$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: G0vzpAPZ636QWNu7dv4oSa30TosqF5YlPdfnQ6Rgrzc= Subject key identifier: 06:E3:F5:D6:43:23:99:94:9C:43:E3:A1:C3:1F:C9:FA:BA:DA:59:33 Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 016A Signing time: Tue 13 May 2025 03:06:25 +0000 Manifest this update: Tue 13 May 2025 03:06:25 +0000 Manifest next update: Tue 20 May 2025 03:06:25 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: gxVfElD5XeDfPnkRjOyrQOG2AwpEGhJN1SwBylvQN3U=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: HMZ69Vk7ZS0Jv78BueT5h2a9dKdT1kZJMuqKYnjLHLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: May 13 03:06:25 2025 GMT Not After : May 20 03:06:25 2025 GMT Subject: CN=6822b731-c419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:8f:e7:9f:bb:6a:fb:51:ae:42:2c:01:1f: 72:d9:78:82:65:4c:0b:01:3a:23:85:f7:14:81:d8: 58:89:f2:dd:10:27:70:90:ba:78:78:ae:2e:e6:fa: 4d:06:7e:8e:f4:8c:94:bb:6d:85:35:02:f4:8a:48: cd:97:5b:b4:75:ed:dc:28:9a:e3:04:dd:3f:a3:9a: 7a:72:10:5f:d1:a5:be:93:29:d6:df:28:db:c0:f3: 4b:8f:9e:44:ad:14:c0:0e:e8:51:81:ac:8a:03:9c: d8:b6:91:c5:a2:cf:f3:db:41:0b:63:68:07:ed:88: 7f:d3:23:67:46:b6:62:2c:63:28:9f:82:17:96:28: 92:ea:29:29:2b:7f:84:40:8b:03:04:8d:ad:a4:8a: 25:47:2c:a2:2f:e6:82:28:db:e6:b1:8e:28:28:9d: 9b:87:ee:db:06:a6:d9:32:f6:08:39:4f:18:ae:41: e9:54:43:a9:2f:08:5e:6b:53:8b:10:b5:2c:75:4c: 2d:21:09:f4:95:d1:8b:51:e3:00:6c:6f:4a:0a:40: 78:ee:78:42:56:b5:c1:4e:6d:42:98:93:ea:e5:36: 5a:16:30:bb:ed:6f:52:f1:68:2c:b6:1a:d3:75:88: 4c:5e:31:0c:e4:94:88:d4:4d:18:5f:e6:58:aa:57: 42:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E3:F5:D6:43:23:99:94:9C:43:E3:A1:C3:1F:C9:FA:BA:DA:59:33 X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:66:11:cf:8c:a8:df:db:b1:7a:14:b2:c6:86:31:a1:59:3a: d0:17:0b:1f:0d:a7:6a:dd:2d:dc:20:80:db:c0:a0:e1:6c:0c: 3f:59:18:21:1e:37:a2:54:f0:cd:08:3c:a2:8f:3a:ee:a1:09: c6:0e:05:0b:b0:a1:18:b0:eb:8d:2f:e1:04:7b:fd:e2:6e:d6: 54:7a:e7:92:10:e0:4d:cf:0b:53:be:c0:e5:a8:97:24:2e:2c: 60:f1:2d:32:4d:ba:4e:59:52:92:5f:07:42:b0:10:ab:c6:1a: 6d:22:88:ed:54:8a:a4:59:81:28:f8:2c:11:72:bc:26:cd:bd: 4c:14:71:b3:b1:95:0b:61:a6:16:05:02:73:4e:cc:ff:58:c8: c3:ed:3c:c7:cb:51:9f:6a:7d:87:36:5f:e7:67:85:1d:c6:6b: 24:71:02:d4:df:e2:ce:c7:4b:a4:fa:7e:8f:08:5a:e2:d2:25: ec:29:90:26:06:7c:a7:70:0d:ea:e5:26:2d:8a:b7:d5:01:5d: 1f:55:ff:0e:81:9f:03:8e:47:ea:1b:c6:b9:63:19:51:13:f3: ba:25:3b:29:48:68:1c:cb:d3:1d:48:42:ea:71:dd:e2:11:02: 2c:d7:88:ec:e0:93:8f:80:32:69:d4:58:dc:7e:c1:ca:cf:a5: 3e:ff:7e:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjUwNTEzMDMwNjI1WhcNMjUwNTIwMDMwNjI1WjAYMRYwFAYD VQQDEw02ODIyYjczMS1jNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFeP55+7avtRrkIsAR9y2XiCZUwLATojhfcUgdhYifLdECdwkLp4eK4u5vpN Bn6O9IyUu22FNQL0ikjNl1u0de3cKJrjBN0/o5p6chBf0aW+kynW3yjbwPNLj55E rRTADuhRgayKA5zYtpHFos/z20ELY2gH7Yh/0yNnRrZiLGMon4IXliiS6ikpK3+E QIsDBI2tpIolRyyiL+aCKNvmsY4oKJ2bh+7bBqbZMvYIOU8YrkHpVEOpLwhea1OL ELUsdUwtIQn0ldGLUeMAbG9KCkB47nhCVrXBTm1CmJPq5TZaFjC77W9S8WgsthrT dYhMXjEM5JSI1E0YX+ZYqldC8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbj9dZD I5mUnEPjocMfyfq62lkzMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArZhHPjKjf27F6FLLGhjGhWTrQFwsfDadq3S3cIIDbwKDhbAw/WRgh HjeiVPDNCDyijzruoQnGDgULsKEYsOuNL+EEe/3ibtZUeueSEOBNzwtTvsDlqJck Lixg8S0yTbpOWVKSXwdCsBCrxhptIojtVIqkWYEo+CwRcrwmzb1MFHGzsZULYaYW BQJzTsz/WMjD7TzHy1Gfan2HNl/nZ4UdxmskcQLU3+LOx0uk+n6PCFri0iXsKZAm BnyncA3q5SYtirfVAV0fVf8OgZ8DjkfqG8a5YxlRE/O6JTspSGgcy9MdSELqcd3i EQIs14js4JOPgDJp1FjcfsHKz6U+/36E -----END CERTIFICATE-----Generated at Wed May 14 07:14:51 2025 by rpki-client