$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: YgNms6BV/FqMrIEVGgUuTttugeXgzqEv29Es7EMCi1M= Subject key identifier: 25:34:00:7C:A6:1B:A3:C7:BB:95:CA:C4:E2:CE:B0:D2:54:9D:45:0C Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0CA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0C92 Signing time: Sun 04 May 2025 18:06:08 +0000 Manifest this update: Sun 04 May 2025 18:06:07 +0000 Manifest next update: Sun 11 May 2025 18:06:07 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: o3Mo/NfCTjXAVu9uFgCjST7PTAFyrA2FX3UxH91L54U=) 2: 7A89B302E7E511EFA8BD237AC4F9AE02.roa (hash: UCWjaCqEsXVhT35xitXZIRxEvFr2BDAPH30xrreLvIA=) 3: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (hash: 0yGPdzFunQ5T02jKLxMdi+Rjr7DQq/Vj6dobHVz6yro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: May 4 18:06:07 2025 GMT Not After : May 11 18:06:07 2025 GMT Subject: CN=6817ac90-eb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:d3:cc:28:15:d0:d6:3c:f8:5d:c3:ae:f5: 00:02:b1:a9:79:de:53:87:a2:db:ec:83:09:2c:44: 6a:80:5b:4b:53:71:26:9a:ab:35:bb:8c:2c:63:10: 6b:ba:c8:02:c7:50:21:a2:64:7f:48:7c:29:e1:e6: 86:ec:ef:aa:48:74:61:71:ab:a3:34:6a:b1:23:35: f6:ce:53:e5:a9:99:d8:2b:0b:22:e2:61:30:c0:94: 79:c9:84:f1:8c:32:4d:b9:e0:44:c0:fd:59:31:8c: f4:ab:68:b1:ae:cb:76:c2:ff:8c:93:a1:42:32:b3: 25:33:82:89:96:b5:2c:92:b6:46:00:48:19:0b:04: 96:d2:a5:73:f3:96:ad:59:99:7c:d4:85:45:d5:03: 68:dc:a2:59:99:ad:50:bd:89:2f:63:4f:fa:41:d9: 1a:58:97:58:70:ca:98:f8:62:63:8c:c8:ef:cd:4a: b4:73:62:9d:e3:6e:3f:76:bb:58:5d:cd:24:2e:8b: 26:7d:69:e4:84:bd:05:8d:10:76:2b:5d:ae:61:86: f4:82:e4:1d:a2:29:84:5a:2b:92:7a:32:4d:dc:3d: 28:51:7a:8c:0f:4e:67:33:ee:2c:a9:d1:7d:93:bb: 10:74:e5:0f:9f:53:54:79:63:c8:92:5a:98:a6:2d: 3a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:34:00:7C:A6:1B:A3:C7:BB:95:CA:C4:E2:CE:B0:D2:54:9D:45:0C X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:50:ea:ec:b0:b9:4b:53:59:80:3f:9d:e6:3c:2b:21:d2:42: 31:7f:42:2c:de:d1:32:c5:01:d3:a8:3b:51:b4:ca:46:e5:0e: 77:dd:f3:a4:bf:5f:6c:58:41:6b:76:16:49:a0:24:a3:12:c9: b4:db:c2:27:dc:f7:37:6b:49:9e:ed:9f:f8:01:28:d3:93:a9: e8:a3:e0:f3:c8:dd:6f:18:4f:b7:2a:f7:7c:91:4b:e4:e1:15: 80:a2:9d:77:11:be:12:9a:3f:f2:40:3b:21:0c:50:ce:7d:95: 46:e9:b6:be:23:b8:68:25:74:81:da:5a:63:80:4b:7a:25:3d: 6d:bd:0b:d2:76:17:59:0e:fa:cc:45:58:d5:4d:4d:d8:33:e6: 15:d9:c9:70:da:ea:04:8e:81:c5:00:f1:fe:c8:17:a4:d3:91: 4e:db:57:a7:de:b3:36:20:60:20:e9:e1:9d:36:62:39:bd:fa: f9:ca:a6:2b:e4:91:09:67:4c:8e:f7:c8:7e:bc:8d:0b:0f:5f: 84:28:70:94:53:c2:46:17:2e:5b:72:b5:22:a4:a6:a4:8b:7c: 22:54:cc:3a:44:ea:50:d9:54:fd:a7:ed:00:69:34:c3:6c:aa: aa:98:e8:69:bf:a6:08:67:7b:2e:c2:05:57:54:a4:a5:f1:f0: a6:e9:cc:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwNTA0MTgwNjA3WhcNMjUwNTExMTgwNjA3WjAYMRYwFAYD VQQDEw02ODE3YWM5MC1lYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VfTzCgV0NY8+F3DrvUAArGped5Th6Lb7IMJLERqgFtLU3Emmqs1u4wsYxBr usgCx1AhomR/SHwp4eaG7O+qSHRhcaujNGqxIzX2zlPlqZnYKwsi4mEwwJR5yYTx jDJNueBEwP1ZMYz0q2ixrst2wv+Mk6FCMrMlM4KJlrUskrZGAEgZCwSW0qVz85at WZl81IVF1QNo3KJZma1QvYkvY0/6QdkaWJdYcMqY+GJjjMjvzUq0c2Kd424/drtY Xc0kLosmfWnkhL0FjRB2K12uYYb0guQdoimEWiuSejJN3D0oUXqMD05nM+4sqdF9 k7sQdOUPn1NUeWPIklqYpi06sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCU0AHym G6PHu5XKxOLOsNJUnUUMMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZUOrssLlLU1mAP53mPCsh0kIxf0Is3tEyxQHTqDtRtMpG5Q533fOk v19sWEFrdhZJoCSjEsm028In3Pc3a0me7Z/4ASjTk6noo+DzyN1vGE+3Kvd8kUvk 4RWAop13Eb4Smj/yQDshDFDOfZVG6ba+I7hoJXSB2lpjgEt6JT1tvQvSdhdZDvrM RVjVTU3YM+YV2clw2uoEjoHFAPH+yBek05FO21en3rM2IGAg6eGdNmI5vfr5yqYr 5JEJZ0yO98h+vI0LD1+EKHCUU8JGFy5bcrUipKaki3wiVMw6ROpQ2VT9p+0AaTTD bKqqmOhpv6YIZ3suwgVXVKSl8fCm6cyF -----END CERTIFICATE-----Generated at Sun May 4 21:03:11 2025 by rpki-client