$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft File: mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json) Hash identifier: POBZkfNgXq5yPXa5S/ixr8wX3Gsm80/E6D+GEPhnj/c= Subject key identifier: 68:0C:2B:B6:5F:C8:67:6D:1A:E3:18:49:DC:6E:5F:EB:8B:4C:21:AC Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft Manifest number: 18CD Signing time: Thu 24 Apr 2025 17:18:16 +0000 Manifest this update: Thu 24 Apr 2025 17:18:15 +0000 Manifest next update: Thu 01 May 2025 17:18:15 +0000 Files and hashes: 1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: Xqb596ApF4Q2D5/yK1C7W4NHjvNkORrS6lpKNyocsG4=) 2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: Fb8k8+AedY7WXxvThRoDU2Yv91zXaAiC2+Ql7v0J/eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Validity Not Before: Apr 24 17:18:15 2025 GMT Not After : May 1 17:18:15 2025 GMT Subject: CN=680a7257-d36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:da:71:7f:86:9c:d0:70:6a:46:09:ee:67: d7:72:f1:29:62:df:8e:8f:56:7b:18:16:63:d0:6f: a2:42:0c:ca:28:b1:7b:ef:5b:cd:2a:7e:d9:b4:e4: 15:ce:e9:0a:de:f0:af:ad:4b:42:fa:52:9c:aa:36: 1c:60:1b:85:9e:a1:c6:79:b1:43:e5:07:cb:1e:ef: 9a:ca:45:85:82:4a:20:20:68:7f:62:11:68:2e:10: a6:77:09:38:ce:8c:30:fe:42:da:04:62:20:a1:39: 68:31:7c:84:d5:ad:9c:0c:ed:3f:67:8c:35:22:c7: c0:7a:a7:a2:33:47:c2:ee:5c:54:85:c4:b3:e6:f3: 0b:f7:d0:ad:7d:26:1b:96:8b:cb:70:ec:52:00:9d: 57:e5:96:35:8e:33:0e:f5:24:10:52:67:10:76:1d: 0f:6a:ef:b9:93:0d:52:6c:28:c3:de:41:a4:9b:d1: d5:54:21:ca:7d:c8:55:00:c5:fe:53:b2:ec:eb:87: de:8b:95:ce:6d:5f:51:42:84:fb:25:76:7c:ce:2d: 79:c5:c9:e8:7e:a3:f9:1f:cf:cb:e4:78:e3:a7:1b: d5:91:ba:3f:13:0c:36:20:de:28:e9:4d:16:61:0d: b9:d3:81:d9:6f:20:12:b0:af:32:4c:07:79:91:4b: 14:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:2B:B6:5F:C8:67:6D:1A:E3:18:49:DC:6E:5F:EB:8B:4C:21:AC X509v3 Authority Key Identifier: keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:61:8d:1e:30:39:af:f6:7d:4b:45:8c:2a:f9:a5:65:ef:9e: e5:3a:4a:63:d5:a6:12:3d:84:a0:ec:0c:e3:79:7d:be:19:07: 66:13:99:d6:3e:2e:a1:9d:ba:be:e6:c1:7f:70:15:7e:fd:07: db:22:d2:17:be:49:dc:89:ea:c0:0f:98:0a:e3:c9:30:98:1d: 32:de:32:04:64:71:4d:6a:6b:14:74:db:9c:ae:49:9c:9d:e7: 2e:22:aa:91:56:ae:ac:e5:a9:3e:27:ad:e1:79:6a:7a:89:be: b6:c3:ca:c9:96:c1:5d:0e:98:cf:f3:de:d5:a6:2c:2f:9c:95: 2c:5d:e1:f9:a1:da:2d:b9:88:4c:e4:06:a9:39:17:2d:d6:70: 9a:4e:5d:c5:10:cf:06:41:ce:a1:da:2a:98:9f:d6:7d:10:88: ae:d5:9d:12:fc:46:32:a9:81:d8:77:6e:af:9c:37:24:81:d7: 15:43:d4:53:b7:5b:5f:ff:3e:c4:6f:b3:f5:c5:f7:fd:14:33: 12:e5:1f:6b:15:83:64:fe:62:0c:93:33:e4:9b:f1:ec:33:1f: 88:59:82:ed:c9:f9:39:70:fc:44:ab:0c:e4:37:cd:d4:36:18: e4:9c:1b:fc:98:1c:19:f1:07:fb:ac:f2:30:65:d0:7d:ae:ce: 8c:b8:96:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz QjkyNTk1RTEwHhcNMjUwNDI0MTcxODE1WhcNMjUwNTAxMTcxODE1WjAYMRYwFAYD VQQDEw02ODBhNzI1Ny1kMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYfacX+GnNBwakYJ7mfXcvEpYt+Oj1Z7GBZj0G+iQgzKKLF771vNKn7ZtOQV zukK3vCvrUtC+lKcqjYcYBuFnqHGebFD5QfLHu+aykWFgkogIGh/YhFoLhCmdwk4 zoww/kLaBGIgoTloMXyE1a2cDO0/Z4w1IsfAeqeiM0fC7lxUhcSz5vML99CtfSYb lovLcOxSAJ1X5ZY1jjMO9SQQUmcQdh0Pau+5kw1SbCjD3kGkm9HVVCHKfchVAMX+ U7Ls64fei5XObV9RQoT7JXZ8zi15xcnofqP5H8/L5HjjpxvVkbo/Eww2IN4o6U0W YQ2504HZbyASsK8yTAd5kUsUiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgMK7Zf yGdtGuMYSdxuX+uLTCGsMB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDExOS9FRUI3MUJFMjEzRjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMz RzVtRVk3T3VWb1E3a2xsZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEYY0eMDmv9n1LRYwq+aVl757lOkpj1aYSPYSg7AzjeX2+GQdmE5nW Pi6hnbq+5sF/cBV+/QfbItIXvkncierAD5gK48kwmB0y3jIEZHFNamsUdNucrkmc necuIqqRVq6s5ak+J63heWp6ib62w8rJlsFdDpjP897VpiwvnJUsXeH5odotuYhM 5AapORct1nCaTl3FEM8GQc6h2iqYn9Z9EIiu1Z0S/EYyqYHYd26vnDckgdcVQ9RT t1tf/z7Eb7P1xff9FDMS5R9rFYNk/mIMkzPkm/HsMx+IWYLtyfk5cPxEqwzkN83U NhjknBv8mBwZ8Qf7rPIwZdB9rs6MuJa/ -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:10 2025 by rpki-client