$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: RWLDKa00NoyV/AmauXKOmQpo3ORcUNQReFFeStZCltc= Subject key identifier: 1D:0C:8F:01:29:33:D6:CF:3A:1B:AD:52:76:18:28:D6:2D:B5:A8:B3 Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 02A9 Signing time: Fri 25 Apr 2025 01:15:11 +0000 Manifest this update: Fri 25 Apr 2025 01:15:11 +0000 Manifest next update: Fri 02 May 2025 01:15:11 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: TNxrUKRAxjfxHCkn6ZXYgLRnHdLtCZa95j0PlfZmx/s=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: 9MdpJxrwdV0aU1f/zX8n/hykvTdPQn1kKe0kWScV57Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7, serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: Apr 25 01:15:11 2025 GMT Not After : May 2 01:15:11 2025 GMT Subject: CN=680ae21f-abfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8f:df:52:85:03:74:98:66:aa:69:d1:0c:ce: fc:ed:22:55:20:7d:d8:6f:90:f8:8e:38:cd:82:f2: 7f:4e:c6:1d:54:0d:bb:e2:39:9f:75:85:35:94:41: c4:0d:d2:49:47:78:69:e2:3d:88:84:0a:ad:c3:6d: 8c:1d:02:05:8d:3e:09:af:1c:8c:0b:00:c9:51:59: 9b:c7:50:9b:70:77:f2:c4:32:ab:00:c6:af:aa:5b: 7c:85:53:a1:96:cc:e5:c4:06:22:2c:b9:57:54:1f: 5b:6f:c5:af:1f:1a:42:04:d9:d6:b9:5f:2d:5f:72: 72:50:7d:bb:02:b4:12:0d:77:17:c9:26:ce:63:83: ae:6e:f7:c2:a2:8f:cc:63:c6:f7:17:5b:4f:d4:bc: 59:46:92:2f:b2:02:69:b4:67:28:4e:54:12:06:e8: a3:c8:90:ae:c3:f0:0f:89:27:8c:0f:b5:4b:6f:7d: 0b:0e:40:f8:e4:b7:9e:d3:ef:f9:94:ee:77:5f:26: 18:b3:dd:47:12:99:27:40:c3:15:37:91:4d:e8:b7: a6:dd:87:83:3c:4a:79:f0:96:7d:22:b7:2d:b2:1c: ab:fc:32:fa:c5:47:8a:53:29:c9:4f:df:be:bd:6d: 8a:5b:85:90:4f:78:c3:b2:9a:40:92:b0:71:64:67: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0C:8F:01:29:33:D6:CF:3A:1B:AD:52:76:18:28:D6:2D:B5:A8:B3 X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:df:87:ce:5c:0c:64:6c:a9:57:53:50:12:74:d4:96:23:b4: 73:6b:aa:59:63:d8:a6:3b:79:9d:2f:be:6f:f5:67:55:fc:1f: 15:5b:79:48:2d:97:18:e1:3c:d1:e4:d6:8b:22:4a:5d:3d:81: b5:d4:f9:5c:fe:9b:29:9c:08:26:dc:5b:90:46:87:17:18:de: 09:e4:44:e1:2c:bf:95:f9:c3:7e:95:b4:ae:3f:d6:7a:f3:29: c4:da:fc:fd:56:db:d3:04:8d:2a:17:cd:e3:f3:88:cb:65:b9: 2d:ed:12:b8:0f:fa:b9:16:57:08:88:4e:89:4d:72:9d:c0:e0: ad:e5:4b:b3:27:f9:48:db:e8:eb:f5:f6:06:16:25:c0:fa:70: aa:db:df:07:08:ae:36:96:37:c5:87:68:26:70:2d:cf:5f:a1: 36:f0:7b:3c:46:31:ed:30:e8:2e:66:13:5c:68:b6:ac:6a:7c: ca:f6:b3:7d:68:7d:24:85:6d:b9:92:6b:69:6b:96:39:5e:25: 15:75:bc:62:70:72:89:e8:39:ac:aa:4b:9b:16:54:75:34:32: 61:97:4c:81:b4:e0:c9:0b:82:a3:65:19:55:7f:dd:55:42:60: 86:70:f2:b6:6f:e6:46:37:fb:b7:05:6b:5f:59:0a:7f:67:26: 9c:43:ab:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjUwNDI1MDExNTExWhcNMjUwNTAyMDExNTExWjAYMRYwFAYD VQQDEw02ODBhZTIxZi1hYmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAno/fUoUDdJhmqmnRDM787SJVIH3Yb5D4jjjNgvJ/TsYdVA274jmfdYU1lEHE DdJJR3hp4j2IhAqtw22MHQIFjT4JrxyMCwDJUVmbx1CbcHfyxDKrAMavqlt8hVOh lszlxAYiLLlXVB9bb8WvHxpCBNnWuV8tX3JyUH27ArQSDXcXySbOY4OubvfCoo/M Y8b3F1tP1LxZRpIvsgJptGcoTlQSBuijyJCuw/APiSeMD7VLb30LDkD45Lee0+/5 lO53XyYYs91HEpknQMMVN5FN6Lem3YeDPEp58JZ9Irctshyr/DL6xUeKUynJT9++ vW2KW4WQT3jDsppAkrBxZGcDmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0MjwEp M9bPOhutUnYYKNYttaizMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF34fOXAxkbKlXU1ASdNSWI7Rza6pZY9imO3mdL75v9WdV/B8VW3lI LZcY4TzR5NaLIkpdPYG11Plc/pspnAgm3FuQRocXGN4J5EThLL+V+cN+lbSuP9Z6 8ynE2vz9VtvTBI0qF83j84jLZbkt7RK4D/q5FlcIiE6JTXKdwOCt5UuzJ/lI2+jr 9fYGFiXA+nCq298HCK42ljfFh2gmcC3PX6E28Hs8RjHtMOguZhNcaLasanzK9rN9 aH0khW25kmtpa5Y5XiUVdbxicHKJ6DmsqkubFlR1NDJhl0yBtODJC4KjZRlVf91V QmCGcPK2b+ZGN/u3BWtfWQp/ZyacQ6uE -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:41 2025 by rpki-client