$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft File: L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json) Hash identifier: 81lMSSsyukLex+WbeiWHcRhRYekqtRiqbPSzLr59jtU= Subject key identifier: 99:84:27:82:5D:C1:83:D7:E2:35:BC:9D:90:A3:43:88:AE:6F:6D:BF Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 Certificate issuer: /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Certificate serial: 0795 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft Manifest number: 0790 Signing time: Thu 24 Apr 2025 21:08:50 +0000 Manifest this update: Thu 24 Apr 2025 21:08:49 +0000 Manifest next update: Thu 01 May 2025 21:08:49 +0000 Files and hashes: 1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: NQcKtHVQDGZrWEB/mYbKND+hIOKy9Z1UczgHfagSbN4=) 2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: M4pjCMYYfpB1KEdpnrpm8Bjvlm6TuG5EpxaK1nBrHRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1941 (0x795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Validity Not Before: Apr 24 21:08:49 2025 GMT Not After : May 1 21:08:49 2025 GMT Subject: CN=680aa861-b0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:cc:79:0b:c8:a7:b5:c7:dd:98:92:ce:4b: 99:d7:b9:9c:1a:01:b1:1b:88:d6:02:12:b1:5a:06: 63:42:ce:75:c3:6f:61:5f:de:f3:23:ca:1c:02:aa: e6:b7:53:31:eb:e2:05:56:68:29:91:d2:fe:c0:f6: 00:69:ff:c8:65:24:12:60:c6:62:de:c9:8c:c7:ed: df:67:97:28:5c:aa:13:3d:2c:64:b4:2a:d4:5d:c3: a8:33:f2:4a:36:23:0b:69:4b:0d:6f:8a:a6:36:5a: fc:af:a1:1c:4c:dd:cb:c4:11:8f:27:7c:5c:0b:33: f6:93:a3:12:74:d1:02:a4:17:6c:d6:80:36:c6:de: ab:ef:10:99:eb:7f:f1:31:41:3b:87:8f:a0:b8:b7: 45:18:6f:2d:14:65:22:54:20:af:8d:97:70:a2:aa: ee:9a:e4:c1:33:3b:2e:33:98:31:ff:b0:a6:38:f1: e4:f7:23:f8:61:53:35:22:6b:3c:ad:ce:0f:b8:3b: 70:4c:86:aa:1e:13:d0:e3:e1:04:db:24:cf:8d:32: 4f:bf:96:d1:b5:a0:96:f5:f6:4b:22:85:dd:00:51: ac:58:38:ee:cf:d0:2f:09:2b:1e:0c:1d:bc:3d:f6: 36:ab:8a:98:8f:3b:c2:9d:4e:dd:e7:87:83:05:61: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:84:27:82:5D:C1:83:D7:E2:35:BC:9D:90:A3:43:88:AE:6F:6D:BF X509v3 Authority Key Identifier: keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0c:b7:00:33:08:ff:81:2a:ba:b7:8b:88:17:6b:f9:be:60: 7c:3f:8e:37:e5:f8:20:36:10:a0:c4:85:52:d3:13:10:2c:4e: 39:f4:b9:44:f0:7c:b6:75:8d:b3:f3:72:59:f0:ad:0a:60:5c: 02:40:0d:b3:12:22:10:06:46:33:82:07:96:ea:46:c7:2e:a7: 99:0a:ef:98:f9:c2:2b:d3:af:84:38:07:0d:3c:1a:51:24:7b: d0:1b:17:ba:70:3d:dd:7a:00:d6:5b:fd:02:06:b3:01:b6:08: cb:08:0f:aa:55:5e:f2:f3:a9:0c:f1:4a:a5:63:23:23:a9:5f: a4:fd:b2:6c:c3:a6:0d:07:87:f8:a9:86:ea:1e:80:e3:46:3b: 95:64:98:85:ae:f5:bf:f1:b0:4b:7d:17:ae:d5:ee:03:b5:d1: be:61:41:76:75:cd:eb:1f:07:6a:52:6f:ec:0b:88:a4:95:f1: d3:ab:ef:58:22:c0:ba:e6:bd:83:e8:1d:b4:0a:5d:40:7f:34: 6f:27:3b:9e:95:a1:71:d1:8a:19:b1:44:01:97:19:72:f4:a3: e2:b2:84:98:7a:d1:be:5b:b0:57:11:0f:b0:b9:ba:62:9c:5b: 46:16:ab:65:36:04:14:f7:c9:14:92:80:cc:e7:3f:e5:3f:ea: f4:66:09:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRDYxMTAvBgNVBAUTKDJGREY3QTZBRjkwNERGMkNENDdFNjVDQ0MwQzlDNUND QkYyMzk4RTUwHhcNMjUwNDI0MjEwODQ5WhcNMjUwNTAxMjEwODQ5WjAYMRYwFAYD VQQDEw02ODBhYTg2MS1iMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIPMeQvIp7XH3ZiSzkuZ17mcGgGxG4jWAhKxWgZjQs51w29hX97zI8ocAqrm t1Mx6+IFVmgpkdL+wPYAaf/IZSQSYMZi3smMx+3fZ5coXKoTPSxktCrUXcOoM/JK NiMLaUsNb4qmNlr8r6EcTN3LxBGPJ3xcCzP2k6MSdNECpBds1oA2xt6r7xCZ63/x MUE7h4+guLdFGG8tFGUiVCCvjZdwoqrumuTBMzsuM5gx/7CmOPHk9yP4YVM1Ims8 rc4PuDtwTIaqHhPQ4+EE2yTPjTJPv5bRtaCW9fZLIoXdAFGsWDjuz9AvCSseDB28 PfY2q4qYjzvCnU7d54eDBWENTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmEJ4Jd wYPX4jW8nZCjQ4iub22/MB8GA1UdIwQYMBaAFC/femr5BN8s1H5lzMDJxcy/I5jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNENi8xMzlFMTI0NDA1 MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5elVmbVhNd01uRnpMOGpt T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5OTZhdmtFM3l6VWZtWE13TW5Gekw4am1PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNENi8xMzlFMTI0NDA1MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5 elVmbVhNd01uRnpMOGptT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMDLcAMwj/gSq6t4uIF2v5vmB8P4435fggNhCgxIVS0xMQLE459LlE 8Hy2dY2z83JZ8K0KYFwCQA2zEiIQBkYzggeW6kbHLqeZCu+Y+cIr06+EOAcNPBpR JHvQGxe6cD3degDWW/0CBrMBtgjLCA+qVV7y86kM8UqlYyMjqV+k/bJsw6YNB4f4 qYbqHoDjRjuVZJiFrvW/8bBLfReu1e4DtdG+YUF2dc3rHwdqUm/sC4iklfHTq+9Y IsC65r2D6B20Cl1AfzRvJzuelaFx0YoZsUQBlxly9KPisoSYetG+W7BXEQ+wubpi nFtGFqtlNgQU98kUkoDM5z/lP+r0ZglH -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:32 2025 by rpki-client