$ rpki-client -vvf rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft File: ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft (raw, json) Hash identifier: pDYsO+Y7UH5ZPTkwuGStMQdRiboTFx0MKHkd9dAIW/A= Subject key identifier: 90:2E:14:49:0A:6D:B0:5A:E1:FB:D3:D9:E4:40:1D:D2:A3:72:8B:0E Authority key identifier: 76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC Certificate issuer: /CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft Manifest number: 0228 Signing time: Sat 03 May 2025 02:00:30 +0000 Manifest this update: Sat 03 May 2025 02:00:30 +0000 Manifest next update: Sat 10 May 2025 02:00:30 +0000 Files and hashes: 1: ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl (hash: HdlmyzAcWgpFvDf6AklsFVAxacklwCeS1Qgcgoa9FKM=) 2: 150C1686283511EDABF49D69C4F9AE02.roa (hash: cp/g3c614sxIJhG7+W0sfcuIudQc0T60lgeLxpTEn7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F26F1, serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC Validity Not Before: May 3 02:00:30 2025 GMT Not After : May 10 02:00:30 2025 GMT Subject: CN=681578be-d77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:65:b4:b0:51:94:42:f1:2b:c3:dc:2f:52:1a: 3b:ae:33:64:83:ce:2d:16:b5:fc:a0:3b:01:85:70: 00:6b:2e:37:b0:b3:b0:87:5c:ef:a3:f6:11:8c:b5: e7:0e:59:56:4a:8e:02:c0:a9:87:3a:14:e3:4f:e8: fa:eb:8e:5b:a4:e1:b0:6a:6a:97:47:2d:e8:93:0e: 3b:5e:00:62:c9:11:49:f4:bf:0e:f1:42:61:66:c5: b5:2b:12:29:80:96:1b:8f:40:65:22:01:ea:5a:31: 05:49:b1:6e:fb:ab:11:02:8b:db:1c:d1:4b:9b:b5: 1d:c6:f2:9d:59:1b:69:67:74:8f:7f:89:c5:65:f1: 1b:de:33:60:49:7a:8b:52:b4:dd:40:2f:67:84:9e: 34:fe:54:68:a5:11:0c:fc:ea:eb:78:87:e3:2c:20: 5e:68:37:7d:e8:92:5f:67:8e:7d:79:82:cf:62:bc: 5e:8a:0b:5e:1c:fb:ef:a2:98:dc:cf:92:19:34:fe: ed:b9:da:2b:e2:4e:1c:8c:8c:c1:e5:d8:fa:99:fe: a3:cc:a4:0d:ce:e4:16:e1:b6:c5:68:b7:2f:e6:f0: 63:5d:c6:48:7d:ef:62:3d:5f:34:79:a9:94:f8:91: 7d:91:33:9b:6e:e2:7b:64:ac:b6:f9:1b:c2:d2:65: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2E:14:49:0A:6D:B0:5A:E1:FB:D3:D9:E4:40:1D:D2:A3:72:8B:0E X509v3 Authority Key Identifier: keyid:76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:56:b3:a5:e2:92:54:f9:32:09:8c:a9:3f:f4:cd:e8:78:ca: 8d:dc:3a:bf:87:28:63:8e:0c:13:93:a9:63:ab:24:21:fa:08: b3:96:5e:f1:cc:5f:77:54:2d:04:b1:6c:0c:0e:6c:09:59:a5: 50:bb:2d:f8:42:89:c1:35:90:30:07:24:cb:c7:09:35:a8:03: e0:bf:e7:14:89:2f:55:88:4b:d7:59:8a:36:5b:e8:0c:88:c3: 49:e6:14:97:99:e5:a9:ba:5d:dc:9b:d9:dc:98:13:9e:eb:01: f2:a4:36:dd:88:07:18:ba:b2:a5:7e:eb:ac:9d:12:38:fc:99: 93:d9:4d:6f:a9:04:6b:e8:ff:a9:41:dc:f0:ce:39:8a:41:71: 27:5a:2f:d0:ad:2d:40:4c:2b:93:74:fa:06:7c:de:5e:43:08: 14:c3:dd:ec:9a:8c:3e:c8:7c:34:9b:8a:12:4e:44:04:29:fd: 6c:6d:a6:cf:d6:be:36:b7:83:bb:1f:a9:00:43:da:58:b6:f8: df:05:06:fd:71:f4:59:21:ae:0c:f3:e0:6a:56:13:2a:76:d7: b2:ee:86:d0:35:2d:4e:e8:0e:15:e5:e6:d9:c4:0b:98:2a:de: b8:63:0a:95:b8:f8:2f:e2:f4:50:37:91:d7:2f:cb:38:14:79: 98:d2:8c:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI2RjExMTAvBgNVBAUTKDc2Q0QxMkFEOUU2MDhDQUEyQzE5OTdCNjM2RjQ1MDU3 N0JFOTM3QkMwHhcNMjUwNTAzMDIwMDMwWhcNMjUwNTEwMDIwMDMwWjAYMRYwFAYD VQQDEw02ODE1NzhiZS1kNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52W0sFGUQvErw9wvUho7rjNkg84tFrX8oDsBhXAAay43sLOwh1zvo/YRjLXn DllWSo4CwKmHOhTjT+j6645bpOGwamqXRy3okw47XgBiyRFJ9L8O8UJhZsW1KxIp gJYbj0BlIgHqWjEFSbFu+6sRAovbHNFLm7UdxvKdWRtpZ3SPf4nFZfEb3jNgSXqL UrTdQC9nhJ40/lRopREM/OrreIfjLCBeaDd96JJfZ459eYLPYrxeigteHPvvopjc z5IZNP7tudor4k4cjIzB5dj6mf6jzKQNzuQW4bbFaLcv5vBjXcZIfe9iPV80eamU +JF9kTObbuJ7ZKy2+RvC0mVmqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAuFEkK bbBa4fvT2eRAHdKjcosOMB8GA1UdIwQYMBaAFHbNEq2eYIyqLBmXtjb0UFd76Te8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjZGMS84OEYxQzc4NDI4 MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pLb3NHWmUyTnZSUVYzdnBO N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMFNyWjVnaktvc0daZTJOdlJRVjN2cE43dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjZGMS84OEYxQzc4NDI4MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pL b3NHWmUyTnZSUVYzdnBON3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwVrOl4pJU+TIJjKk/9M3oeMqN3Dq/hyhjjgwTk6ljqyQh+gizll7x zF93VC0EsWwMDmwJWaVQuy34QonBNZAwByTLxwk1qAPgv+cUiS9ViEvXWYo2W+gM iMNJ5hSXmeWpul3cm9ncmBOe6wHypDbdiAcYurKlfuusnRI4/JmT2U1vqQRr6P+p QdzwzjmKQXEnWi/QrS1ATCuTdPoGfN5eQwgUw93smow+yHw0m4oSTkQEKf1sbabP 1r42t4O7H6kAQ9pYtvjfBQb9cfRZIa4M8+BqVhMqdtey7obQNS1O6A4V5ebZxAuY Kt64YwqVuPgv4vRQN5HXL8s4FHmY0ozG -----END CERTIFICATE-----Generated at Sat May 3 22:48:11 2025 by rpki-client