$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft File: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft (raw, json) Hash identifier: VVIq5TThA5Iz+ZHEU44zIMCo2PTo2m+PLaIW+jlbdKk= Subject key identifier: B8:27:01:93:EB:0B:36:8A:CC:6F:58:D1:16:46:45:94:15:4D:71:2E Authority key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B Certificate issuer: /CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft Manifest number: B4 Signing time: Fri 25 Apr 2025 05:13:45 +0000 Manifest this update: Fri 25 Apr 2025 05:13:45 +0000 Manifest next update: Fri 02 May 2025 05:13:44 +0000 Files and hashes: 1: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl (hash: IrN7YlHjLJl8si318aQAIZNU5PuP5i5k3mdMgPF7PWE=) 2: E51087D6F1A011EF8BCCFE7BC4F9AE02.roa (hash: uDkiek+amCMP5fz1my7MuUAYfCGn2cBLkm1ORj4ta5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B4A, serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B Validity Not Before: Apr 25 05:13:45 2025 GMT Not After : May 2 05:13:44 2025 GMT Subject: CN=680b1a09-ba81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:12:ee:37:97:fd:d4:8a:f0:0f:3b:f8:96: c4:91:d9:61:a6:c8:f0:af:c9:f3:43:4e:1d:c1:6b: b0:90:4e:a2:1b:7f:ec:ca:36:fc:3a:24:f6:75:7a: 49:4a:4d:3e:b2:c9:99:43:10:53:92:f1:e2:f7:c4: c6:dc:20:f3:5d:3b:01:44:dd:3a:34:85:68:88:19: e2:7f:6e:df:3b:68:05:4f:8a:4f:ef:83:90:01:a6: 2c:dc:c6:b2:37:ee:dc:41:91:55:64:db:d7:a5:c1: 92:a4:e7:f4:30:07:a9:44:58:5f:4b:41:7d:66:ed: 4b:ca:3c:28:ac:fb:54:62:54:b6:ad:46:63:e7:ea: 49:20:a5:a3:a8:7a:70:ad:7f:ed:3a:a5:20:51:af: 92:ec:ec:ce:d7:29:1a:69:12:67:cd:ba:70:1b:c1: c9:ef:aa:3e:ae:48:f4:73:b7:6f:e1:73:67:36:96: dd:5f:15:28:25:36:ee:3a:49:22:19:e4:43:e3:e1: b7:9c:25:ea:e6:94:0f:23:b8:cb:83:ee:98:de:38: 56:83:d5:6a:41:56:5c:5a:9d:aa:84:8a:5a:5a:f5: 21:52:71:60:84:b7:49:1f:db:6d:91:2b:61:d3:cd: fe:85:21:e2:1f:a2:ae:10:c9:6c:bd:96:30:8b:86: b6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:27:01:93:EB:0B:36:8A:CC:6F:58:D1:16:46:45:94:15:4D:71:2E X509v3 Authority Key Identifier: keyid:AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:02:fa:6e:25:ec:f6:32:1e:d9:68:ec:dd:dc:e4:b8:2b:4f: 6e:3f:74:03:6d:66:04:9c:16:77:d6:08:dd:8a:4f:2f:32:39: 4e:c1:c5:62:3a:f2:44:a2:72:d1:cb:c3:44:77:a7:63:4c:2d: 03:b7:1c:2d:a8:34:ed:a4:99:a4:a9:7a:01:84:37:38:bc:0f: b7:c2:ef:af:38:c5:3a:49:97:d2:5b:b3:56:9b:9b:06:4b:1f: 99:46:a2:c0:a9:d6:51:25:d8:b1:4e:8c:2a:27:97:9d:78:0f: 39:38:a0:36:5f:22:d9:a0:d7:22:a4:c7:7a:14:0c:95:0d:57: 06:1d:78:0a:66:cc:4c:83:c3:b3:a3:6e:ac:ea:3c:00:35:82: 90:e0:d3:0e:8a:5d:5f:70:1c:82:28:22:32:f1:e4:5e:cb:bc: ab:70:f1:a3:50:fc:fa:a6:22:28:17:3b:87:29:57:bf:1d:de: 9a:ca:d1:66:ac:3d:ac:25:fa:85:73:1b:06:56:24:22:5e:f4: 15:b1:65:0e:e1:bf:7e:13:ec:ca:1e:a4:0f:ee:c8:82:c1:38: 59:c1:87:a7:dc:d1:9a:3c:06:b7:08:47:ac:25:50:98:e0:c1: 8d:15:ec:dd:59:f0:a9:fb:e1:cf:26:6c:33:e1:31:0e:7e:13: fc:60:01:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCNEExMTAvBgNVBAUTKEFDQ0JGMjZBMTlEOUUxNEMzMUY1RjM3RTFCOTY2RDg2 QTUwNEI0NkIwHhcNMjUwNDI1MDUxMzQ1WhcNMjUwNTAyMDUxMzQ0WjAYMRYwFAYD VQQDEw02ODBiMWEwOS1iYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJoS7jeX/dSK8A87+JbEkdlhpsjwr8nzQ04dwWuwkE6iG3/syjb8OiT2dXpJ Sk0+ssmZQxBTkvHi98TG3CDzXTsBRN06NIVoiBnif27fO2gFT4pP74OQAaYs3May N+7cQZFVZNvXpcGSpOf0MAepRFhfS0F9Zu1LyjworPtUYlS2rUZj5+pJIKWjqHpw rX/tOqUgUa+S7OzO1ykaaRJnzbpwG8HJ76o+rkj0c7dv4XNnNpbdXxUoJTbuOkki GeRD4+G3nCXq5pQPI7jLg+6Y3jhWg9VqQVZcWp2qhIpaWvUhUnFghLdJH9ttkSth 083+hSHiH6KuEMlsvZYwi4a27QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgnAZPr CzaKzG9Y0RZGRZQVTXEuMB8GA1UdIwQYMBaAFKzL8moZ2eFMMfXzfhuWbYalBLRr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI0QS9FQjM5M0Q0RTJG ODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9yTXZ5YWhuWjRVd3g5Zk4tRzVadGhxVUV0 R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNdnlhaG5aNFV3eDlmTi1HNVp0aHFVRXRHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEI0QS9FQjM5M0Q0RTJGODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9yTXZ5YWhuWjRV d3g5Zk4tRzVadGhxVUV0R3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYAvpuJez2Mh7ZaOzd3OS4K09uP3QDbWYEnBZ31gjdik8vMjlOwcVi OvJEonLRy8NEd6djTC0DtxwtqDTtpJmkqXoBhDc4vA+3wu+vOMU6SZfSW7NWm5sG Sx+ZRqLAqdZRJdixTowqJ5edeA85OKA2XyLZoNcipMd6FAyVDVcGHXgKZsxMg8Oz o26s6jwANYKQ4NMOil1fcByCKCIy8eRey7yrcPGjUPz6piIoFzuHKVe/Hd6aytFm rD2sJfqFcxsGViQiXvQVsWUO4b9+E+zKHqQP7siCwThZwYen3NGaPAa3CEesJVCY 4MGNFezdWfCp++HPJmwz4TEOfhP8YAG2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:45 2025 by rpki-client