$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json) Hash identifier: HWsdnx3Lf5zBEt/c/Hi9pU132dLD38UuQmXjiuVJh2Q= Subject key identifier: 7D:8D:60:4B:EF:07:8F:41:31:BB:06:18:64:4A:30:00:23:F5:A2:DD Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft Manifest number: 028B Signing time: Fri 25 Apr 2025 01:27:33 +0000 Manifest this update: Fri 25 Apr 2025 01:27:33 +0000 Manifest next update: Fri 02 May 2025 01:27:33 +0000 Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: LaVXBq5D0u2dSnaNcW8oaA0BGWLLYSoJvU9sciifOGg=) 2: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: 7v3zrNq+442jAdZuC2gsCpXpLV0fHPfa8xoCxBp0rBk=) 3: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: NDIUMNLgNwlA3XdorfdGi7go+NI9mRVzxQ8Xlow0T8g=) 4: C0E4A11270EF11EFA9113E35C4F9AE02.roa (hash: k2jDGgw0hTyDnG6jZ/sprB9v2BeaWDhxyzOEdYPYfHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Validity Not Before: Apr 25 01:27:33 2025 GMT Not After : May 2 01:27:33 2025 GMT Subject: CN=680ae505-1be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:4d:96:72:c2:24:fc:98:34:5a:0d:21:35: 1c:6c:01:40:cd:99:5f:4c:a8:2c:00:33:f1:73:30: ad:f6:54:7f:87:96:5b:33:73:f7:45:3b:c1:dd:79: ca:bb:fb:ba:cb:86:6a:ae:34:e7:a6:4b:9a:c8:35: 5d:e6:07:ba:c6:4f:95:60:35:f8:87:0c:5f:fc:e4: 62:1f:c8:c5:c8:cd:e4:0b:d9:39:6f:f4:b3:38:8a: 9c:c4:73:6c:16:65:de:10:0a:7b:74:b9:cb:7e:50: 2b:79:97:ab:db:22:9d:4e:0c:14:d2:68:56:00:88: 3b:58:e2:06:22:68:9a:d0:a1:44:fd:13:c0:d5:ed: d4:b5:c6:d9:95:5e:47:b5:70:8b:a4:05:1a:1a:14: bb:6c:1f:37:45:a0:84:4d:27:27:27:e7:7e:24:84: 5a:92:38:45:80:25:1a:20:c2:e4:05:a6:74:a4:f0: f6:77:e4:43:d5:85:7c:6f:18:21:82:94:14:a0:c4: 4f:d1:24:4d:95:21:bd:e7:01:a2:3b:34:22:15:02: 18:ff:46:1c:7a:72:84:7b:8b:aa:25:88:01:e4:81: 97:07:c0:84:26:9e:a7:bf:de:42:7f:18:bf:7e:db: 0c:70:a0:ff:28:82:05:c5:56:ee:e4:1c:9f:6a:78: 5a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8D:60:4B:EF:07:8F:41:31:BB:06:18:64:4A:30:00:23:F5:A2:DD X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ce:bf:4b:51:b6:c5:85:34:64:79:5f:a1:7e:bf:9f:7e:6a: 08:6f:f0:1c:80:f8:21:d5:b9:0f:f3:7d:1f:30:f9:43:26:66: e6:6b:d6:31:90:41:f8:65:40:60:06:25:59:3b:40:aa:f3:44: a4:99:6f:c1:cb:d6:cf:45:07:b7:a8:d0:71:f0:5f:db:74:d6: cb:f2:8f:0a:75:ac:97:5e:b3:7f:2e:4f:6a:d2:63:0a:12:d2: 09:45:40:a4:85:c4:2d:0a:c3:0a:34:43:d7:b8:48:74:08:23: 6a:07:b8:d5:74:ef:4e:6d:c8:ca:9c:d4:1a:38:f9:e2:ea:a7: de:46:91:99:28:37:24:50:7e:0c:8e:48:2d:07:58:f8:4c:a8: 3e:15:05:8e:0e:5c:4c:83:8a:e8:6e:7d:a4:44:64:4a:cb:b0: 5b:a7:7e:05:b9:49:2e:3d:62:4d:46:92:d5:bb:5f:dd:e7:40: 1e:84:7e:77:83:d0:50:4f:19:dc:d7:75:27:9b:56:96:81:3a: d5:35:14:b9:bf:57:97:fd:1c:55:35:6c:cc:e8:52:1a:78:87: fe:c1:ab:5a:fa:c6:53:09:23:69:f3:b1:d9:db:34:be:bf:00: 4c:00:70:ef:b5:78:3c:f6:06:ed:65:ae:a0:24:d2:2f:a4:01: f6:c5:8c:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjUwNDI1MDEyNzMzWhcNMjUwNTAyMDEyNzMzWjAYMRYwFAYD VQQDEw02ODBhZTUwNS0xYmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYpNlnLCJPyYNFoNITUcbAFAzZlfTKgsADPxczCt9lR/h5ZbM3P3RTvB3XnK u/u6y4ZqrjTnpkuayDVd5ge6xk+VYDX4hwxf/ORiH8jFyM3kC9k5b/SzOIqcxHNs FmXeEAp7dLnLflAreZer2yKdTgwU0mhWAIg7WOIGImia0KFE/RPA1e3UtcbZlV5H tXCLpAUaGhS7bB83RaCETScnJ+d+JIRakjhFgCUaIMLkBaZ0pPD2d+RD1YV8bxgh gpQUoMRP0SRNlSG95wGiOzQiFQIY/0YcenKEe4uqJYgB5IGXB8CEJp6nv95Cfxi/ ftsMcKD/KIIFxVbu5ByfanhaowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2NYEvv B49BMbsGGGRKMAAj9aLdMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1 WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADzr9LUbbFhTRkeV+hfr+ffmoIb/AcgPgh1bkP830fMPlDJmbma9Yx kEH4ZUBgBiVZO0Cq80SkmW/By9bPRQe3qNBx8F/bdNbL8o8KdayXXrN/Lk9q0mMK EtIJRUCkhcQtCsMKNEPXuEh0CCNqB7jVdO9ObcjKnNQaOPni6qfeRpGZKDckUH4M jkgtB1j4TKg+FQWODlxMg4robn2kRGRKy7Bbp34FuUkuPWJNRpLVu1/d50AehH53 g9BQTxnc13Unm1aWgTrVNRS5v1eX/RxVNWzM6FIaeIf+wata+sZTCSNp87HZ2zS+ vwBMAHDvtXg89gbtZa6gJNIvpAH2xYwM -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:11 2025 by rpki-client