$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json) Hash identifier: k+oednWXY67PNvNlwvLZH3duRvshK45y1wwpGYL0R94= Subject key identifier: B8:97:FB:FA:E2:B6:33:04:9A:24:70:8C:64:C9:19:23:52:20:4F:26 Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft Manifest number: 03FA Signing time: Tue 13 May 2025 00:16:46 +0000 Manifest this update: Tue 13 May 2025 00:16:46 +0000 Manifest next update: Tue 20 May 2025 00:16:45 +0000 Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: fEu1P0JU1mrSHIymd3iU3gZKk34pcaHYKg5UTODQEVw=) 2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: Jq+BJa5bIC2ga/tgIn6ID1FhPZxllAOIKx3OxJo/dLg=) 3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: h3fylE+2YBgfkc7GqGmNPtjnF3D2D39dQ6blUneghIY=) 4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: Q81s5XKL5iVaVaoWayTQR37y4XfCEhNVP+1tJwtC+bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Validity Not Before: May 13 00:16:46 2025 GMT Not After : May 20 00:16:45 2025 GMT Subject: CN=68228f6e-13b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:c4:25:a0:00:30:ca:16:02:2e:d9:95:ca: 22:61:29:72:a9:03:63:3b:8d:0b:44:60:ce:84:7a: 1f:41:a8:18:fb:17:0e:d8:65:ea:3c:d8:e6:82:6d: e4:39:22:c2:c5:91:2a:59:85:33:61:ba:68:0a:9d: a2:1e:62:88:42:35:d3:c0:40:42:2f:2a:8a:fc:bb: 37:93:67:7e:6e:b7:74:8a:97:88:ca:92:38:9f:82: 3b:36:dc:22:c4:aa:87:4d:bb:94:f4:27:c9:87:72: c7:88:53:c1:6b:9f:8f:35:27:a3:18:1c:00:02:4d: 2d:38:30:53:30:b0:ed:a6:6d:9d:9a:ac:30:86:1f: 7b:a2:c1:8c:36:89:67:62:cc:5e:1c:4a:fe:e4:59: 76:86:cc:f7:0a:09:66:a4:09:be:39:c1:f3:5e:0e: f6:63:46:1d:25:45:19:a8:2a:92:cb:1c:19:7f:1a: e8:8b:7e:c1:a3:5e:1f:18:bc:da:82:e1:fd:97:0f: d9:dc:21:82:c0:19:8b:a6:7a:76:37:1c:f5:bd:86: 11:1b:25:aa:8b:d0:a7:07:34:69:ed:4c:46:57:f6: bb:27:5d:e6:d9:e2:f9:ba:fb:dc:e3:9b:0c:85:d7: d1:e3:71:e9:42:f0:56:54:1d:ef:5b:93:21:a0:f8: 81:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:97:FB:FA:E2:B6:33:04:9A:24:70:8C:64:C9:19:23:52:20:4F:26 X509v3 Authority Key Identifier: keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:11:14:3d:f9:89:b7:05:28:ba:bd:e6:f7:7c:6d:e0:90:a1: 37:89:45:58:5f:46:2f:70:f9:40:a0:8b:e8:46:52:52:d8:bb: ea:d7:e0:d4:2e:c3:73:1b:b2:de:6a:8c:d5:3b:2b:f0:92:6f: 08:ee:fe:d4:7a:25:f1:04:9d:c6:f4:90:47:28:53:f8:44:ba: bd:d0:03:a0:71:3d:76:cf:d3:db:4c:b6:18:50:29:d1:0f:49: 67:5e:3f:1d:b1:21:d0:6b:3e:bd:d9:95:9f:e2:c6:12:59:55: a7:08:21:ff:b7:ea:aa:ee:24:6d:82:6a:b9:49:0b:11:c9:da: 6e:7a:eb:ea:d2:05:9d:f6:0d:ba:35:ee:7f:82:ff:2e:30:cf: ba:d7:f5:6c:13:6b:20:11:ef:1f:b5:45:61:94:13:41:77:7c: 3c:a3:c6:91:22:a2:95:67:a1:3c:8c:4f:40:bb:a2:85:88:05: 38:76:fe:6c:96:ed:01:63:de:67:c1:33:8c:27:78:ab:52:7e: 48:8d:43:e4:b5:3c:ca:1a:3c:d4:f7:0d:1f:0a:6e:2c:85:a7: 53:df:f4:65:e4:65:87:c0:d9:74:a3:65:c1:77:a7:9a:d9:9c: 0a:27:e2:ae:4c:10:56:1a:08:16:a8:7a:68:43:c3:e1:68:04: 59:c8:67:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB MEVCOThBMjYwHhcNMjUwNTEzMDAxNjQ2WhcNMjUwNTIwMDAxNjQ1WjAYMRYwFAYD VQQDEw02ODIyOGY2ZS0xM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2zEJaAAMMoWAi7ZlcoiYSlyqQNjO40LRGDOhHofQagY+xcO2GXqPNjmgm3k OSLCxZEqWYUzYbpoCp2iHmKIQjXTwEBCLyqK/Ls3k2d+brd0ipeIypI4n4I7Ntwi xKqHTbuU9CfJh3LHiFPBa5+PNSejGBwAAk0tODBTMLDtpm2dmqwwhh97osGMNoln YsxeHEr+5Fl2hsz3CglmpAm+OcHzXg72Y0YdJUUZqCqSyxwZfxroi37Bo14fGLza guH9lw/Z3CGCwBmLpnp2Nxz1vYYRGyWqi9CnBzRp7UxGV/a7J13m2eL5uvvc45sM hdfR43HpQvBWVB3vW5MhoPiB0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiX+/ri tjMEmiRwjGTJGSNSIE8mMB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0 NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY QlB0V0tUTGdxMktnNjVpaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAERQ9+Ym3BSi6veb3fG3gkKE3iUVYX0YvcPlAoIvoRlJS2Lvq1+DU LsNzG7LeaozVOyvwkm8I7v7UeiXxBJ3G9JBHKFP4RLq90AOgcT12z9PbTLYYUCnR D0lnXj8dsSHQaz692ZWf4sYSWVWnCCH/t+qq7iRtgmq5SQsRydpueuvq0gWd9g26 Ne5/gv8uMM+61/VsE2sgEe8ftUVhlBNBd3w8o8aRIqKVZ6E8jE9Au6KFiAU4dv5s lu0BY95nwTOMJ3irUn5IjUPktTzKGjzU9w0fCm4shadT3/Rl5GWHwNl0o2XBd6ea 2ZwKJ+KuTBBWGggWqHpoQ8PhaARZyGco -----END CERTIFICATE-----Generated at Tue May 13 02:14:29 2025 by rpki-client