$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft File: mgZOprZttN4gyTzAQbhaFwbIBnI.mft (raw, json) Hash identifier: luF3jx75MpE5YBVIiliI/0DkMR+6gX99GXgWUvRwPt4= Subject key identifier: 29:89:1C:12:76:8A:AB:0B:C2:5F:CE:BB:58:04:B7:B3:ED:67:4E:86 Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 Certificate issuer: /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft Manifest number: 023E Signing time: Fri 25 Apr 2025 01:39:39 +0000 Manifest this update: Fri 25 Apr 2025 01:39:38 +0000 Manifest next update: Fri 02 May 2025 01:39:38 +0000 Files and hashes: 1: mgZOprZttN4gyTzAQbhaFwbIBnI.crl (hash: dbriHNcJracD6cWhXrAYSt11CD2vTg/3QLaY74RGk+E=) 2: C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (hash: KNUSUG9icP8Pvhz1F1p7tJVMNn5LFGkVNJkPaQqPTVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD, serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672 Validity Not Before: Apr 25 01:39:38 2025 GMT Not After : May 2 01:39:38 2025 GMT Subject: CN=680ae7da-e94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e3:61:c4:85:0d:dc:ce:31:17:65:c8:f2:c7: 3b:9e:83:9f:51:8f:a9:1a:8e:d3:85:14:45:3b:a1: 56:bb:ad:a6:71:d3:34:8c:aa:99:34:88:a5:06:d8: 7f:98:d5:b7:62:5f:73:88:00:8b:5a:d1:4c:0d:ae: 0c:04:72:15:19:df:61:7e:b2:91:b0:de:69:36:e7: 0d:bc:1f:09:60:ac:19:af:d9:34:c6:a5:0e:b3:0c: 9b:a3:2e:76:e1:d4:95:8d:ac:45:9a:1f:72:1c:3b: ed:55:48:26:29:6e:3f:0d:20:0e:66:bb:5b:a3:f7: 11:e7:60:24:3d:52:81:c8:b1:2d:d0:8e:a3:47:38: 97:4d:65:d7:9b:66:64:8a:f4:96:52:39:71:b4:e2: b2:39:ae:60:4b:44:8c:fe:b6:f0:e9:a9:c0:33:56: 37:54:e4:06:2e:38:10:fc:08:0f:21:7c:49:4f:a3: a5:3c:17:32:ac:cb:ae:3f:58:c2:12:bc:82:04:3c: ee:92:92:8d:70:2a:5f:3c:d7:b0:eb:9b:62:e6:1f: f2:15:12:e8:0f:7a:35:0a:c4:03:d8:e5:21:d6:b3: 83:fb:c7:b1:2b:08:b8:b3:2d:84:91:35:b3:20:01: eb:63:27:5f:7d:07:d9:50:74:c9:e8:c5:36:29:19: 47:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:89:1C:12:76:8A:AB:0B:C2:5F:CE:BB:58:04:B7:B3:ED:67:4E:86 X509v3 Authority Key Identifier: keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:35:87:77:ca:af:21:e0:c6:e1:35:92:82:76:0e:47:6c:11: 2a:b4:ee:d9:ff:ea:37:7c:90:88:ab:ce:0c:82:ad:8c:6b:ab: 4b:d8:74:36:1e:23:f5:30:20:f6:9f:96:03:c2:b4:60:09:e0: 54:e2:d9:14:4d:7c:ae:c4:26:01:7b:48:6b:0b:59:82:79:26: 93:49:f8:d0:73:a3:11:b0:ac:ef:dc:be:99:cc:28:56:97:c5: f2:e3:f4:e6:f9:4c:d9:a6:2c:92:d2:35:09:03:25:cf:7d:1b: 12:fe:4b:10:c4:e3:32:05:22:fe:0a:94:22:55:ee:1d:b7:ce: f4:59:15:fc:53:68:11:95:09:c7:f3:0a:b9:4b:d2:95:29:20: a3:8f:5b:32:45:bd:32:93:9e:20:93:9c:b5:9e:54:78:ec:df: 99:56:01:9a:5b:0c:5a:36:76:71:cf:87:d6:22:33:c6:d6:d3: 82:6f:ae:e8:ff:d8:47:39:b3:6f:c3:eb:72:48:60:d1:c7:f8: bd:9f:76:56:cf:d2:3f:2f:6b:79:a2:4c:78:44:fd:f3:00:fc: 82:73:88:21:c8:50:7c:18:f4:b1:10:02:9a:86:b9:e7:9f:2d: 76:fa:d6:62:77:75:56:a5:9c:55:48:80:db:49:40:ec:b2:ea: 29:ed:14:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKDlBMDY0RUE2QjY2REI0REUyMEM5M0NDMDQxQjg1QTE3 MDZDODA2NzIwHhcNMjUwNDI1MDEzOTM4WhcNMjUwNTAyMDEzOTM4WjAYMRYwFAYD VQQDEw02ODBhZTdkYS1lOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuNhxIUN3M4xF2XI8sc7noOfUY+pGo7ThRRFO6FWu62mcdM0jKqZNIilBth/ mNW3Yl9ziACLWtFMDa4MBHIVGd9hfrKRsN5pNucNvB8JYKwZr9k0xqUOswyboy52 4dSVjaxFmh9yHDvtVUgmKW4/DSAOZrtbo/cR52AkPVKByLEt0I6jRziXTWXXm2Zk ivSWUjlxtOKyOa5gS0SM/rbw6anAM1Y3VOQGLjgQ/AgPIXxJT6OlPBcyrMuuP1jC EryCBDzukpKNcCpfPNew65ti5h/yFRLoD3o1CsQD2OUh1rOD+8exKwi4sy2EkTWz IAHrYydffQfZUHTJ6MU2KRlHqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmJHBJ2 iqsLwl/Ou1gEt7PtZ06GMB8GA1UdIwQYMBaAFJoGTqa2bbTeIMk8wEG4WhcGyAZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC81NEVFRjUxNDFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRONGd5VHpBUWJoYUZ3YklC bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21nWk9wclp0dE40Z3lUekFRYmhhRndiSUJuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC81NEVFRjUxNDFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRO NGd5VHpBUWJoYUZ3YklCbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsNYd3yq8h4MbhNZKCdg5HbBEqtO7Z/+o3fJCIq84Mgq2Ma6tL2HQ2 HiP1MCD2n5YDwrRgCeBU4tkUTXyuxCYBe0hrC1mCeSaTSfjQc6MRsKzv3L6ZzChW l8Xy4/Tm+UzZpiyS0jUJAyXPfRsS/ksQxOMyBSL+CpQiVe4dt870WRX8U2gRlQnH 8wq5S9KVKSCjj1syRb0yk54gk5y1nlR47N+ZVgGaWwxaNnZxz4fWIjPG1tOCb67o /9hHObNvw+tySGDRx/i9n3ZWz9I/L2t5okx4RP3zAPyCc4ghyFB8GPSxEAKahrnn ny12+tZid3VWpZxVSIDbSUDssuop7RSf -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:30 2025 by rpki-client