$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json) Hash identifier: 3BXi1B98hfAtsAA4ocTJZoSslPqXrFCusD1cBLCXR94= Subject key identifier: EE:6F:D6:BF:35:58:3C:05:FC:B5:F9:A4:77:C0:AA:F4:B0:CB:20:36 Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 18D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft Manifest number: 18A9 Signing time: Thu 24 Apr 2025 16:31:46 +0000 Manifest this update: Thu 24 Apr 2025 16:31:45 +0000 Manifest next update: Thu 01 May 2025 16:31:45 +0000 Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: Ev1+gKECcahowXpJVgTAbNlIhX7A7sD997G8XTkt+zA=) 2: 4A4CE204D49A11EEAB1AF055C4F9AE02.roa (hash: EzHzSCDlBlC4veKW1Q3W/qzMLdRqyApJm4hY8qe4PS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6361 (0x18d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: Apr 24 16:31:45 2025 GMT Not After : May 1 16:31:45 2025 GMT Subject: CN=680a6771-e5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:28:0c:34:f4:b0:11:9a:02:79:15:ab:15: 53:23:d5:b6:c5:23:83:bc:c5:e1:a9:49:1d:ba:8a: 19:75:ff:93:ba:91:4a:b7:ce:b6:15:6d:f0:0d:f0: 43:89:15:f3:f9:8d:f6:40:5b:75:90:74:7e:c0:ae: 24:55:e4:00:50:a5:c8:1b:97:4e:38:c1:40:ac:36: 78:c8:e7:73:86:b9:ed:b1:1b:96:7b:5a:29:e6:9b: 58:57:be:aa:cc:f8:43:52:8a:a2:26:3f:2a:95:55: 30:a6:f5:70:e8:90:fa:12:fc:23:29:37:06:56:81: 9a:ad:98:c9:cd:4e:dc:6e:c2:92:0f:13:af:6d:a1: 6f:37:a4:c1:7e:4f:4a:da:fe:24:78:80:28:b9:84: da:af:7d:8e:b8:73:85:68:9b:66:e7:b4:d4:62:41: 37:61:35:09:f7:e6:d8:3d:af:df:90:e7:6a:1a:f9: ba:67:55:e0:f7:04:53:2b:ef:b2:ad:71:3c:d4:4e: a9:a8:a4:fd:18:af:ce:3d:02:ce:16:1b:4f:48:40: 78:d4:72:2f:38:66:dc:84:16:f3:96:f8:92:3a:0b: 15:b0:0a:23:ac:42:e0:35:f9:84:74:f2:a5:ea:f1: ed:58:d6:d7:69:17:43:50:e4:2c:64:87:09:d6:23: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6F:D6:BF:35:58:3C:05:FC:B5:F9:A4:77:C0:AA:F4:B0:CB:20:36 X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:70:a8:0c:ec:02:e8:17:f7:8b:48:92:f4:27:65:b8:fd:ba: 16:3d:a5:ba:82:43:e1:37:e4:04:74:a5:4e:ef:71:ca:2a:9a: 8c:6b:b2:33:8c:3f:01:ea:a0:46:e9:2e:0e:49:5c:58:c2:7a: 66:fc:8d:26:38:38:c3:0d:2f:64:7f:b0:4f:2a:11:ee:8f:bb: 9b:87:47:1f:94:84:7c:b8:0a:a7:40:e9:b9:cd:e9:b6:ff:c6: a3:08:b4:64:f9:5e:c1:5f:c6:62:e6:b1:ec:63:f6:ec:64:76: 23:4f:37:63:91:b6:bb:e8:e8:2c:b8:fd:07:11:5e:3a:94:a1: 03:62:c6:8b:f1:19:8d:bd:01:ec:46:04:8b:e0:47:96:df:c1: 19:40:fd:69:0d:27:23:59:d2:21:47:77:8d:9a:37:e7:90:41: 7a:5d:12:90:39:47:d8:b9:6e:43:83:7a:33:c6:da:9b:7e:a3: 46:a7:8f:4a:87:71:f6:19:a0:3f:22:38:db:2e:97:35:9e:0a: 6c:bc:37:df:66:23:c2:ac:06:d0:92:bd:dc:ce:95:c3:8b:3e: 1d:57:47:5f:1d:82:c2:93:a3:20:f5:46:3e:8c:fb:37:46:4d: bc:7e:be:5a:a4:45:2d:66:5d:85:b4:37:e8:79:58:12:7b:9b: b8:8e:8e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjUwNDI0MTYzMTQ1WhcNMjUwNTAxMTYzMTQ1WjAYMRYwFAYD VQQDEw02ODBhNjc3MS1lNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHsoDDT0sBGaAnkVqxVTI9W2xSODvMXhqUkduooZdf+TupFKt862FW3wDfBD iRXz+Y32QFt1kHR+wK4kVeQAUKXIG5dOOMFArDZ4yOdzhrntsRuWe1op5ptYV76q zPhDUoqiJj8qlVUwpvVw6JD6EvwjKTcGVoGarZjJzU7cbsKSDxOvbaFvN6TBfk9K 2v4keIAouYTar32OuHOFaJtm57TUYkE3YTUJ9+bYPa/fkOdqGvm6Z1Xg9wRTK++y rXE81E6pqKT9GK/OPQLOFhtPSEB41HIvOGbchBbzlviSOgsVsAojrELgNfmEdPKl 6vHtWNbXaRdDUOQsZIcJ1iNRCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5v1r81 WDwF/LX5pHfAqvSwyyA2MB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTBFMy9EQTE4QjE4NDlBNDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3 WGpmNndBcGJlSWpsZjFIRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOcKgM7ALoF/eLSJL0J2W4/boWPaW6gkPhN+QEdKVO73HKKpqMa7Iz jD8B6qBG6S4OSVxYwnpm/I0mODjDDS9kf7BPKhHuj7ubh0cflIR8uAqnQOm5zem2 /8ajCLRk+V7BX8Zi5rHsY/bsZHYjTzdjkba76OgsuP0HEV46lKEDYsaL8RmNvQHs RgSL4EeW38EZQP1pDScjWdIhR3eNmjfnkEF6XRKQOUfYuW5Dg3ozxtqbfqNGp49K h3H2GaA/IjjbLpc1ngpsvDffZiPCrAbQkr3czpXDiz4dV0dfHYLCk6Mg9UY+jPs3 Rk28fr5apEUtZl2FtDfoeVgSe5u4jo4Z -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:59 2025 by rpki-client