$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft File: wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json) Hash identifier: 9tj3Nco/O3wAIZLTfPur88I2uv9EPbJJ0gE2KSP0aKc= Subject key identifier: C7:57:20:74:30:E3:4B:7F:36:DC:B1:56:05:16:CA:B8:9D:23:F7:DB Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 Certificate issuer: /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft Manifest number: 85 Signing time: Mon 05 May 2025 05:25:22 +0000 Manifest this update: Mon 05 May 2025 05:25:21 +0000 Manifest next update: Mon 12 May 2025 05:25:21 +0000 Files and hashes: 1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: wSzNAZalqg4y/AmeBxXNMiuG4DVhfOf3W1pWOwG2NLI=) 2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 1n7jLRYTaVw5u2mwQ6NatrZ/xHlr3ZhbJEnbXC5Rplo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF, serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Validity Not Before: May 5 05:25:21 2025 GMT Not After : May 12 05:25:21 2025 GMT Subject: CN=68184bc2-c71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fd:8d:2f:e6:f6:63:e2:17:de:27:e7:85:2b: 24:57:5e:0b:39:a1:9b:77:5d:c9:51:ee:9c:b6:cb: ab:e6:91:9a:29:38:41:e7:3d:51:21:bf:7a:8e:51: 0f:6b:1e:4e:42:83:1f:1a:5d:14:8b:e9:49:47:68: c1:9b:2a:1f:15:d7:d5:5b:19:f6:89:6e:06:d5:c8: f6:f0:e0:57:4d:9e:dd:71:91:7c:de:4a:d0:14:6a: cc:be:f8:67:e3:c2:e6:dc:c3:1a:86:75:98:78:d8: 9c:f7:5c:30:01:35:02:2b:fc:96:c1:4c:49:b3:45: 48:f2:03:aa:a7:df:03:2e:92:df:58:b3:9a:e8:72: ed:53:d7:ba:8f:6b:31:07:de:f4:23:8f:0d:ea:81: 2f:27:4f:a3:61:7a:f5:e1:70:9a:ed:b3:f6:3a:39: 2c:13:7f:b8:f3:ce:66:18:b2:d7:7d:3f:8f:ed:39: b3:80:3d:21:45:50:5c:64:6f:ce:b3:b2:fa:1e:da: 8c:2f:5b:a9:65:0f:85:cb:64:14:35:5f:21:11:7a: 8c:dc:db:fc:c9:f2:ab:76:05:32:fb:50:a7:26:a6: 1d:4c:09:f6:83:1e:19:82:81:cf:7a:87:f6:dc:cc: f2:2d:6c:8d:a6:cc:92:e6:ad:7f:45:b7:dc:b1:33: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:57:20:74:30:E3:4B:7F:36:DC:B1:56:05:16:CA:B8:9D:23:F7:DB X509v3 Authority Key Identifier: keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:62:ef:69:4d:9d:1a:20:ac:d6:ab:1e:0b:63:da:92:ad:0e: f8:58:0b:03:53:9f:36:93:00:49:4c:35:bb:9a:06:7e:b9:2c: 7e:27:db:c3:1f:04:3a:d6:dd:05:67:4f:e6:4d:f6:74:30:c4: 28:cb:a7:8d:21:89:db:91:dd:4a:31:ee:3c:0c:62:d8:0c:74: 5f:c3:23:55:cb:f3:63:34:d6:4d:45:b3:a1:b9:da:6f:20:21: 59:b1:4e:33:37:48:c9:d9:90:05:0f:26:ee:c5:f3:1c:01:94: 8f:91:ed:38:c0:23:48:9d:5d:a7:9c:c4:43:ca:ac:ea:c1:8d: b2:59:4b:ec:c3:30:84:76:bf:ef:74:e3:db:50:f5:24:2a:8b: 27:25:0e:4a:08:34:3b:f3:79:36:dd:48:cc:b9:3c:5a:95:b2: 0b:c6:97:68:7e:29:cd:93:91:ff:ce:ee:43:5f:90:63:59:39: 0a:ed:d6:30:3f:27:fd:3e:0c:6a:57:4b:71:7a:dd:9c:c8:82: 67:01:72:61:79:54:63:75:e5:ec:e5:6f:72:74:f0:cb:d1:7b: f6:05:be:97:7b:bc:62:6f:87:53:a9:4e:5c:10:7f:7c:c1:75: b6:57:77:94:29:95:d8:28:5e:a2:ac:d8:d7:ca:cd:b3:12:fb: 98:fc:4c:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2RkYxMTAvBgNVBAUTKEMwREQyQzU1ODU3QTkyRkZFN0NEQ0JBMjk0OTk4M0Q0 OEE0MkI5RDgwHhcNMjUwNTA1MDUyNTIxWhcNMjUwNTEyMDUyNTIxWjAYMRYwFAYD VQQDEw02ODE4NGJjMi1jNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3f2NL+b2Y+IX3ifnhSskV14LOaGbd13JUe6ctsur5pGaKThB5z1RIb96jlEP ax5OQoMfGl0Ui+lJR2jBmyofFdfVWxn2iW4G1cj28OBXTZ7dcZF83krQFGrMvvhn 48Lm3MMahnWYeNic91wwATUCK/yWwUxJs0VI8gOqp98DLpLfWLOa6HLtU9e6j2sx B970I48N6oEvJ0+jYXr14XCa7bP2OjksE3+4885mGLLXfT+P7TmzgD0hRVBcZG/O s7L6HtqML1upZQ+Fy2QUNV8hEXqM3Nv8yfKrdgUy+1CnJqYdTAn2gx4ZgoHPeof2 3MzyLWyNpsyS5q1/RbfcsTMy5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdXIHQw 40t/NtyxVgUWyridI/fbMB8GA1UdIwQYMBaAFMDdLFWFepL/583LopSZg9SKQrnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZGRi85NDEwNEI0QTVG OEUxMUVGQjIzRTc5NDVDNEY5QUUwMi93TjBzVllWNmt2X256Y3VpbEptRDFJcEN1 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dOMHNWWVY2a3ZfbnpjdWlsSm1EMUlwQ3VkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZGRi85NDEwNEI0QTVGOEUxMUVGQjIzRTc5NDVDNEY5QUUwMi93TjBzVllWNmt2 X256Y3VpbEptRDFJcEN1ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeYu9pTZ0aIKzWqx4LY9qSrQ74WAsDU582kwBJTDW7mgZ+uSx+J9vD HwQ61t0FZ0/mTfZ0MMQoy6eNIYnbkd1KMe48DGLYDHRfwyNVy/NjNNZNRbOhudpv ICFZsU4zN0jJ2ZAFDybuxfMcAZSPke04wCNInV2nnMRDyqzqwY2yWUvswzCEdr/v dOPbUPUkKosnJQ5KCDQ783k23UjMuTxalbILxpdofinNk5H/zu5DX5BjWTkK7dYw Pyf9PgxqV0txet2cyIJnAXJheVRjdeXs5W9ydPDL0Xv2Bb6Xe7xib4dTqU5cEH98 wXW2V3eUKZXYKF6irNjXys2zEvuY/EyG -----END CERTIFICATE-----Generated at Tue May 6 15:06:37 2025 by rpki-client