JgZGhbZ31Cga81cfU0sqJ/8p87BYbmV9ob3Z7EuJZckM2oyF9skj7wfDNrzW MzUEYjISnqOZwWdIusD3TbgXKlZvPCM1xDYAp8J3vR7aBKwfNeJIiMF4e0w6CvEU dCghgyGGkiMxp4u4+0QGUPm+nIuVoljjzFaPH/gpRsp/RJqzi/naK7njK/nUCS9l frHqwmlKOL3L7xfZiDURxwM3l0LIvvqAMrRAnXbN772eEBOXrdHlTsMnvwdekIRl rL6jmqY7IXLBWDsUq2yMe06SGRb/e6nv -----END CERTIFICATE-----Generated at Mon May 12 22:56:02 2025 by rpki-client