$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft File: MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json) Hash identifier: /SRVxyslvtiAhdizqbhRJd5Ema5ChsWaiKvOJfrPRS4= Subject key identifier: 3C:46:DE:B8:9C:D6:96:E0:80:8A:2B:DD:0C:92:22:34:88:EE:86:75 Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 Certificate issuer: /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Certificate serial: 1433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft Manifest number: 1429 Signing time: Thu 24 Apr 2025 16:56:22 +0000 Manifest this update: Thu 24 Apr 2025 16:56:22 +0000 Manifest next update: Thu 01 May 2025 16:56:22 +0000 Files and hashes: 1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: BTirfQ4LvYEM+VAhCh3L7oIQjjX+t+Nmg98Tw16T7FA=) 2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: W5cx07cNyMaDMA4R0/MWrV4hAi09Yk83hfS7ozdwiBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5171 (0x1433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024 Validity Not Before: Apr 24 16:56:22 2025 GMT Not After : May 1 16:56:22 2025 GMT Subject: CN=680a6d36-2d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:59:7a:1c:cc:d7:b9:14:ed:cc:9e:26:f9: 43:2e:d4:88:e9:0d:29:89:b7:c0:fa:88:36:1b:50: d6:f3:10:51:56:8f:ac:eb:3b:27:5b:62:3b:97:80: 1b:73:45:38:2f:07:19:f3:51:c7:ea:9e:e7:db:3f: 31:1d:6d:1b:05:eb:ee:e8:e2:d0:e4:bd:8b:36:3f: 3e:e6:27:51:dd:96:d7:ab:48:49:09:02:1c:ea:b7: 7e:8b:0a:99:88:99:ea:cf:ea:79:0e:2c:71:5d:67: b0:74:a0:da:dc:af:f4:25:e3:58:5c:c0:bf:54:b5: 7c:f0:bf:a2:27:03:84:20:ee:e5:07:72:ec:3b:52: 5f:29:e6:2a:96:c3:0d:19:b8:1a:21:23:45:8e:1d: 07:7d:0c:45:8c:85:87:53:e9:51:a1:71:d2:c2:50: 4d:8f:4b:cb:57:11:cb:68:af:51:12:39:75:f3:76: ac:9e:cc:47:73:d7:29:bc:92:fa:47:4d:31:59:84: 15:51:af:bb:25:9f:5e:31:7c:e9:1a:d1:99:6b:3c: 7c:7d:52:ca:f3:f3:93:01:97:d6:e9:1f:c6:28:46: 55:f4:46:4b:a9:1f:dc:58:f3:c6:c5:b4:03:b2:65: 85:35:13:30:50:a0:87:5f:ea:19:06:d9:d2:84:80: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:46:DE:B8:9C:D6:96:E0:80:8A:2B:DD:0C:92:22:34:88:EE:86:75 X509v3 Authority Key Identifier: keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5e:e3:49:72:e0:57:32:13:cf:3c:d8:61:27:e7:9f:ec:63: f7:7d:07:bc:ef:21:a5:00:3e:79:90:5f:29:85:59:b1:f9:f8: 84:53:05:a6:f7:d2:00:59:05:e7:a6:fd:b3:2d:50:11:03:50: bb:bc:dd:00:b9:b4:f9:4b:2a:de:02:85:44:24:07:a6:70:75: da:e2:e6:3e:1b:a3:23:e6:cc:c7:ed:c0:23:39:da:cb:2a:64: e6:bc:af:eb:9c:67:e6:a5:f4:23:fd:3b:a0:70:65:7c:c3:54: 2e:4f:39:f2:b7:22:ac:ad:a9:13:1a:30:1a:50:fb:bf:f0:ff: 7b:b5:07:64:03:6e:9c:98:24:b2:71:8c:75:21:70:2b:a2:17: 82:22:9d:8b:e0:6b:2a:de:8d:15:d4:6a:56:07:62:0b:b5:c3: b1:c2:14:5b:0d:72:8f:af:10:96:14:5f:7d:57:56:49:f9:5f: 7a:d4:7b:29:07:ae:1a:c2:72:47:62:b7:0b:f9:05:f4:18:b7: ba:91:b6:09:fa:15:6c:1f:dd:d8:0e:64:e1:4c:36:77:ba:69: 3d:cf:89:bc:0d:c4:44:71:4a:ca:e9:73:c7:5e:f7:7a:e6:9a: 13:e9:fb:2c:2e:4b:5d:40:40:d9:5c:f5:39:f0:bf:1d:27:62: 6d:52:da:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz QTUzOTcwMjQwHhcNMjUwNDI0MTY1NjIyWhcNMjUwNTAxMTY1NjIyWjAYMRYwFAYD VQQDEw02ODBhNmQzNi0yZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs5ZehzM17kU7cyeJvlDLtSI6Q0pibfA+og2G1DW8xBRVo+s6zsnW2I7l4Ab c0U4LwcZ81HH6p7n2z8xHW0bBevu6OLQ5L2LNj8+5idR3ZbXq0hJCQIc6rd+iwqZ iJnqz+p5DixxXWewdKDa3K/0JeNYXMC/VLV88L+iJwOEIO7lB3LsO1JfKeYqlsMN GbgaISNFjh0HfQxFjIWHU+lRoXHSwlBNj0vLVxHLaK9REjl183asnsxHc9cpvJL6 R00xWYQVUa+7JZ9eMXzpGtGZazx8fVLK8/OTAZfW6R/GKEZV9EZLqR/cWPPGxbQD smWFNRMwUKCHX+oZBtnShIAURQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxG3ric 1pbggIor3QySIjSI7oZ1MB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0 RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw czg5NVBRRXZlTjA2VTVjQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtXuNJcuBXMhPPPNhhJ+ef7GP3fQe87yGlAD55kF8phVmx+fiEUwWm 99IAWQXnpv2zLVARA1C7vN0AubT5SyreAoVEJAemcHXa4uY+G6Mj5szH7cAjOdrL KmTmvK/rnGfmpfQj/TugcGV8w1QuTznytyKsrakTGjAaUPu/8P97tQdkA26cmCSy cYx1IXAroheCIp2L4Gsq3o0V1GpWB2ILtcOxwhRbDXKPrxCWFF99V1ZJ+V961Hsp B64awnJHYrcL+QX0GLe6kbYJ+hVsH93YDmThTDZ3umk9z4m8DcREcUrK6XPHXvd6 5poT6fssLktdQEDZXPU58L8dJ2JtUtpg -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:49 2025 by rpki-client