$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft File: RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json) Hash identifier: 9nh2HH94DdIT0CUk5aMxraLeVUt2BknKxz3PExN5uHo= Subject key identifier: 40:93:0D:10:39:D0:36:67:4F:FE:EA:FC:74:94:C3:5D:9B:6F:51:C6 Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 Certificate issuer: /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Certificate serial: 0A0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft Manifest number: 0A07 Signing time: Thu 24 Apr 2025 19:43:58 +0000 Manifest this update: Thu 24 Apr 2025 19:43:57 +0000 Manifest next update: Thu 01 May 2025 19:43:57 +0000 Files and hashes: 1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: J8kxkqbU0hV55NPcyUe5JcWaoE/vtOcmrwh3eA2cHXk=) 2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: L7du7ZJlcmB2nN0ANGTgn5PQ8EaqXu+Bk+I6VvNhSKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2573 (0xa0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Validity Not Before: Apr 24 19:43:57 2025 GMT Not After : May 1 19:43:57 2025 GMT Subject: CN=680a947d-7287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:79:0d:e2:8e:53:7c:99:2e:b3:9a:44:2e: 7c:f8:4e:94:e5:f2:ba:82:83:ed:d9:47:24:8a:04: 63:45:81:b6:0e:65:ae:d8:73:25:e1:90:64:43:18: 3c:d7:3f:19:b2:f9:b2:1f:70:dd:f8:c2:f4:d0:f9: 20:f1:de:4b:2d:0a:62:7b:9c:c9:2f:f1:7a:bb:28: b0:51:5d:30:9c:cc:f5:a6:65:35:f3:7a:b0:2c:69: ee:da:82:0b:8f:94:db:76:8e:53:2e:f9:7b:31:72: 03:73:b5:2c:4b:5d:a6:11:d9:fb:63:52:d6:be:bf: 8b:8a:5a:75:21:aa:82:60:98:4a:59:03:4a:be:e9: 55:3a:27:8c:3f:86:b0:5a:8b:4f:0c:fc:e7:b5:c0: 53:9a:d4:d2:e2:f9:54:7c:57:2b:eb:6e:80:81:8a: 1b:29:f7:a5:b7:6e:3a:4d:90:af:cb:9c:77:1b:a6: 41:e9:83:a7:46:76:4c:bf:b4:25:a3:18:c8:e0:aa: 44:e2:bc:d0:00:07:82:96:1e:7d:e8:54:06:97:47: 19:b7:1a:cc:cf:97:65:7d:31:3e:2c:bb:5d:ed:c3: 59:ea:2e:e6:59:3f:6b:77:eb:e0:db:2f:a2:f3:75: f7:a5:eb:e3:15:3b:93:66:20:e3:2c:30:cc:94:c5: 8c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:93:0D:10:39:D0:36:67:4F:FE:EA:FC:74:94:C3:5D:9B:6F:51:C6 X509v3 Authority Key Identifier: keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:8a:0c:27:7d:09:da:ba:31:3d:1f:31:6d:41:c0:ef:41:25: 8b:6d:e9:fd:fb:0a:11:8f:64:f7:16:0b:9e:68:eb:f4:07:5b: d1:4a:d2:36:3a:b1:bb:4f:5b:00:8d:51:bb:01:4d:04:79:1f: ba:ac:fa:0f:ea:1f:11:98:3a:10:6c:33:c5:e1:fe:91:27:36: b6:42:b8:6f:4a:8b:2c:56:61:d2:bd:66:e1:b4:90:dc:60:b5: 2a:fb:c7:4e:bf:4c:61:89:4b:8a:4a:cd:75:fa:d9:e6:e5:0a: a6:6c:c0:4c:39:05:2d:9f:c1:36:30:7d:89:ab:03:5f:af:cd: f1:dc:9d:88:c4:ae:c5:af:4e:c7:e0:92:ee:49:fa:62:d7:e5: 11:28:13:ef:a1:94:c5:35:08:6d:b9:91:58:f8:88:91:52:ff: 10:d7:cd:6e:c5:58:36:be:e4:df:64:3c:a9:d8:35:90:8b:be: 9c:29:aa:ad:36:53:7d:07:69:52:b6:06:5e:52:bc:a7:75:8a: a9:36:1c:3c:9c:77:a7:8e:cd:76:54:1c:b6:cc:02:7b:0d:00: d6:ba:a2:cc:cd:21:69:d9:be:41:56:aa:0b:27:44:42:58:25: d9:f5:76:68:b4:0e:e7:0c:28:59:b9:5c:0b:27:2f:ca:0e:8c: de:99:cc:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RjAxMTAvBgNVBAUTKDQ3MTkyNjQyRkE5MzM4NjZEMTc3OUU1RTM4RkFCRjU2 QzczMUZCQTcwHhcNMjUwNDI0MTk0MzU3WhcNMjUwNTAxMTk0MzU3WjAYMRYwFAYD VQQDEw02ODBhOTQ3ZC03Mjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzT55DeKOU3yZLrOaRC58+E6U5fK6goPt2UckigRjRYG2DmWu2HMl4ZBkQxg8 1z8ZsvmyH3Dd+ML00Pkg8d5LLQpie5zJL/F6uyiwUV0wnMz1pmU183qwLGnu2oIL j5Tbdo5TLvl7MXIDc7UsS12mEdn7Y1LWvr+Lilp1IaqCYJhKWQNKvulVOieMP4aw WotPDPzntcBTmtTS4vlUfFcr626AgYobKfelt246TZCvy5x3G6ZB6YOnRnZMv7Ql oxjI4KpE4rzQAAeClh596FQGl0cZtxrMz5dlfTE+LLtd7cNZ6i7mWT9rd+vg2y+i 83X3pevjFTuTZiDjLDDMlMWM5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECTDRA5 0DZnT/7q/HSUw12bb1HGMB8GA1UdIwQYMBaAFEcZJkL6kzhm0XeeXjj6v1bHMfun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRGMC80NkU2N0IzMDcx OEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9HYlJkNTVlT1BxX1ZzY3gt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4a21RdnFUT0diUmQ1NWVPUHFfVnNjeC02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRGMC80NkU2N0IzMDcxOEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9H YlJkNTVlT1BxX1ZzY3gtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyigwnfQnaujE9HzFtQcDvQSWLben9+woRj2T3FgueaOv0B1vRStI2 OrG7T1sAjVG7AU0EeR+6rPoP6h8RmDoQbDPF4f6RJza2QrhvSossVmHSvWbhtJDc YLUq+8dOv0xhiUuKSs11+tnm5QqmbMBMOQUtn8E2MH2JqwNfr83x3J2IxK7Fr07H 4JLuSfpi1+URKBPvoZTFNQhtuZFY+IiRUv8Q181uxVg2vuTfZDyp2DWQi76cKaqt NlN9B2lStgZeUryndYqpNhw8nHenjs12VBy2zAJ7DQDWuqLMzSFp2b5BVqoLJ0RC WCXZ9XZotA7nDChZuVwLJy/KDozemcxK -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:22 2025 by rpki-client