$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: lKVoEBeiF1XqZ//RbMZLk7NRxsjvc5MLX4yk2Gv01PY= Subject key identifier: 6D:AD:E2:6A:D7:B2:D7:0B:FF:43:B1:F9:BC:4C:BF:4F:A7:3A:E0:E3 Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 023E Signing time: Fri 25 Apr 2025 01:39:36 +0000 Manifest this update: Fri 25 Apr 2025 01:39:36 +0000 Manifest next update: Fri 02 May 2025 01:39:36 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: YxMaPwcc9lllL6ckyJdhHAJiBoCxSrhaaqcAn9qKoDk=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: dkCYBmAm0OsNXUn60urmLpPiFKakWVNsJOBeAK9VAVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Apr 25 01:39:36 2025 GMT Not After : May 2 01:39:36 2025 GMT Subject: CN=680ae7d8-f0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:cc:ea:7d:d0:5e:00:69:6e:9e:fc:6b:06: 8d:48:11:3d:a4:69:46:90:ea:a1:a5:24:14:e1:a2: d4:18:f2:ff:c2:47:51:b4:31:c9:db:82:6d:fe:22: 14:f3:07:d4:d6:31:f4:54:0e:55:9b:9a:d0:02:be: 1d:98:e1:0c:53:1e:9c:82:26:24:a4:3c:57:08:e6: df:8e:a2:7d:36:a3:a8:3b:15:ad:65:35:1e:7d:c7: f3:a3:23:11:73:f8:a4:5f:dd:92:26:ec:ce:31:51: d7:91:5b:09:13:7c:15:04:2b:9a:68:45:52:28:2e: 90:3a:ed:cc:c8:cc:01:7a:4d:c8:32:d1:a5:58:cd: 9b:74:80:c7:92:16:a1:9a:38:da:24:0b:4a:67:98: a1:8b:10:56:00:fc:6e:b1:af:6e:96:88:e7:77:65: 0b:de:b3:e9:f7:00:55:19:21:dc:64:ba:0b:b4:a4: 1d:d5:aa:b8:f8:fe:c4:36:fc:81:6f:3d:21:a4:f4: 3a:f2:ee:05:72:cb:41:9c:19:fd:9e:2c:23:f5:1e: ae:7f:84:f7:03:66:6f:07:0a:ff:29:9e:e6:81:53: 31:cf:32:27:ed:46:7c:c5:c2:ae:87:33:3e:f7:81: ca:ca:2c:9a:f9:a6:93:31:e7:cb:98:2d:21:d0:08: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AD:E2:6A:D7:B2:D7:0B:FF:43:B1:F9:BC:4C:BF:4F:A7:3A:E0:E3 X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:05:8e:f1:c7:7c:66:c6:9e:60:4c:52:34:36:8b:93:8a:e6: 14:68:73:50:a2:c1:4f:1f:00:38:4b:cc:ae:50:53:13:bf:58: 33:3c:da:06:a0:c8:65:f7:8b:b6:15:eb:77:79:a8:c8:60:0c: 13:c8:72:2f:c9:16:79:16:20:49:0f:a1:38:61:15:b2:1b:9e: 2b:e3:db:7d:9c:91:69:21:c1:7b:47:66:b9:45:ef:60:e9:62: d5:20:f7:3d:56:c6:dd:69:93:ef:ed:d7:92:b1:a8:62:18:13: 45:41:6a:63:c9:5d:2c:f6:ce:47:85:bb:31:a9:7a:f9:3b:c8: da:4c:7e:49:72:0c:9b:09:a4:a8:3e:d0:79:01:76:56:ec:68: 6d:e6:bd:d3:22:e0:32:3b:43:bb:a6:12:d9:05:35:14:5d:23: 86:0a:b7:46:a4:5e:0a:51:63:75:5c:52:d3:93:25:e5:18:da: 6d:6e:2c:48:23:dc:ac:b5:e6:40:af:c9:fb:85:bd:85:d7:1d: 5b:85:57:aa:c3:f4:db:f4:26:8b:80:7d:49:0b:0d:8c:ed:f4: b6:13:5c:e5:8c:d0:77:e3:f6:a0:75:ab:84:e9:db:ac:30:ad: 4b:88:0f:c4:1e:c7:a2:b5:67:85:ef:ce:c5:cd:63:8e:cd:05: 98:5a:b5:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjUwNDI1MDEzOTM2WhcNMjUwNTAyMDEzOTM2WjAYMRYwFAYD VQQDEw02ODBhZTdkOC1mMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSPM6n3QXgBpbp78awaNSBE9pGlGkOqhpSQU4aLUGPL/wkdRtDHJ24Jt/iIU 8wfU1jH0VA5Vm5rQAr4dmOEMUx6cgiYkpDxXCObfjqJ9NqOoOxWtZTUefcfzoyMR c/ikX92SJuzOMVHXkVsJE3wVBCuaaEVSKC6QOu3MyMwBek3IMtGlWM2bdIDHkhah mjjaJAtKZ5ihixBWAPxusa9ulojnd2UL3rPp9wBVGSHcZLoLtKQd1aq4+P7ENvyB bz0hpPQ68u4FcstBnBn9niwj9R6uf4T3A2ZvBwr/KZ7mgVMxzzIn7UZ8xcKuhzM+ 94HKyiya+aaTMefLmC0h0AjtYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2t4mrX stcL/0Ox+bxMv0+nOuDjMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7BY7xx3xmxp5gTFI0NouTiuYUaHNQosFPHwA4S8yuUFMTv1gzPNoG oMhl94u2Fet3eajIYAwTyHIvyRZ5FiBJD6E4YRWyG54r49t9nJFpIcF7R2a5Re9g 6WLVIPc9VsbdaZPv7deSsahiGBNFQWpjyV0s9s5HhbsxqXr5O8jaTH5JcgybCaSo PtB5AXZW7Ght5r3TIuAyO0O7phLZBTUUXSOGCrdGpF4KUWN1XFLTkyXlGNptbixI I9ysteZAr8n7hb2F1x1bhVeqw/Tb9CaLgH1JCw2M7fS2E1zljNB34/agdauE6dus MK1LiA/EHseitWeF787FzWOOzQWYWrVo -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:45 2025 by rpki-client