$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft File: Di3qFP18_9DQqeo-N0N7keRUsjY.mft (raw, json) Hash identifier: vx7UGoX2HxDp4eUlg3qrkFSTi87ieL9MRCSGzLUnmsk= Subject key identifier: BB:0C:DD:B1:2A:8A:37:30:E5:65:27:59:A9:42:34:78:7B:60:2E:1F Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 116E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft Manifest number: 1168 Signing time: Thu 24 Apr 2025 17:14:47 +0000 Manifest this update: Thu 24 Apr 2025 17:14:47 +0000 Manifest next update: Thu 01 May 2025 17:14:47 +0000 Files and hashes: 1: Di3qFP18_9DQqeo-N0N7keRUsjY.crl (hash: ZeMwDp7REB2T8F/6veN3rpbh2+at5oLF+WspXTviTg4=) 2: 2245CE0A606811EB80E3D531C4F9AE02.roa (hash: PSSQDCbjfGOv5hsREHHq3AE69qVBQBbQjxmYclshFuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4462 (0x116e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: Apr 24 17:14:47 2025 GMT Not After : May 1 17:14:47 2025 GMT Subject: CN=680a7187-12da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:c6:e5:d5:44:6a:8b:bb:94:09:28:1c:9a: ad:96:2f:e9:9b:ef:c5:22:79:aa:b2:57:f9:ec:6a: 25:0f:f4:5d:90:38:9d:9b:74:a2:39:83:6c:e1:0d: 80:6f:eb:64:ab:5d:17:aa:0c:aa:0d:5c:24:b8:c7: 98:4a:21:98:73:25:39:33:ff:1d:52:a3:a1:52:aa: cb:c6:7c:01:8d:51:45:de:d0:36:3c:d5:74:15:3d: e5:29:37:d0:0e:8e:ed:ba:a5:c2:0a:14:b2:de:d4: d9:20:6a:4a:ab:7c:ca:1b:56:93:1f:63:92:d7:f1: 33:24:99:46:e5:19:af:48:b0:e7:71:2c:50:f9:49: 0b:e9:23:1e:3e:76:c0:4e:21:ec:80:bc:84:cc:d8: 65:2c:af:07:ae:9d:45:21:8d:c6:41:74:98:fe:ae: ac:45:2e:31:3c:00:b5:63:c7:84:57:16:30:e1:e2: 7c:47:f9:de:fc:25:a9:c3:68:a4:e4:b6:f5:57:97: f2:52:c5:1d:61:e2:1f:39:f0:d4:4b:62:e8:a5:e8: 30:9e:4f:4e:3c:b2:59:d3:2a:4c:fc:eb:87:1f:77: 75:d1:af:62:da:de:4f:1f:fd:7e:9c:ca:67:47:01: 66:56:0d:5f:fe:ad:1b:2a:a4:4c:bf:76:27:66:7d: ec:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0C:DD:B1:2A:8A:37:30:E5:65:27:59:A9:42:34:78:7B:60:2E:1F X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:e7:9d:43:a8:a8:e4:23:67:9b:f4:d5:56:af:ff:ee:6c:2d: 5f:c0:09:02:87:21:2b:c2:6c:bf:db:2e:a1:12:b2:fb:2b:00: c7:42:a4:f8:59:73:fd:71:dc:8a:e3:cd:f4:8f:4a:50:34:8e: 41:9d:00:fa:dc:b1:a9:e9:a5:42:ce:c7:b1:6d:fb:91:1c:17: 76:20:2c:2c:ba:cc:a9:7a:76:ac:ff:f4:48:a8:34:6e:33:f3: bf:fd:0d:e1:57:b1:41:a1:25:d6:56:e2:c1:9d:6b:fa:ec:72: f6:de:a8:41:a7:a8:66:36:26:45:ef:46:92:df:75:11:5a:6f: 64:9a:6e:97:06:e8:62:26:3b:95:23:7b:6b:2a:34:bf:5b:7f: 13:cf:ed:d0:b5:a6:ef:75:d8:c9:53:c0:19:af:02:ee:93:92: 19:b0:5a:85:6f:6d:13:b1:dd:07:f6:68:c1:43:61:17:2a:b7: 27:51:64:29:05:5f:70:b2:42:74:43:ad:36:f6:f9:23:e4:0e: 05:be:f3:ed:aa:41:ef:11:0e:36:70:98:85:b0:b8:40:ca:29: f8:f2:1b:fd:5f:42:87:28:25:a1:4a:7a:d8:b5:cf:39:2d:7d: ea:3b:cb:b6:59:f2:9e:f5:ca:d9:52:60:40:61:c8:c2:c5:1d: 32:42:84:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjUwNDI0MTcxNDQ3WhcNMjUwNTAxMTcxNDQ3WjAYMRYwFAYD VQQDEw02ODBhNzE4Ny0xMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfjG5dVEaou7lAkoHJqtli/pm+/FInmqslf57GolD/RdkDidm3SiOYNs4Q2A b+tkq10XqgyqDVwkuMeYSiGYcyU5M/8dUqOhUqrLxnwBjVFF3tA2PNV0FT3lKTfQ Do7tuqXCChSy3tTZIGpKq3zKG1aTH2OS1/EzJJlG5RmvSLDncSxQ+UkL6SMePnbA TiHsgLyEzNhlLK8Hrp1FIY3GQXSY/q6sRS4xPAC1Y8eEVxYw4eJ8R/ne/CWpw2ik 5Lb1V5fyUsUdYeIfOfDUS2Lopegwnk9OPLJZ0ypM/OuHH3d10a9i2t5PH/1+nMpn RwFmVg1f/q0bKqRMv3YnZn3sbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsM3bEq ijcw5WUnWalCNHh7YC4fMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjBBMy9FNERGOTZBQUZERjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85 RFFxZW8tTjBON2tlUlVzalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS551DqKjkI2eb9NVWr//ubC1fwAkChyErwmy/2y6hErL7KwDHQqT4 WXP9cdyK4830j0pQNI5BnQD63LGp6aVCzsexbfuRHBd2ICwsusypenas//RIqDRu M/O//Q3hV7FBoSXWVuLBnWv67HL23qhBp6hmNiZF70aS33URWm9kmm6XBuhiJjuV I3trKjS/W38Tz+3QtabvddjJU8AZrwLuk5IZsFqFb20Tsd0H9mjBQ2EXKrcnUWQp BV9wskJ0Q6029vkj5A4FvvPtqkHvEQ42cJiFsLhAyin48hv9X0KHKCWhSnrYtc85 LX3qO8u2WfKe9crZUmBAYcjCxR0yQoT4 -----END CERTIFICATE-----Generated at Sat Apr 26 15:10:29 2025 by rpki-client