$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: LLj2lEtfGWDilsN9xg+OmaJlJnM1654oS8Kw1IwyWgc= Subject key identifier: 7E:F9:98:9C:EB:5D:68:F2:3E:D5:C8:DD:E8:6D:1B:34:4F:4B:A0:2B Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 03F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 03E6 Signing time: Tue 13 May 2025 00:20:45 +0000 Manifest this update: Tue 13 May 2025 00:20:44 +0000 Manifest next update: Tue 20 May 2025 00:20:44 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: YyVFLNoPXvE26RD+S6t3BEwbaD0qUPloVMiajWOrjGc=) 2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: OnZeTeaYB5z7AJuz8oi6jGvWEckKykDi+qBUmv+U0QM=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1011 (0x3f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: May 13 00:20:44 2025 GMT Not After : May 20 00:20:44 2025 GMT Subject: CN=6822905d-91ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:5a:3e:4f:32:cc:c7:78:46:4e:56:e4:5f: e3:dd:a2:87:7d:f4:95:e7:3b:18:9e:89:fd:8b:28: 67:60:3b:a8:ef:c0:74:a6:2d:69:55:a2:2c:02:c1: 3f:e3:d4:b0:59:a3:0f:86:a6:6b:45:41:4e:7e:7d: bb:87:dd:e1:73:12:33:39:67:20:54:bb:44:95:82: 66:aa:80:a4:86:ec:22:db:65:9a:ad:2b:b4:15:0b: e7:82:dd:3e:d8:e1:44:1b:c3:5f:4b:11:fb:4b:5e: 58:aa:10:66:43:b0:18:5c:da:e9:48:f1:bd:1b:5c: 7b:5b:9f:98:79:52:7a:db:05:c3:7d:3b:46:72:4f: fa:ab:2c:4a:44:f1:b3:03:f8:4d:b6:12:90:cc:55: 6a:34:74:f6:33:08:b9:28:12:2d:75:cd:61:7c:6a: 26:a8:ae:3d:bd:54:1d:8c:94:72:13:83:53:5c:16: 1f:3c:25:b5:61:be:b3:02:d5:2c:a9:f0:d3:69:ed: b4:38:b5:ad:5f:64:3c:3c:12:f5:3d:b9:09:41:f8: 44:ed:5e:10:be:c9:c7:b7:59:13:d6:f9:f5:55:d8: 98:bc:40:9c:55:9d:f1:a7:6c:06:09:ba:b6:e6:a9: 5a:7f:45:26:f2:58:b2:7c:e7:0b:53:72:93:c8:46: e0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F9:98:9C:EB:5D:68:F2:3E:D5:C8:DD:E8:6D:1B:34:4F:4B:A0:2B X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ed:46:4b:f2:2e:5a:46:a7:4a:65:7f:45:d1:10:9e:c2:58: 58:ca:17:4e:d6:3d:9b:c6:c3:cc:03:c8:e8:3b:e7:2a:c7:ee: e4:b5:97:18:48:5b:59:f5:f3:78:5e:51:65:00:65:f1:5e:04: 74:1f:d6:7b:38:6d:8d:f8:01:f6:fd:60:61:8d:ad:12:9d:1c: 89:1e:51:00:a1:01:6b:8c:14:a2:12:e9:04:f7:68:f6:91:90: 0a:4f:7d:56:54:66:0e:e2:0c:37:60:27:38:ba:e9:dd:2c:fb: 9a:32:3a:ef:aa:b0:41:65:18:0f:c5:46:b8:43:10:fe:f1:46: 08:60:4c:ec:f4:bd:a5:e0:e2:35:0f:e9:42:45:9b:b0:95:09: 02:e7:cb:37:06:ed:70:8b:9a:71:93:65:fc:4e:0c:1c:40:f9: 7d:42:3c:2a:c0:f3:cd:17:05:28:2e:9e:46:60:21:73:87:ed: 87:b5:0f:b8:8a:80:ba:9b:d4:c9:e3:d8:04:71:12:1b:61:63: 3a:08:ab:c6:0e:d1:7d:35:61:0a:87:60:0b:8b:f0:73:c8:f1: 91:54:3d:b0:a2:7e:ed:d7:d4:75:73:01:e2:9f:47:33:46:f7: 8b:f8:40:22:1e:70:6c:c3:11:0c:eb:27:bf:6f:a2:62:ef:d6: e3:02:28:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjUwNTEzMDAyMDQ0WhcNMjUwNTIwMDAyMDQ0WjAYMRYwFAYD VQQDEw02ODIyOTA1ZC05MWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7paPk8yzMd4Rk5W5F/j3aKHffSV5zsYnon9iyhnYDuo78B0pi1pVaIsAsE/ 49SwWaMPhqZrRUFOfn27h93hcxIzOWcgVLtElYJmqoCkhuwi22WarSu0FQvngt0+ 2OFEG8NfSxH7S15YqhBmQ7AYXNrpSPG9G1x7W5+YeVJ62wXDfTtGck/6qyxKRPGz A/hNthKQzFVqNHT2Mwi5KBItdc1hfGomqK49vVQdjJRyE4NTXBYfPCW1Yb6zAtUs qfDTae20OLWtX2Q8PBL1PbkJQfhE7V4QvsnHt1kT1vn1VdiYvECcVZ3xp2wGCbq2 5qlaf0Um8liyfOcLU3KTyEbgGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH75mJzr XWjyPtXI3ehtGzRPS6ArMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW7UZL8i5aRqdKZX9F0RCewlhYyhdO1j2bxsPMA8joO+cqx+7ktZcY SFtZ9fN4XlFlAGXxXgR0H9Z7OG2N+AH2/WBhja0SnRyJHlEAoQFrjBSiEukE92j2 kZAKT31WVGYO4gw3YCc4uundLPuaMjrvqrBBZRgPxUa4QxD+8UYIYEzs9L2l4OI1 D+lCRZuwlQkC58s3Bu1wi5pxk2X8TgwcQPl9QjwqwPPNFwUoLp5GYCFzh+2HtQ+4 ioC6m9TJ49gEcRIbYWM6CKvGDtF9NWEKh2ALi/BzyPGRVD2won7t19R1cwHin0cz RveL+EAiHnBswxEM6ye/b6Ji79bjAij7 -----END CERTIFICATE-----Generated at Wed May 14 04:46:37 2025 by rpki-client