$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: mB4F8OgB3XQjOu198bVct7xr3S+jZuyPxehWi7/lIf8= Subject key identifier: D5:CF:8B:EA:5B:70:04:C8:77:C3:40:90:75:06:F5:78:4A:1B:21:A4 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 0787 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 077F Signing time: Thu 24 Apr 2025 21:16:01 +0000 Manifest this update: Thu 24 Apr 2025 21:16:01 +0000 Manifest next update: Thu 01 May 2025 21:16:01 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: iu96z5CiHjumYXBrrfvzT8mSS3rmDo1OSqxWwdyuOvg=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: pJsd3auztkAG0ZglRxVSFOGCBnUaQsBNRyP6xIkzkvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6, serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Apr 24 21:16:01 2025 GMT Not After : May 1 21:16:01 2025 GMT Subject: CN=680aaa11-1be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:6c:1d:fe:97:d1:e5:aa:8a:1a:54:72:00: ac:15:b1:81:17:ee:44:ee:61:3f:cb:7d:ef:5a:aa: ce:7c:74:36:eb:bd:c8:a5:23:56:71:f6:09:09:12: 62:5e:6a:33:cf:70:83:4a:27:a2:f3:f8:f9:97:79: 07:f0:44:2e:36:b1:22:fb:1d:64:89:38:e6:3e:b0: 1e:26:0b:70:1b:b2:6c:14:4c:31:5a:2d:f0:49:40: 18:71:85:e3:47:6c:c0:0b:ce:6d:7c:d5:36:09:e3: e4:39:16:30:3d:bf:93:85:fc:ca:4a:71:65:2b:ef: fd:65:c5:d5:c2:b9:7d:d1:64:23:d5:9f:c5:45:ff: 64:59:00:8d:15:fb:df:e9:64:e9:9c:48:0d:a9:fc: 9a:8b:8a:4c:21:ae:80:58:9b:91:62:90:01:5f:0d: 3f:07:de:03:e0:da:7f:b4:b4:59:fa:79:e5:59:bd: d6:cd:c7:65:47:2c:c1:b5:fd:27:4a:92:49:89:26: 9b:23:22:66:e9:6b:e4:d1:ef:44:b7:b8:5c:8f:e0: 2e:88:eb:17:5f:33:50:2f:2d:86:b5:b0:34:0a:31: b7:5e:43:85:3a:78:a2:78:b3:88:1b:0f:ed:e5:46: 68:58:77:80:53:cd:5e:7d:51:1c:52:0a:04:b4:c1: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CF:8B:EA:5B:70:04:C8:77:C3:40:90:75:06:F5:78:4A:1B:21:A4 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:8d:67:73:ab:cd:97:2b:82:c7:ec:8e:27:89:d5:5e:29:be: 9c:08:e2:90:cc:1c:cf:15:9b:7a:f4:23:ab:44:fd:14:47:fd: f9:96:4f:d2:39:ef:47:c2:a3:a9:76:2b:a7:e5:29:f4:b7:5b: b8:91:ff:0b:9d:63:25:14:58:5e:5f:ea:c6:95:23:77:b4:a3: b3:4e:5c:dc:bc:a8:a8:00:7b:24:ea:c2:33:3e:16:a1:ca:af: a7:32:af:5a:8a:b1:39:66:f8:59:b4:db:50:c0:76:07:d2:61: 9d:fd:9e:86:eb:d4:03:16:44:98:64:eb:a5:ed:98:56:36:79: 4b:98:af:59:fb:e6:cb:f7:7b:6a:37:7d:3f:91:0f:1d:fc:38: 33:d3:8f:20:fc:1b:4f:08:22:59:91:cf:59:f9:dd:36:75:b9: a9:2f:14:29:5a:97:93:6f:7c:73:eb:2d:30:7f:86:88:2f:43: df:70:af:ff:d3:80:38:1a:4b:ac:a2:20:d0:32:d7:02:0e:36: ff:a0:0d:23:3d:39:47:cd:ce:a4:02:97:b9:55:ca:63:a9:0f: 6b:4f:68:91:aa:c7:54:8d:91:da:7e:9f:99:9f:cf:fb:23:88: 57:9b:5b:d8:a0:2e:aa:ca:92:21:ae:17:bd:5f:99:7c:b4:e5: f4:a7:eb:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjUwNDI0MjExNjAxWhcNMjUwNTAxMjExNjAxWjAYMRYwFAYD VQQDEw02ODBhYWExMS0xYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V5sHf6X0eWqihpUcgCsFbGBF+5E7mE/y33vWqrOfHQ2673IpSNWcfYJCRJi Xmozz3CDSiei8/j5l3kH8EQuNrEi+x1kiTjmPrAeJgtwG7JsFEwxWi3wSUAYcYXj R2zAC85tfNU2CePkORYwPb+ThfzKSnFlK+/9ZcXVwrl90WQj1Z/FRf9kWQCNFfvf 6WTpnEgNqfyai4pMIa6AWJuRYpABXw0/B94D4Np/tLRZ+nnlWb3WzcdlRyzBtf0n SpJJiSabIyJm6Wvk0e9Et7hcj+AuiOsXXzNQLy2GtbA0CjG3XkOFOniieLOIGw/t 5UZoWHeAU81efVEcUgoEtMFDBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXPi+pb cATId8NAkHUG9XhKGyGkMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzjWdzq82XK4LH7I4nidVeKb6cCOKQzBzPFZt69COrRP0UR/35lk/S Oe9HwqOpdiun5Sn0t1u4kf8LnWMlFFheX+rGlSN3tKOzTlzcvKioAHsk6sIzPhah yq+nMq9airE5ZvhZtNtQwHYH0mGd/Z6G69QDFkSYZOul7ZhWNnlLmK9Z++bL93tq N30/kQ8d/Dgz048g/BtPCCJZkc9Z+d02dbmpLxQpWpeTb3xz6y0wf4aIL0PfcK// 04A4GkusoiDQMtcCDjb/oA0jPTlHzc6kApe5VcpjqQ9rT2iRqsdUjZHafp+Zn8/7 I4hXm1vYoC6qypIhrhe9X5l8tOX0p+vh -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:38 2025 by rpki-client