$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft File: gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft (raw, json) Hash identifier: JFEHOGW85uf3DEjgbGOWWzlfeVHYMGJKx2Tos96iatU= Subject key identifier: 20:4E:EE:58:B0:30:80:A3:8A:49:4B:F1:D6:7C:1E:E3:E2:EC:B6:F1 Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F Certificate issuer: /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft Manifest number: 0F Signing time: Fri 25 Apr 2025 07:10:28 +0000 Manifest this update: Fri 25 Apr 2025 07:10:28 +0000 Manifest next update: Fri 02 May 2025 07:10:28 +0000 Files and hashes: 1: gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl (hash: ysFKvC1VOeLFt57ElAz3ut6koqdV/ifLvcpqpcshLpg=) 2: 15039C1E202F11F0AFD72717C4F9AE02.roa (hash: RNEYHFbl/lHVURQeSl/swC0oZ7j6giFqMqHaOjHDKKE=) 3: 2A2F9262201811F09DB3CC16C4F9AE02.roa (hash: /APLoPia3hJaAawAfJ/kXfLzR5xKKXFF9u0rCxKw4H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F Validity Not Before: Apr 25 07:10:28 2025 GMT Not After : May 2 07:10:28 2025 GMT Subject: CN=680b3564-59d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:93:3f:f1:0d:d5:d1:55:0c:52:c6:01:a4: 3b:92:a4:cc:98:ce:f5:7f:07:60:7c:a0:2c:4a:10: 0c:38:52:c1:13:bb:8e:33:71:29:a1:b5:05:a3:c1: 14:0d:f9:81:a8:b8:af:e2:7a:1b:91:a8:b3:72:b2: 55:82:c6:e3:77:28:5d:9a:59:f3:a4:a8:e1:91:45: 6c:6c:ea:46:86:fe:a3:0d:c3:ea:86:3d:ec:c2:7d: 4e:83:f1:a1:f4:c0:f8:d3:f3:bb:e4:61:e2:34:ae: b4:26:74:85:82:44:61:3d:6b:5c:9b:5a:c8:d3:f0: bf:f0:4a:17:c8:91:d7:00:78:3c:fd:47:f4:5b:f3: b2:44:b8:a5:9f:59:f7:ab:05:6d:86:eb:26:f6:01: 6a:f3:ae:25:5a:c7:dd:ad:c9:4f:7d:30:0c:0a:36: fd:9b:6c:c2:8d:e0:83:63:d8:d4:72:84:39:07:fd: 78:04:7c:89:3f:84:4a:cd:39:ed:74:68:8e:1d:2c: 12:39:77:2e:23:25:4d:4e:1c:be:3d:70:e6:ff:84: 3f:44:0d:8e:aa:14:e6:ca:79:8d:80:76:86:6d:04: ef:65:51:5e:58:3b:5a:8b:6a:76:bf:c5:6d:03:dc: ea:ce:a8:94:e4:c7:b1:5a:fd:b8:8b:18:13:2e:e4: 6d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4E:EE:58:B0:30:80:A3:8A:49:4B:F1:D6:7C:1E:E3:E2:EC:B6:F1 X509v3 Authority Key Identifier: keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:0d:a3:08:c0:84:0a:05:12:02:c1:29:4f:72:e1:7d:c5:f1: 76:08:f9:73:06:45:ce:0e:e4:ed:1c:01:20:09:90:1e:7a:f9: d8:9d:76:e9:af:6e:b4:7f:5a:6c:69:02:79:f5:c2:08:22:8c: 3a:e3:40:a7:87:03:d3:95:bc:8b:dc:0d:39:c0:b5:65:61:58: c9:73:f3:98:85:1b:d6:68:74:40:42:95:58:3d:ad:e5:1a:7f: 41:1b:90:02:af:20:73:05:00:17:21:42:74:1a:0f:9c:4b:fb: 84:50:18:c0:c2:7a:75:11:24:5c:85:d0:76:31:a1:4b:f0:a7: c6:07:11:a0:3c:26:03:90:2b:5c:78:03:7f:cb:d0:cb:24:a8: c9:77:70:f3:7a:a7:4d:d5:17:f1:72:23:eb:37:47:cf:81:b1: d4:f4:ea:5e:06:4c:63:c9:2c:96:48:3d:c6:57:14:1a:ce:f9: a8:23:6f:07:88:21:44:50:66:49:26:94:50:4a:b1:4a:fb:4f: 4f:75:52:d6:54:e6:b6:01:a9:69:3b:98:df:06:11:2b:94:e4: 10:89:4d:56:39:50:b7:a9:d7:3e:b3:c4:a4:6c:33:1a:e9:41: 9c:74:8d:53:69:ac:d8:73:65:eb:4a:60:69:1c:47:94:bf:de: 6c:5e:7f:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0QyMTExMC8GA1UEBRMoODE4QkI5MDMzMjcxN0Y5MzU3MzBEQUYxNDcwOEZGQzJG NjA1RjA1RjAeFw0yNTA0MjUwNzEwMjhaFw0yNTA1MDIwNzEwMjhaMBgxFjAUBgNV BAMTDTY4MGIzNTY0LTU5ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE1pM/8Q3V0VUMUsYBpDuSpMyYzvV/B2B8oCxKEAw4UsETu44zcSmhtQWjwRQN +YGouK/iehuRqLNyslWCxuN3KF2aWfOkqOGRRWxs6kaG/qMNw+qGPezCfU6D8aH0 wPjT87vkYeI0rrQmdIWCRGE9a1ybWsjT8L/wShfIkdcAeDz9R/Rb87JEuKWfWfer BW2G6yb2AWrzriVax92tyU99MAwKNv2bbMKN4INj2NRyhDkH/XgEfIk/hErNOe10 aI4dLBI5dy4jJU1OHL49cOb/hD9EDY6qFObKeY2AdoZtBO9lUV5YO1qLana/xW0D 3OrOqJTkx7Fa/biLGBMu5G1nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIE7uWLAw gKOKSUvx1nwe4+LstvEwHwYDVR0jBBgwFoAUgYu5AzJxf5NXMNrxRwj/wvYF8F8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDRDIxLzM4QzI2MUU0MUMz ODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVOWE1OcnhSd2pfd3ZZRjhG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1l1NUF6SnhmNU5YTU5yeFJ3al93dllGOEY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD RDIxLzM4QzI2MUU0MUMzODExRjBBQTg1N0QyN0M0RjlBRTAyL2dZdTVBekp4ZjVO WE1OcnhSd2pfd3ZZRjhGOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJkNowjAhAoFEgLBKU9y4X3F8XYI+XMGRc4O5O0cASAJkB56+diddumv brR/WmxpAnn1wggijDrjQKeHA9OVvIvcDTnAtWVhWMlz85iFG9ZodEBClVg9reUa f0EbkAKvIHMFABchQnQaD5xL+4RQGMDCenURJFyF0HYxoUvwp8YHEaA8JgOQK1x4 A3/L0MskqMl3cPN6p03VF/FyI+s3R8+BsdT06l4GTGPJLJZIPcZXFBrO+agjbweI IURQZkkmlFBKsUr7T091UtZU5rYBqWk7mN8GESuU5BCJTVY5ULep1z6zxKRsMxrp QZx0jVNprNhzZetKYGkcR5S/3mxefxM= -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:02 2025 by rpki-client