$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft File: PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json) Hash identifier: qiOem+8MNm9408ND+32RzAH1IvvytbT0nm8jE5L/yQw= Subject key identifier: 19:68:07:C9:ED:17:CD:73:00:5C:43:12:69:EA:7D:6C:1A:7F:90:A3 Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Certificate serial: 07F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft Manifest number: 07B3 Signing time: Thu 24 Apr 2025 21:13:38 +0000 Manifest this update: Thu 24 Apr 2025 21:13:38 +0000 Manifest next update: Thu 01 May 2025 21:13:38 +0000 Files and hashes: 1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: ZGPC7medEDZDoD0KHNUg6qSyJZF1aydOzhh+pO0yJnQ=) 2: CD1E94321A7D11F09A63C576C4F9AE02.roa (hash: 4f1stCzy9qSXuQpOPoCgGurdRcl75dXwj8oNPKJisIk=) 3: CBA325821A7D11F09A63C576C4F9AE02.roa (hash: P6YodNXIYdCQHm2vOKV8XIgdGr4y0ngHXIwNqS8C+KM=) 4: 476CAD520AC811F0A8700787C4F9AE02.roa (hash: GES2aJGb9vKXtXOggNobGX6z89xMp2LAUs1LwtMA5BI=) 5: DD8B40E41A7E11F098A37378C4F9AE02.roa (hash: L6v9N1lps3HT+4hWevJV8kUzpnpP386yo30tBD8aoeQ=) 6: 0ACEF76441DC11ECBDB44C82C4F9AE02.roa (hash: yYpvf9p+wsM6J9X86nR8OoM5Locu4ULTbYADmSrh3ns=) 7: 50379A94992611EC94DB646EC4F9AE02.roa (hash: UQSilDbz/hE2pQQ6qsVZpBDsORWehlq7xmMJwgsCEF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2035 (0x7f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Validity Not Before: Apr 24 21:13:38 2025 GMT Not After : May 1 21:13:38 2025 GMT Subject: CN=680aa982-9894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5d:14:63:2b:5a:7e:db:db:35:6d:c9:3d:fb: e5:90:49:99:10:f9:ef:15:20:f2:48:6e:72:29:0f: 51:13:c1:fa:fb:6d:47:ae:7c:58:3a:06:66:20:f2: b4:85:53:46:23:95:cc:46:a7:69:c0:5b:db:aa:03: 9a:a0:50:03:b6:df:da:1c:f9:b9:96:eb:68:66:77: 71:9a:98:9c:0a:ce:ac:42:d7:cb:b5:9f:a3:9b:d9: 22:37:27:db:f6:db:c4:d6:fb:a2:95:e4:1a:e7:15: 19:a9:87:f5:ac:31:2a:f1:4e:c9:19:a9:ea:d0:f3: 3f:46:de:a4:e0:e1:5e:6d:b8:fc:92:3c:d9:3f:5b: ef:97:60:1f:24:60:0e:f3:c2:d3:1d:e1:4f:e2:49: db:20:19:ac:87:e3:b7:05:a4:46:dd:6a:f8:ce:a1: 32:c8:26:e3:de:b3:6c:16:00:55:62:ab:8e:6e:e4: 8a:96:21:5d:4f:a6:ff:f6:fd:e8:96:46:20:d2:3f: c6:33:0c:65:6c:e4:a2:89:0d:e3:85:5a:95:3e:dd: 25:72:19:4d:ea:d0:b3:b3:65:77:48:82:6a:13:08: 65:8c:ef:18:a7:f8:16:4d:e2:7e:b2:0d:0c:7a:d3: 96:3f:34:19:90:13:ba:84:2a:0e:17:b5:0a:d8:f5: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:68:07:C9:ED:17:CD:73:00:5C:43:12:69:EA:7D:6C:1A:7F:90:A3 X509v3 Authority Key Identifier: keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:94:dd:56:25:8e:ef:33:cc:be:a7:53:d1:b5:ce:9a:22:02: c0:25:f8:10:f8:21:0e:e2:b4:89:94:ff:8c:c4:64:d7:0c:45: 6c:0d:c0:00:53:07:4e:f7:62:93:04:f5:ff:5f:ee:02:9d:3a: f8:72:f7:14:69:ce:e5:7c:2d:92:6d:0f:d6:b2:7d:f3:84:94: f1:32:19:60:83:81:ba:51:42:d6:a2:e5:4a:10:70:50:c4:6a: dc:65:f5:cd:aa:da:27:82:74:ee:81:ee:fa:8f:10:f0:e5:4e: 11:3d:8c:d4:61:14:56:95:bf:4c:c2:4b:03:26:05:1d:97:dd: c3:97:ec:6c:0e:0d:7d:8b:e5:d6:8f:3e:5a:01:fd:91:82:38: 08:1c:a7:a2:35:d8:e8:0d:17:73:68:cb:34:7d:63:20:04:28: a9:54:f1:25:95:3d:68:3f:26:28:ea:2f:4f:02:89:6e:aa:76: 60:fc:95:aa:a3:f5:7c:31:2f:ac:a4:54:6f:36:ab:2e:bd:97: 33:90:db:d4:13:cd:21:88:ea:3e:9b:aa:76:cc:ec:49:05:61: 6d:8b:ab:77:6f:fd:c2:d4:0a:64:a0:ac:f8:6a:ae:15:c9:7a: 41:92:1a:0a:02:1f:e4:7c:d4:e6:26:49:08:c5:ca:0b:5d:26: 02:8a:66:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUwQTQxMTAvBgNVBAUTKDNEMUQ2QTMzMkFFQTRFQzUwMjAzN0EwOTA5RjRDQzE5 RDQyREIxOTgwHhcNMjUwNDI0MjExMzM4WhcNMjUwNTAxMjExMzM4WjAYMRYwFAYD VQQDEw02ODBhYTk4Mi05ODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA410UYytaftvbNW3JPfvlkEmZEPnvFSDySG5yKQ9RE8H6+21HrnxYOgZmIPK0 hVNGI5XMRqdpwFvbqgOaoFADtt/aHPm5lutoZndxmpicCs6sQtfLtZ+jm9kiNyfb 9tvE1vuileQa5xUZqYf1rDEq8U7JGanq0PM/Rt6k4OFebbj8kjzZP1vvl2AfJGAO 88LTHeFP4knbIBmsh+O3BaRG3Wr4zqEyyCbj3rNsFgBVYquObuSKliFdT6b/9v3o lkYg0j/GMwxlbOSiiQ3jhVqVPt0lchlN6tCzs2V3SIJqEwhljO8Yp/gWTeJ+sg0M etOWPzQZkBO6hCoOF7UK2PX8PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBloB8nt F81zAFxDEmnqfWwaf5CjMB8GA1UdIwQYMBaAFD0dajMq6k7FAgN6CQn0zBnULbGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTBBNC9ERDQ3MzY5ODBD MzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRzVUNBM29KQ2ZUTUdkUXRz WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSMXFNeXJxVHNVQ0Ezb0pDZlRNR2RRdHNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTBBNC9ERDQ3MzY5ODBDMzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRz VUNBM29KQ2ZUTUdkUXRzWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZlN1WJY7vM8y+p1PRtc6aIgLAJfgQ+CEO4rSJlP+MxGTXDEVsDcAA UwdO92KTBPX/X+4CnTr4cvcUac7lfC2SbQ/Wsn3zhJTxMhlgg4G6UULWouVKEHBQ xGrcZfXNqtongnTuge76jxDw5U4RPYzUYRRWlb9MwksDJgUdl93Dl+xsDg19i+XW jz5aAf2RgjgIHKeiNdjoDRdzaMs0fWMgBCipVPEllT1oPyYo6i9PAoluqnZg/JWq o/V8MS+spFRvNqsuvZczkNvUE80hiOo+m6p2zOxJBWFti6t3b/3C1ApkoKz4aq4V yXpBkhoKAh/kfNTmJkkIxcoLXSYCimZ/ -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:23 2025 by rpki-client