$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft File: mAInpdd1oDTad40z-IxcwCDRw5w.mft (raw, json) Hash identifier: 6tA9sLf2293WrLurCv3bQHPOxcUTaZ3Wn7Ky7f8qecY= Subject key identifier: CC:A0:B4:AC:52:28:F1:69:15:C6:8D:A3:C6:63:B3:2D:63:9E:FE:FC Authority key identifier: 98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C Certificate issuer: /CN=A9148E7B/serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft Manifest number: 01C3 Signing time: Fri 25 Apr 2025 02:10:42 +0000 Manifest this update: Fri 25 Apr 2025 02:10:41 +0000 Manifest next update: Fri 02 May 2025 02:10:41 +0000 Files and hashes: 1: mAInpdd1oDTad40z-IxcwCDRw5w.crl (hash: i5gUU2WwBun2zRLHt9BjBqhGTJniT8jKzYHAhM7FfcI=) 2: 8CFF3572708F11ED88DF8322C4F9AE02.roa (hash: lONZjm0NjFEm7xQkBCGWnrkGFmjAfW8U6anBdYjJWgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E7B, serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Validity Not Before: Apr 25 02:10:41 2025 GMT Not After : May 2 02:10:41 2025 GMT Subject: CN=680aef22-7fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:26:e2:88:27:bf:bb:3d:0b:de:92:41:cc:11: 77:bf:67:0a:44:eb:a0:37:32:ef:96:72:2b:b1:97: aa:05:35:de:14:13:a4:83:87:95:db:5a:be:b2:bb: 0a:8b:96:c2:af:a2:63:f3:0a:ad:3f:d4:1b:a5:e6: a0:a5:0c:8a:43:79:72:aa:b9:67:9e:01:4a:e2:57: c2:72:05:b6:b5:52:d6:9f:c4:ba:84:67:98:11:43: 3a:a2:0a:4f:ea:f8:43:6e:97:99:25:5f:2b:ef:07: 22:55:86:5b:fe:7a:9f:17:6c:86:ca:8f:1a:83:c6: 89:62:40:d5:29:0e:c5:38:da:b2:df:ce:72:a3:9c: 42:97:ef:26:28:c4:6a:33:82:14:94:b2:6c:7a:32: 8f:f7:a8:a2:bb:e2:fa:c4:f6:b2:da:7a:d2:5e:d7: 54:09:d6:13:ce:5d:c5:f7:82:4c:fb:ef:13:5b:32: e3:06:bb:34:32:84:d7:6b:20:d3:01:a8:d1:c3:2b: 66:70:b1:18:c9:a2:8f:ca:8e:34:90:37:4c:e5:a2: ac:8d:a9:55:af:da:89:d3:7c:2b:e7:95:54:9c:83: 88:59:cd:da:60:17:1b:7e:f7:1d:b9:38:d9:f9:2a: 5c:36:a7:9e:f1:35:03:12:27:4d:94:3c:2a:80:e4: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A0:B4:AC:52:28:F1:69:15:C6:8D:A3:C6:63:B3:2D:63:9E:FE:FC X509v3 Authority Key Identifier: keyid:98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:df:c1:ab:ca:d9:22:95:c1:85:52:04:ff:cc:5e:9a:1d:6f: 8e:e5:f4:02:b1:1b:31:4b:5c:85:aa:80:40:30:3e:e1:3e:ce: 5b:57:65:ca:77:91:15:79:a4:0c:cb:7d:2b:75:9e:35:ac:ea: 93:9e:f1:8a:b7:67:be:4f:db:2c:27:cb:65:dd:20:a2:d4:75: 8f:e9:b2:bf:d1:52:22:1c:b2:ef:68:bb:e2:92:88:ca:ec:cd: 0f:c2:16:12:9d:2b:b8:a0:79:dd:f7:58:f9:47:6a:fc:8c:33: de:9b:29:12:e1:c2:c5:09:09:72:a1:64:da:ef:fe:52:0c:f3: ea:c5:02:cd:81:c5:71:28:d0:77:c9:08:b6:18:58:49:67:4d: 8e:2f:46:a7:ff:9f:98:b1:b6:ce:19:4c:47:0f:12:58:4a:80: 8b:b9:df:be:65:ec:c9:d9:0d:48:ba:be:30:d3:37:30:e6:14: 8a:38:c9:f1:90:6a:58:82:48:01:a8:ba:b8:bd:7f:b8:da:a6: c9:d5:49:1e:62:cf:ee:3d:6b:15:8b:47:b5:cf:b1:b9:8a:91: ed:c5:e8:aa:15:05:8d:8c:e0:a4:aa:89:b9:85:65:59:7a:ab: 60:1b:b1:1a:0b:7f:dd:1c:76:1f:50:d7:06:66:0a:a6:6f:dc: 40:ee:58:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFN0IxMTAvBgNVBAUTKDk4MDIyN0E1RDc3NUEwMzREQTc3OEQzM0Y4OEM1Q0Mw MjBEMUMzOUMwHhcNMjUwNDI1MDIxMDQxWhcNMjUwNTAyMDIxMDQxWjAYMRYwFAYD VQQDEw02ODBhZWYyMi03ZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6CbiiCe/uz0L3pJBzBF3v2cKROugNzLvlnIrsZeqBTXeFBOkg4eV21q+srsK i5bCr6Jj8wqtP9QbpeagpQyKQ3lyqrlnngFK4lfCcgW2tVLWn8S6hGeYEUM6ogpP 6vhDbpeZJV8r7wciVYZb/nqfF2yGyo8ag8aJYkDVKQ7FONqy385yo5xCl+8mKMRq M4IUlLJsejKP96iiu+L6xPay2nrSXtdUCdYTzl3F94JM++8TWzLjBrs0MoTXayDT AajRwytmcLEYyaKPyo40kDdM5aKsjalVr9qJ03wr55VUnIOIWc3aYBcbfvcduTjZ +SpcNqee8TUDEidNlDwqgOS12wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMygtKxS KPFpFcaNo8Zjsy1jnv78MB8GA1UdIwQYMBaAFJgCJ6XXdaA02neNM/iMXMAg0cOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU3Qi80NzhGQTZENjcw OEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9EVGFkNDB6LUl4Y3dDRFJ3 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21BSW5wZGQxb0RUYWQ0MHotSXhjd0NEUnc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU3Qi80NzhGQTZENjcwOEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9E VGFkNDB6LUl4Y3dDRFJ3NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA138GrytkilcGFUgT/zF6aHW+O5fQCsRsxS1yFqoBAMD7hPs5bV2XK d5EVeaQMy30rdZ41rOqTnvGKt2e+T9ssJ8tl3SCi1HWP6bK/0VIiHLLvaLvikojK 7M0PwhYSnSu4oHnd91j5R2r8jDPemykS4cLFCQlyoWTa7/5SDPPqxQLNgcVxKNB3 yQi2GFhJZ02OL0an/5+YsbbOGUxHDxJYSoCLud++ZezJ2Q1Iur4w0zcw5hSKOMnx kGpYgkgBqLq4vX+42qbJ1UkeYs/uPWsVi0e1z7G5ipHtxeiqFQWNjOCkqom5hWVZ eqtgG7EaC3/dHHYfUNcGZgqmb9xA7lj4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:43 2025 by rpki-client