$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft File: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json) Hash identifier: 1q5UP3icWXMATSEUzLM+UqiFQTKx7hS75kOJHdaQ8jU= Subject key identifier: 0E:3D:8C:0A:28:B8:D0:E0:71:C5:98:31:1C:AC:2F:22:A1:D7:7E:30 Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A Certificate issuer: /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Certificate serial: 1E4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft Manifest number: 1E25 Signing time: Thu 24 Apr 2025 16:05:42 +0000 Manifest this update: Thu 24 Apr 2025 16:05:42 +0000 Manifest next update: Thu 01 May 2025 16:05:42 +0000 Files and hashes: 1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: ayM4G77Yrgt+FwYWK7jI+GQdr1qFdCW5CqM2FtM/gRY=) 2: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: b7pdRooRIYxeq417I4r+N7hToQ0VSgAm22j8JdCbQTY=) 3: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: NSYgbjxaHQUqVX7cmhBmev0VQjPDBDIHp8wuQxin4zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7756 (0x1e4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Validity Not Before: Apr 24 16:05:42 2025 GMT Not After : May 1 16:05:42 2025 GMT Subject: CN=680a6156-f304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:95:5b:e6:81:53:f5:1e:14:ca:44:b8:3c: e3:1f:67:84:6b:69:e7:8e:92:5f:27:2d:b8:a5:a1: 0a:cd:ab:6f:88:1c:47:47:43:57:33:d4:3c:ef:8f: 72:d5:44:df:01:15:31:34:e9:0e:b6:0a:48:8d:f8: ba:84:66:d0:ea:60:1d:b5:08:03:64:26:21:35:cd: a7:ce:2a:0b:72:0b:10:41:89:00:bf:5d:cf:17:87: 3b:b6:74:2a:d1:94:9b:4b:45:01:c7:33:27:b7:8b: 83:bb:6b:09:a6:45:52:d7:0c:9c:a5:37:4b:74:1c: 76:a9:55:af:d3:04:b2:b5:b1:f5:af:6c:74:a3:0a: ef:b3:49:b5:c5:e3:31:0c:54:f7:84:6f:14:50:78: e1:a7:d3:0f:63:04:07:5f:81:64:92:0e:44:56:99: 03:94:4e:f7:80:2f:d0:b2:8d:99:1d:a8:87:2b:ec: 83:63:5c:27:4b:98:81:5c:ea:44:db:bd:be:22:d5: d7:00:63:52:cb:ce:29:68:32:f4:71:45:0d:ee:ab: 53:f1:15:dd:1b:f4:85:17:6b:48:bd:c9:ac:6e:58: 99:40:5a:8c:7f:0b:f4:23:6a:0d:1a:b1:5d:56:ae: aa:44:e6:55:a5:d7:fe:86:ac:a4:7e:65:b4:a7:03: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3D:8C:0A:28:B8:D0:E0:71:C5:98:31:1C:AC:2F:22:A1:D7:7E:30 X509v3 Authority Key Identifier: keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d8:b1:d5:57:56:41:89:d4:26:57:ca:78:c5:7d:9f:8c:fb: 58:64:f8:2e:ea:4c:d1:6a:1d:70:fa:21:08:5a:c2:0a:fa:97: e7:34:3b:4c:2f:9c:ad:bd:a1:70:fb:47:84:e4:20:78:bc:54: cc:01:f8:71:9f:8f:14:19:d4:80:f6:02:81:8a:25:81:83:05: 47:28:41:c9:32:68:be:58:d8:82:5f:d2:cc:ef:f5:a0:81:77: 46:a3:bd:0a:bc:7a:ec:15:25:94:9b:41:60:c2:57:80:a4:77: f5:74:a4:75:f7:b0:4e:5c:05:49:ff:74:d1:9c:5f:61:57:37: ed:46:ab:56:bb:87:9a:c5:a2:5c:a7:00:14:f6:0b:a4:5b:64: 55:b4:51:23:70:c8:57:ea:0f:e2:f6:13:89:6d:22:38:38:27: 53:50:0a:86:6b:30:6d:55:0a:75:db:88:07:15:22:1b:da:81: 54:ed:1f:25:8b:85:83:55:e8:c9:4a:d1:59:c2:3d:04:95:ed: cc:ca:d9:1e:8a:a6:99:81:10:f2:cd:8c:e5:ab:b4:73:9b:cf: 53:84:b2:2d:8a:d7:f9:20:eb:c7:74:39:04:a8:f2:a6:21:08: 41:e0:eb:44:91:7c:52:38:23:53:f0:d4:65:82:bb:24:67:48: ae:1f:29:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NjExMTAvBgNVBAUTKEJENUYwODg4OTREOURBNzU2NUQ0NDM2MTQzRUUwMjZD MzIwRTRBMkEwHhcNMjUwNDI0MTYwNTQyWhcNMjUwNTAxMTYwNTQyWjAYMRYwFAYD VQQDEw02ODBhNjE1Ni1mMzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYCVW+aBU/UeFMpEuDzjH2eEa2nnjpJfJy24paEKzatviBxHR0NXM9Q8749y 1UTfARUxNOkOtgpIjfi6hGbQ6mAdtQgDZCYhNc2nzioLcgsQQYkAv13PF4c7tnQq 0ZSbS0UBxzMnt4uDu2sJpkVS1wycpTdLdBx2qVWv0wSytbH1r2x0owrvs0m1xeMx DFT3hG8UUHjhp9MPYwQHX4Fkkg5EVpkDlE73gC/Qso2ZHaiHK+yDY1wnS5iBXOpE 272+ItXXAGNSy84paDL0cUUN7qtT8RXdG/SFF2tIvcmsbliZQFqMfwv0I2oNGrFd Vq6qROZVpdf+hqykfmW0pwM9mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA49jAoo uNDgccWYMRysLyKh134wMB8GA1UdIwQYMBaAFL1fCIiU2dp1ZdRDYUPuAmwyDkoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2MS8zNEQyNkM4ODg0 NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJuVmwxRU5oUS00Q2JESU9T aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZWOElpSlRaMm5WbDFFTmhRLTRDYkRJT1Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2MS8zNEQyNkM4ODg0NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJu VmwxRU5oUS00Q2JESU9TaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi2LHVV1ZBidQmV8p4xX2fjPtYZPgu6kzRah1w+iEIWsIK+pfnNDtM L5ytvaFw+0eE5CB4vFTMAfhxn48UGdSA9gKBiiWBgwVHKEHJMmi+WNiCX9LM7/Wg gXdGo70KvHrsFSWUm0FgwleApHf1dKR197BOXAVJ/3TRnF9hVzftRqtWu4eaxaJc pwAU9gukW2RVtFEjcMhX6g/i9hOJbSI4OCdTUAqGazBtVQp124gHFSIb2oFU7R8l i4WDVejJStFZwj0Ele3MytkeiqaZgRDyzYzlq7Rzm89ThLItitf5IOvHdDkEqPKm IQhB4OtEkXxSOCNT8NRlgrskZ0iuHyle -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:06 2025 by rpki-client