$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json) Hash identifier: M/dJs1BhVjNVdy4992ZiXeP3c56Nw5INfuBA9xyFc7A= Subject key identifier: 53:7C:FE:8B:70:D0:98:30:DC:90:8A:1B:DC:87:26:6F:C5:80:C0:71 Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft Manifest number: 0E Signing time: Fri 25 Apr 2025 07:04:51 +0000 Manifest this update: Fri 25 Apr 2025 07:04:50 +0000 Manifest next update: Fri 02 May 2025 07:04:50 +0000 Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: 2/k9bk20zBxvS2A6Di8srv1SJYC4lD6DkhrPCLtV0KY=) 2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: ctz1y0Mr+YfqZCN/LBNWAf/NG7xW8jY2ZkFpiLOFBtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Validity Not Before: Apr 25 07:04:50 2025 GMT Not After : May 2 07:04:50 2025 GMT Subject: CN=680b3412-d357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9c:b4:e9:36:ab:cc:a9:23:86:0a:5a:bd:43: 6b:32:dd:78:2d:79:07:a9:6c:91:2f:a8:ea:9d:e3: 21:dc:c9:eb:ee:7a:3c:36:aa:2e:07:e9:45:57:e8: 53:37:7c:a8:23:20:cf:f1:8e:3e:16:d1:80:3a:c6: 56:8e:f7:85:bd:1c:1b:55:50:2d:03:09:db:8c:ff: 6a:6b:e8:39:8b:e9:0f:09:23:80:b3:10:7b:a3:e2: c3:eb:a9:c4:57:4a:22:b9:71:a8:8f:fb:1f:1f:22: 0f:6f:c6:e5:c0:91:69:e7:dd:a9:0a:07:1b:e2:27: 1d:03:91:95:7c:8f:7e:e0:80:c1:40:72:a1:69:6b: eb:63:23:b7:b1:50:23:28:fb:53:75:f9:69:d8:d4: 83:2d:dc:0f:ab:de:e2:10:a5:7d:85:8d:58:15:b4: b4:ec:69:33:ec:fe:a3:01:92:f2:49:c4:a3:32:26: ed:85:2c:1a:df:0d:32:6d:49:09:ee:f3:52:7c:81: fe:cd:62:19:c2:42:fa:b5:2a:6b:3d:44:85:80:6c: a7:66:ca:05:9e:78:21:4f:90:bd:d2:96:63:7a:c1: 8c:bd:50:13:a1:c6:49:53:b2:25:ff:7c:49:80:97: a0:d2:8e:09:c1:55:d5:ac:b1:04:2a:20:6b:52:ed: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7C:FE:8B:70:D0:98:30:DC:90:8A:1B:DC:87:26:6F:C5:80:C0:71 X509v3 Authority Key Identifier: keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:6c:e4:75:02:ee:0e:b7:b6:af:dd:bb:5a:d6:73:ad:93:1f: a0:f1:7c:ef:84:6a:7f:4a:1a:41:6b:0a:22:1f:a2:e1:db:44: d7:d4:dc:56:2e:c6:ae:37:0d:55:7d:91:be:ed:fe:65:d0:b3: 87:c8:4b:fa:8e:90:91:5c:db:b8:e9:97:17:96:2a:7d:e4:65: 13:9f:0e:bd:88:cc:54:4c:2a:96:8f:87:52:0a:29:e8:78:14: ad:bc:d0:8e:c1:f4:44:d9:41:e7:65:d2:68:00:f5:5a:90:ab: 41:2f:0f:44:d3:7e:25:fd:f4:42:83:1f:ee:76:ec:a3:f2:8a: 5b:dd:34:6b:63:66:dc:e2:cd:cc:a2:17:96:58:86:87:1a:3f: fb:4e:8c:ae:a9:38:5c:04:20:dc:b9:c1:2f:8f:e2:d2:4f:7d: 8d:93:28:08:a7:e7:b9:2a:6d:41:04:d7:ef:d0:9b:90:85:92: d5:0b:67:1d:78:a4:7f:82:24:fb:1f:34:5b:97:81:1a:da:ab: 90:1b:be:5d:c4:1f:90:39:0b:04:73:0a:9d:b7:33:e8:2a:c6: 2e:1f:3f:08:58:66:ec:29:93:46:bc:79:eb:83:00:39:b9:42: 18:d1:5b:77:64:a5:4d:4c:62:98:11:78:f9:c9:aa:07:65:73: 17:12:bb:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDRDOTExMC8GA1UEBRMoQjBENTI1RUE5OUQ0QzhFQzc1NjA3MTI2QTQ5RUY2NzA3 QkQ2RjRBRDAeFw0yNTA0MjUwNzA0NTBaFw0yNTA1MDIwNzA0NTBaMBgxFjAUBgNV BAMTDTY4MGIzNDEyLWQzNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDunLTpNqvMqSOGClq9Q2sy3XgteQepbJEvqOqd4yHcyevuejw2qi4H6UVX6FM3 fKgjIM/xjj4W0YA6xlaO94W9HBtVUC0DCduM/2pr6DmL6Q8JI4CzEHuj4sPrqcRX SiK5caiP+x8fIg9vxuXAkWnn3akKBxviJx0DkZV8j37ggMFAcqFpa+tjI7exUCMo +1N1+WnY1IMt3A+r3uIQpX2FjVgVtLTsaTPs/qMBkvJJxKMyJu2FLBrfDTJtSQnu 81J8gf7NYhnCQvq1Kms9RIWAbKdmygWeeCFPkL3SlmN6wYy9UBOhxklTsiX/fEmA l6DSjgnBVdWssQQqIGtS7cP/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU3z+i3DQ mDDckIob3Icmb8WAwHEwHwYDVR0jBBgwFoAUsNUl6pnUyOx1YHEmpJ72cHvW9K0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0NEM5LzdCQTNFNzBDMEVD OTExRjBBMjZGRjE0NEM0RjlBRTAyL3NOVWw2cG5VeU94MVlIRW1wSjcyY0h2VzlL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc05VbDZwblV5T3gxWUhFbXBKNzJjSHZXOUswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 NEM5LzdCQTNFNzBDMEVDOTExRjBBMjZGRjE0NEM0RjlBRTAyL3NOVWw2cG5VeU94 MVlIRW1wSjcyY0h2VzlLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHFs5HUC7g63tq/du1rWc62TH6DxfO+Ean9KGkFrCiIfouHbRNfU3FYu xq43DVV9kb7t/mXQs4fIS/qOkJFc27jplxeWKn3kZROfDr2IzFRMKpaPh1IKKeh4 FK280I7B9ETZQedl0mgA9VqQq0EvD0TTfiX99EKDH+527KPyilvdNGtjZtzizcyi F5ZYhocaP/tOjK6pOFwEINy5wS+P4tJPfY2TKAin57kqbUEE1+/Qm5CFktULZx14 pH+CJPsfNFuXgRraq5Abvl3EH5A5CwRzCp23M+gqxi4fPwhYZuwpk0a8eeuDADm5 QhjRW3dkpU1MYpgRePnJqgdlcxcSuy0= -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:09 2025 by rpki-client