$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft File: s-AwGXTWpAg9ufSdWtbloVd5KgY.mft (raw, json) Hash identifier: B8l1Li2ECk89nkGW3N0MxLPjefUnArhxbvRTEAToFTE= Subject key identifier: 05:84:37:6F:71:0E:A5:FE:56:20:A5:16:D6:7F:38:77:03:5B:49:8C Authority key identifier: B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 Certificate issuer: /CN=A9116B43/serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft Manifest number: 0641 Signing time: Sat 26 Apr 2025 14:51:06 +0000 Manifest this update: Sat 26 Apr 2025 14:51:06 +0000 Manifest next update: Sat 03 May 2025 14:51:06 +0000 Files and hashes: 1: s-AwGXTWpAg9ufSdWtbloVd5KgY.crl (hash: flSMktIbJ7Aby3FylJXqm8rgtexYBaZjRcChMP+LSe8=) 2: 3A77AE12CB9C11EC9230F70BC4F9AE02.roa (hash: TwjuoGTydiIvsI8500O496Q/mOvNfgRtaZ3KwMAE5xE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B43, serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06 Validity Not Before: Apr 26 14:51:06 2025 GMT Not After : May 3 14:51:06 2025 GMT Subject: CN=680cf2da-6fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:e4:c6:da:c4:05:2e:eb:b7:9a:dd:81:7f: bb:34:f0:5c:dc:01:4f:ff:16:2a:3b:14:64:e1:ab: 31:22:03:30:6a:7f:32:96:01:16:64:df:13:06:90: eb:37:ac:cb:37:d2:7c:dd:15:ec:a8:d8:16:72:6c: d4:86:39:33:34:da:57:d0:9b:47:21:c1:5e:43:3c: a8:79:24:5d:fe:21:5f:f0:6f:5a:bf:63:e9:aa:19: 26:3e:25:b5:0d:d2:6e:6c:05:d4:d0:3f:fa:dd:10: 2f:f0:92:57:6d:7a:04:5e:c2:56:b2:4e:89:fa:bc: 48:e8:2b:44:15:8d:fe:c8:a9:f6:f7:56:20:ce:e6: 74:88:86:a2:04:a7:86:e0:85:d5:0d:f8:c0:c6:08: c4:6b:86:c7:e3:89:f6:8f:47:62:df:92:dc:06:1c: 22:11:b5:fe:bc:4c:1f:e4:a2:c9:67:62:18:8a:0e: d2:e4:60:04:b9:23:3a:b4:37:18:2a:d0:43:60:27: 41:60:e1:13:4e:c1:3e:62:d4:d7:4d:46:60:bb:41: 91:a4:e1:51:f8:62:52:d4:bf:aa:60:80:81:65:97: 51:d8:df:90:80:ec:f3:a3:4a:d5:96:a6:a0:fa:f6: b3:be:af:3e:37:c5:54:42:ad:c7:5a:95:97:07:34: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:84:37:6F:71:0E:A5:FE:56:20:A5:16:D6:7F:38:77:03:5B:49:8C X509v3 Authority Key Identifier: keyid:B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b0:64:d9:86:b1:6f:ad:65:19:ed:31:c2:65:93:bb:b8:2e: b4:d2:82:4d:1f:be:37:32:84:0d:6a:72:60:5a:ec:8c:20:e2: 39:62:12:4a:f0:7c:c5:f9:bc:c1:3e:0a:bd:85:5f:3d:87:cf: 58:bc:d2:94:6e:bb:c7:a7:cf:49:0a:1e:bb:49:6b:61:ba:08: 80:89:92:a9:04:3e:99:1d:27:c8:71:fc:b6:c4:40:0f:9c:45: 9d:25:47:6e:d8:09:b3:ae:03:24:77:0a:ed:d9:82:33:be:4a: 61:a2:b8:45:92:93:49:d9:d5:eb:23:95:c0:05:95:18:ae:2f: fe:9f:bb:c4:96:d0:82:ad:3a:43:a6:65:7b:fa:6f:d2:3d:15: f8:ba:40:f1:6b:d8:3f:4e:00:a0:35:4e:63:63:47:73:85:b9: 95:c0:5f:49:1c:04:1b:88:4e:2c:9d:75:05:65:c4:8b:eb:4e: 83:e8:56:24:64:db:31:1c:92:dc:52:6f:3c:df:1e:83:1c:fe: ab:e9:bc:30:95:d1:a5:aa:9a:20:50:3f:12:0d:ca:2a:61:b1: 41:0e:3a:d0:00:b3:5b:3f:5d:b2:ff:22:d9:0a:a1:8b:93:d3: bd:93:f1:d3:b2:07:e0:28:80:47:48:f0:0e:9f:b4:76:3a:00: f6:39:80:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNDMxMTAvBgNVBAUTKEIzRTAzMDE5NzRENkE0MDgzREI5RjQ5RDVBRDZFNUEx NTc3OTJBMDYwHhcNMjUwNDI2MTQ1MTA2WhcNMjUwNTAzMTQ1MTA2WjAYMRYwFAYD VQQDEw02ODBjZjJkYS02ZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5fkxtrEBS7rt5rdgX+7NPBc3AFP/xYqOxRk4asxIgMwan8ylgEWZN8TBpDr N6zLN9J83RXsqNgWcmzUhjkzNNpX0JtHIcFeQzyoeSRd/iFf8G9av2PpqhkmPiW1 DdJubAXU0D/63RAv8JJXbXoEXsJWsk6J+rxI6CtEFY3+yKn291YgzuZ0iIaiBKeG 4IXVDfjAxgjEa4bH44n2j0di35LcBhwiEbX+vEwf5KLJZ2IYig7S5GAEuSM6tDcY KtBDYCdBYOETTsE+YtTXTUZgu0GRpOFR+GJS1L+qYICBZZdR2N+QgOzzo0rVlqag +vazvq8+N8VUQq3HWpWXBzQHcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWEN29x DqX+ViClFtZ/OHcDW0mMMB8GA1UdIwQYMBaAFLPgMBl01qQIPbn0nVrW5aFXeSoG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI0My81OTQyMUE0RThE N0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BBZzl1ZlNkV3RibG9WZDVL Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtQXdHWFRXcEFnOXVmU2RXdGJsb1ZkNUtnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI0My81OTQyMUE0RThEN0MxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9zLUF3R1hUV3BB Zzl1ZlNkV3RibG9WZDVLZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdsGTZhrFvrWUZ7THCZZO7uC600oJNH743MoQNanJgWuyMIOI5YhJK 8HzF+bzBPgq9hV89h89YvNKUbrvHp89JCh67SWthugiAiZKpBD6ZHSfIcfy2xEAP nEWdJUdu2AmzrgMkdwrt2YIzvkphorhFkpNJ2dXrI5XABZUYri/+n7vEltCCrTpD pmV7+m/SPRX4ukDxa9g/TgCgNU5jY0dzhbmVwF9JHAQbiE4snXUFZcSL606D6FYk ZNsxHJLcUm883x6DHP6r6bwwldGlqpogUD8SDcoqYbFBDjrQALNbP12y/yLZCqGL k9O9k/HTsgfgKIBHSPAOn7R2OgD2OYBo -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:29 2025 by rpki-client