$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft File: b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json) Hash identifier: j1DbJ5UapbcAJ9Z01Qt7+qe9dKh3q9Ki0j8rt8454Zw= Subject key identifier: 39:A0:18:3D:C1:69:8A:6D:DE:21:8B:15:85:CF:6B:4B:4E:C7:A2:B1 Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft Manifest number: 0124 Signing time: Fri 25 Apr 2025 03:47:57 +0000 Manifest this update: Fri 25 Apr 2025 03:47:57 +0000 Manifest next update: Fri 02 May 2025 03:47:56 +0000 Files and hashes: 1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: Eh80Y0YIoQATs5v0wL7P09Ydz6245CbmyZo1GO45ha4=) 2: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: YP3rrk25ovglIxC3TZqFZ4Gk13Gj9mIwNLz7ISlP4I0=) 3: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: wxzifKiO/1duDLAOqG/EgJqXNOBnq5EBtgG/0AK/VlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B Validity Not Before: Apr 25 03:47:57 2025 GMT Not After : May 2 03:47:56 2025 GMT Subject: CN=680b05ed-3450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:70:cf:fa:44:1b:e2:03:1c:9f:c4:b9:bf:fc: 3d:50:06:ea:3c:65:c8:d2:8d:c3:5c:e5:7f:bb:e2: d5:af:02:08:c3:f4:39:bc:68:73:cd:47:5b:d7:1f: ba:4c:3e:4d:23:5b:9b:09:e1:ac:8e:fa:a5:78:bb: 4d:df:d2:38:80:de:ac:b1:a4:7a:7d:ed:bc:07:d8: 72:48:da:62:12:a1:af:3e:40:06:59:c2:40:86:8f: 57:8a:88:c4:eb:7e:3f:86:13:f8:d4:ee:d7:a6:41: d9:21:9d:7a:83:be:a9:b8:06:6f:29:ec:e6:9b:e7: bc:a5:c8:e4:18:34:81:6c:c6:da:d3:4c:e2:c0:70: f1:be:f9:c0:20:1d:87:41:f7:f7:89:ba:7c:fa:01: b9:28:84:85:d6:48:0a:36:f3:d0:d2:57:25:58:5d: d2:38:c7:02:bf:04:67:94:cc:c5:41:e3:03:3e:48: a1:21:c1:be:56:77:1a:b9:45:5b:26:5c:e0:1e:46: 47:21:29:e8:31:85:e0:08:43:23:42:22:5e:7b:30: c7:39:6f:62:40:0d:1e:a5:b7:35:5c:6d:cf:96:c4: 53:48:bd:19:45:8d:ae:c7:31:d8:b8:1f:0a:67:46: 96:ce:f4:50:45:94:10:81:89:8c:57:25:ca:d0:6d: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A0:18:3D:C1:69:8A:6D:DE:21:8B:15:85:CF:6B:4B:4E:C7:A2:B1 X509v3 Authority Key Identifier: keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e0:f4:b3:d6:37:59:ae:13:3f:15:19:f2:bc:fb:5e:32:3b: 34:4b:82:0c:da:96:c1:0c:3d:56:f3:39:47:fe:5c:29:d8:0f: c7:32:95:c0:72:4e:78:63:0a:42:8b:92:c9:59:dc:22:2c:ac: 85:03:a6:47:eb:c8:cf:89:27:5c:26:e5:4c:3a:77:d4:eb:59: 0b:40:ce:1e:97:b4:ce:12:2f:08:ef:8f:c9:d3:fe:e0:3b:0c: 0d:30:a4:eb:ee:0f:4b:74:b3:9f:e5:21:7d:c5:b7:90:03:24: 28:af:23:22:b7:32:15:38:67:fd:0e:27:b8:bd:84:d1:58:70: a6:c1:b9:71:60:d4:64:cd:99:4e:3a:cf:68:fc:8b:52:a0:79: c8:5e:17:50:d6:e2:e4:fd:d3:39:ae:cc:9a:4a:f2:40:e3:39: 69:df:62:a4:b6:e2:e9:21:ae:5e:6f:59:85:2a:b3:8c:dc:92: 38:f2:90:b2:8a:4f:f8:b0:96:51:9d:9f:18:d6:1b:12:4a:ef: 8e:11:43:8c:03:87:3f:3e:ed:1e:3f:c7:dc:43:b8:4a:c4:02: 48:38:ed:5c:40:24:49:d4:b7:26:7d:d9:eb:74:85:4a:3a:b9: b8:73:65:a8:53:06:6a:68:2b:2a:07:2b:45:dc:7a:46:e4:8b: 76:f9:ac:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RkIxMTAvBgNVBAUTKDZGOUMyM0U0MDM3NzhGRTAxQzdCQzk1MDg4QkZEMUU2 QjMyOEFBOUIwHhcNMjUwNDI1MDM0NzU3WhcNMjUwNTAyMDM0NzU2WjAYMRYwFAYD VQQDEw02ODBiMDVlZC0zNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3DP+kQb4gMcn8S5v/w9UAbqPGXI0o3DXOV/u+LVrwIIw/Q5vGhzzUdb1x+6 TD5NI1ubCeGsjvqleLtN39I4gN6ssaR6fe28B9hySNpiEqGvPkAGWcJAho9XiojE 634/hhP41O7XpkHZIZ16g76puAZvKezmm+e8pcjkGDSBbMba00ziwHDxvvnAIB2H Qff3ibp8+gG5KISF1kgKNvPQ0lclWF3SOMcCvwRnlMzFQeMDPkihIcG+VncauUVb JlzgHkZHISnoMYXgCEMjQiJeezDHOW9iQA0epbc1XG3PlsRTSL0ZRY2uxzHYuB8K Z0aWzvRQRZQQgYmMVyXK0G3DPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmgGD3B aYpt3iGLFYXPa0tOx6KxMB8GA1UdIwQYMBaAFG+cI+QDd4/gHHvJUIi/0eazKKqb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGQi8xMUNEMUI2RTY4 QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2otQWNlOGxRaUxfUjVyTW9x cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1d2o1QU4zai1BY2U4bFFpTF9SNXJNb3Fwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGQi8xMUNEMUI2RTY4QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2ot QWNlOGxRaUxfUjVyTW9xcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd4PSz1jdZrhM/FRnyvPteMjs0S4IM2pbBDD1W8zlH/lwp2A/HMpXA ck54YwpCi5LJWdwiLKyFA6ZH68jPiSdcJuVMOnfU61kLQM4el7TOEi8I74/J0/7g OwwNMKTr7g9LdLOf5SF9xbeQAyQoryMitzIVOGf9Die4vYTRWHCmwblxYNRkzZlO Os9o/ItSoHnIXhdQ1uLk/dM5rsyaSvJA4zlp32KktuLpIa5eb1mFKrOM3JI48pCy ik/4sJZRnZ8Y1hsSSu+OEUOMA4c/Pu0eP8fcQ7hKxAJIOO1cQCRJ1LcmfdnrdIVK Orm4c2WoUwZqaCsqBytF3HpG5It2+axC -----END CERTIFICATE-----Generated at Sat Apr 26 04:53:45 2025 by rpki-client