$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json) Hash identifier: rsBHHrKG7k1jNUUgsQCnjME/stPkMvaNAvehQNvU3j4= Subject key identifier: 70:EB:6F:1C:37:89:D3:2B:EB:A3:AF:17:C3:26:B8:07:A8:49:1A:EB Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft Manifest number: 0251 Signing time: Fri 25 Apr 2025 01:36:44 +0000 Manifest this update: Fri 25 Apr 2025 01:36:44 +0000 Manifest next update: Fri 02 May 2025 01:36:44 +0000 Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: y4zk2h5FQLbF6sl/p8X28ejyQuguwI0QBsQxrm+L3Fk=) 2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: axhlzcql8Um5s2iVqGj/BuPhDZVy8siOPCHeHdpqbOU=) 3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: ldX/DKDOg9xZhESj3T5OZ1Y87w44jU1f3a2RytTmEgo=) 4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: RgIHOi6o2CyuImHKbYCkxFcAJ9v5chcNqvLkjQHCgqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: Apr 25 01:36:44 2025 GMT Not After : May 2 01:36:44 2025 GMT Subject: CN=680ae72c-511b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f7:af:b1:c8:32:e2:c4:82:d4:58:cc:22:9c: 0a:56:f7:c2:ef:e6:3b:13:61:9c:a3:00:31:4e:a6: c2:f9:1c:c2:ee:cb:c1:f7:e0:29:e3:0f:60:56:8a: f7:89:43:50:2a:0a:53:1c:56:a7:79:e3:0a:82:54: 5d:2a:74:a8:a3:7d:66:34:b5:19:7a:42:d6:35:88: 46:47:ee:de:8d:3b:db:f2:f5:55:24:ad:db:29:f7: 58:c8:61:0b:f3:74:0e:2c:36:38:f2:80:43:80:a8: 52:30:36:18:c8:35:47:7c:f1:f9:17:6c:b6:82:6d: e2:36:c5:1b:9e:9d:a3:2b:d5:6b:7a:3c:2d:f3:7b: b3:ac:3e:78:2a:e2:92:8d:40:72:ac:08:eb:fc:72: 55:6a:c9:c6:42:9c:6b:35:07:2f:19:fb:0a:d9:2d: 4c:66:b4:06:11:a5:44:13:6e:08:09:21:20:c9:21: 57:1b:56:35:bc:72:c8:df:e2:7f:83:cd:b1:cd:b0: c6:d5:9b:a0:5a:bf:c5:d6:17:88:71:52:c7:d7:bb: e8:5a:aa:06:60:ac:19:00:79:36:bc:24:c1:4a:20: 79:d6:79:40:3c:81:f2:47:ab:1d:7b:9b:19:91:06: 9e:61:da:94:11:fb:45:88:a1:0d:f9:e5:2c:c4:09: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EB:6F:1C:37:89:D3:2B:EB:A3:AF:17:C3:26:B8:07:A8:49:1A:EB X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:c2:99:fc:8a:32:d1:2a:f7:2d:8f:b6:14:c2:ae:fb:65:ad: 37:b7:55:51:46:98:41:2b:4c:b3:67:ca:4d:58:22:9f:98:c0: c8:01:1a:2b:aa:62:ef:2a:db:97:89:5b:33:74:42:e5:5d:32: 91:64:c7:4d:36:4b:9a:d8:d1:ca:5b:57:3c:48:72:4b:c9:ca: 3d:c6:3c:f1:fb:04:91:f6:90:07:93:8e:e5:e0:c0:4c:1e:67: 7a:4e:ca:1b:43:74:7d:90:af:8a:26:98:dd:b2:36:0a:b2:5f: 1d:d2:34:b1:37:2a:08:e3:d5:33:5b:68:87:96:1c:20:fc:af: 33:c6:c0:5b:05:ee:28:d6:01:40:c1:e1:46:15:69:3b:79:95: 8d:db:6d:bf:99:4e:f9:2f:6d:ac:d2:e3:8f:50:27:74:b4:bf: 91:8a:88:2f:36:10:d5:8a:a0:ae:59:57:81:42:da:24:90:68: 35:66:67:af:ee:6f:c3:ca:28:47:2d:fe:69:9e:3e:a4:c4:08: 25:f8:1c:ac:44:ec:3c:4b:74:d1:e3:85:20:b3:64:aa:2e:0f: c4:c7:fe:ab:45:fb:9c:1f:76:77:19:67:49:05:13:7b:76:e2: e4:c0:36:7a:6f:fd:c1:17:83:8c:15:a2:47:5e:47:cf:74:b7: 40:d4:ce:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjUwNDI1MDEzNjQ0WhcNMjUwNTAyMDEzNjQ0WjAYMRYwFAYD VQQDEw02ODBhZTcyYy01MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Pevscgy4sSC1FjMIpwKVvfC7+Y7E2GcowAxTqbC+RzC7svB9+Ap4w9gVor3 iUNQKgpTHFaneeMKglRdKnSoo31mNLUZekLWNYhGR+7ejTvb8vVVJK3bKfdYyGEL 83QOLDY48oBDgKhSMDYYyDVHfPH5F2y2gm3iNsUbnp2jK9Vrejwt83uzrD54KuKS jUByrAjr/HJVasnGQpxrNQcvGfsK2S1MZrQGEaVEE24ICSEgySFXG1Y1vHLI3+J/ g82xzbDG1ZugWr/F1heIcVLH17voWqoGYKwZAHk2vCTBSiB51nlAPIHyR6sde5sZ kQaeYdqUEftFiKEN+eUsxAkCeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDrbxw3 idMr66OvF8MmuAeoSRrrMB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCwpn8ijLRKvctj7YUwq77Za03t1VRRphBK0yzZ8pNWCKfmMDIARor qmLvKtuXiVszdELlXTKRZMdNNkua2NHKW1c8SHJLyco9xjzx+wSR9pAHk47l4MBM Hmd6TsobQ3R9kK+KJpjdsjYKsl8d0jSxNyoI49UzW2iHlhwg/K8zxsBbBe4o1gFA weFGFWk7eZWN222/mU75L22s0uOPUCd0tL+RiogvNhDViqCuWVeBQtokkGg1Zmev 7m/DyihHLf5pnj6kxAgl+BysROw8S3TR44Ugs2SqLg/Ex/6rRfucH3Z3GWdJBRN7 duLkwDZ6b/3BF4OMFaJHXkfPdLdA1M5T -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:57 2025 by rpki-client