$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json) Hash identifier: dkEUWe1UsyUx//m21h9vt69bJod0ROTHJQ8qsiGlvzU= Subject key identifier: 7B:0E:71:3D:FA:75:18:AD:A1:80:5A:D5:1B:FD:E3:51:2F:18:67:9D Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft Manifest number: 031D Signing time: Fri 25 Apr 2025 00:54:48 +0000 Manifest this update: Fri 25 Apr 2025 00:54:47 +0000 Manifest next update: Fri 02 May 2025 00:54:47 +0000 Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: MW2KOORwnStYPAGrF9r8M7GMPZXZ+QdsQlhte185nQo=) 2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: BWjw8ZzgxeIsXktsSggwFqoGIGBV9RKmqBd6UmUawiw=) 3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: w5wAGuBp2YZuw7r2gpx/dOhrAuPlBh9HGiqoIoNxrIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: Apr 25 00:54:47 2025 GMT Not After : May 2 00:54:47 2025 GMT Subject: CN=680add57-1c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:26:36:83:e9:54:a8:7a:d0:40:20:8c:26:33: 7f:86:c1:24:aa:23:b4:80:e1:4e:83:68:83:a8:7c: 54:91:2e:02:8c:8f:bf:e8:fc:70:4f:e7:4d:a3:94: 3c:f0:55:a9:6d:72:f5:18:b3:d5:b7:45:c3:be:b6: 63:4b:d2:ce:b6:78:92:55:68:22:8b:d8:24:3d:20: 31:b5:b6:7e:9c:7c:a3:85:70:8b:ca:1f:4b:8e:bb: 3f:ee:eb:50:41:96:54:28:69:e8:b9:90:35:0e:38: 32:dc:fd:9e:2c:89:db:c8:01:a1:73:18:e7:fe:c7: 2c:f8:b2:86:18:c6:5f:18:a7:2c:07:fb:62:a1:e3: 9c:41:8d:c3:b9:d4:d2:16:9f:24:75:c8:f7:6a:24: d5:41:e8:fc:65:15:a9:0e:47:04:18:ae:b9:a5:38: b0:03:57:95:bd:ee:5b:5c:16:a0:dd:2f:2d:15:1c: 3f:7e:f9:3e:a7:96:02:d7:25:6d:cd:ef:aa:5c:90: b1:d3:e2:cf:6e:7f:78:e4:58:e0:40:27:80:d2:ab: 0e:33:44:a9:97:d7:e8:ed:3f:1d:31:88:fc:ec:a2: 7a:aa:87:53:a2:b8:eb:4e:ce:04:78:0a:23:82:4f: 66:cd:23:58:44:23:0f:ae:a6:ab:cc:f0:7e:b0:2f: 89:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0E:71:3D:FA:75:18:AD:A1:80:5A:D5:1B:FD:E3:51:2F:18:67:9D X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:1d:07:e9:f3:a0:9f:e2:27:90:46:5a:6c:8e:a2:3e:e3:e0: cd:19:b2:4f:ed:e4:ac:60:9f:71:3d:40:6f:00:41:64:54:bf: 12:9c:56:7c:56:d7:46:d4:d6:3a:7d:37:5d:99:9c:31:b9:46: 60:fc:60:14:58:87:69:3a:9b:c1:9d:6d:eb:4a:ab:11:19:02: 35:ec:de:8a:02:57:53:1a:d4:2e:5b:f2:d3:62:86:46:9e:f8: f1:c8:2a:7d:7e:60:c8:01:d8:88:bf:3b:91:70:17:4e:29:b8: f0:5c:51:8e:c3:58:64:55:5d:72:df:a5:7e:2e:22:35:86:1f: 69:8d:4f:eb:0f:b5:f2:66:6b:38:ed:0c:08:17:64:49:74:25: 48:51:b1:b2:a2:d4:92:45:28:03:37:81:31:6a:60:2b:b7:85: 3b:d2:19:0e:7e:72:76:7a:c4:3c:39:ad:ad:43:9c:42:19:47: 0e:e5:31:5e:b8:c6:2c:d9:a0:d1:ae:c4:aa:2b:cd:61:7b:ea: e0:8a:80:91:b0:33:f4:d9:e0:e2:28:13:68:b0:e5:c0:b6:b5: d3:5b:bc:ea:ea:89:e1:2d:e4:24:af:bd:a0:a5:87:36:be:b1: e4:d8:60:bc:8d:89:ba:8a:89:88:38:ad:ec:47:81:7b:67:88: ad:94:9a:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjUwNDI1MDA1NDQ3WhcNMjUwNTAyMDA1NDQ3WjAYMRYwFAYD VQQDEw02ODBhZGQ1Ny0xYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iY2g+lUqHrQQCCMJjN/hsEkqiO0gOFOg2iDqHxUkS4CjI+/6PxwT+dNo5Q8 8FWpbXL1GLPVt0XDvrZjS9LOtniSVWgii9gkPSAxtbZ+nHyjhXCLyh9Ljrs/7utQ QZZUKGnouZA1Djgy3P2eLInbyAGhcxjn/scs+LKGGMZfGKcsB/tioeOcQY3DudTS Fp8kdcj3aiTVQej8ZRWpDkcEGK65pTiwA1eVve5bXBag3S8tFRw/fvk+p5YC1yVt ze+qXJCx0+LPbn945FjgQCeA0qsOM0Spl9fo7T8dMYj87KJ6qodTorjrTs4EeAoj gk9mzSNYRCMPrqarzPB+sC+JuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsOcT36 dRitoYBa1Rv941EvGGedMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTM1RS9GQTkyNzc4MkM2MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVN VlY4cjlIc1ZIZS1ITkN0eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhHQfp86Cf4ieQRlpsjqI+4+DNGbJP7eSsYJ9xPUBvAEFkVL8SnFZ8 VtdG1NY6fTddmZwxuUZg/GAUWIdpOpvBnW3rSqsRGQI17N6KAldTGtQuW/LTYoZG nvjxyCp9fmDIAdiIvzuRcBdOKbjwXFGOw1hkVV1y36V+LiI1hh9pjU/rD7XyZms4 7QwIF2RJdCVIUbGyotSSRSgDN4ExamArt4U70hkOfnJ2esQ8Oa2tQ5xCGUcO5TFe uMYs2aDRrsSqK81he+rgioCRsDP02eDiKBNosOXAtrXTW7zq6onhLeQkr72gpYc2 vrHk2GC8jYm6iomIOK3sR4F7Z4itlJo8 -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:11 2025 by rpki-client