$ rpki-client -vvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft File: R1JQ5qBVR49Kwerx7TLVZyw80bM.mft (raw, json) Hash identifier: FFyulXESIWcArlJ+iceqksaKp/r7da/v44LU5PJPze0= Subject key identifier: 23:23:2B:FB:ED:E3:DD:4B:CD:FA:9C:87:42:BA:28:FB:8B:5F:FE:03 Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3 Certificate issuer: /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3 Certificate serial: 0D09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft Manifest number: 0CFB Signing time: Thu 24 Apr 2025 18:03:47 +0000 Manifest this update: Thu 24 Apr 2025 18:03:47 +0000 Manifest next update: Thu 01 May 2025 18:03:47 +0000 Files and hashes: 1: R1JQ5qBVR49Kwerx7TLVZyw80bM.crl (hash: /IdiioNZajMCWnVFvsYcJ0XfdgKicPv2GhHSJwjW+qU=) 2: B523DAE68C9211EABC682867C4F9AE02.roa (hash: O1kd0Y8YHGAuQNE1wq4lO26tfNPiZv4mNi6pAigMPUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3337 (0xd09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140EE2, serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3 Validity Not Before: Apr 24 18:03:47 2025 GMT Not After : May 1 18:03:47 2025 GMT Subject: CN=680a7d03-8b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:4d:4b:4b:19:f6:44:bb:6d:b0:d3:21:3d: ce:85:74:c4:26:8d:64:7a:72:a1:fd:47:d4:14:a0: db:ee:78:43:24:ce:e0:c6:bb:ea:3a:62:e9:64:b2: 01:02:03:ea:4d:26:10:ad:6f:91:2f:6b:0c:14:ab: f8:21:44:d1:53:2e:71:2d:3b:12:2b:ee:58:a6:4a: 76:d8:3d:35:10:ea:49:45:9e:b2:bf:dc:df:7b:e6: 7b:89:7b:2e:6a:7d:6c:c4:95:89:54:ab:fe:a1:ce: 77:e5:59:94:9c:00:04:39:00:a7:64:34:5c:cb:9b: b6:53:a2:a0:d0:4f:5b:87:ca:29:9a:b4:cd:8c:b5: 65:a7:5f:1b:2a:ee:6f:a6:63:b3:46:ca:ae:67:cb: ee:1a:f8:26:80:2b:7c:03:a3:72:db:87:01:5b:0d: af:01:e7:7f:3a:c4:05:cd:3b:9a:ec:f2:af:6f:41: ba:50:d3:f9:38:79:33:08:c1:db:cf:1b:5c:d4:b0: ae:a7:0d:d8:1b:e1:8f:a3:b7:99:fd:3a:a2:50:25: 69:15:ea:a7:44:dd:68:25:34:35:92:8b:61:01:04: 6e:1a:1f:d9:8a:ad:76:b4:44:e8:09:27:28:99:39: e5:0d:7b:75:0d:39:01:bc:9e:ed:f6:51:73:9b:9f: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:23:2B:FB:ED:E3:DD:4B:CD:FA:9C:87:42:BA:28:FB:8B:5F:FE:03 X509v3 Authority Key Identifier: keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2c:4a:67:b8:0a:fc:63:41:49:f4:e5:09:7e:be:05:32:0f: 5e:53:8d:be:45:25:a8:b7:09:29:fa:47:08:ba:78:c9:d2:87: 5c:dc:d0:6d:0d:22:d6:7b:b4:cb:85:d4:8f:53:5b:22:ca:16: bb:92:4f:bb:a0:2e:5e:0a:50:e8:c1:cb:16:f8:7c:dc:05:09: d7:ee:ae:60:8f:4b:d0:f7:b9:62:79:ea:66:49:d8:b9:52:27: f6:df:2a:44:85:c4:3b:fd:19:4e:b5:9d:18:0c:a2:06:e3:bf: e2:85:cf:a8:08:89:f2:9e:f8:32:c6:54:be:cb:43:a4:50:2a: 0f:85:98:b0:89:7b:4a:90:fe:a3:90:be:9f:73:48:c9:ac:67: 15:54:7a:1b:a0:91:9f:bb:22:a7:ba:6c:03:6e:87:a8:3d:67: 8d:df:9f:23:5e:69:58:05:51:e8:66:a2:af:88:9d:9a:fc:26: 09:da:55:1d:92:30:66:ce:22:05:ac:f0:0b:24:3d:39:95:d2: 8c:35:a9:99:74:4e:2e:3a:d4:44:01:1d:ae:67:e6:40:4b:ac: 89:00:a6:3e:f1:9a:33:2e:8d:ba:40:58:18:f5:3f:1d:16:bb: 4f:ec:41:0b:14:95:2d:ed:48:31:39:d3:06:d2:60:b0:af:90: 5f:7f:4c:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFRTIxMTAvBgNVBAUTKDQ3NTI1MEU2QTA1NTQ3OEY0QUMxRUFGMUVEMzJENTY3 MkMzQ0QxQjMwHhcNMjUwNDI0MTgwMzQ3WhcNMjUwNTAxMTgwMzQ3WjAYMRYwFAYD VQQDEw02ODBhN2QwMy04YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqchNS0sZ9kS7bbDTIT3OhXTEJo1kenKh/UfUFKDb7nhDJM7gxrvqOmLpZLIB AgPqTSYQrW+RL2sMFKv4IUTRUy5xLTsSK+5Ypkp22D01EOpJRZ6yv9zfe+Z7iXsu an1sxJWJVKv+oc535VmUnAAEOQCnZDRcy5u2U6Kg0E9bh8opmrTNjLVlp18bKu5v pmOzRsquZ8vuGvgmgCt8A6Ny24cBWw2vAed/OsQFzTua7PKvb0G6UNP5OHkzCMHb zxtc1LCupw3YG+GPo7eZ/TqiUCVpFeqnRN1oJTQ1kothAQRuGh/Ziq12tEToCSco mTnlDXt1DTkBvJ7t9lFzm59ABwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMjK/vt 491Lzfqch0K6KPuLX/4DMB8GA1UdIwQYMBaAFEdSUOagVUePSsHq8e0y1WcsPNGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEVFMi9FQTAxRDU1QURG NzMxMUU5QUJFQkQ0M0JDNEY5QUUwMi9SMUpRNXFCVlI0OUt3ZXJ4N1RMVlp5dzgw Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxSlE1cUJWUjQ5S3dlcng3VExWWnl3ODBiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEVFMi9FQTAxRDU1QURGNzMxMUU5QUJFQkQ0M0JDNEY5QUUwMi9SMUpRNXFCVlI0 OUt3ZXJ4N1RMVlp5dzgwYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtLEpnuAr8Y0FJ9OUJfr4FMg9eU42+RSWotwkp+kcIunjJ0odc3NBt DSLWe7TLhdSPU1siyha7kk+7oC5eClDowcsW+HzcBQnX7q5gj0vQ97lieepmSdi5 Uif23ypEhcQ7/RlOtZ0YDKIG47/ihc+oCInynvgyxlS+y0OkUCoPhZiwiXtKkP6j kL6fc0jJrGcVVHoboJGfuyKnumwDboeoPWeN358jXmlYBVHoZqKviJ2a/CYJ2lUd kjBmziIFrPALJD05ldKMNamZdE4uOtREAR2uZ+ZAS6yJAKY+8ZozLo26QFgY9T8d FrtP7EELFJUt7UgxOdMG0mCwr5Bff0zh -----END CERTIFICATE-----Generated at Sat Apr 26 05:51:46 2025 by rpki-client