$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft File: b2dYEDhTTU2848gbXy2IYcU2tnw.mft (raw, json) Hash identifier: Bcc3oW6grDQJvypMQjfeMkUqRPZk+xmpvBGIQ1Q7b8A= Subject key identifier: 61:55:1B:70:81:5C:B7:60:13:DD:F3:91:37:CE:96:76:30:FB:41:94 Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft Manifest number: 0142 Signing time: Fri 25 Apr 2025 03:31:09 +0000 Manifest this update: Fri 25 Apr 2025 03:31:09 +0000 Manifest next update: Fri 02 May 2025 03:31:09 +0000 Files and hashes: 1: b2dYEDhTTU2848gbXy2IYcU2tnw.crl (hash: OWNlCeNvvyxl6ojEX9CWb6WDxXP230ELwbxdmWsgflo=) 2: 9B1DE7226D8F11EE9BD22B40C4F9AE02.roa (hash: H5pK79+DkVT9bgtQkuk9t/grxvSc0nRDSs3JR8icAh8=) 3: EAA5793C367411EF98F49F1CC4F9AE02.roa (hash: /RysZ9FFrvGFWhnZrMrChDiZQuIFgZEdesdb5vE5fVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Validity Not Before: Apr 25 03:31:09 2025 GMT Not After : May 2 03:31:09 2025 GMT Subject: CN=680b01fd-27f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d4:e6:81:c5:cd:bb:dc:fe:cd:f3:d3:ce:b8: 9e:16:65:4d:8e:f8:c6:eb:87:b0:f9:a6:ec:bf:c0: b6:85:3b:6b:34:11:bc:62:86:9c:dc:ec:c4:5d:03: f1:76:d1:65:bc:ae:d3:c5:f3:8f:71:8f:6a:b9:c6: a6:82:7c:7d:be:1b:4e:dc:bd:e0:86:6c:0b:b2:5f: 7d:44:18:61:35:2c:f9:9a:32:46:58:9b:87:97:2b: ea:60:74:2d:6b:91:91:68:f2:17:fc:8f:92:f1:5b: cd:29:3c:21:18:d4:5b:23:0c:fc:c8:ff:3b:75:c1: ad:98:15:76:8e:4b:36:ea:db:b4:30:f9:9b:56:51: 2b:6a:1b:e7:34:c3:2e:1a:72:90:ed:21:46:77:22: a6:50:c5:2f:d0:fa:e6:08:6b:36:47:53:cc:1e:8d: ec:f9:23:e8:be:22:48:a9:74:e5:aa:71:23:dc:68: fa:26:85:61:55:9d:67:6f:36:64:0a:a0:58:a9:4d: f0:b3:73:2b:97:d6:50:58:9b:1b:33:45:08:95:86: 43:a2:33:38:d6:fb:4c:f8:98:f8:f1:b9:fd:bb:81: 9c:84:9e:3a:f8:6b:4a:06:94:67:43:6f:f3:cf:dd: 42:86:6d:cb:b2:67:71:86:eb:5e:c1:55:b3:1c:03: 98:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:55:1B:70:81:5C:B7:60:13:DD:F3:91:37:CE:96:76:30:FB:41:94 X509v3 Authority Key Identifier: keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:3d:8f:e3:02:37:7e:2b:2b:9a:45:12:3a:38:96:b3:ef:39: ee:dc:ef:e5:e4:41:b2:cc:cc:4a:a5:74:4c:fe:e6:31:71:f7: 50:ce:02:78:76:fe:65:39:7e:f6:8b:29:42:1b:5e:42:d7:7b: ad:a5:e1:a9:b0:70:8d:58:4e:93:b9:ce:ba:04:89:3d:a8:4e: f7:45:04:5d:51:12:f4:a4:91:3b:0e:34:ca:61:fa:cf:1e:3d: ef:19:47:ba:31:95:82:e1:bb:76:70:ad:2b:d2:3f:ca:c6:ec: 6c:af:a1:b7:b5:93:f1:00:e0:2e:dd:81:56:0f:c0:16:30:73: 64:69:cd:5b:04:fd:75:55:d6:25:7b:1e:6b:25:ac:42:90:d2: 6d:40:dd:db:4c:f0:8c:e4:8d:9a:92:78:cc:03:a9:d4:d5:cc: c0:2a:53:8d:e4:7d:52:8f:28:9f:5a:5c:2f:fa:c5:e3:cc:85: 4f:1d:b0:7f:fa:ee:a9:5e:7f:cd:06:bf:b8:bd:5d:7c:64:81: 5f:48:0a:5e:76:73:97:38:0a:4f:0f:78:4b:e6:56:cd:52:6e: 3f:8c:28:38:1f:99:c3:dd:58:24:81:90:56:5b:cd:18:d9:5b: a2:1b:e3:77:65:42:66:a8:96:50:65:ec:79:42:4b:46:42:d8: e4:af:d4:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4MzYxMTAvBgNVBAUTKDZGNjc1ODEwMzg1MzRENERCQ0UzQzgxQjVGMkQ4ODYx QzUzNkI2N0MwHhcNMjUwNDI1MDMzMTA5WhcNMjUwNTAyMDMzMTA5WjAYMRYwFAYD VQQDEw02ODBiMDFmZC0yN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dTmgcXNu9z+zfPTzrieFmVNjvjG64ew+absv8C2hTtrNBG8Yoac3OzEXQPx dtFlvK7TxfOPcY9qucamgnx9vhtO3L3ghmwLsl99RBhhNSz5mjJGWJuHlyvqYHQt a5GRaPIX/I+S8VvNKTwhGNRbIwz8yP87dcGtmBV2jks26tu0MPmbVlErahvnNMMu GnKQ7SFGdyKmUMUv0PrmCGs2R1PMHo3s+SPoviJIqXTlqnEj3Gj6JoVhVZ1nbzZk CqBYqU3ws3Mrl9ZQWJsbM0UIlYZDojM41vtM+Jj48bn9u4GchJ46+GtKBpRnQ2/z z91Chm3LsmdxhutewVWzHAOYAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFVG3CB XLdgE93zkTfOlnYw+0GUMB8GA1UdIwQYMBaAFG9nWBA4U01NvOPIG18tiGHFNrZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgzNi9GQTI1RURFMjQz MUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRVMjg0OGdiWHkySVljVTJ0 bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyZFlFRGhUVFUyODQ4Z2JYeTJJWWNVMnRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgzNi9GQTI1RURFMjQzMUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRV Mjg0OGdiWHkySVljVTJ0bncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAPY/jAjd+KyuaRRI6OJaz7znu3O/l5EGyzMxKpXRM/uYxcfdQzgJ4 dv5lOX72iylCG15C13utpeGpsHCNWE6Tuc66BIk9qE73RQRdURL0pJE7DjTKYfrP Hj3vGUe6MZWC4bt2cK0r0j/Kxuxsr6G3tZPxAOAu3YFWD8AWMHNkac1bBP11VdYl ex5rJaxCkNJtQN3bTPCM5I2aknjMA6nU1czAKlON5H1SjyifWlwv+sXjzIVPHbB/ +u6pXn/NBr+4vV18ZIFfSApednOXOApPD3hL5lbNUm4/jCg4H5nD3VgkgZBWW80Y 2VuiG+N3ZUJmqJZQZex5QktGQtjkr9R/ -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:39 2025 by rpki-client