$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft File: -lmybsZZeADDV53XBz-ktoWnwtI.mft (raw, json) Hash identifier: TF1fQlrIVkg7EPFpLpQrZ74/HIznP1VnV/AACXHMFHU= Subject key identifier: B1:FD:81:90:BD:B2:C4:0C:A8:DA:9F:3F:4F:77:95:A0:80:D4:74:FE Authority key identifier: FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2 Certificate issuer: /CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2 Certificate serial: 03DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft Manifest number: 03D8 Signing time: Fri 25 Apr 2025 00:19:40 +0000 Manifest this update: Fri 25 Apr 2025 00:19:39 +0000 Manifest next update: Fri 02 May 2025 00:19:39 +0000 Files and hashes: 1: -lmybsZZeADDV53XBz-ktoWnwtI.crl (hash: hmzl8+K7UAiL6Fkl+dXk5qBQIyKZdaGzHiXQE3TDP+A=) 2: 445C8236B69311EC9650A57CC4F9AE02.roa (hash: /iDRAphVdSgU2e36vGmGSufKHFaLvSp39p6b7uKMJro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131B38, serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2 Validity Not Before: Apr 25 00:19:39 2025 GMT Not After : May 2 00:19:39 2025 GMT Subject: CN=680ad51b-7848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:0f:ef:24:8e:d2:7a:3b:68:4f:63:38:38: 13:f4:83:d1:77:28:ba:1a:eb:83:f4:c5:15:a2:c3: dc:cb:2d:88:26:e1:d5:b8:28:a9:0c:3f:9e:49:9f: 5e:bb:29:93:4b:4b:bc:46:25:f8:b1:f1:3f:0f:40: c0:a9:fd:5d:f2:13:02:a8:4c:da:96:04:3a:d6:89: 2a:18:e8:9c:60:36:69:21:46:21:e6:f0:7a:41:3e: aa:c9:c0:8b:5f:9e:1a:5c:48:2b:8a:28:2c:86:94: 6c:16:0a:ae:84:f5:98:e1:55:97:18:17:1d:aa:55: 26:65:db:58:94:cf:2a:3b:e1:81:b6:fd:a2:94:e7: 83:f1:65:cc:ce:cf:18:11:e2:a5:92:6b:59:21:7d: 33:33:d8:0b:63:de:3a:88:1e:9a:c8:ce:c1:31:7c: af:d7:fa:2c:2c:79:33:60:e9:64:ac:20:e6:94:97: 1b:da:00:e1:63:01:a2:18:2a:dc:5a:1a:ec:d5:db: b7:b9:39:a2:d0:11:39:32:4c:79:bb:44:b5:77:fc: 52:b4:0f:0d:ea:29:19:d0:9f:87:2a:d6:13:a7:94: a4:38:f1:19:fe:90:9c:ee:f5:43:e6:72:67:98:05: 4e:15:3d:20:02:0f:e9:e8:89:77:94:a5:25:3f:a3: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FD:81:90:BD:B2:C4:0C:A8:DA:9F:3F:4F:77:95:A0:80:D4:74:FE X509v3 Authority Key Identifier: keyid:FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:06:a8:d9:4c:7f:e3:eb:ca:17:89:ae:19:b8:b8:ed:4e:d1: 7f:e7:43:90:97:ec:4f:cb:26:6b:ea:d2:6b:f6:d9:cd:97:76: f4:8b:40:ce:bc:5d:b2:75:0a:c6:6c:14:6d:e2:ec:33:e6:e5: f9:9f:71:2e:ca:49:18:e9:20:fa:26:df:e5:4f:cb:04:db:c9: 7c:22:74:55:b4:39:b6:df:cf:7b:5b:95:cf:78:f4:af:bd:3e: a7:c6:22:9b:c1:94:c9:46:4f:b8:fb:d9:47:94:2d:a0:51:b4: 4c:6e:0b:ef:d6:bf:8e:ff:86:62:87:b6:c4:3e:ad:07:8b:66: 96:a2:2f:21:34:db:6f:77:1a:e8:bd:a1:7b:0c:af:84:06:59: 01:5f:1f:68:cf:e6:2c:6f:eb:b4:e7:9f:19:32:cd:f2:20:c6: ef:ab:22:7b:c8:d3:d0:c3:41:d5:b9:d7:3a:d9:24:27:ea:70: 63:a4:dc:3d:ba:c5:4f:5a:21:f1:4e:c2:4a:be:8f:92:a5:c3: bd:28:7f:53:a2:0a:0e:bb:68:b1:fe:43:83:7c:fa:e1:b5:ac: 05:69:1d:b9:b8:90:c1:f6:8e:33:69:dd:7d:3e:5b:70:9c:31: a8:63:3c:0f:ff:9b:f5:d7:e2:be:59:b6:da:ef:aa:ee:e6:21: d1:5f:9a:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFCMzgxMTAvBgNVBAUTKEZBNTlCMjZFQzY1OTc4MDBDMzU3OURENzA3M0ZBNEI2 ODVBN0MyRDIwHhcNMjUwNDI1MDAxOTM5WhcNMjUwNTAyMDAxOTM5WjAYMRYwFAYD VQQDEw02ODBhZDUxYi03ODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf4P7ySO0no7aE9jODgT9IPRdyi6GuuD9MUVosPcyy2IJuHVuCipDD+eSZ9e uymTS0u8RiX4sfE/D0DAqf1d8hMCqEzalgQ61okqGOicYDZpIUYh5vB6QT6qycCL X54aXEgriigshpRsFgquhPWY4VWXGBcdqlUmZdtYlM8qO+GBtv2ilOeD8WXMzs8Y EeKlkmtZIX0zM9gLY946iB6ayM7BMXyv1/osLHkzYOlkrCDmlJcb2gDhYwGiGCrc Whrs1du3uTmi0BE5Mkx5u0S1d/xStA8N6ikZ0J+HKtYTp5SkOPEZ/pCc7vVD5nJn mAVOFT0gAg/p6Il3lKUlP6Nj1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLH9gZC9 ssQMqNqfP093laCA1HT+MB8GA1UdIwQYMBaAFPpZsm7GWXgAw1ed1wc/pLaFp8LS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUIzOC8yREY1NDQ1NDdE MEIxMUVDQkEyMzk0MzNDNEY5QUUwMi8tbG15YnNaWmVBRERWNTNYQnota3RvV253 dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1sbXlic1paZUFERFY1M1hCei1rdG9Xbnd0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUIzOC8yREY1NDQ1NDdEMEIxMUVDQkEyMzk0MzNDNEY5QUUwMi8tbG15YnNaWmVB RERWNTNYQnota3RvV253dEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFBqjZTH/j68oXia4ZuLjtTtF/50OQl+xPyyZr6tJr9tnNl3b0i0DO vF2ydQrGbBRt4uwz5uX5n3EuykkY6SD6Jt/lT8sE28l8InRVtDm23897W5XPePSv vT6nxiKbwZTJRk+4+9lHlC2gUbRMbgvv1r+O/4Zih7bEPq0Hi2aWoi8hNNtvdxro vaF7DK+EBlkBXx9oz+Ysb+u0558ZMs3yIMbvqyJ7yNPQw0HVudc62SQn6nBjpNw9 usVPWiHxTsJKvo+SpcO9KH9TogoOu2ix/kODfPrhtawFaR25uJDB9o4zad19Pltw nDGoYzwP/5v11+K+Wbba76ru5iHRX5rA -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:48 2025 by rpki-client