$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: 1ZqhhUU+L5jqcS4grWq3H+eIasCo3mGHZnPK1S8BDjw= Subject key identifier: A2:3D:19:FB:2D:2A:19:D4:2E:6E:C2:E8:AA:A4:2B:FE:8F:35:49:8E Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0A86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0A78 Signing time: Wed 14 May 2025 19:45:59 +0000 Manifest this update: Wed 14 May 2025 19:45:58 +0000 Manifest next update: Wed 21 May 2025 19:45:58 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: jH4ulLXLuDJZPJ1kZw4JnKwwN3hbJkGCmYUsZKhwRTY=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2694 (0xa86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: May 14 19:45:58 2025 GMT Not After : May 21 19:45:58 2025 GMT Subject: CN=6824f2f7-5ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:cc:17:8a:40:b8:62:4e:77:c6:70:c1:65: 10:95:84:4f:f9:29:e3:0b:84:4e:c4:d9:0a:7f:46: 5a:a0:72:e9:77:67:df:4f:e4:f9:a5:7e:6b:40:d1: 1f:20:78:6b:16:63:86:31:54:13:ed:a4:d5:0c:b9: 5d:f7:2d:e4:69:b4:06:aa:a3:5b:87:54:25:e6:7c: 3f:59:50:0e:63:13:0b:8e:43:8f:61:1c:a1:a8:10: 53:d7:3b:44:64:61:09:d3:94:2d:fb:cb:fa:2f:ec: 8b:c5:8b:b5:47:b2:23:ee:65:66:dc:b1:b5:6d:b7: 34:b8:96:67:8f:73:74:16:1f:57:13:3c:23:5b:0d: 3f:ac:84:60:22:37:8e:cc:34:95:46:94:74:97:fd: ad:d7:e0:d3:7a:3f:3a:96:cb:08:47:ed:c9:68:99: b2:af:99:a3:96:cf:9f:05:b9:eb:f1:fc:d4:c2:25: 1b:19:59:cc:a6:3a:f8:31:e1:fb:d6:f5:44:28:42: 09:2a:2e:7e:2c:7c:58:af:15:fb:0a:56:4c:58:77: c5:8b:20:0d:5a:fe:65:c7:80:65:17:71:26:0f:0a: 68:c3:f0:66:5c:c9:44:f0:bc:a0:19:77:13:1c:d9: 54:3e:7c:03:33:09:ad:e8:9b:69:60:9b:c8:c8:a9: 71:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3D:19:FB:2D:2A:19:D4:2E:6E:C2:E8:AA:A4:2B:FE:8F:35:49:8E X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:df:cf:1b:96:72:91:b0:c2:27:ac:24:44:11:fb:7f:33:a7: 3c:7e:88:54:6d:b6:e1:5d:47:36:91:4f:b9:a3:32:32:d0:aa: 37:77:f6:e4:80:e9:a0:1d:c5:2a:85:d0:14:f1:4d:7d:5a:56: 53:ae:c0:d8:54:2e:f8:b8:1e:f2:88:1f:72:de:62:8b:57:d2: aa:0b:66:a4:fc:cd:0a:d9:a1:de:08:cf:b9:73:b6:a3:1e:ed: db:f7:6c:cb:c8:53:1d:36:0a:64:68:b3:88:02:54:94:d1:ac: 5e:43:f4:a7:3f:9e:df:18:3b:9c:8b:c8:da:a0:64:d1:32:a9: a5:4f:8b:87:ca:16:0e:b1:f5:04:51:9e:46:b5:4f:35:c9:6e: fc:91:ad:ca:2b:5c:f8:3c:12:00:12:53:ec:e8:33:83:20:8e: 42:57:27:93:68:3b:4e:7b:a9:39:be:32:62:2b:92:0c:df:1d: 98:31:3f:82:40:84:5c:90:85:11:32:81:bc:f7:a6:11:0a:80: 0a:48:cf:e0:1c:02:ce:6d:ae:4d:eb:78:e1:8d:60:cf:c9:43: b0:a7:79:e6:e4:50:39:ac:a7:0a:61:96:75:da:06:ba:8b:cb: 89:40:dd:e4:cb:9d:f8:08:60:d5:fa:59:f8:f6:ee:83:0c:31: 4d:bb:5b:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUwNTE0MTk0NTU4WhcNMjUwNTIxMTk0NTU4WjAYMRYwFAYD VQQDEw02ODI0ZjJmNy01ZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurvMF4pAuGJOd8ZwwWUQlYRP+SnjC4ROxNkKf0ZaoHLpd2ffT+T5pX5rQNEf IHhrFmOGMVQT7aTVDLld9y3kabQGqqNbh1Ql5nw/WVAOYxMLjkOPYRyhqBBT1ztE ZGEJ05Qt+8v6L+yLxYu1R7Ij7mVm3LG1bbc0uJZnj3N0Fh9XEzwjWw0/rIRgIjeO zDSVRpR0l/2t1+DTej86lssIR+3JaJmyr5mjls+fBbnr8fzUwiUbGVnMpjr4MeH7 1vVEKEIJKi5+LHxYrxX7ClZMWHfFiyANWv5lx4BlF3EmDwpow/BmXMlE8LygGXcT HNlUPnwDMwmt6JtpYJvIyKlxkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKI9Gfst KhnULm7C6KqkK/6PNUmOMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV388blnKRsMInrCREEft/M6c8fohUbbbhXUc2kU+5ozIy0Ko3d/bk gOmgHcUqhdAU8U19WlZTrsDYVC74uB7yiB9y3mKLV9KqC2ak/M0K2aHeCM+5c7aj Hu3b92zLyFMdNgpkaLOIAlSU0axeQ/SnP57fGDuci8jaoGTRMqmlT4uHyhYOsfUE UZ5GtU81yW78ka3KK1z4PBIAElPs6DODII5CVyeTaDtOe6k5vjJiK5IM3x2YMT+C QIRckIURMoG896YRCoAKSM/gHALOba5N63jhjWDPyUOwp3nm5FA5rKcKYZZ12ga6 i8uJQN3ky534CGDV+ln49u6DDDFNu1ub -----END CERTIFICATE-----Generated at Thu May 15 17:59:14 2025 by rpki-client