$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json) Hash identifier: h8L4jwxtfqO7QGTOKyQE0iRegDwGgeIO8O78ClhCerg= Subject key identifier: 00:69:57:C3:00:DB:86:EE:9D:36:CF:27:39:22:4C:E3:5B:4F:E6:29 Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Certificate serial: 05CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft Manifest number: 05B6 Signing time: Thu 24 Apr 2025 22:57:37 +0000 Manifest this update: Thu 24 Apr 2025 22:57:36 +0000 Manifest next update: Thu 01 May 2025 22:57:36 +0000 Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: j4T7Jw0TDrtxEkQPRU9dcODo+2e+wCjo0SBaCqp7tXY=) 2: 387532CEE46D11EE8DBC2937C4F9AE02.roa (hash: ruwggHNoAUFm9Chx4UGeH2/Ms9/ktBjyMv9b4cEeu5E=) 3: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: Ofg177dT9U9TbFcWrgETTbW4rQYxs3ewgMOUkLe9Rug=) 4: F5BE1E346FFD11EE83D3D154C4F9AE02.roa (hash: zkvJXsg6ZbaTEwK193SUdCnoyTyMt79mUaZuDwnshuE=) 5: D4413B92007C11EE99460918C4F9AE02.roa (hash: bEBpIBlAOueDVvlaTSK/ST40bTuOmwGNh/38eLyftkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654 Validity Not Before: Apr 24 22:57:36 2025 GMT Not After : May 1 22:57:36 2025 GMT Subject: CN=680ac1e0-4287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:6d:30:42:60:ff:60:6a:c1:94:98:bc:b0: 74:54:2e:ed:55:f1:f5:54:ee:8d:40:eb:c3:1c:b2: 64:ab:d4:3c:05:a5:d9:e6:cc:6d:d4:3a:fe:f3:69: c9:d8:46:92:2c:18:0f:fc:05:0a:e0:25:58:80:84: fb:67:cf:e5:9c:08:be:25:6d:7e:cf:82:e8:64:4c: a3:ea:7b:3d:73:f5:d3:67:39:18:b1:c4:96:d2:e2: 42:0c:7c:dc:cd:3a:4c:29:b5:9b:cc:c0:d3:48:b8: 0c:71:ef:d2:c0:f9:46:a4:37:93:b9:be:e2:7c:03: a0:b5:a9:3f:26:40:5e:7a:de:e5:df:78:04:2c:d5: c0:78:5a:96:e8:7a:df:67:28:a7:fa:a5:3b:e2:8c: 4d:f1:53:e6:34:da:90:b4:96:89:80:e1:40:24:1f: 9a:53:ba:95:db:10:f5:45:8c:9c:21:6c:7f:7b:12: ef:53:5f:9b:ec:f8:3e:e6:bc:71:11:28:5f:cb:8e: dd:60:77:25:76:35:b4:32:e1:f0:2f:16:32:1e:a5: a2:87:d0:fc:eb:a7:b3:65:c1:4a:c0:cc:57:75:86: e9:ba:47:cf:84:5c:f0:7d:75:96:c1:86:67:68:36: 7a:92:ce:c8:56:11:28:39:f0:5f:42:77:62:a5:3a: 91:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:69:57:C3:00:DB:86:EE:9D:36:CF:27:39:22:4C:E3:5B:4F:E6:29 X509v3 Authority Key Identifier: keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:f7:c4:bd:e8:40:d4:20:73:cd:45:4f:9b:d8:7d:eb:a7:c9: a3:e1:5c:0d:8d:1a:1f:c3:86:7f:29:3c:3d:d0:9d:d6:44:bb: fb:e9:ca:5c:0f:af:56:2a:92:62:89:10:4b:9d:e7:35:c9:26: e9:fa:95:0e:8b:86:ee:a1:e9:6d:c7:b5:bf:60:46:40:3e:a9: 1f:2f:cf:0e:ce:84:f1:88:12:13:a6:c1:36:8b:c6:74:de:14: bc:50:10:9f:d0:e9:f1:58:8e:ec:30:db:25:43:68:b1:ea:f3: 2e:7b:84:c7:ed:e4:9c:b5:d1:bf:47:7d:89:5e:75:bf:b1:23: 2c:87:05:ed:35:e4:99:8f:1a:55:72:f5:5c:8f:89:c8:bc:45: 42:41:9b:40:4e:56:2e:04:81:98:28:a2:f9:91:c8:93:d1:8c: c7:ff:a2:9e:88:a6:b4:54:47:06:10:83:ca:73:6e:b8:be:a6: 47:54:92:8c:b5:00:88:74:05:e2:04:d5:6c:31:68:49:33:a1: ae:05:59:02:60:3b:de:20:1e:9b:33:c8:3c:59:93:e2:a7:34: 35:65:70:a1:56:8f:90:84:68:bb:76:24:26:0a:f0:c4:c1:c0: 8f:ae:f2:ba:f5:ed:04:19:c1:2a:55:d3:90:3d:4f:b8:12:14: e4:7d:ad:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyRUIxMTAvBgNVBAUTKDBCNkNERjNGQUNDNjgwQjc4NjkyNkRFMTM5RjFFMEY2 NzQ0NDA2NTQwHhcNMjUwNDI0MjI1NzM2WhcNMjUwNTAxMjI1NzM2WjAYMRYwFAYD VQQDEw02ODBhYzFlMC00Mjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eRtMEJg/2BqwZSYvLB0VC7tVfH1VO6NQOvDHLJkq9Q8BaXZ5sxt1Dr+82nJ 2EaSLBgP/AUK4CVYgIT7Z8/lnAi+JW1+z4LoZEyj6ns9c/XTZzkYscSW0uJCDHzc zTpMKbWbzMDTSLgMce/SwPlGpDeTub7ifAOgtak/JkBeet7l33gELNXAeFqW6Hrf Zyin+qU74oxN8VPmNNqQtJaJgOFAJB+aU7qV2xD1RYycIWx/exLvU1+b7Pg+5rxx EShfy47dYHcldjW0MuHwLxYyHqWih9D866ezZcFKwMxXdYbpukfPhFzwfXWWwYZn aDZ6ks7IVhEoOfBfQndipTqREQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABpV8MA 24bunTbPJzkiTONbT+YpMB8GA1UdIwQYMBaAFAts3z+sxoC3hpJt4Tnx4PZ0RAZU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTJFQi9GRDAwODFERUM1 NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dMZUdrbTNoT2ZIZzluUkVC bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyemZQNnpHZ0xlR2ttM2hPZkhnOW5SRUJsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTJFQi9GRDAwODFERUM1NjcxMUVCQUZFQTYwMkJDNEY5QUUwMi9DMnpmUDZ6R2dM ZUdrbTNoT2ZIZzluUkVCbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH98S96EDUIHPNRU+b2H3rp8mj4VwNjRofw4Z/KTw90J3WRLv76cpc D69WKpJiiRBLnec1ySbp+pUOi4buoeltx7W/YEZAPqkfL88OzoTxiBITpsE2i8Z0 3hS8UBCf0OnxWI7sMNslQ2ix6vMue4TH7eSctdG/R32JXnW/sSMshwXtNeSZjxpV cvVcj4nIvEVCQZtATlYuBIGYKKL5kciT0YzH/6KeiKa0VEcGEIPKc264vqZHVJKM tQCIdAXiBNVsMWhJM6GuBVkCYDveIB6bM8g8WZPipzQ1ZXChVo+QhGi7diQmCvDE wcCPrvK69e0EGcEqVdOQPU+4EhTkfa1H -----END CERTIFICATE-----Generated at Sat Apr 26 05:21:41 2025 by rpki-client