$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft File: 5tdlUVTja2lxFXTiB5a2gCxDtxU.mft (raw, json) Hash identifier: yUaawCFzQnbx6lMidM2JYd+nYWN9iufxuH+qndlzMEU= Subject key identifier: FE:3C:B2:8C:BE:0A:03:43:C5:82:73:C6:C2:D3:02:21:1D:3D:5A:D6 Authority key identifier: E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15 Certificate issuer: /CN=A9118EDB/serialNumber=E6D7655154E36B69711574E20796B6802C43B715 Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft Manifest number: 04CB Signing time: Thu 24 Apr 2025 23:36:22 +0000 Manifest this update: Thu 24 Apr 2025 23:36:22 +0000 Manifest next update: Thu 01 May 2025 23:36:22 +0000 Files and hashes: 1: 5tdlUVTja2lxFXTiB5a2gCxDtxU.crl (hash: 0eJLcSx3QGGNb9eti632zqinjiFOQtb+D2y7iGOmnyo=) 2: BA4D01561DE011ECB872BC27C4F9AE02.roa (hash: wf1/Eq3D00+NNmg7EFhhzne2/Whu9vsX8s0Y7UfB8bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118EDB, serialNumber=E6D7655154E36B69711574E20796B6802C43B715 Validity Not Before: Apr 24 23:36:22 2025 GMT Not After : May 1 23:36:22 2025 GMT Subject: CN=680acaf6-3a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:d1:0c:7b:06:ba:76:b0:1f:41:ac:7d:5a: 03:8a:c0:29:72:9b:70:0a:65:ee:eb:41:8b:fe:3a: 20:b5:e5:d0:b9:6a:ba:b2:d2:10:f8:8f:72:8b:f0: 6c:26:20:61:db:52:bb:28:95:5d:ff:cf:ca:12:3d: c2:4c:b1:9e:e4:ee:a5:bd:61:b5:da:bc:34:70:22: 42:7d:94:1f:7a:11:d5:cf:f1:4f:c5:79:ac:ea:52: 6b:0d:5f:33:d4:8d:c1:c7:21:c1:0c:5a:31:7f:6b: 24:ba:6e:75:8c:88:6c:5a:a6:e6:fe:40:32:78:34: f4:e2:86:07:bc:ad:aa:90:23:1c:21:83:46:e8:40: d6:7a:a5:a4:6f:e7:39:25:e2:49:b5:a1:2c:57:09: eb:34:91:f7:ad:ab:44:02:09:e6:7a:85:3e:2d:bc: 07:79:90:fd:db:1d:a9:22:4b:73:2a:a4:e9:f5:1f: 10:92:9d:05:2b:b7:82:f4:3e:bb:ac:79:51:51:f0: cd:54:0a:c7:3c:13:e1:1c:9a:da:27:5d:e4:cf:8d: 2d:a6:d3:b7:56:ea:77:e2:96:69:9f:9e:55:68:23: 47:95:7f:38:d9:42:3f:d0:90:e3:1e:f1:86:c8:76: 1c:53:bb:64:a4:c6:28:ca:62:03:aa:54:f7:1a:0e: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3C:B2:8C:BE:0A:03:43:C5:82:73:C6:C2:D3:02:21:1D:3D:5A:D6 X509v3 Authority Key Identifier: keyid:E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:9e:59:64:a9:2c:99:43:4f:47:74:ad:d0:c0:c2:0e:6c:88: 8f:33:51:1e:f0:40:7b:1e:1e:3b:c9:18:7c:e4:46:95:6a:d0: bf:03:be:ef:94:06:6a:ae:51:75:7a:96:98:cf:df:26:9f:d3: cb:51:ff:79:93:86:cd:ea:f0:b1:4c:55:5c:a7:71:4b:78:d8: 75:c9:ab:ea:00:4f:ce:fb:e6:ef:48:80:a9:51:41:0e:bb:ab: 05:b4:a2:83:87:73:6d:a2:c5:c2:97:66:a7:5a:3c:54:b8:3e: 91:0d:95:bc:66:70:82:1e:0d:34:c2:e2:42:9d:f0:e6:a8:62: 84:6a:d8:ce:20:e0:0e:a0:da:c7:52:af:05:12:fa:50:8a:a2: d3:78:54:8e:cb:a3:01:38:2b:fc:9f:68:f3:8a:91:a3:c2:d0: 70:60:6e:5a:a0:e5:8d:fe:74:57:31:bb:7c:30:bf:b5:6b:8b: d1:54:18:3d:d6:1d:d3:3a:d5:44:04:9f:fb:e6:44:74:b8:8e: 1a:83:c0:7b:1a:37:c5:fa:94:8e:44:fd:af:58:3a:4e:23:e1: 59:cf:97:a8:9b:a4:7b:71:55:7a:c9:e9:89:ff:6a:92:e2:c5: d0:43:34:9f:81:37:d2:be:12:96:3e:dc:53:0c:ec:6d:7a:7c: 4f:87:05:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFREIxMTAvBgNVBAUTKEU2RDc2NTUxNTRFMzZCNjk3MTE1NzRFMjA3OTZCNjgw MkM0M0I3MTUwHhcNMjUwNDI0MjMzNjIyWhcNMjUwNTAxMjMzNjIyWjAYMRYwFAYD VQQDEw02ODBhY2FmNi0zYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw37RDHsGunawH0GsfVoDisApcptwCmXu60GL/jogteXQuWq6stIQ+I9yi/Bs JiBh21K7KJVd/8/KEj3CTLGe5O6lvWG12rw0cCJCfZQfehHVz/FPxXms6lJrDV8z 1I3BxyHBDFoxf2skum51jIhsWqbm/kAyeDT04oYHvK2qkCMcIYNG6EDWeqWkb+c5 JeJJtaEsVwnrNJH3ratEAgnmeoU+LbwHeZD92x2pIktzKqTp9R8Qkp0FK7eC9D67 rHlRUfDNVArHPBPhHJraJ13kz40tptO3Vup34pZpn55VaCNHlX842UI/0JDjHvGG yHYcU7tkpMYoymIDqlT3Gg6DjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP48soy+ CgNDxYJzxsLTAiEdPVrWMB8GA1UdIwQYMBaAFObXZVFU42tpcRV04geWtoAsQ7cV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVEQi8zMDlCRTZCRTFE REQxMUVDODgzQjQ0MjNDNEY5QUUwMi81dGRsVVZUamEybHhGWFRpQjVhMmdDeER0 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0ZGxVVlRqYTJseEZYVGlCNWEyZ0N4RHR4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEVEQi8zMDlCRTZCRTFEREQxMUVDODgzQjQ0MjNDNEY5QUUwMi81dGRsVVZUamEy bHhGWFRpQjVhMmdDeER0eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVnllkqSyZQ09HdK3QwMIObIiPM1Ee8EB7Hh47yRh85EaVatC/A77v lAZqrlF1epaYz98mn9PLUf95k4bN6vCxTFVcp3FLeNh1yavqAE/O++bvSICpUUEO u6sFtKKDh3NtosXCl2anWjxUuD6RDZW8ZnCCHg00wuJCnfDmqGKEatjOIOAOoNrH Uq8FEvpQiqLTeFSOy6MBOCv8n2jzipGjwtBwYG5aoOWN/nRXMbt8ML+1a4vRVBg9 1h3TOtVEBJ/75kR0uI4ag8B7GjfF+pSORP2vWDpOI+FZz5eom6R7cVV6yemJ/2qS 4sXQQzSfgTfSvhKWPtxTDOxtenxPhwXn -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:53 2025 by rpki-client