$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: bG+DW55FXCiMuVmP5In+OqlcYyqCpok/H8z0tpkLRAM= Subject key identifier: EC:D7:85:98:2D:A7:48:98:BF:12:82:A4:A2:A5:49:6A:89:A6:B7:39 Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 063A Signing time: Thu 24 Apr 2025 16:54:42 +0000 Manifest this update: Thu 24 Apr 2025 16:54:41 +0000 Manifest next update: Thu 01 May 2025 16:54:41 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: 2YJv+IcBL6OhxGKSjD839KBOBvGiG6kkHf4hXkxYNQs=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: Apr 24 16:54:41 2025 GMT Not After : May 1 16:54:41 2025 GMT Subject: CN=680a6cd2-2be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9e:e5:5f:4b:e2:49:92:c4:17:6c:44:85:9e: f2:c9:09:dd:6d:2d:4b:57:aa:de:aa:9b:98:89:8b: 2d:0f:5a:ff:12:1a:e5:33:89:b6:f2:5c:fd:fd:7d: b6:b8:05:de:87:24:b9:c9:20:4d:f2:e3:31:67:7b: c1:94:39:bb:b8:a5:0a:48:e2:ad:8b:f6:43:a3:cc: ec:68:8d:5f:d0:fd:f6:18:14:0e:db:2b:76:f6:28: cc:cd:93:55:90:89:f2:e2:24:fa:7c:e0:b1:74:41: af:e1:6f:48:e9:c1:76:42:17:44:5d:80:ba:c6:28: 16:6a:c6:fd:0b:66:87:46:83:75:8a:9f:0d:cd:be: a6:d5:57:8f:74:40:e1:7a:32:0e:9f:ee:c6:49:7f: 8c:16:49:b6:ee:d5:02:ab:42:99:e3:60:ee:fc:cc: 5c:d1:61:db:54:73:fe:d2:dd:ef:b8:c9:23:43:33: 34:8a:36:99:0e:33:f2:48:f6:f3:6b:9a:13:a2:e6: 47:e2:80:04:f0:8a:aa:5f:4f:cd:e2:d0:c5:2c:d4: e7:8b:01:01:3b:47:85:d5:13:d5:8d:3d:2b:b0:56: 8e:8f:88:cc:24:a3:9c:8c:39:29:c8:13:bc:99:c6: 91:2f:1e:f8:04:4a:d2:b3:bd:70:28:17:f6:1a:99: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D7:85:98:2D:A7:48:98:BF:12:82:A4:A2:A5:49:6A:89:A6:B7:39 X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f8:29:17:10:f1:bf:a2:da:62:c7:6b:d2:8a:4a:77:f7:d6: e1:4a:14:97:ef:24:e5:76:07:c2:dc:a5:34:19:1b:82:af:d2: 8f:c4:3c:87:d8:7e:a1:78:7f:fc:d5:aa:cf:f6:3d:a2:3f:30: 6f:8c:3e:9e:d8:8b:00:26:df:9d:9c:f8:d7:9b:46:66:25:13: 01:f0:b1:26:ea:c4:75:a8:a5:59:ea:4d:5f:16:cf:bf:c2:04: 99:64:99:6a:51:31:d5:82:11:39:1f:5a:3f:53:a0:27:31:66: 0d:00:02:03:93:19:06:fe:9e:e6:c3:c7:72:f5:18:57:72:c5: 2f:3b:f9:fd:d6:19:a9:17:bd:6c:61:43:7c:23:57:f6:87:eb: c4:35:39:69:7b:22:f5:6d:ff:e6:70:dc:83:27:68:71:2d:f7: 29:a7:bf:3a:41:57:26:56:49:86:b0:75:ba:db:90:52:7b:6d: c7:95:87:39:4d:9e:02:fd:d6:7d:a7:36:d5:1a:5f:55:23:76: 6c:f4:36:d4:17:22:f5:e8:62:5e:7d:87:d6:a8:9c:38:b1:8a: d9:10:0f:e6:a3:a3:3f:ce:3a:c5:77:1d:6c:c2:d4:87:3b:0e: e3:af:e9:e2:9e:dc:6f:68:40:10:3f:7d:a3:9b:59:7d:6f:41: ac:c4:0a:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUwNDI0MTY1NDQxWhcNMjUwNTAxMTY1NDQxWjAYMRYwFAYD VQQDEw02ODBhNmNkMi0yYmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA457lX0viSZLEF2xEhZ7yyQndbS1LV6reqpuYiYstD1r/EhrlM4m28lz9/X22 uAXehyS5ySBN8uMxZ3vBlDm7uKUKSOKti/ZDo8zsaI1f0P32GBQO2yt29ijMzZNV kIny4iT6fOCxdEGv4W9I6cF2QhdEXYC6xigWasb9C2aHRoN1ip8Nzb6m1VePdEDh ejIOn+7GSX+MFkm27tUCq0KZ42Du/Mxc0WHbVHP+0t3vuMkjQzM0ijaZDjPySPbz a5oTouZH4oAE8IqqX0/N4tDFLNTniwEBO0eF1RPVjT0rsFaOj4jMJKOcjDkpyBO8 mcaRLx74BErSs71wKBf2GpnrQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzXhZgt p0iYvxKCpKKlSWqJprc5MB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb+CkXEPG/otpix2vSikp399bhShSX7yTldgfC3KU0GRuCr9KPxDyH 2H6heH/81arP9j2iPzBvjD6e2IsAJt+dnPjXm0ZmJRMB8LEm6sR1qKVZ6k1fFs+/ wgSZZJlqUTHVghE5H1o/U6AnMWYNAAIDkxkG/p7mw8dy9RhXcsUvO/n91hmpF71s YUN8I1f2h+vENTlpeyL1bf/mcNyDJ2hxLfcpp786QVcmVkmGsHW625BSe23HlYc5 TZ4C/dZ9pzbVGl9VI3Zs9DbUFyL16GJefYfWqJw4sYrZEA/mo6M/zjrFdx1swtSH Ow7jr+nintxvaEAQP32jm1l9b0GsxAoj -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:15 2025 by rpki-client