$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: GX39NVJWRFbDOKvxVUR0z8TW4IAgjWjNRrZnhXdGH2w= Subject key identifier: 20:63:CE:60:05:9A:2F:91:36:F6:91:08:C1:16:7F:81:21:AC:C1:87 Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 3495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 3488 Signing time: Sun 04 May 2025 14:43:09 +0000 Manifest this update: Sun 04 May 2025 14:43:08 +0000 Manifest next update: Sun 11 May 2025 14:43:08 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: 4YY0WawWHFV/sBLpttbKw12MEkGPDLPL54xMGIBsUUM=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: joFpQbUhhuICq9lMSQUwGZiftmapGwfxicrZ76+a/Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: May 4 14:43:08 2025 GMT Not After : May 11 14:43:08 2025 GMT Subject: CN=68177cfc-cd9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:39:8e:59:75:6a:c8:4c:b5:b5:06:3b:c1: 43:5d:7c:39:9c:ed:da:4b:47:55:59:63:5c:7f:23: a1:73:db:f8:5a:1b:e5:fe:5b:41:64:50:4d:e7:a8: 32:cd:4f:82:3c:c6:4c:7b:2b:8c:78:e3:2f:3b:59: 6a:a5:4a:30:34:ec:d4:76:b3:6e:61:3f:ab:9b:e2: f7:c1:69:85:52:91:2d:a2:d7:6e:3f:57:c6:59:df: 48:d4:87:38:04:75:ee:c8:72:59:17:66:79:08:d0: 7c:ac:65:91:40:27:0d:6b:d3:1d:9e:c5:7d:5d:83: 21:c5:49:47:27:01:b5:c0:c3:77:87:79:5f:10:1f: 0c:60:2b:bc:88:d8:4a:27:b4:c3:ce:8e:fe:c2:10: f7:48:1b:ad:dc:a8:7c:4e:c9:52:f2:5c:33:44:1d: aa:63:63:44:35:fc:9d:e6:ba:e3:f4:27:ec:df:5a: 8b:2b:94:76:e6:3d:8e:cb:22:1a:78:b0:12:f5:9f: 2e:34:cc:81:c3:cc:c5:f4:1c:6d:0c:bc:29:52:40: 11:0a:19:74:8c:f4:fd:af:89:2b:2a:9b:97:8f:87: 7b:1d:39:e9:60:8a:14:de:21:96:dc:e1:bf:4d:38: 79:f2:ed:72:14:3f:c5:70:7b:77:0a:88:f6:d4:d7: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:63:CE:60:05:9A:2F:91:36:F6:91:08:C1:16:7F:81:21:AC:C1:87 X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:7e:66:99:86:27:fb:de:46:5f:e9:ec:93:d2:67:fc:20:e8: 9f:7a:1d:7c:e7:5e:46:05:b0:64:2e:ee:cc:b3:22:22:d3:f9: a4:e8:24:4d:b5:1d:03:6c:89:17:5c:34:85:c8:7e:24:d2:14: 51:b0:28:55:b7:b4:b7:60:76:ab:ae:af:78:ff:e9:a2:0e:08: 28:8c:39:c2:5e:e8:c6:e8:6b:93:6c:6a:0d:d4:89:5c:e5:92: df:3d:dc:02:b4:7e:1c:da:2c:93:b2:cb:7c:c9:e7:55:1a:9b: 79:47:3d:60:7d:39:77:3b:c4:0a:93:c9:b9:8e:cc:30:05:0b: e1:29:54:d4:fb:b8:45:9d:4e:42:2e:70:c8:cb:af:6d:47:81: b8:35:86:aa:fe:34:af:46:a2:cd:1c:35:5e:5f:65:27:26:02: 5f:32:6a:74:5e:ed:d7:5f:8a:5a:a2:fd:d5:34:8d:ec:76:07: 3d:52:50:8d:4c:2b:5f:a5:34:d3:45:cd:76:c1:0e:95:40:a5: 52:cd:d2:7a:f5:c2:2e:65:66:8a:17:32:8c:21:89:23:1d:98: 3a:80:d9:d5:6e:0f:a0:97:eb:76:2c:f3:7d:8b:53:e6:7b:d6: 5c:fb:8f:46:b1:c0:3c:c1:55:87:e1:21:18:ee:74:46:bd:cb: 34:5c:6f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjUwNTA0MTQ0MzA4WhcNMjUwNTExMTQ0MzA4WjAYMRYwFAYD VQQDEw02ODE3N2NmYy1jZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jc5jll1ashMtbUGO8FDXXw5nO3aS0dVWWNcfyOhc9v4Whvl/ltBZFBN56gy zU+CPMZMeyuMeOMvO1lqpUowNOzUdrNuYT+rm+L3wWmFUpEtotduP1fGWd9I1Ic4 BHXuyHJZF2Z5CNB8rGWRQCcNa9MdnsV9XYMhxUlHJwG1wMN3h3lfEB8MYCu8iNhK J7TDzo7+whD3SBut3Kh8TslS8lwzRB2qY2NENfyd5rrj9Cfs31qLK5R25j2OyyIa eLAS9Z8uNMyBw8zF9BxtDLwpUkARChl0jPT9r4krKpuXj4d7HTnpYIoU3iGW3OG/ TTh58u1yFD/FcHt3Coj21NfQJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBjzmAF mi+RNvaRCMEWf4EhrMGHMB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRfmaZhif73kZf6eyT0mf8IOifeh18515GBbBkLu7MsyIi0/mk6CRN tR0DbIkXXDSFyH4k0hRRsChVt7S3YHarrq94/+miDggojDnCXujG6GuTbGoN1Ilc 5ZLfPdwCtH4c2iyTsst8yedVGpt5Rz1gfTl3O8QKk8m5jswwBQvhKVTU+7hFnU5C LnDIy69tR4G4NYaq/jSvRqLNHDVeX2UnJgJfMmp0Xu3XX4paov3VNI3sdgc9UlCN TCtfpTTTRc12wQ6VQKVSzdJ69cIuZWaKFzKMIYkjHZg6gNnVbg+gl+t2LPN9i1Pm e9Zc+49GscA8wVWH4SEY7nRGvcs0XG8l -----END CERTIFICATE-----Generated at Mon May 5 16:08:16 2025 by rpki-client