$ rpki-client -vvf rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft File: MmYwanA43JsBUyfHJVZAXzn85gs.mft (raw, json) Hash identifier: ZNCHXx3foLy4Oc3ahryWkYik1i18i5uNsQShshWUnEk= Subject key identifier: 9B:1A:F7:03:8A:A9:65:DB:46:D3:A0:00:CA:FE:AE:06:E5:DC:D7:8E Authority key identifier: 32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B Certificate issuer: /CN=A91F644E/serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Certificate serial: 1A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft Manifest number: 1A52 Signing time: Thu 08 May 2025 16:26:02 +0000 Manifest this update: Thu 08 May 2025 16:26:02 +0000 Manifest next update: Thu 15 May 2025 16:26:02 +0000 Files and hashes: 1: MmYwanA43JsBUyfHJVZAXzn85gs.crl (hash: s2l9zaN0VH36atJ5Jiq76ALo7E/ARS8sQdywxxDFVTk=) 2: 312DC5B8405E11E7A28FCE45C4F9AE02.roa (hash: arkqSY1NH0JOG5y+n5PhHtwp0RcGV49oD/BwEA9o5TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 16:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6748 (0x1a5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F644E, serialNumber=3266306A7038DC9B015327C72556405F39FCE60B Validity Not Before: May 8 16:26:02 2025 GMT Not After : May 15 16:26:02 2025 GMT Subject: CN=681cdb1a-cff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:aa:41:5f:da:16:d7:e9:27:e1:4e:42:56: 63:6f:6b:69:0b:29:47:51:16:a4:74:1b:7b:ed:55: a6:3e:18:0c:92:20:e7:ea:24:5d:25:e1:d4:e0:48: 6c:5f:46:c3:2e:a6:1d:0d:99:74:61:03:c6:64:47: d6:36:a2:87:29:55:7f:97:19:f0:f0:26:67:9c:06: 69:f3:9c:6f:fe:bf:88:2a:96:21:ec:a2:0b:d8:25: 35:bc:51:6b:cf:44:e9:4b:b8:3b:68:35:ff:59:57: 3a:c2:90:34:b9:a9:39:f3:af:8d:e0:95:f5:ab:05: a8:6c:47:b8:60:0e:11:6d:19:d0:8d:11:10:48:09: 29:f4:6b:c8:e5:d5:eb:e1:59:57:7a:67:c3:7c:f9: 3e:a7:ec:32:2c:71:5c:b8:2b:48:82:01:f6:02:bd: 92:29:5c:52:be:6c:9b:9e:cb:25:3f:69:68:2d:a3: 9f:91:b3:ec:03:1b:28:36:de:b4:23:02:ab:ca:75: 43:b2:73:53:d1:a3:37:5b:5d:0d:5d:01:87:27:14: 4b:83:e1:de:e7:35:35:70:44:90:1e:75:82:c5:02: 87:82:3d:c2:76:ce:5f:eb:62:48:00:71:cc:15:4b: eb:fd:75:98:94:50:ac:b1:ba:f8:ee:c8:cc:f1:ab: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1A:F7:03:8A:A9:65:DB:46:D3:A0:00:CA:FE:AE:06:E5:DC:D7:8E X509v3 Authority Key Identifier: keyid:32:66:30:6A:70:38:DC:9B:01:53:27:C7:25:56:40:5F:39:FC:E6:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmYwanA43JsBUyfHJVZAXzn85gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F644E/E43B6E4A405D11E7B01BA145C4F9AE02/MmYwanA43JsBUyfHJVZAXzn85gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:56:27:3a:55:a7:79:34:a8:99:89:94:af:24:39:ec:f1:6f: 73:26:0f:4f:e7:80:88:19:fb:00:f7:c4:14:11:14:27:92:bd: 62:8a:2d:15:7d:67:90:2a:6b:5b:ac:ba:65:09:d1:1b:4f:c4: b2:eb:13:5e:aa:0b:d7:47:53:f7:b8:f9:44:87:c8:de:9d:80: 33:8b:d0:6e:26:1c:9c:3e:fb:78:19:28:27:b0:b9:8e:fe:64: 57:6c:48:83:8e:6e:6c:99:01:70:28:43:09:22:42:e5:b6:19: 29:b0:ab:92:b3:ad:95:0d:9b:cc:a3:09:2d:51:e3:6a:a2:6f: 08:ca:a9:14:4c:40:25:56:b6:50:bc:d9:f8:d8:61:ee:d0:a9: f3:51:25:b7:ba:f6:ff:46:fd:6d:6f:b6:0e:c0:aa:e3:1f:b0: 94:6a:4c:02:b4:c2:cd:a5:df:b3:1a:0e:a0:76:0a:4c:78:3d: b0:e8:08:e9:71:cb:20:6a:2c:12:04:3f:9a:03:ac:c9:f8:96: 3d:b0:2b:2c:64:fe:4b:7b:4d:ec:e9:dd:3a:1f:26:c6:61:82: e8:73:f8:0b:a5:3f:be:64:af:7e:b2:38:87:0c:da:0e:c4:d5: db:9e:20:a9:86:96:a4:d4:50:74:bc:09:5a:5a:d6:63:0d:8d: 6f:07:2b:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY0NEUxMTAvBgNVBAUTKDMyNjYzMDZBNzAzOERDOUIwMTUzMjdDNzI1NTY0MDVG MzlGQ0U2MEIwHhcNMjUwNTA4MTYyNjAyWhcNMjUwNTE1MTYyNjAyWjAYMRYwFAYD VQQDEw02ODFjZGIxYS1jZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMiqQV/aFtfpJ+FOQlZjb2tpCylHURakdBt77VWmPhgMkiDn6iRdJeHU4Ehs X0bDLqYdDZl0YQPGZEfWNqKHKVV/lxnw8CZnnAZp85xv/r+IKpYh7KIL2CU1vFFr z0TpS7g7aDX/WVc6wpA0uak586+N4JX1qwWobEe4YA4RbRnQjREQSAkp9GvI5dXr 4VlXemfDfPk+p+wyLHFcuCtIggH2Ar2SKVxSvmybnsslP2loLaOfkbPsAxsoNt60 IwKrynVDsnNT0aM3W10NXQGHJxRLg+He5zU1cESQHnWCxQKHgj3Cds5f62JIAHHM FUvr/XWYlFCssbr47sjM8avxwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsa9wOK qWXbRtOgAMr+rgbl3NeOMB8GA1UdIwQYMBaAFDJmMGpwONybAVMnxyVWQF85/OYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjQ0RS9FNDNCNkU0QTQw NUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNKc0JVeWZISlZaQVh6bjg1 Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tWXdhbkE0M0pzQlV5ZkhKVlpBWHpuODVncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjQ0RS9FNDNCNkU0QTQwNUQxMUU3QjAxQkExNDVDNEY5QUUwMi9NbVl3YW5BNDNK c0JVeWZISlZaQVh6bjg1Z3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHVic6Vad5NKiZiZSvJDns8W9zJg9P54CIGfsA98QUERQnkr1iii0V fWeQKmtbrLplCdEbT8Sy6xNeqgvXR1P3uPlEh8jenYAzi9BuJhycPvt4GSgnsLmO /mRXbEiDjm5smQFwKEMJIkLlthkpsKuSs62VDZvMowktUeNqom8IyqkUTEAlVrZQ vNn42GHu0KnzUSW3uvb/Rv1tb7YOwKrjH7CUakwCtMLNpd+zGg6gdgpMeD2w6Ajp ccsgaiwSBD+aA6zJ+JY9sCssZP5Le03s6d06HybGYYLoc/gLpT++ZK9+sjiHDNoO xNXbniCphpak1FB0vAlaWtZjDY1vByuq -----END CERTIFICATE-----Generated at Fri May 9 00:43:49 2025 by rpki-client