$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: 9r6cy3c7JYzSGw8zYtKI4LsitOlGiCap1OEOlXaqHS4= Subject key identifier: 30:3A:CA:B5:CE:ED:08:64:FF:D3:93:F1:8C:99:EF:3D:82:BA:6C:C5 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0C97 Signing time: Thu 24 Apr 2025 18:10:52 +0000 Manifest this update: Thu 24 Apr 2025 18:10:52 +0000 Manifest next update: Thu 01 May 2025 18:10:52 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: KeYn6tUaWDEPAKycyCyndyq3fQpznUXwbTndiRqoR5k=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: deD58Mq8q6NtgDApD9PQKblyJ8paeLDH7pnimAn97yk=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: lJUGsid+q5Tbb8CevBMe/tVeDQTPxzcpikP5JaRu0mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Apr 24 18:10:52 2025 GMT Not After : May 1 18:10:52 2025 GMT Subject: CN=680a7eac-ea89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:71:f2:7b:65:74:9d:a2:f7:f3:7d:74:6b: ef:b9:cd:59:13:aa:c8:96:74:d0:5c:1a:fe:b9:df: 8e:2d:4c:ac:79:6d:24:46:e8:9a:57:a4:dd:64:c8: 81:de:d7:d7:66:14:50:81:48:13:c2:c5:52:c2:f0: ad:de:f3:30:ce:41:ef:97:aa:9d:c0:27:67:af:07: 65:f6:b9:14:7d:f8:d5:1b:56:20:be:fa:41:fd:86: 7d:33:73:35:36:c2:24:bf:fe:f6:28:c3:cf:7f:b7: b1:84:c4:b2:a0:43:c2:c5:4a:8d:62:e4:09:9b:70: 03:b2:64:a2:21:00:70:ea:4d:af:32:f1:f1:ac:08: 13:e6:70:77:31:62:1e:78:f2:31:85:1b:be:94:b7: 17:87:e5:b4:0b:cb:6c:ab:25:05:26:23:e9:13:11: 43:d4:43:38:78:f0:0b:40:6a:e0:0e:a8:e2:92:e9: 73:59:26:f8:1c:41:7a:3b:90:81:2c:ab:c3:33:68: bb:aa:53:76:dc:f6:3e:ca:9a:ce:e3:17:4e:d3:ed: 96:fa:54:2d:3e:55:5c:21:85:b1:64:86:24:d9:ec: 80:79:d3:60:f2:8e:37:6a:b7:cf:9f:01:c5:3d:f2: de:e8:d5:82:96:28:65:30:32:ca:53:46:90:1b:d7: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3A:CA:B5:CE:ED:08:64:FF:D3:93:F1:8C:99:EF:3D:82:BA:6C:C5 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:31:ec:c7:5a:ed:1c:2e:6b:d3:7e:22:64:e7:df:ad:e0:a1: 93:7e:73:32:78:4a:3e:cb:12:dd:9d:77:0e:88:13:2a:5e:20: b9:c5:9e:58:39:ca:7e:7e:94:d6:7e:b3:96:5d:d7:61:c5:c5: fe:08:7d:b6:fc:17:d1:6c:b2:36:ba:fa:99:ad:e0:c3:55:10: 5f:87:0c:aa:85:08:88:60:2d:6c:85:ad:2d:6a:9c:66:f7:5e: 10:40:96:1a:96:56:34:f0:b2:44:80:35:da:c4:dc:b8:89:49: f4:9e:2e:84:27:b5:e9:4d:92:ad:2a:55:59:68:86:45:39:4f: 85:ee:b2:79:23:ce:94:7d:34:de:bf:d6:43:17:47:92:fe:5f: 61:ac:ac:5c:e0:d9:af:dc:3d:3f:e7:d7:1f:e0:24:bf:0e:88: 4e:8e:d3:43:5e:cb:b6:70:8f:10:3a:0e:b4:d8:c3:70:3d:3a: 7c:1c:ae:8b:77:50:38:cd:2e:14:b5:1b:cd:52:97:52:3e:e0: 5b:51:35:ae:24:db:56:3c:60:43:32:7a:0d:c9:27:b4:8b:bc: 98:67:da:08:6f:0d:d6:27:a8:f4:eb:2d:67:75:5b:42:bf:19: d2:28:ab:51:5a:9a:96:be:92:97:4f:53:b2:52:d9:f1:6c:82: 4e:4a:69:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUwNDI0MTgxMDUyWhcNMjUwNTAxMTgxMDUyWjAYMRYwFAYD VQQDEw02ODBhN2VhYy1lYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufJx8ntldJ2i9/N9dGvvuc1ZE6rIlnTQXBr+ud+OLUyseW0kRuiaV6TdZMiB 3tfXZhRQgUgTwsVSwvCt3vMwzkHvl6qdwCdnrwdl9rkUffjVG1YgvvpB/YZ9M3M1 NsIkv/72KMPPf7exhMSyoEPCxUqNYuQJm3ADsmSiIQBw6k2vMvHxrAgT5nB3MWIe ePIxhRu+lLcXh+W0C8tsqyUFJiPpExFD1EM4ePALQGrgDqjikulzWSb4HEF6O5CB LKvDM2i7qlN23PY+yprO4xdO0+2W+lQtPlVcIYWxZIYk2eyAedNg8o43arfPnwHF PfLe6NWClihlMDLKU0aQG9f9gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDA6yrXO 7Qhk/9OT8YyZ7z2CumzFMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWMezHWu0cLmvTfiJk59+t4KGTfnMyeEo+yxLdnXcOiBMqXiC5xZ5Y Ocp+fpTWfrOWXddhxcX+CH22/BfRbLI2uvqZreDDVRBfhwyqhQiIYC1sha0tapxm 914QQJYallY08LJEgDXaxNy4iUn0ni6EJ7XpTZKtKlVZaIZFOU+F7rJ5I86UfTTe v9ZDF0eS/l9hrKxc4Nmv3D0/59cf4CS/DohOjtNDXsu2cI8QOg602MNwPTp8HK6L d1A4zS4UtRvNUpdSPuBbUTWuJNtWPGBDMnoNySe0i7yYZ9oIbw3WJ6j06y1ndVtC vxnSKKtRWpqWvpKXT1OyUtnxbIJOSmmq -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:01 2025 by rpki-client