$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft File: UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json) Hash identifier: wBSbCM6Ov5itmUDwzvjTp5L6UwUeHX8fqLWHSnLSh9s= Subject key identifier: F9:F5:DC:FB:5C:C5:D7:E2:2C:4B:5D:D0:19:EB:F3:EC:56:71:D7:7B Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB Certificate issuer: /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft Manifest number: CE Signing time: Fri 25 Apr 2025 04:44:55 +0000 Manifest this update: Fri 25 Apr 2025 04:44:54 +0000 Manifest next update: Fri 02 May 2025 04:44:54 +0000 Files and hashes: 1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: H3MQtdDi4fHPBrbQonKvcnOCMIymvLhzzuCEgYULIC0=) 2: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: pZLz3ej+tVLc2J7+rwf06tDZnqs3dwrJq7aVxSC7rms=) 3: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: /2tjWIi0u7oNCgmiDrZKKU8I6bZFjH4t5+cXs2Pyels=) 4: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: lNdrav2FKiwHzQRaLPDIVyHVR0XthNGpd6hQfMeEMGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB Validity Not Before: Apr 25 04:44:54 2025 GMT Not After : May 2 04:44:54 2025 GMT Subject: CN=680b1346-a954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:b8:76:5c:ef:1e:91:3f:03:35:06:a3:f0: 7b:a4:5e:98:c9:ac:75:ef:40:05:81:c6:7d:b3:73: 2c:ed:79:21:38:e4:d2:c0:23:be:63:fc:8e:2c:08: 34:82:87:b2:40:e0:ba:0b:0f:63:47:40:95:b5:46: 5d:4c:ae:cd:cb:97:77:31:40:f1:4e:a5:8f:da:e1: ef:db:ce:58:06:50:6a:97:f8:19:f2:4e:4a:2e:1b: ec:ec:93:5d:e5:89:b7:52:da:3c:50:0c:1a:12:fa: 81:8f:4a:84:78:67:84:ae:32:0b:a9:8c:2b:f9:eb: 86:a7:b5:28:85:ff:93:17:93:25:f2:58:05:2b:4d: d7:b2:40:7d:6d:d9:5b:76:c6:61:d1:f4:af:c7:28: a6:70:c9:39:b1:c3:ce:5a:78:08:37:12:48:54:89: 6f:84:8b:88:4e:c6:5b:78:ee:7d:c7:45:bb:b7:ef: 9e:08:68:40:92:ce:cb:97:43:71:c4:b2:0e:c7:c2: c7:33:c0:a6:75:b4:71:bb:1a:43:51:80:33:04:44: 30:64:8a:16:a0:e5:e6:99:42:ee:a5:64:55:27:23: 7d:6c:c0:c1:0b:bf:fd:9d:ec:21:20:93:40:1a:ce: c5:13:2e:34:10:f0:23:c6:2a:5f:5f:ed:0c:20:8d: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F5:DC:FB:5C:C5:D7:E2:2C:4B:5D:D0:19:EB:F3:EC:56:71:D7:7B X509v3 Authority Key Identifier: keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d8:f0:42:19:ad:f8:57:54:0f:93:e5:53:b3:83:b7:ab:17: b9:27:d1:ed:41:f9:17:eb:75:37:8c:f6:bb:6d:c1:d9:13:bf: dd:d0:5f:45:d0:78:62:73:aa:a6:2c:87:57:41:b2:e7:f9:d9: 68:ea:e6:a5:d4:4c:49:aa:26:3b:36:0b:a8:39:87:5b:2a:25: 36:46:4d:a0:aa:6a:2b:71:47:d6:c7:b1:66:13:64:b8:c6:fe: 46:4a:53:8e:a8:dc:28:3f:d8:9f:e9:92:7b:6e:e1:1d:d3:0c: 30:5c:c3:df:33:2b:88:78:f2:7f:61:76:4e:07:b8:4b:86:b9: 53:48:f1:f7:f0:8b:64:33:85:6e:02:65:17:19:55:c4:01:32: c7:17:7f:25:c6:a9:05:50:de:6b:6f:55:0f:a1:99:fa:a4:d0: 1b:9a:b5:3d:ad:1c:18:df:4b:13:f1:22:d3:d9:80:28:bb:63: 38:74:28:8b:3b:9d:be:9e:7e:f3:cf:0a:f2:bb:03:74:4f:92: 66:28:a6:d5:c1:db:44:14:f7:76:d0:1a:3c:15:59:44:ba:53: b5:a9:ca:a4:b5:11:54:4a:07:25:bd:06:cf:df:5f:26:30:52: 07:7a:31:dc:ae:ee:7f:fd:27:8a:f6:bd:d2:25:e8:10:bf:cd: b4:10:8a:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5MDYxMTAvBgNVBAUTKDUwMzI3MkRBM0VGMEFCRURFOTUzOUM3RTI0M0ExQjg2 ODZCMTYxRkIwHhcNMjUwNDI1MDQ0NDU0WhcNMjUwNTAyMDQ0NDU0WjAYMRYwFAYD VQQDEw02ODBiMTM0Ni1hOTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvn24dlzvHpE/AzUGo/B7pF6Yyax170AFgcZ9s3Ms7XkhOOTSwCO+Y/yOLAg0 goeyQOC6Cw9jR0CVtUZdTK7Ny5d3MUDxTqWP2uHv285YBlBql/gZ8k5KLhvs7JNd 5Ym3Uto8UAwaEvqBj0qEeGeErjILqYwr+euGp7Uohf+TF5Ml8lgFK03XskB9bdlb dsZh0fSvxyimcMk5scPOWngINxJIVIlvhIuITsZbeO59x0W7t++eCGhAks7Ll0Nx xLIOx8LHM8CmdbRxuxpDUYAzBEQwZIoWoOXmmULupWRVJyN9bMDBC7/9newhIJNA Gs7FEy40EPAjxipfX+0MII37vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPn13Ptc xdfiLEtd0Bnr8+xWcdd7MB8GA1UdIwQYMBaAFFAycto+8Kvt6VOcfiQ6G4aGsWH7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjkwNi8yODNBNjY4RUU3 NzYxMUVFQUFGRjNFNzRDNEY5QUUwMi9VREp5Mmo3d3EtM3BVNXgtSkRvYmhvYXhZ ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VESnkyajd3cS0zcFU1eC1KRG9iaG9heFlmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjkwNi8yODNBNjY4RUU3NzYxMUVFQUFGRjNFNzRDNEY5QUUwMi9VREp5Mmo3d3Et M3BVNXgtSkRvYmhvYXhZZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+2PBCGa34V1QPk+VTs4O3qxe5J9HtQfkX63U3jPa7bcHZE7/d0F9F 0Hhic6qmLIdXQbLn+dlo6ual1ExJqiY7NguoOYdbKiU2Rk2gqmorcUfWx7FmE2S4 xv5GSlOOqNwoP9if6ZJ7buEd0wwwXMPfMyuIePJ/YXZOB7hLhrlTSPH38ItkM4Vu AmUXGVXEATLHF38lxqkFUN5rb1UPoZn6pNAbmrU9rRwY30sT8SLT2YAou2M4dCiL O52+nn7zzwryuwN0T5JmKKbVwdtEFPd20Bo8FVlEulO1qcqktRFUSgclvQbP318m MFIHejHcru5//SeK9r3SJegQv820EIqQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:53 2025 by rpki-client