$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft File: mMl-BS19mtU2CVm50-B22t126gE.mft (raw, json) Hash identifier: Oqg5c6GUu3xTSaLBtK7cbPFVwg/Eem4qI/8aAfC9hNM= Subject key identifier: 8F:4F:82:F5:6B:58:FA:8B:68:A5:B2:36:27:A5:14:ED:E7:04:E0:2D Authority key identifier: 98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 Certificate issuer: /CN=A91CB435/serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Certificate serial: 06BF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft Manifest number: 06B4 Signing time: Thu 24 Apr 2025 21:57:08 +0000 Manifest this update: Thu 24 Apr 2025 21:57:07 +0000 Manifest next update: Thu 01 May 2025 21:57:07 +0000 Files and hashes: 1: mMl-BS19mtU2CVm50-B22t126gE.crl (hash: 6zd8FC3aeNDnnmBP9SKkYSDOw/GKx72fuiqBXR4kcLY=) 2: F07A52005BEA11EB9863331EC4F9AE02.roa (hash: JfxeOd6cRi7KX9xc58yMMc6yyj7Cm4GP42UD9FpSFGI=) 3: F1541C9C5BEA11EB9863331EC4F9AE02.roa (hash: In2tzB1kyTLYqr+oV0wjHkiLI0adEmKOWeAAfiinzls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1727 (0x6bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=98C97E052D7D9AD5360959B9D3E076DADD76EA01 Validity Not Before: Apr 24 21:57:07 2025 GMT Not After : May 1 21:57:07 2025 GMT Subject: CN=680ab3b3-cc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4b:a4:c7:dd:3d:d3:bc:a6:82:f2:a6:d0:fc: 3f:7b:e6:08:75:27:c0:45:d4:2b:0a:8b:98:5c:0b: b2:82:dd:0b:37:b9:3c:1d:fa:a3:8a:3a:77:50:e6: 12:6c:cb:0d:21:b3:d2:0a:f3:ca:2e:c5:bf:2d:94: ef:cc:43:35:65:72:c7:2b:2f:19:c7:bb:ea:f9:54: 10:eb:be:78:5e:3d:d9:70:a7:fd:56:76:f8:67:87: 95:d1:6e:9d:5b:9f:d8:5f:a7:86:22:0c:cf:91:f3: 40:e4:e1:b7:ae:95:f9:72:a6:1d:ed:ea:22:ba:4a: a6:cd:f9:0d:c6:6c:33:1c:91:18:98:5f:2f:c9:46: d6:20:73:79:08:aa:4b:c0:a3:34:c3:67:57:b1:c2: d1:94:d5:f6:fa:4a:ca:c6:02:33:76:0a:98:36:00: d5:e1:b7:fb:f0:2d:40:15:c7:95:04:11:29:6f:fe: 4a:02:5e:62:db:ab:68:ec:8c:b4:37:7a:ea:29:5d: 94:df:76:90:12:57:a2:57:82:65:2a:5c:fc:13:1a: 5d:a1:1b:6b:81:01:6e:48:a7:87:5b:ae:1f:a9:f6: 24:11:fc:03:d1:25:5b:ef:91:22:d1:4f:07:d0:23: 25:36:70:c7:ea:0e:9e:2e:fe:4f:23:da:3d:bd:09: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4F:82:F5:6B:58:FA:8B:68:A5:B2:36:27:A5:14:ED:E7:04:E0:2D X509v3 Authority Key Identifier: keyid:98:C9:7E:05:2D:7D:9A:D5:36:09:59:B9:D3:E0:76:DA:DD:76:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mMl-BS19mtU2CVm50-B22t126gE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/EC0590465BE911EB9668001EC4F9AE02/mMl-BS19mtU2CVm50-B22t126gE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:26:e9:25:40:6a:3b:1f:dc:b8:30:ec:27:cb:c1:34:19:bb: 83:a8:be:e8:aa:49:bb:3e:cf:63:39:d9:c8:ad:f8:be:e0:20: d2:39:35:6d:eb:c1:ed:15:30:d7:76:cb:1c:81:87:7c:11:e8: 19:99:c2:17:f0:4a:5e:67:ab:f7:9d:43:70:43:fd:44:34:4f: 7c:c6:cc:7e:64:69:b1:a5:1c:9d:77:70:59:39:1c:bb:12:ab: 4b:dd:ce:72:14:09:42:99:09:5f:f8:15:09:bc:ba:a0:e3:fe: a4:72:10:c0:cf:cc:59:f3:3d:d3:a9:a6:24:6d:87:a9:b3:07: c7:f7:be:56:29:63:61:ef:2b:e7:99:63:92:71:53:c9:a1:2b: 7c:87:6a:96:ff:96:e2:5d:bd:42:47:5d:fa:23:96:f5:b0:48: 2d:fe:72:5e:03:8d:10:d2:67:71:41:d5:d7:69:d1:5c:ea:8b: 88:9e:f5:55:ec:0c:39:2b:e6:b4:fd:c7:13:cd:0a:29:5c:1a: c4:a4:b2:45:f4:57:f0:83:a9:3b:d3:1c:b6:b8:4a:6e:06:a1: 78:4a:32:28:73:24:75:bd:c5:76:70:91:01:72:73:df:a9:99: ee:6c:9a:c0:0d:d8:b6:d5:9d:5f:1c:0d:9b:18:53:11:2c:a6: 8f:7b:4f:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDk4Qzk3RTA1MkQ3RDlBRDUzNjA5NTlCOUQzRTA3NkRB REQ3NkVBMDEwHhcNMjUwNDI0MjE1NzA3WhcNMjUwNTAxMjE1NzA3WjAYMRYwFAYD VQQDEw02ODBhYjNiMy1jYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kukx90907ymgvKm0Pw/e+YIdSfARdQrCouYXAuygt0LN7k8Hfqjijp3UOYS bMsNIbPSCvPKLsW/LZTvzEM1ZXLHKy8Zx7vq+VQQ6754Xj3ZcKf9Vnb4Z4eV0W6d W5/YX6eGIgzPkfNA5OG3rpX5cqYd7eoiukqmzfkNxmwzHJEYmF8vyUbWIHN5CKpL wKM0w2dXscLRlNX2+krKxgIzdgqYNgDV4bf78C1AFceVBBEpb/5KAl5i26to7Iy0 N3rqKV2U33aQEleiV4JlKlz8ExpdoRtrgQFuSKeHW64fqfYkEfwD0SVb75Ei0U8H 0CMlNnDH6g6eLv5PI9o9vQnMbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9PgvVr WPqLaKWyNielFO3nBOAtMB8GA1UdIwQYMBaAFJjJfgUtfZrVNglZudPgdtrdduoB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9FQzA1OTA0NjVC RTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10VTJDVm01MC1CMjJ0MTI2 Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL21NbC1CUzE5bXRVMkNWbTUwLUIyMnQxMjZnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9FQzA1OTA0NjVCRTkxMUVCOTY2ODAwMUVDNEY5QUUwMi9tTWwtQlMxOW10 VTJDVm01MC1CMjJ0MTI2Z0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfJuklQGo7H9y4MOwny8E0GbuDqL7oqkm7Ps9jOdnIrfi+4CDSOTVt 68HtFTDXdsscgYd8EegZmcIX8EpeZ6v3nUNwQ/1ENE98xsx+ZGmxpRydd3BZORy7 EqtL3c5yFAlCmQlf+BUJvLqg4/6kchDAz8xZ8z3TqaYkbYepswfH975WKWNh7yvn mWOScVPJoSt8h2qW/5biXb1CR136I5b1sEgt/nJeA40Q0mdxQdXXadFc6ouInvVV 7Aw5K+a0/ccTzQopXBrEpLJF9Ffwg6k70xy2uEpuBqF4SjIocyR1vcV2cJEBcnPf qZnubJrADdi21Z1fHA2bGFMRLKaPe082 -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:28 2025 by rpki-client