$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft File: -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json) Hash identifier: BBMTYXoo9XVPAnMAKQK1m9FmrSRE4svwNsqyxgZyw5g= Subject key identifier: 43:3A:89:FB:D8:3D:25:9B:32:51:9B:B5:CF:F8:62:C2:1C:85:FA:6E Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 Certificate issuer: /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft Manifest number: 052C Signing time: Mon 12 May 2025 23:18:13 +0000 Manifest this update: Mon 12 May 2025 23:18:12 +0000 Manifest next update: Mon 19 May 2025 23:18:12 +0000 Files and hashes: 1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: gntd38wlT07ghDRceQP2fBSq1Ie0KFT1NuzLphMLmHA=) 2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: H5HzvqvaFcgyJmUGVWINJTj96jgcqceA7VesKwIUnvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9ECA, serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Validity Not Before: May 12 23:18:12 2025 GMT Not After : May 19 23:18:12 2025 GMT Subject: CN=682281b4-f741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:41:8b:f0:ef:07:6b:11:fe:db:5e:18:8b: e6:24:b5:bc:30:b3:61:a8:68:77:5c:9a:05:e3:d7: aa:33:87:ad:a5:c7:15:c7:65:f2:af:ad:6f:18:01: 23:df:6e:88:ba:f9:d5:89:e5:6d:2e:00:83:f9:de: c2:57:36:86:49:13:4f:4f:2a:e9:4d:62:67:92:67: e8:bc:14:7e:fa:a0:98:30:17:3c:ea:de:b0:e7:18: be:d4:6f:df:30:35:aa:59:7e:80:0f:3e:9a:9f:63: e1:94:62:0f:c1:da:a3:95:12:4a:42:96:0e:f6:27: 8b:b7:e4:86:96:2b:cc:33:60:06:7e:a8:34:ad:30: 51:e4:bd:40:e7:94:35:d0:87:86:01:d1:9c:1f:a9: f7:e7:4d:fe:f0:5b:b8:fb:2b:70:d8:a7:56:99:10: b0:b8:2a:83:68:97:e7:20:c4:c8:3e:ec:76:a5:b4: 91:20:6f:e0:61:d4:41:af:f0:0d:38:e6:22:ca:08: 86:cf:63:ed:db:e5:f8:02:a7:1e:37:4c:68:48:bd: b4:15:bf:fa:cd:3d:38:87:11:a0:cb:ec:08:d7:75: 45:20:59:25:dd:51:6c:2f:0a:8f:38:c9:5b:5f:91: fd:e9:bc:a2:47:48:42:b2:59:02:9a:35:90:bc:d4: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3A:89:FB:D8:3D:25:9B:32:51:9B:B5:CF:F8:62:C2:1C:85:FA:6E X509v3 Authority Key Identifier: keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ef:ce:5d:45:df:56:be:6c:5c:e5:e3:f3:28:e2:d8:99:e0: 6d:a2:e5:1e:b9:79:5c:2d:1e:d2:6f:c9:4d:38:d4:14:66:d9: a1:e3:f1:3e:1c:19:70:64:b4:e3:78:19:99:ae:db:56:b5:e7: d4:42:c3:da:d7:ba:d9:36:bd:0e:ed:db:c1:8a:ea:49:d8:02: c1:4f:b4:79:28:4b:db:d3:5c:8c:2b:6a:25:e7:2c:5b:8c:16: 7b:ff:05:16:ba:36:59:d6:e0:e9:d8:54:13:05:91:b0:8a:45: 55:a0:82:dd:d3:99:4f:fc:41:44:95:f6:c3:5d:2f:4d:f7:39: 7e:19:7e:0e:e4:54:c8:dc:5d:78:96:a0:4d:20:b3:94:d8:31: c0:c7:2c:11:98:e0:23:81:1e:d0:d1:13:67:6e:f7:8e:a2:b3: 9a:8c:51:82:e0:82:3e:0a:b1:5d:35:05:d6:d7:58:90:9e:ea: be:55:3f:ae:03:e0:47:9f:9f:08:ca:31:b2:e2:b4:d5:e0:2e: 9e:fc:04:b1:6d:d8:b9:50:4f:54:5f:16:62:96:a4:ed:98:33: 86:83:00:34:cf:7d:4e:cd:de:69:58:f9:64:13:10:18:09:e5: 69:dc:3e:ad:05:a9:11:ac:29:e2:27:5b:21:ad:dc:62:02:0e: 5f:03:54:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFQ0ExMTAvBgNVBAUTKEZCQTBGOEI0QzREMDVBQTk2QUFBRjU3QTM5NDQwMzcx QkM4RDA0MzcwHhcNMjUwNTEyMjMxODEyWhcNMjUwNTE5MjMxODEyWjAYMRYwFAYD VQQDEw02ODIyODFiNC1mNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfNBi/DvB2sR/tteGIvmJLW8MLNhqGh3XJoF49eqM4etpccVx2Xyr61vGAEj 326IuvnVieVtLgCD+d7CVzaGSRNPTyrpTWJnkmfovBR++qCYMBc86t6w5xi+1G/f MDWqWX6ADz6an2PhlGIPwdqjlRJKQpYO9ieLt+SGlivMM2AGfqg0rTBR5L1A55Q1 0IeGAdGcH6n3503+8Fu4+ytw2KdWmRCwuCqDaJfnIMTIPux2pbSRIG/gYdRBr/AN OOYiygiGz2Pt2+X4AqceN0xoSL20Fb/6zT04hxGgy+wI13VFIFkl3VFsLwqPOMlb X5H96byiR0hCslkCmjWQvNTH2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEM6ifvY PSWbMlGbtc/4YsIchfpuMB8GA1UdIwQYMBaAFPug+LTE0Fqpaqr1ejlEA3G8jQQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUVDQS9FMUVDRTBBMkY5 MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdxbHFxdlY2T1VRRGNieU5C RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02RDR0TVRRV3FscXF2VjZPVVFEY2J5TkJEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUVDQS9FMUVDRTBBMkY5MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdx bHFxdlY2T1VRRGNieU5CRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy785dRd9Wvmxc5ePzKOLYmeBtouUeuXlcLR7Sb8lNONQUZtmh4/E+ HBlwZLTjeBmZrttWtefUQsPa17rZNr0O7dvBiupJ2ALBT7R5KEvb01yMK2ol5yxb jBZ7/wUWujZZ1uDp2FQTBZGwikVVoILd05lP/EFElfbDXS9N9zl+GX4O5FTI3F14 lqBNILOU2DHAxywRmOAjgR7Q0RNnbveOorOajFGC4II+CrFdNQXW11iQnuq+VT+u A+BHn58IyjGy4rTV4C6e/ASxbdi5UE9UXxZilqTtmDOGgwA0z31Ozd5pWPlkExAY CeVp3D6tBakRrCniJ1shrdxiAg5fA1SY -----END CERTIFICATE-----Generated at Tue May 13 01:44:25 2025 by rpki-client