$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: GApVKXqoQ/WzOxt+ZgP++rigjPC2jp/5NELyjVsqO3o= Subject key identifier: A7:0E:7E:1D:4A:29:41:2B:36:19:4E:75:2D:48:18:73:03:21:C7:A9 Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0D90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0D7B Signing time: Thu 24 Apr 2025 17:55:35 +0000 Manifest this update: Thu 24 Apr 2025 17:55:35 +0000 Manifest next update: Thu 01 May 2025 17:55:35 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: GzEagfn16XESAZu4R9q4B4GAfksG8LzYpd3KVGJC3ns=) 2: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: tP21nihbHvOPN0o7Q7ZnYvoB4lWQWRK3//ALxViNCn4=) 3: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: XcKMqxWrgr72X1rDOMRNGWOhRv7K/Bosj9SE1/JpnIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3472 (0xd90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Apr 24 17:55:35 2025 GMT Not After : May 1 17:55:35 2025 GMT Subject: CN=680a7b17-df15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:37:28:15:aa:8d:3f:8c:6c:fd:8d:f6:ea:c7: e8:13:16:5d:ba:9d:ce:fa:6f:68:72:8a:62:3e:a9: a8:11:ff:c8:54:31:50:9b:59:33:4e:24:cd:6d:46: 09:3d:0f:14:b4:c0:cf:6e:88:60:ef:a7:0b:49:54: 84:26:cd:ff:39:f7:5f:be:de:c2:35:14:06:48:93: da:93:7b:70:9d:d8:13:f3:2a:d1:8c:2f:ff:c6:f9: 94:41:17:bd:9a:2e:33:24:f7:e0:d8:12:b2:32:19: f4:71:6f:76:af:61:d5:3e:cd:76:4e:79:42:99:2f: e3:3f:91:25:d1:33:85:c9:fa:6d:de:da:ed:18:d9: a6:92:c5:88:49:75:fd:18:b2:b8:72:33:15:6d:4f: d3:91:20:29:a7:bb:4f:c8:87:41:38:b4:85:46:30: a0:00:aa:27:3e:bf:4a:b7:96:a0:b5:df:ed:73:97: bc:04:1c:9e:41:ad:f6:e2:66:bc:55:bc:4b:c6:51: 7d:b9:5e:18:6a:c0:88:66:4b:ee:ea:9d:38:bc:43: 5f:65:8b:50:6d:f2:e4:6c:15:66:c8:f6:c6:35:0b: bc:18:a0:23:0d:38:ae:5c:09:94:17:d1:de:7f:cb: ce:68:89:bc:81:af:74:93:f6:9b:fc:09:49:44:b5: ac:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0E:7E:1D:4A:29:41:2B:36:19:4E:75:2D:48:18:73:03:21:C7:A9 X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:61:15:0f:fe:15:8b:15:9b:32:03:e2:16:57:60:69:9c:22: 66:70:17:f3:0b:24:e5:c0:3c:f1:96:73:a4:fa:38:f9:93:c8: ce:6b:93:71:69:ad:1d:1e:54:b2:2d:e1:bf:6f:11:32:bb:43: 9b:e7:62:31:1a:65:88:f9:d5:de:0b:34:d0:ff:d3:ff:09:86: 95:de:1f:6a:9f:c1:69:3f:72:37:e6:e8:9e:91:d7:e6:a6:bb: af:c8:3f:0f:9f:00:b8:b1:9b:55:d1:f6:07:d0:33:24:05:ea: c2:6e:f6:d8:65:17:a7:12:58:8c:28:b9:50:6d:e7:e5:c6:d5: 9f:83:9e:7f:42:d7:e8:d6:9c:6a:43:01:ab:ec:98:ce:4f:74: 1c:44:e0:7f:b5:87:eb:82:a9:1e:0b:1f:a0:59:d7:ec:f4:99: 5c:c4:49:62:5e:90:a4:c3:25:1d:12:b1:71:63:0c:f8:48:d1: 71:29:59:0d:d9:f0:2f:e3:c8:1f:dd:51:7c:c1:69:d7:5f:e8: 82:68:01:18:7b:24:1e:02:ad:25:61:23:f7:03:e9:6f:fd:97: 5d:91:07:a7:61:61:db:29:61:15:b2:10:a8:f3:d2:50:b0:ca: e5:ae:d9:35:5a:a7:86:94:5e:0a:20:f7:8c:db:a5:cb:1c:0b: 08:71:25:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjUwNDI0MTc1NTM1WhcNMjUwNTAxMTc1NTM1WjAYMRYwFAYD VQQDEw02ODBhN2IxNy1kZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zcoFaqNP4xs/Y326sfoExZdup3O+m9ocopiPqmoEf/IVDFQm1kzTiTNbUYJ PQ8UtMDPbohg76cLSVSEJs3/Ofdfvt7CNRQGSJPak3twndgT8yrRjC//xvmUQRe9 mi4zJPfg2BKyMhn0cW92r2HVPs12TnlCmS/jP5El0TOFyfpt3trtGNmmksWISXX9 GLK4cjMVbU/TkSApp7tPyIdBOLSFRjCgAKonPr9Kt5agtd/tc5e8BByeQa324ma8 VbxLxlF9uV4YasCIZkvu6p04vENfZYtQbfLkbBVmyPbGNQu8GKAjDTiuXAmUF9He f8vOaIm8ga90k/ab/AlJRLWsawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcOfh1K KUErNhlOdS1IGHMDIcepMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNYRUP/hWLFZsyA+IWV2BpnCJmcBfzCyTlwDzxlnOk+jj5k8jOa5Nx aa0dHlSyLeG/bxEyu0Ob52IxGmWI+dXeCzTQ/9P/CYaV3h9qn8FpP3I35uiekdfm pruvyD8PnwC4sZtV0fYH0DMkBerCbvbYZRenEliMKLlQbeflxtWfg55/Qtfo1pxq QwGr7JjOT3QcROB/tYfrgqkeCx+gWdfs9JlcxEliXpCkwyUdErFxYwz4SNFxKVkN 2fAv48gf3VF8wWnXX+iCaAEYeyQeAq0lYSP3A+lv/ZddkQenYWHbKWEVshCo89JQ sMrlrtk1WqeGlF4KIPeM26XLHAsIcSW6 -----END CERTIFICATE-----Generated at Sat Apr 26 16:49:46 2025 by rpki-client