$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json) Hash identifier: ZeiVhvDsG+UF6vPqeHdNLOMmIQxIxRMeyIgZqpU5fhE= Subject key identifier: 53:E5:EC:2D:77:AC:29:10:0D:46:C1:D7:13:2D:5D:97:AE:69:10:43 Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0C45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft Manifest number: 0C2D Signing time: Mon 12 May 2025 18:28:38 +0000 Manifest this update: Mon 12 May 2025 18:28:37 +0000 Manifest next update: Mon 19 May 2025 18:28:37 +0000 Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: mHoogDQaNWqw/lQrtffghFX4/j+9hDid5hPpgBXG0AM=) 2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: Tra2m9br+70DR7E4OQkNdt1e6QXjZmJJfqTvZfV9wL0=) 3: 3762D3A44BA311EEA33D4B34C4F9AE02.roa (hash: 7jGf0oL08kyRPkfbbjOTxtmf2H3WTL9jhNs8s/Yud9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Validity Not Before: May 12 18:28:37 2025 GMT Not After : May 19 18:28:37 2025 GMT Subject: CN=68223dd6-2cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:26:0b:ee:b7:61:16:87:6a:b7:30:ff:7f: 1b:99:a9:40:e3:99:44:61:08:a4:4d:c4:fc:be:90: e7:e1:d3:22:68:d0:95:22:36:f8:ef:46:7d:5b:74: 96:e2:b1:22:18:d1:72:80:91:61:86:02:e8:4f:f6: 41:0f:eb:fc:62:97:d8:19:d2:88:53:0a:fd:94:b2: d7:09:9b:5d:a5:ac:11:cd:ec:34:e0:b8:23:82:fe: 27:2e:25:05:95:76:c3:47:8e:c0:e6:f5:3b:83:bb: 64:1c:8d:48:61:d4:e2:60:8c:5e:8f:cb:c5:0f:21: 5d:8f:c0:02:9b:f9:d4:8f:1c:03:6a:c4:16:f0:b2: 60:d4:c8:59:bb:24:f1:a5:c7:95:e1:f4:c4:01:21: ab:e2:b1:79:81:21:cc:14:49:7b:bd:a8:cc:e1:05: 0c:80:a0:fe:0f:0b:f0:e3:81:ec:93:c2:97:cc:a2: 5b:23:91:71:fc:4e:42:13:da:2d:20:c9:83:f7:94: 08:a3:63:2b:0a:3e:a7:50:eb:b4:56:5d:44:57:e8: 50:ca:ad:b8:3f:5f:b4:07:cd:37:45:fe:b1:56:7f: ed:5d:1f:d0:49:50:ee:0f:57:3e:5c:5e:ad:11:9c: 50:e6:85:d3:7b:2d:9f:70:33:ae:ef:0d:c9:e5:ad: 0a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E5:EC:2D:77:AC:29:10:0D:46:C1:D7:13:2D:5D:97:AE:69:10:43 X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6d:03:eb:51:44:7f:fc:34:e9:3f:4c:db:44:ae:b8:f2:1d: f8:6b:1f:3a:b5:f8:1d:ea:96:87:1f:11:73:c3:94:5f:93:e1: 5e:f7:d5:0c:d1:88:c5:09:2f:50:4b:eb:fb:77:a2:b6:50:10: 8d:2f:87:ae:d7:bf:2f:f0:c3:ec:11:61:6f:09:5a:ac:1d:ec: a5:c3:8f:e9:ce:cc:ce:c7:81:03:9e:eb:3f:cd:8e:0a:f2:5a: 55:dd:ae:10:9f:dc:e5:77:3b:46:49:34:9d:3e:26:c2:4d:da: 2d:11:ff:b5:70:ea:e1:99:9b:20:bf:dc:a4:dc:73:05:c7:d3: 0c:d5:18:ad:bf:cb:77:eb:05:95:0d:6a:f2:42:2b:62:74:5c: 04:88:67:b2:fc:07:36:e9:e3:f2:9e:e7:fb:14:39:b6:76:0c: 02:69:9e:5d:7f:91:e6:b0:aa:a8:61:89:49:32:db:39:87:5f: a9:b9:66:93:f7:e3:45:bc:6b:d5:00:db:f6:28:ca:c5:3e:65: 05:31:c0:5d:97:42:f0:b3:c2:92:ef:90:39:2e:dd:20:5e:6e: 5b:b9:59:98:42:6c:47:74:37:80:d0:1d:35:88:14:47:17:a8: c9:aa:fc:1b:66:67:a4:2b:15:b5:1c:6e:a4:12:93:a2:05:2f: 98:7c:6d:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjUwNTEyMTgyODM3WhcNMjUwNTE5MTgyODM3WjAYMRYwFAYD VQQDEw02ODIyM2RkNi0yY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyAmC+63YRaHarcw/38bmalA45lEYQikTcT8vpDn4dMiaNCVIjb470Z9W3SW 4rEiGNFygJFhhgLoT/ZBD+v8YpfYGdKIUwr9lLLXCZtdpawRzew04Lgjgv4nLiUF lXbDR47A5vU7g7tkHI1IYdTiYIxej8vFDyFdj8ACm/nUjxwDasQW8LJg1MhZuyTx pceV4fTEASGr4rF5gSHMFEl7vajM4QUMgKD+Dwvw44Hsk8KXzKJbI5Fx/E5CE9ot IMmD95QIo2MrCj6nUOu0Vl1EV+hQyq24P1+0B803Rf6xVn/tXR/QSVDuD1c+XF6t EZxQ5oXTey2fcDOu7w3J5a0KoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPl7C13 rCkQDUbB1xMtXZeuaRBDMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbbQPrUUR//DTpP0zbRK648h34ax86tfgd6paHHxFzw5Rfk+Fe99UM 0YjFCS9QS+v7d6K2UBCNL4eu178v8MPsEWFvCVqsHeylw4/pzszOx4EDnus/zY4K 8lpV3a4Qn9zldztGSTSdPibCTdotEf+1cOrhmZsgv9yk3HMFx9MM1Ritv8t36wWV DWryQitidFwEiGey/Ac26ePynuf7FDm2dgwCaZ5df5HmsKqoYYlJMts5h1+puWaT 9+NFvGvVANv2KMrFPmUFMcBdl0Lws8KS75A5Lt0gXm5buVmYQmxHdDeA0B01iBRH F6jJqvwbZmekKxW1HG6kEpOiBS+YfG0Y -----END CERTIFICATE-----Generated at Wed May 14 01:37:43 2025 by rpki-client