$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json) Hash identifier: 10wyql4DahsP/XXOrsiZYNeGOJOMWBLI5WZ4HE+2qQA= Subject key identifier: 30:60:F5:FB:9C:5E:81:87:57:A2:DF:30:92:D2:22:9A:86:3B:2E:03 Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft Manifest number: C2 Signing time: Fri 25 Apr 2025 04:51:32 +0000 Manifest this update: Fri 25 Apr 2025 04:51:32 +0000 Manifest next update: Fri 02 May 2025 04:51:31 +0000 Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: mqEhS4z9+oDqwa8trkX48HQvKnXhYw+RGJ5aXGQl93s=) 2: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: 8W+xFxZgciOpBXooHDbzzZTklV4cRzIRaTe2EGYo2G4=) 3: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: SiXu7T2X5Ai2mQId/ZQnSVGAYrsHoSW8pzAzpHcsuBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5849, serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Validity Not Before: Apr 25 04:51:32 2025 GMT Not After : May 2 04:51:31 2025 GMT Subject: CN=680b14d4-686e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e6:90:84:e9:a5:13:a1:e1:20:55:4e:00:3c: 3a:02:51:67:b0:d0:4e:b5:59:06:48:f9:1e:6c:c2: 4e:a2:60:4a:ce:6c:33:8b:57:87:d0:ce:7a:7f:d6: 93:ba:80:ca:d0:d4:7e:a4:c0:c3:d5:7a:f7:e2:60: dd:77:82:14:94:8a:7a:1a:c6:57:6e:08:e4:c8:7d: e2:c8:db:be:87:a6:30:97:f9:8e:24:5b:f5:cf:1d: 03:96:98:5f:80:8b:1d:0d:ab:19:67:1b:e9:17:7f: 43:d9:cd:a1:80:80:08:78:38:c2:15:b8:f4:e7:14: d3:d2:cd:3a:5a:5b:1f:94:00:f8:db:d7:14:04:e5: a4:7e:77:a7:26:8a:f4:08:81:07:86:03:a5:fb:27: ea:ba:d1:7b:a0:59:95:44:1c:96:26:c3:de:48:f2: a0:de:0b:7a:89:89:1d:b0:f7:20:20:dd:64:39:dc: 1c:bf:3b:a8:47:87:04:da:db:e7:d7:d2:f4:f3:ef: cb:7d:52:07:bc:37:97:16:fe:66:74:f0:0f:b6:cf: d9:cf:3a:21:f5:84:58:d7:78:58:1d:9e:1c:99:fb: 12:7b:1c:03:b3:21:8b:8d:e0:00:a1:15:46:69:12: 24:6b:94:f0:ba:14:32:ae:2f:de:c9:06:0e:32:e1: 58:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:60:F5:FB:9C:5E:81:87:57:A2:DF:30:92:D2:22:9A:86:3B:2E:03 X509v3 Authority Key Identifier: keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:12:e4:2a:15:b2:d0:82:30:82:10:4e:db:3a:c4:35:25:b4: fb:99:fb:f4:4d:51:8c:1c:bb:75:1c:b2:56:53:09:96:95:b6: 22:7c:ff:d0:51:1b:cd:cc:c5:85:dd:73:a8:38:f6:15:06:4a: b6:9b:d4:c6:3d:d5:b6:79:ca:d1:c3:13:db:f7:5b:9d:92:95: c0:82:e6:d8:6b:c7:25:61:ca:6f:44:dc:08:68:21:9c:cc:24: bf:f4:15:08:0a:27:6a:32:39:74:2a:83:dc:78:2b:60:f4:2d: 4a:f4:5b:62:e0:54:a3:1f:ac:07:3f:67:fc:c2:8f:a3:68:bf: 06:f6:ec:ba:3b:a6:33:e7:13:96:e2:01:c0:44:e8:1c:45:65: 4c:2c:ce:9f:30:01:9c:54:a4:04:5d:6b:62:d4:95:a7:3a:bc: 08:be:1b:7c:f9:32:12:8c:02:37:b7:f3:05:97:76:ef:9c:27: 7c:53:a4:9a:43:d1:88:68:17:3e:db:21:9e:51:41:fe:72:de: 73:02:1a:b7:b3:41:1f:76:ee:4f:4f:51:92:ae:a7:70:9b:fc: 5c:5d:6b:e1:37:77:5d:63:a4:1e:b1:bb:10:fb:44:39:33:5a: aa:db:61:a5:f1:a7:1b:06:89:d3:a9:8f:dd:2c:34:26:0c:7b: 8c:fb:fc:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4NDkxMTAvBgNVBAUTKDUzNkJGOEREQ0U4MDI2NjczNzhGNDdCRDQ5NTRBOTBC N0M3MDA5QzEwHhcNMjUwNDI1MDQ1MTMyWhcNMjUwNTAyMDQ1MTMxWjAYMRYwFAYD VQQDEw02ODBiMTRkNC02ODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eaQhOmlE6HhIFVOADw6AlFnsNBOtVkGSPkebMJOomBKzmwzi1eH0M56f9aT uoDK0NR+pMDD1Xr34mDdd4IUlIp6GsZXbgjkyH3iyNu+h6Ywl/mOJFv1zx0Dlphf gIsdDasZZxvpF39D2c2hgIAIeDjCFbj05xTT0s06WlsflAD429cUBOWkfnenJor0 CIEHhgOl+yfqutF7oFmVRByWJsPeSPKg3gt6iYkdsPcgIN1kOdwcvzuoR4cE2tvn 19L08+/LfVIHvDeXFv5mdPAPts/Zzzoh9YRY13hYHZ4cmfsSexwDsyGLjeAAoRVG aRIka5TwuhQyri/eyQYOMuFY0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBg9fuc XoGHV6LfMJLSIpqGOy4DMB8GA1UdIwQYMBaAFFNr+N3OgCZnN49HvUlUqQt8cAnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTg0OS9EQkFEMzg0RUY3 OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUptYzNqMGU5U1ZTcEMzeHdD Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0NjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTg0OS9EQkFEMzg0RUY3OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUpt YzNqMGU5U1ZTcEMzeHdDY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxEuQqFbLQgjCCEE7bOsQ1JbT7mfv0TVGMHLt1HLJWUwmWlbYifP/Q URvNzMWF3XOoOPYVBkq2m9TGPdW2ecrRwxPb91udkpXAgubYa8clYcpvRNwIaCGc zCS/9BUICidqMjl0KoPceCtg9C1K9Fti4FSjH6wHP2f8wo+jaL8G9uy6O6Yz5xOW 4gHAROgcRWVMLM6fMAGcVKQEXWti1JWnOrwIvht8+TISjAI3t/MFl3bvnCd8U6Sa Q9GIaBc+2yGeUUH+ct5zAhq3s0Efdu5PT1GSrqdwm/xcXWvhN3ddY6QesbsQ+0Q5 M1qq22Gl8acbBonTqY/dLDQmDHuM+/w9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:55 2025 by rpki-client