$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: K52iSYnDbZCVtTZImP8mYJK+d+wzHVvVB/2CJlNjwPY= Subject key identifier: 56:46:14:0A:CD:88:1F:82:45:B0:A5:07:79:D6:66:B8:B5:09:C3:68 Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1DA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1D85 Signing time: Thu 24 Apr 2025 16:08:28 +0000 Manifest this update: Thu 24 Apr 2025 16:08:27 +0000 Manifest next update: Thu 01 May 2025 16:08:27 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: RGt2AwnF8U4JNAAGFJ2tVrX5N0ACTP6Yvg63QbNgtLQ=) 2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w=) 3: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 7TEbSw3PqWXAumkD/6WCBubmNiQ54mZObTiNmT20Qfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7592 (0x1da8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Apr 24 16:08:27 2025 GMT Not After : May 1 16:08:27 2025 GMT Subject: CN=680a61fb-e5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:6c:b4:67:c1:01:2d:f6:6d:51:43:d6:33: 9c:4e:4c:ae:28:61:f3:6d:fe:9a:c8:d8:c9:d5:c1: ee:89:5a:f3:8e:b2:e8:08:d6:3a:a5:51:c1:b2:e0: bd:e8:99:27:c6:b3:23:f9:2c:09:ca:f0:77:03:94: 37:48:88:b3:f2:8d:90:9c:af:f6:f6:3a:5e:74:3f: dd:18:5b:db:94:48:2a:eb:7a:f2:8b:56:ae:1c:a8: 69:fb:d8:be:8a:2c:59:bd:75:a5:d8:30:98:27:3a: b9:de:6d:86:c3:95:f1:1d:e2:f5:62:30:c8:ff:2e: 8b:12:d4:57:44:d7:66:30:71:ac:33:c5:ee:01:38: 60:96:a3:18:d9:b9:4c:74:c3:21:22:23:94:07:98: 84:45:8d:6e:f3:91:be:45:77:d6:3f:4f:20:61:cd: 6c:27:39:d5:fc:f4:70:20:02:d0:ce:b4:8d:0b:fc: f6:e5:bf:e4:2c:08:e5:4b:5a:6d:51:c6:c4:8c:64: ee:99:5f:ab:90:ab:12:cd:65:0f:e1:d3:0f:bc:c4: 50:34:f0:6d:07:3e:8b:7b:38:ee:20:3f:ad:3b:64: c2:0e:27:1f:02:d7:7c:6a:77:4c:49:c9:c7:33:18: e4:6d:1b:9c:a5:fe:55:78:38:ab:c7:a7:cf:80:e9: b2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:46:14:0A:CD:88:1F:82:45:B0:A5:07:79:D6:66:B8:B5:09:C3:68 X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2a:f8:3e:f4:65:21:e3:98:8b:d9:d2:39:89:21:1d:92:52: f5:fb:b7:30:7a:cc:1f:58:51:f5:ad:64:3f:c1:b5:47:b6:40: 1b:3c:5e:c2:99:78:79:61:fd:b1:f2:12:e4:ad:7b:80:94:af: eb:15:06:93:0c:3e:52:d0:83:e6:02:42:c1:27:fc:82:07:c1: d4:86:2a:61:88:18:35:ce:3f:71:90:d9:06:8d:cb:1c:5f:4c: 1c:86:91:13:24:21:8d:e3:2a:e5:77:f8:b5:66:1b:fb:62:5a: 36:ef:3e:b8:8e:83:ce:2b:9e:25:22:f7:1a:56:95:7d:f6:95: 47:76:6a:29:b8:d1:31:a0:8a:c6:55:01:2b:3b:29:f2:61:45: 8c:36:21:2d:71:15:88:0a:c7:e8:75:9b:1a:1a:25:89:b3:7c: 4f:2f:1f:1d:3f:10:20:3f:ec:b8:d1:64:ad:69:fd:70:a6:d0: 16:cc:a4:66:fb:00:64:19:dc:5f:a4:97:3c:f0:29:3e:91:5f: f5:4f:47:ea:5e:e3:fa:3b:df:5e:61:63:67:3d:16:5d:b6:a2: c6:4c:fa:ba:a0:bc:d8:15:30:fc:81:98:db:9e:8e:f4:ab:83: 77:e5:1a:f6:af:d8:cc:3c:a0:a0:24:c3:33:bd:5c:d0:61:9b: 94:36:25:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjUwNDI0MTYwODI3WhcNMjUwNTAxMTYwODI3WjAYMRYwFAYD VQQDEw02ODBhNjFmYi1lNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsdstGfBAS32bVFD1jOcTkyuKGHzbf6ayNjJ1cHuiVrzjrLoCNY6pVHBsuC9 6JknxrMj+SwJyvB3A5Q3SIiz8o2QnK/29jpedD/dGFvblEgq63ryi1auHKhp+9i+ iixZvXWl2DCYJzq53m2Gw5XxHeL1YjDI/y6LEtRXRNdmMHGsM8XuAThglqMY2blM dMMhIiOUB5iERY1u85G+RXfWP08gYc1sJznV/PRwIALQzrSNC/z25b/kLAjlS1pt UcbEjGTumV+rkKsSzWUP4dMPvMRQNPBtBz6LezjuID+tO2TCDicfAtd8andMScnH MxjkbRucpf5VeDirx6fPgOmyAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZGFArN iB+CRbClB3nWZri1CcNoMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfKvg+9GUh45iL2dI5iSEdklL1+7cweswfWFH1rWQ/wbVHtkAbPF7C mXh5Yf2x8hLkrXuAlK/rFQaTDD5S0IPmAkLBJ/yCB8HUhiphiBg1zj9xkNkGjcsc X0wchpETJCGN4yrld/i1Zhv7Ylo27z64joPOK54lIvcaVpV99pVHdmopuNExoIrG VQErOynyYUWMNiEtcRWICsfodZsaGiWJs3xPLx8dPxAgP+y40WStaf1wptAWzKRm +wBkGdxfpJc88Ck+kV/1T0fqXuP6O99eYWNnPRZdtqLGTPq6oLzYFTD8gZjbno70 q4N35Rr2r9jMPKCgJMMzvVzQYZuUNiWS -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:51 2025 by rpki-client