$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft File: 53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json) Hash identifier: MjZ1QGz4SWKTwayukud6k/CN9TkJj1J2C8Xznx/ZUEg= Subject key identifier: 83:90:60:AC:C7:7F:A1:29:70:8F:23:16:CB:B0:D4:39:7A:61:A3:62 Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 Certificate issuer: /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Certificate serial: 0C2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft Manifest number: 0C27 Signing time: Thu 24 Apr 2025 18:26:30 +0000 Manifest this update: Thu 24 Apr 2025 18:26:29 +0000 Manifest next update: Thu 01 May 2025 18:26:29 +0000 Files and hashes: 1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: Xjw8ZGGxFLkWNG/qjjFl5gcFur9HAghGa2eWGFI4pgc=) 2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: 7T6rttGkDUZMLr7YNcGWXFP6okk75uTuQj2yDiVmYPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1486, serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Validity Not Before: Apr 24 18:26:29 2025 GMT Not After : May 1 18:26:29 2025 GMT Subject: CN=680a8255-cfdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:2e:99:f0:94:9b:f3:51:19:d7:7b:1d:a1: 6d:dd:c1:b6:20:aa:5c:ae:cb:4c:32:1c:aa:80:80: 2f:ec:ad:1b:36:59:ee:f5:d0:2c:2c:2a:85:4b:00: 8d:de:6d:ba:71:6b:6e:22:0a:cb:c4:63:1b:c0:35: 18:4c:eb:f4:17:ce:e1:cc:e1:42:ed:89:b8:10:4e: 32:85:1c:c9:b7:37:07:4a:77:29:dc:f8:ef:c5:17: 2f:39:06:a2:b7:34:ce:3f:4e:35:c7:32:2e:15:13: 25:b2:bb:b6:43:d1:5b:e3:bb:86:12:34:32:7a:9c: eb:75:fc:b9:e5:4e:d4:2f:96:c1:c2:3b:f7:4a:02: 62:5e:ae:8c:34:29:77:0d:9b:60:61:fd:50:00:c0: ef:89:0f:e8:03:39:f3:e9:db:00:51:72:00:9d:f9: 86:98:e1:ca:8c:ff:4f:0a:cb:c0:3d:fc:8a:f5:6e: 26:4c:81:9f:b9:d0:00:ef:7b:c3:93:a3:4e:36:5f: d0:c0:7b:be:e1:74:28:0b:6f:b2:a1:4a:21:d8:01: c6:fc:4d:d7:19:dc:af:d0:d2:13:c4:f0:62:73:f6: 7c:64:85:21:a2:b3:56:81:61:38:98:fc:58:05:dc: b3:e1:cf:7b:d2:21:d3:0f:74:54:87:56:e7:a3:32: ac:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:90:60:AC:C7:7F:A1:29:70:8F:23:16:CB:B0:D4:39:7A:61:A3:62 X509v3 Authority Key Identifier: keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:c1:89:53:e5:7a:4b:6d:96:c1:62:be:92:8c:36:3b:6c:c9: 29:ba:7f:16:8e:c8:78:4a:b5:ff:8f:64:d2:5e:20:99:d6:15: bf:37:41:65:30:fc:22:44:b3:0c:6b:34:49:9c:c5:a3:40:fc: e5:71:c0:ff:21:6f:65:87:8f:73:0f:21:e8:78:89:58:a6:04: 74:61:7f:a5:92:23:8a:e6:77:19:28:b8:ce:af:22:4b:5d:47: 49:8d:05:4a:0d:d2:87:cc:56:0d:4a:57:e3:01:5f:40:df:e6: 4b:d0:22:4c:f7:ae:cc:87:72:46:ba:98:c3:3c:7d:48:e2:8f: 13:50:86:11:3a:a7:90:6c:33:18:9e:d3:f8:86:26:9a:eb:c6: 4e:8e:28:b1:23:54:24:d3:24:af:e1:f4:13:ba:9d:ae:82:ee: 4c:11:fe:0a:0d:2c:7c:92:01:c7:71:c9:2d:18:be:af:a1:df: f6:69:a4:bc:ac:2f:3d:9c:93:79:ba:7a:da:97:29:ad:51:df: 10:81:8d:23:48:d5:6e:2e:c8:c8:ed:a1:06:53:69:a4:c0:b3: 34:7c:21:7b:f4:bd:ac:ba:2e:ac:01:d7:f7:3d:8f:b5:ef:9f: a4:6f:9c:c1:07:12:d0:7e:3d:68:11:52:ef:01:e1:09:19:c3: bf:a4:1b:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0ODYxMTAvBgNVBAUTKEU3NzZBNzMzNkY4RjY3ODVBMzZBMDEwNDY4NDBCNTE0 QTBENDE5MjkwHhcNMjUwNDI0MTgyNjI5WhcNMjUwNTAxMTgyNjI5WjAYMRYwFAYD VQQDEw02ODBhODI1NS1jZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshkumfCUm/NRGdd7HaFt3cG2IKpcrstMMhyqgIAv7K0bNlnu9dAsLCqFSwCN 3m26cWtuIgrLxGMbwDUYTOv0F87hzOFC7Ym4EE4yhRzJtzcHSncp3PjvxRcvOQai tzTOP041xzIuFRMlsru2Q9Fb47uGEjQyepzrdfy55U7UL5bBwjv3SgJiXq6MNCl3 DZtgYf1QAMDviQ/oAznz6dsAUXIAnfmGmOHKjP9PCsvAPfyK9W4mTIGfudAA73vD k6NONl/QwHu+4XQoC2+yoUoh2AHG/E3XGdyv0NITxPBic/Z8ZIUhorNWgWE4mPxY Bdyz4c970iHTD3RUh1bnozKsUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOQYKzH f6EpcI8jFsuw1Dl6YaNiMB8GA1UdIwQYMBaAFOd2pzNvj2eFo2oBBGhAtRSg1Bkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ4Ni8wNkM0QjJGRTA2 QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0V2phZ0VFYUVDMUZLRFVH U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzYW5NMi1QWjRXamFnRUVhRUMxRktEVUdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ4Ni8wNkM0QjJGRTA2QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0 V2phZ0VFYUVDMUZLRFVHU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpwYlT5XpLbZbBYr6SjDY7bMkpun8Wjsh4SrX/j2TSXiCZ1hW/N0Fl MPwiRLMMazRJnMWjQPzlccD/IW9lh49zDyHoeIlYpgR0YX+lkiOK5ncZKLjOryJL XUdJjQVKDdKHzFYNSlfjAV9A3+ZL0CJM967Mh3JGupjDPH1I4o8TUIYROqeQbDMY ntP4hiaa68ZOjiixI1Qk0ySv4fQTup2ugu5MEf4KDSx8kgHHccktGL6vod/2aaS8 rC89nJN5unralymtUd8QgY0jSNVuLsjI7aEGU2mkwLM0fCF79L2sui6sAdf3PY+1 75+kb5zBBxLQfj1oEVLvAeEJGcO/pBsK -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:54 2025 by rpki-client