$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: WPdC6Bp35YLCEkxwkkfBFr4HLYEgI0tXClY+jf6Iduo= Subject key identifier: 9E:B1:43:02:CF:5A:DA:43:E0:52:A7:39:48:C6:D1:66:00:1E:11:0A Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 015A Signing time: Sat 03 May 2025 03:30:12 +0000 Manifest this update: Sat 03 May 2025 03:30:11 +0000 Manifest next update: Sat 10 May 2025 03:30:11 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: /j0p5PfW+UYhbtRA4KT+n+j70qiFf5l72AdkSui7eWE=) 2: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: lTkc7C0RlmKbFSYdbjr+dPk/Bz3louAuGeeNLMUaa3U=) 3: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: OFcdlnYr84QtfXIjFkq221jW9RB67N6+iA5hYs6y+y0=) 4: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: kXqagkJo/A0eBKA6rzsFPrgkBqXmX4C+r5kQGo8fciw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: May 3 03:30:11 2025 GMT Not After : May 10 03:30:11 2025 GMT Subject: CN=68158dc4-2154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c8:0f:5e:26:ca:88:57:55:5d:f7:64:af:bf: 0c:f0:33:e6:82:14:54:6f:78:0e:89:02:8e:26:b5: 4d:8d:25:fb:83:7e:85:3a:38:1e:67:dd:3e:9e:ff: b5:5f:a2:7b:9d:9d:f7:df:ce:45:7c:38:98:f4:c8: ed:94:ef:3b:a7:b2:93:08:e1:b9:e3:6a:92:ec:5d: 4e:ab:1d:4c:a7:6b:f6:e9:fd:6c:fb:e8:b5:3a:d4: 50:d1:7b:4a:78:13:cd:a2:39:e1:fe:7d:e1:a7:24: 13:da:a9:55:c7:b6:9b:72:a4:0a:e0:6e:8d:d6:1d: 70:8a:74:13:a9:9a:65:2e:97:7e:af:08:09:f1:2c: 1d:79:d9:b5:5c:dc:e5:b5:b5:fd:e7:09:6a:94:4b: 4c:8a:00:30:54:3c:32:6a:ca:cb:25:a1:7d:4c:99: d7:78:76:80:85:b5:e0:51:0e:fb:0e:af:6d:a7:0c: f1:d0:82:e2:58:17:ce:23:94:b0:c0:c8:69:76:a3: ab:b4:2b:93:49:fa:94:53:96:33:70:28:a0:75:c9: cc:78:d9:58:a4:fe:3f:02:b7:1a:77:c4:54:4b:67: 7b:81:66:c0:e9:db:3d:4f:2c:7a:16:e5:1c:84:2c: 9c:41:27:da:99:b8:53:47:03:94:e9:5a:d5:18:a0: 0c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B1:43:02:CF:5A:DA:43:E0:52:A7:39:48:C6:D1:66:00:1E:11:0A X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:74:da:c4:0a:32:f6:4d:62:48:b9:dc:bf:69:8e:83:98:7d: 22:97:e8:51:74:92:6a:c1:9d:7b:69:05:8b:d3:35:2c:34:a4: c5:54:98:e3:0a:f8:35:d1:95:0d:19:f0:a9:01:59:d2:d1:ce: 6d:35:4d:b3:df:73:85:82:ab:2c:5e:77:5c:ba:63:0f:38:0e: b1:a5:a1:5d:4b:62:18:1e:bb:20:0f:12:b5:8c:af:4a:3a:fb: 9a:fe:20:b6:82:49:45:aa:09:25:92:94:13:64:57:88:c1:4e: 87:6e:bc:46:e5:04:bf:0f:fc:99:e5:66:5a:cd:a2:ad:8d:05: 88:4f:95:44:86:83:73:c2:3c:10:ad:7a:b1:c8:6f:87:52:d1: 40:25:a5:4c:8b:de:9c:54:b3:ab:ed:5f:fc:c1:53:48:1c:a9: 08:12:b4:66:11:5d:a2:07:68:a6:6c:d9:78:19:a2:20:39:ff: 97:87:27:c1:21:0b:fa:7a:f3:08:03:01:b5:79:78:35:9c:29: 53:c1:30:13:bb:ec:63:74:dc:98:54:1c:0c:9c:0a:41:cc:1a: 47:fe:6d:82:8b:60:d4:e2:0d:d4:c5:6f:13:4f:e7:a5:7b:55: c4:47:83:93:57:ad:a2:fa:1c:47:f6:ba:f9:3a:41:e4:d3:27: 58:28:ba:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjUwNTAzMDMzMDExWhcNMjUwNTEwMDMzMDExWjAYMRYwFAYD VQQDEw02ODE1OGRjNC0yMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsgPXibKiFdVXfdkr78M8DPmghRUb3gOiQKOJrVNjSX7g36FOjgeZ90+nv+1 X6J7nZ33385FfDiY9MjtlO87p7KTCOG542qS7F1Oqx1Mp2v26f1s++i1OtRQ0XtK eBPNojnh/n3hpyQT2qlVx7abcqQK4G6N1h1winQTqZplLpd+rwgJ8Swdedm1XNzl tbX95wlqlEtMigAwVDwyasrLJaF9TJnXeHaAhbXgUQ77Dq9tpwzx0ILiWBfOI5Sw wMhpdqOrtCuTSfqUU5YzcCigdcnMeNlYpP4/Arcad8RUS2d7gWbA6ds9Tyx6FuUc hCycQSfambhTRwOU6VrVGKAM8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6xQwLP WtpD4FKnOUjG0WYAHhEKMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMdNrECjL2TWJIudy/aY6DmH0il+hRdJJqwZ17aQWL0zUsNKTFVJjj Cvg10ZUNGfCpAVnS0c5tNU2z33OFgqssXndcumMPOA6xpaFdS2IYHrsgDxK1jK9K Ovua/iC2gklFqgklkpQTZFeIwU6HbrxG5QS/D/yZ5WZazaKtjQWIT5VEhoNzwjwQ rXqxyG+HUtFAJaVMi96cVLOr7V/8wVNIHKkIErRmEV2iB2imbNl4GaIgOf+XhyfB IQv6evMIAwG1eXg1nClTwTATu+xjdNyYVBwMnApBzBpH/m2Ci2DU4g3UxW8TT+el e1XER4OTV62i+hxH9rr5OkHk0ydYKLrz -----END CERTIFICATE-----Generated at Mon May 5 03:27:52 2025 by rpki-client