$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json) Hash identifier: nUJDgdRytq4OfR9PeOxESR98eN+wNWzerxs4pNrHGok= Subject key identifier: 48:3D:19:07:46:53:6A:C8:C9:D8:36:53:05:7F:50:5C:3E:EA:BB:77 Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft Manifest number: 0297 Signing time: Fri 25 Apr 2025 01:17:45 +0000 Manifest this update: Fri 25 Apr 2025 01:17:45 +0000 Manifest next update: Fri 02 May 2025 01:17:45 +0000 Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: SqTUOIRhnRUE26STwFvEHNmP10XgQMOrqoaxCsm/Gk4=) 2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: vfdbKyJ3mviRT1GnKxYZo1xv2FhpXFvdbF0/IM2Mc1w=) 3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: qqSsVUySdeF/mPXA1H2/Nb+W0uFPMOk9qHP5kfHhs6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Validity Not Before: Apr 25 01:17:45 2025 GMT Not After : May 2 01:17:45 2025 GMT Subject: CN=680ae2b9-5e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:ce:96:09:7b:a9:cc:ed:fc:07:ae:78:88: 3f:f2:78:13:6b:03:b8:27:a3:56:a7:1e:a0:f9:52: cb:7b:9b:fa:79:05:6c:31:8e:56:aa:5a:76:d0:23: 11:a8:0e:7f:e3:43:ba:2b:11:18:0e:de:63:ca:21: ba:11:ec:7b:2e:f7:80:d6:41:f1:ed:14:04:d3:26: 06:f0:39:b0:e8:aa:39:a6:5b:0c:fd:ff:d5:df:9d: 07:f9:ac:bb:05:5a:6a:95:fd:60:30:7d:e1:62:5d: cb:34:52:ba:4d:15:52:63:97:d4:21:fc:b4:66:c8: b1:97:fa:0c:12:8e:43:fb:fc:8f:cd:1f:db:56:41: e8:65:47:90:36:6f:19:56:b6:96:1f:21:64:8a:c5: 62:9c:76:45:32:8b:67:8a:0f:73:87:20:9e:64:c0: e9:61:2f:c9:03:33:38:7b:ff:5d:1b:7a:e5:7f:cd: 37:54:c2:cf:00:52:9f:8f:31:65:c6:ff:81:80:f2: 0b:4d:41:d7:01:81:ce:27:de:51:53:e3:1d:e4:08: 9f:ef:18:2e:08:90:76:5a:1a:fe:a7:0a:c0:45:22: d0:8b:91:28:e3:86:4a:cd:68:75:60:95:f1:3b:4f: 0a:32:05:9e:3a:f9:59:93:f8:90:16:c9:9f:88:5a: 42:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3D:19:07:46:53:6A:C8:C9:D8:36:53:05:7F:50:5C:3E:EA:BB:77 X509v3 Authority Key Identifier: keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d2:3d:f1:92:0b:e0:b2:e6:61:c3:fe:82:6f:89:32:1b:b8: a3:d6:15:a0:60:8f:7b:72:dc:83:a6:bb:94:b6:49:e5:83:ef: ca:2a:c8:90:92:ae:50:0c:78:17:cf:3c:96:51:dd:68:90:10: 2f:ac:97:53:11:8e:73:03:8c:7d:db:5e:97:4f:ee:9f:f5:bb: 49:50:c4:b6:b2:b0:a4:60:df:14:70:e9:d7:08:4f:e8:81:76: 6b:e5:f0:66:ce:80:b5:68:fa:e1:86:41:1b:8a:bf:5d:20:9c: 97:12:5e:ba:88:9b:98:86:be:59:a9:26:f5:ca:6b:97:03:69: 5d:7a:9d:fd:73:62:ac:10:68:1b:a7:c1:c8:55:ae:ad:ff:fb: f8:07:87:fa:6a:37:c3:6f:b8:69:c1:88:f8:d6:0e:c4:d4:c5: 18:74:a4:0b:8d:f9:df:5a:06:43:0d:13:59:7d:91:20:fd:85: 17:be:bd:6b:31:78:0b:15:a4:2c:f5:e5:53:0d:79:aa:89:03: 75:55:95:c3:3c:26:3d:74:ad:5a:13:d6:c9:45:32:5c:63:75: 40:8d:e7:a5:b2:af:6b:a4:70:61:2a:68:da:de:05:22:6a:3f: a6:dc:ca:8b:b1:13:8a:37:0e:8a:d9:fc:55:78:99:32:32:7f: d7:c5:96:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw NjAyRkY2QkMwHhcNMjUwNDI1MDExNzQ1WhcNMjUwNTAyMDExNzQ1WjAYMRYwFAYD VQQDEw02ODBhZTJiOS01ZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwInOlgl7qczt/AeueIg/8ngTawO4J6NWpx6g+VLLe5v6eQVsMY5Wqlp20CMR qA5/40O6KxEYDt5jyiG6Eex7LveA1kHx7RQE0yYG8Dmw6Ko5plsM/f/V350H+ay7 BVpqlf1gMH3hYl3LNFK6TRVSY5fUIfy0Zsixl/oMEo5D+/yPzR/bVkHoZUeQNm8Z VraWHyFkisVinHZFMotnig9zhyCeZMDpYS/JAzM4e/9dG3rlf803VMLPAFKfjzFl xv+BgPILTUHXAYHOJ95RU+Md5Aif7xguCJB2Whr+pwrARSLQi5Eo44ZKzWh1YJXx O08KMgWeOvlZk/iQFsmfiFpCtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEg9GQdG U2rIydg2UwV/UFw+6rt3MB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5 RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ0j3xkgvgsuZhw/6Cb4kyG7ij1hWgYI97ctyDpruUtknlg+/KKsiQ kq5QDHgXzzyWUd1okBAvrJdTEY5zA4x9216XT+6f9btJUMS2srCkYN8UcOnXCE/o gXZr5fBmzoC1aPrhhkEbir9dIJyXEl66iJuYhr5ZqSb1ymuXA2ldep39c2KsEGgb p8HIVa6t//v4B4f6ajfDb7hpwYj41g7E1MUYdKQLjfnfWgZDDRNZfZEg/YUXvr1r MXgLFaQs9eVTDXmqiQN1VZXDPCY9dK1aE9bJRTJcY3VAjeelsq9rpHBhKmja3gUi aj+m3MqLsROKNw6K2fxVeJkyMn/XxZZ4 -----END CERTIFICATE-----Generated at Sat Apr 26 05:03:25 2025 by rpki-client