$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: Oiah5V7K1JwL1PSFWtHcRLT7tVd7Ion4tSOi4YH1Nh4= Subject key identifier: 59:1B:82:AC:2C:12:A1:EE:5A:C1:69:E6:19:4E:25:2F:B5:82:3D:F0 Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: 61 Signing time: Fri 25 Apr 2025 06:04:06 +0000 Manifest this update: Fri 25 Apr 2025 06:04:05 +0000 Manifest next update: Fri 02 May 2025 06:04:05 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: 0rjGu9r0BfccGMsuvtjSrVAoObCaUm4IeTd9sZFiJBQ=) 2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Validity Not Before: Apr 25 06:04:05 2025 GMT Not After : May 2 06:04:05 2025 GMT Subject: CN=680b25d5-7ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:06:e4:f4:30:47:ba:c3:ed:ae:89:64:b4: b3:14:76:88:a0:c3:c5:45:9b:97:f1:22:01:0a:81: 6e:c3:c9:2d:9f:83:f8:45:f1:29:89:30:39:c0:45: d8:6a:c3:e2:58:c5:77:83:3e:8a:ec:24:fa:9e:84: 06:18:40:f1:dc:48:e2:56:04:98:ec:cd:3d:70:3e: 2c:ae:4f:51:35:6b:e4:6c:0c:d0:2e:73:53:3c:7e: d4:cc:b9:6c:2b:cc:0d:75:44:61:d8:a1:d0:1b:0b: 46:cb:69:93:52:9c:75:3b:f7:fa:db:eb:10:13:74: 11:42:b5:7d:ed:2a:ef:db:94:6b:cf:46:cd:3e:48: 8e:58:7d:4c:2c:74:d5:53:71:3e:b7:2c:12:9b:4e: 13:23:47:55:4c:51:55:fb:6f:5d:40:46:bb:35:68: c5:df:52:65:05:5e:d1:cc:2c:a8:54:a6:2e:68:9c: 6a:16:92:7f:ea:d5:49:c0:21:f6:44:07:86:cb:b2: eb:1e:e0:e0:e1:30:e6:38:33:7f:87:0c:fc:e2:98: b6:1e:cc:23:ea:bb:3b:c2:22:7a:14:4e:95:42:69: 36:9a:79:c4:5f:50:32:76:72:1e:15:30:44:6f:87: 03:c4:6e:4f:4a:9c:25:b8:f6:16:1f:57:0f:5d:97: 48:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1B:82:AC:2C:12:A1:EE:5A:C1:69:E6:19:4E:25:2F:B5:82:3D:F0 X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:75:d9:8c:38:cf:91:d6:b1:04:e1:ba:95:3c:ca:23:66:fb: 10:19:5e:5c:b9:33:53:13:55:8f:cd:84:c5:b4:4d:a9:8f:0f: ea:74:61:3b:fa:25:55:09:13:92:0d:d4:15:25:c7:b2:40:58: 5a:9e:22:62:71:e4:51:f6:04:29:15:83:5d:f1:b2:c6:70:73: 41:df:4e:da:43:f8:1a:df:9c:80:f3:0f:1e:64:bd:0b:34:1e: e9:12:54:44:95:aa:d8:5f:13:98:5c:1a:49:54:18:f0:e8:27: 89:fc:61:19:99:74:3e:69:2d:95:97:bb:ad:eb:db:7b:cc:59: 01:0c:d9:15:e7:29:c6:a9:d0:b3:5d:7d:70:70:03:d5:f7:63: 47:04:92:df:8d:a5:87:0f:6a:f4:c6:e1:55:62:d3:0a:53:af: 98:5d:26:c6:a5:07:11:86:d0:c4:3a:f4:28:df:5b:ea:7c:a1: 09:05:c2:dc:38:80:20:28:e1:86:13:ad:bd:de:20:13:9b:b6: 8d:3e:a4:d1:0d:82:09:cd:98:39:b4:ae:5e:26:ce:8d:e9:b1: 65:73:94:9b:a3:b8:41:86:6d:69:e6:6d:b4:61:da:ce:94:7d: c5:7b:2f:87:bb:af:34:5f:9e:15:0c:ae:24:a1:97:aa:18:b3: 92:56:4f:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTU0QTExMC8GA1UEBRMoRTY3NThCOUEzNzU5ODJDMkM0RDFDNzY0OUEzMUU0Q0Yy N0Q1QTY4MDAeFw0yNTA0MjUwNjA0MDVaFw0yNTA1MDIwNjA0MDVaMBgxFjAUBgNV BAMTDTY4MGIyNWQ1LTdmZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQConwbk9DBHusPtrolktLMUdoigw8VFm5fxIgEKgW7DyS2fg/hF8SmJMDnARdhq w+JYxXeDPorsJPqehAYYQPHcSOJWBJjszT1wPiyuT1E1a+RsDNAuc1M8ftTMuWwr zA11RGHYodAbC0bLaZNSnHU79/rb6xATdBFCtX3tKu/blGvPRs0+SI5YfUwsdNVT cT63LBKbThMjR1VMUVX7b11ARrs1aMXfUmUFXtHMLKhUpi5onGoWkn/q1UnAIfZE B4bLsuse4ODhMOY4M3+HDPzimLYezCPquzvCInoUTpVCaTaaecRfUDJ2ch4VMERv hwPEbk9KnCW49hYfVw9dl0j9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWRuCrCwS oe5awWnmGU4lL7WCPfAwHwYDVR0jBBgwFoAU5nWLmjdZgsLE0cdkmjHkzyfVpoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1NTRBLzgyMkZDMjIwOTFG NzExRUZBREUxMTI2NkM0RjlBRTAyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNW5XTG1qZFpnc0xFMGNka21qSGt6eWZWcG9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 NTRBLzgyMkZDMjIwOTFGNzExRUZBREUxMTI2NkM0RjlBRTAyLzVuV0xtamRaZ3NM RTBjZGttakhrenlmVnBvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFN12Yw4z5HWsQThupU8yiNm+xAZXly5M1MTVY/NhMW0TamPD+p0YTv6 JVUJE5IN1BUlx7JAWFqeImJx5FH2BCkVg13xssZwc0HfTtpD+BrfnIDzDx5kvQs0 HukSVESVqthfE5hcGklUGPDoJ4n8YRmZdD5pLZWXu63r23vMWQEM2RXnKcap0LNd fXBwA9X3Y0cEkt+NpYcPavTG4VVi0wpTr5hdJsalBxGG0MQ69CjfW+p8oQkFwtw4 gCAo4YYTrb3eIBObto0+pNENggnNmDm0rl4mzo3psWVzlJujuEGGbWnmbbRh2s6U fcV7L4e7rzRfnhUMriShl6oYs5JWT+w= -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:21 2025 by rpki-client