$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: WSirXVRZEawrRDl7sPS8dwyJRpXIRAahlgt4lsUHDBw= Subject key identifier: 71:BE:CD:76:2A:2F:0B:9F:A4:1F:E4:E2:00:6B:E0:1C:A4:FB:AD:22 Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0C9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0C90 Signing time: Thu 24 Apr 2025 18:10:45 +0000 Manifest this update: Thu 24 Apr 2025 18:10:45 +0000 Manifest next update: Thu 01 May 2025 18:10:45 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: Kg3PkjLKH9o3p/HZf66KYsUhzCImnmFBG02C4AV9q2c=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: chBs/iSmoBtAd9EtvA3mnCGyh8XU8yYYJZGBD7EHNow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Apr 24 18:10:45 2025 GMT Not After : May 1 18:10:45 2025 GMT Subject: CN=680a7ea5-5ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:56:6f:5e:97:f8:d0:3d:20:46:ff:8f:4c:28: 56:08:88:58:e0:f3:47:a9:d0:f5:44:c5:24:15:77: d9:5a:29:3d:97:4b:25:bb:88:55:5b:59:d6:fa:87: 2e:52:ff:79:37:72:ea:0b:74:4a:3c:34:56:f6:f1: 03:79:53:87:29:e8:6d:24:41:4f:d8:3e:03:63:ae: 89:fd:e8:d5:fb:68:e6:4a:27:d5:22:4c:5b:47:8d: b1:ed:dd:f9:72:c3:21:3f:39:23:5a:31:78:e1:9a: 7d:2e:6c:eb:dc:79:72:8f:7f:91:45:79:bd:92:f8: 1f:3b:2c:cb:07:22:13:06:83:3f:5f:01:8e:16:59: d8:76:01:09:5f:b5:0b:64:92:a6:b0:93:e9:7f:d0: 25:4f:7a:68:5e:f5:e2:83:c2:ce:44:54:d5:25:b9: 29:a6:6a:7e:83:07:91:35:6f:cf:24:ed:9b:8e:f7: 3f:ce:b9:50:29:7d:fd:f8:4a:92:7e:79:22:92:66: 14:f9:67:3d:2a:8c:4f:fe:fd:2b:5b:73:cb:c6:a7: df:91:2c:ae:1d:a6:26:b2:8e:b8:ba:f7:a5:13:6b: 48:fb:40:ed:09:df:eb:96:c6:14:11:6f:8d:74:d2: c9:b3:e6:25:8b:2e:4c:8f:6a:32:3f:81:42:bf:b5: fd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BE:CD:76:2A:2F:0B:9F:A4:1F:E4:E2:00:6B:E0:1C:A4:FB:AD:22 X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:5c:f3:f0:03:eb:4f:f4:95:9d:62:b1:aa:c3:4f:46:d1:76: df:54:36:aa:1b:79:7b:c8:c9:d9:47:f4:b1:5b:4d:93:e5:6c: e2:1a:e4:f0:c2:6d:44:be:1f:b2:a5:b2:05:ab:bd:3b:4a:b9: 1b:fc:2f:18:8e:c1:d6:1b:67:15:24:39:29:a4:e2:29:42:2e: 6f:2f:94:cc:31:ee:ff:cd:2b:ad:14:62:a3:1c:72:9f:48:93: 3a:74:5a:20:e6:50:fd:94:05:c3:58:cf:e1:3e:bd:0b:de:1f: a4:4b:96:6b:f2:27:c7:e9:6a:28:3f:36:0a:fe:5b:8b:de:7b: 5a:4c:22:4f:09:c7:0d:73:bd:d4:a0:92:90:25:c5:e8:26:e8: 4e:74:cd:0d:39:b7:4b:c4:65:67:9f:28:df:8d:e2:95:e9:34: 8d:26:e6:1d:d4:72:f9:6a:05:66:58:8b:24:c3:a1:6f:28:b9: 7e:57:20:44:5e:19:af:bc:9b:9a:ab:f5:06:99:0f:cb:eb:d8: 07:cb:24:ef:35:44:3f:9a:73:1b:2f:91:e6:62:a1:3b:d6:e5: 2c:43:76:47:8b:b8:a2:22:7c:8d:8b:9a:aa:0f:80:12:b8:83: 48:33:45:e0:df:10:a0:89:6d:40:3c:4f:48:51:2d:54:80:3b: 5c:9f:bf:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjUwNDI0MTgxMDQ1WhcNMjUwNTAxMTgxMDQ1WjAYMRYwFAYD VQQDEw02ODBhN2VhNS01ZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lZvXpf40D0gRv+PTChWCIhY4PNHqdD1RMUkFXfZWik9l0slu4hVW1nW+ocu Uv95N3LqC3RKPDRW9vEDeVOHKehtJEFP2D4DY66J/ejV+2jmSifVIkxbR42x7d35 csMhPzkjWjF44Zp9Lmzr3Hlyj3+RRXm9kvgfOyzLByITBoM/XwGOFlnYdgEJX7UL ZJKmsJPpf9AlT3poXvXig8LORFTVJbkppmp+gweRNW/PJO2bjvc/zrlQKX39+EqS fnkikmYU+Wc9KoxP/v0rW3PLxqffkSyuHaYmso64uvelE2tI+0DtCd/rlsYUEW+N dNLJs+Yliy5Mj2oyP4FCv7X99wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHG+zXYq LwufpB/k4gBr4Byk+60iMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwXPPwA+tP9JWdYrGqw09G0XbfVDaqG3l7yMnZR/SxW02T5WziGuTw wm1Evh+ypbIFq707Srkb/C8YjsHWG2cVJDkppOIpQi5vL5TMMe7/zSutFGKjHHKf SJM6dFog5lD9lAXDWM/hPr0L3h+kS5Zr8ifH6WooPzYK/luL3ntaTCJPCccNc73U oJKQJcXoJuhOdM0NObdLxGVnnyjfjeKV6TSNJuYd1HL5agVmWIskw6FvKLl+VyBE XhmvvJuaq/UGmQ/L69gHyyTvNUQ/mnMbL5HmYqE71uUsQ3ZHi7iiInyNi5qqD4AS uINIM0Xg3xCgiW1APE9IUS1UgDtcn7/Q -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:08 2025 by rpki-client