$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json) Hash identifier: 9gGK7UYveOin4mQlkRALW4uj0vm+aoXKWpSkMc12Ybw= Subject key identifier: 08:70:D9:39:6A:2E:86:E6:F3:D4:CB:30:03:76:61:D2:19:B3:3C:12 Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft Manifest number: 4D Signing time: Thu 24 Apr 2025 19:13:45 +0000 Manifest this update: Thu 24 Apr 2025 19:13:44 +0000 Manifest next update: Thu 01 May 2025 19:13:44 +0000 Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: mkOAD0mLx1HWp85ODOr3cBnv/UqhM/T7s0HLw7X6yHQ=) 2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: m/ts4+3+KZRfhNwqXbAAZsLEK7jXSiR3RbLIiPT9ph8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Validity Not Before: Apr 24 19:13:44 2025 GMT Not After : May 1 19:13:44 2025 GMT Subject: CN=680a8d69-60b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:8d:c9:07:7d:0c:19:75:55:7a:ce:22:15: 55:55:a9:a5:fe:d8:7f:38:6c:0f:34:f9:c5:85:ea: 79:a4:9e:84:c7:40:87:c3:af:3c:f1:a7:a3:ad:c7: 10:45:c4:75:2b:7e:a9:cc:a4:5a:cb:29:2d:99:2b: 97:39:ba:b7:0e:0b:6f:f2:11:d6:f6:fc:7d:76:54: b5:11:79:c0:cc:19:76:75:60:80:69:6c:82:86:40: 2d:62:db:6d:a5:bb:7d:6a:75:d2:5c:37:5f:d5:59: a1:79:f8:14:66:aa:a2:55:95:29:c1:73:1d:cc:a8: 1b:ba:b3:d9:65:18:bd:b7:94:63:45:00:26:da:be: 3d:38:2d:56:d9:74:66:73:1d:e9:47:b8:a4:85:1f: 1e:d1:a7:15:a7:2c:4c:bc:b0:cc:34:57:45:71:a7: d9:35:81:57:9a:0f:8d:f0:30:73:57:40:b2:b3:5c: f2:7a:91:fd:4f:45:8f:78:1d:9e:7b:8f:ef:83:06: 6d:f8:e7:31:32:b5:4e:d2:df:52:b5:53:35:99:6c: bb:74:87:56:08:3e:44:c2:e7:bf:aa:14:e4:44:7a: 77:00:db:51:fc:70:10:e7:5e:77:dc:93:8b:72:05: 89:61:e2:20:8b:44:fb:4e:d2:70:1c:7c:ea:14:af: 84:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:70:D9:39:6A:2E:86:E6:F3:D4:CB:30:03:76:61:D2:19:B3:3C:12 X509v3 Authority Key Identifier: keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b2:cc:67:88:1b:f0:44:ad:a1:18:4b:55:67:8f:d7:43:d6: 2c:98:9b:31:0e:23:70:0d:9c:da:04:85:e6:9f:11:ad:ba:df: 1c:25:84:52:d6:64:09:ed:34:05:3d:3d:6e:4b:da:0b:31:42: c3:4a:70:9a:bd:97:3b:5d:59:19:c0:d9:b2:02:bf:d1:23:ee: 06:06:38:50:a4:26:dd:12:e1:1c:90:31:ee:d6:f1:43:52:81: 69:dc:46:81:9b:bb:22:ac:3d:21:dc:65:b7:a4:8a:a6:1c:74: 9d:78:b5:42:20:af:12:c5:24:cb:06:90:e5:b5:8b:72:18:7d: 98:a7:a4:d6:2b:f7:3a:d3:ab:04:b4:9a:eb:18:a6:e7:d9:5a: 95:93:25:b9:fe:a2:3b:0f:26:1a:14:fd:a5:50:9f:b2:c3:e4: de:53:d6:26:3b:68:d9:dc:97:39:f4:fc:1c:b4:3f:e1:19:c8: fa:d5:86:cf:10:47:46:18:ac:da:82:59:75:2b:d9:29:c3:40: 79:82:21:63:41:34:5b:dd:74:00:0d:49:02:43:7c:79:54:a4: a4:6d:9a:4f:13:f1:8f:a0:a7:f6:1c:86:54:2b:fc:d9:c5:4c: c2:79:a6:0e:92:1d:4a:45:21:23:f7:8c:5e:ff:0d:16:0f:43: 22:f6:2c:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODhEOTExMC8GA1UEBRMoQTY0QkU0NEFDQjAwRTRCREFFNDQ5MUIwRkEwQ0Q3MDk5 RDJDNzI3QzAeFw0yNTA0MjQxOTEzNDRaFw0yNTA1MDExOTEzNDRaMBgxFjAUBgNV BAMTDTY4MGE4ZDY5LTYwYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6XI3JB30MGXVVes4iFVVVqaX+2H84bA80+cWF6nmknoTHQIfDrzzxp6OtxxBF xHUrfqnMpFrLKS2ZK5c5urcOC2/yEdb2/H12VLURecDMGXZ1YIBpbIKGQC1i222l u31qddJcN1/VWaF5+BRmqqJVlSnBcx3MqBu6s9llGL23lGNFACbavj04LVbZdGZz HelHuKSFHx7RpxWnLEy8sMw0V0Vxp9k1gVeaD43wMHNXQLKzXPJ6kf1PRY94HZ57 j++DBm345zEytU7S31K1UzWZbLt0h1YIPkTC57+qFOREencA21H8cBDnXnfck4ty BYlh4iCLRPtO0nAcfOoUr4TjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCHDZOWou hubz1MswA3Zh0hmzPBIwHwYDVR0jBBgwFoAUpkvkSssA5L2uRJGw+gzXCZ0scnww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4OEQ5L0Y4M0UzRkNFQURC QzExRUZCMzAyOTgzRUM0RjlBRTAyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nu dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGt2a1Nzc0E1TDJ1UkpHdy1nelhDWjBzY253LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 OEQ5L0Y4M0UzRkNFQURCQzExRUZCMzAyOTgzRUM0RjlBRTAyL3BrdmtTc3NBNUwy dVJKR3ctZ3pYQ1owc2Nudy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADeyzGeIG/BEraEYS1Vnj9dD1iyYmzEOI3ANnNoEheafEa263xwlhFLW ZAntNAU9PW5L2gsxQsNKcJq9lztdWRnA2bICv9Ej7gYGOFCkJt0S4RyQMe7W8UNS gWncRoGbuyKsPSHcZbekiqYcdJ14tUIgrxLFJMsGkOW1i3IYfZinpNYr9zrTqwS0 musYpufZWpWTJbn+ojsPJhoU/aVQn7LD5N5T1iY7aNnclzn0/By0P+EZyPrVhs8Q R0YYrNqCWXUr2SnDQHmCIWNBNFvddAANSQJDfHlUpKRtmk8T8Y+gp/YchlQr/NnF TMJ5pg6SHUpFISP3jF7/DRYPQyL2LOo= -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:11 2025 by rpki-client