$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft File: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json) Hash identifier: 4NfrgDR/D4EwSTuw+q5b3OtyK3QfnZxNg0B9/mUO4vU= Subject key identifier: 70:C6:D1:63:FA:8C:57:E9:04:2C:DA:38:0F:AB:DE:C6:18:D3:9B:94 Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 Certificate issuer: /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft Manifest number: 014F Signing time: Fri 25 Apr 2025 03:19:15 +0000 Manifest this update: Fri 25 Apr 2025 03:19:14 +0000 Manifest next update: Fri 02 May 2025 03:19:14 +0000 Files and hashes: 1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: w7rD2dVmxwb5e3vkGGgqWhfHo2vwptHW12AwQumNsIY=) 2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: dKoEMXA8fRTWxjeYqmYYgyMSw9H1lwIw8Fa9EYm/xNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89 Validity Not Before: Apr 25 03:19:14 2025 GMT Not After : May 2 03:19:14 2025 GMT Subject: CN=680aff32-6d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:2d:8b:db:c2:d4:44:50:67:f2:03:da:74: 63:e8:ec:e8:96:b5:5f:71:23:7b:6b:6f:2a:5e:f2: 57:09:63:c8:2c:16:0b:39:b7:fd:4f:44:ce:46:f6: 2b:14:15:02:75:33:46:43:b5:c6:66:78:8e:c2:18: c4:0a:4a:78:34:83:7c:f4:3a:0f:4b:68:e8:10:20: 8e:ac:c9:90:1b:ca:5e:1f:60:4e:fb:9e:db:6a:e7: 47:2b:95:dc:1f:4c:98:85:ed:9e:45:7a:21:d7:4f: 82:14:b3:48:20:08:75:af:da:cd:d6:c4:6a:f3:55: 70:2d:20:73:08:00:f4:cc:9c:6e:38:3b:22:54:e0: 57:c2:5a:1b:b9:19:96:17:ed:14:6b:c4:b6:68:a9: 5e:7c:f5:cf:9e:fc:ba:fc:f7:fb:e1:94:7a:83:12: d7:ed:9f:a7:99:67:99:b6:68:a1:32:08:6b:5f:40: b6:53:f6:8e:02:ee:de:67:b9:80:21:ee:df:96:3b: d3:c4:6f:7c:17:b7:d8:8d:d0:6a:d0:69:d4:a5:03: 32:fe:93:ef:5d:f4:d4:9e:9a:36:16:d4:70:30:1c: 54:cb:d2:c3:53:8c:e5:bc:0a:63:dc:91:b2:00:52: d4:2e:37:2a:de:66:56:7c:21:0a:98:4b:00:e5:87: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C6:D1:63:FA:8C:57:E9:04:2C:DA:38:0F:AB:DE:C6:18:D3:9B:94 X509v3 Authority Key Identifier: keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:04:96:e4:a2:0d:f5:c4:0d:69:bd:d0:3c:cd:a3:02:25:66: 42:7b:0c:87:c5:0d:1a:6b:e0:0a:86:7f:86:cb:0e:b5:cf:ba: bc:ee:c4:6d:b4:15:85:8d:1f:16:5d:73:c0:92:f3:41:3c:5b: 39:dc:54:a7:41:c4:a3:20:8f:d7:44:e9:73:c7:f3:1e:2b:12: 6d:d7:bc:31:ae:ae:0d:94:3a:5b:f3:70:f7:72:c0:47:0b:9d: 42:25:68:6c:20:98:37:ed:59:3b:e2:d9:00:9e:64:a9:2e:92: d4:d1:54:fd:4d:3d:d1:22:ae:5d:3b:6e:94:e3:f8:5b:25:10: 68:70:b7:b9:dd:ee:9d:6c:51:85:58:d2:9c:1d:19:95:f9:d5: 6e:20:a7:d0:25:16:a2:da:c9:0d:00:8a:6d:4b:53:53:26:71: eb:d9:e3:8d:81:86:bd:b9:a7:5e:0e:6d:f1:91:2a:cc:4c:42: 08:b1:6b:26:23:9c:ef:b8:4d:f3:84:41:6f:0b:15:24:d4:32: ec:f7:fc:7e:0e:6b:ac:c6:3c:47:66:cc:33:2d:d3:fe:d8:fe: e1:53:85:e5:45:ff:e0:9f:2f:61:06:17:05:e8:cd:50:28:c0: 5d:20:17:41:e0:6e:87:10:3d:31:1b:2e:df:93:c4:8b:62:0c: 08:40:46:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QTIxMTAvBgNVBAUTKEY2OERDRUQyRTYwMkY0NDY1Njc0MTA5OTRBOEU4QzAy MTAwOUVEODkwHhcNMjUwNDI1MDMxOTE0WhcNMjUwNTAyMDMxOTE0WjAYMRYwFAYD VQQDEw02ODBhZmYzMi02ZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF8ti9vC1ERQZ/ID2nRj6OzolrVfcSN7a28qXvJXCWPILBYLObf9T0TORvYr FBUCdTNGQ7XGZniOwhjECkp4NIN89DoPS2joECCOrMmQG8peH2BO+57baudHK5Xc H0yYhe2eRXoh10+CFLNIIAh1r9rN1sRq81VwLSBzCAD0zJxuODsiVOBXwlobuRmW F+0Ua8S2aKlefPXPnvy6/Pf74ZR6gxLX7Z+nmWeZtmihMghrX0C2U/aOAu7eZ7mA Ie7fljvTxG98F7fYjdBq0GnUpQMy/pPvXfTUnpo2FtRwMBxUy9LDU4zlvApj3JGy AFLULjcq3mZWfCEKmEsA5YfZlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDG0WP6 jFfpBCzaOA+r3sYY05uUMB8GA1UdIwQYMBaAFPaNztLmAvRGVnQQmUqOjAIQCe2J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdBMi80MDZCNjEwMDI2 QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlFWldkQkNaU282TUFoQUo3 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlvM08wdVlDOUVaV2RCQ1pTbzZNQWhBSjdZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdBMi80MDZCNjEwMDI2QUYxMUVFOEFFRDRGNDVDNEY5QUUwMi85bzNPMHVZQzlF WldkQkNaU282TUFoQUo3WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClBJbkog31xA1pvdA8zaMCJWZCewyHxQ0aa+AKhn+Gyw61z7q87sRt tBWFjR8WXXPAkvNBPFs53FSnQcSjII/XROlzx/MeKxJt17wxrq4NlDpb83D3csBH C51CJWhsIJg37Vk74tkAnmSpLpLU0VT9TT3RIq5dO26U4/hbJRBocLe53e6dbFGF WNKcHRmV+dVuIKfQJRai2skNAIptS1NTJnHr2eONgYa9uadeDm3xkSrMTEIIsWsm I5zvuE3zhEFvCxUk1DLs9/x+DmusxjxHZswzLdP+2P7hU4XlRf/gny9hBhcF6M1Q KMBdIBdB4G6HED0xGy7fk8SLYgwIQEZF -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:02 2025 by rpki-client