$ rpki-client -vvf rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft File: 76bB5uz60eiKn0TSgALu1jmyulQ.mft (raw, json) Hash identifier: 9RrEPjaOzamrVzZ5aJgXjDFukCdvp8aSduPPhNIMibc= Subject key identifier: 03:16:13:FF:9C:52:A4:9A:33:BA:0D:40:B5:C1:76:D4:07:46:D8:66 Authority key identifier: EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54 Certificate issuer: /CN=A915A921/serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54 Certificate serial: 085D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft Manifest number: 0856 Signing time: Thu 24 Apr 2025 20:35:29 +0000 Manifest this update: Thu 24 Apr 2025 20:35:28 +0000 Manifest next update: Thu 01 May 2025 20:35:28 +0000 Files and hashes: 1: 76bB5uz60eiKn0TSgALu1jmyulQ.crl (hash: tmeFaRoRxkBJv3JBuc5/ZZG/qxkKNxRAdbplTXSIa0w=) 2: AFB3319E5F0C11EC8C2C2820C4F9AE02.roa (hash: xKyisYvUwmSw7aw37XhK5iMVyY2+rghDJ4s9FMBG+wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A921, serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54 Validity Not Before: Apr 24 20:35:28 2025 GMT Not After : May 1 20:35:28 2025 GMT Subject: CN=680aa090-4b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:31:a5:65:2c:c8:34:aa:b0:50:c8:8c:22: f5:a8:a4:c9:34:c3:64:67:53:64:ca:fb:d3:35:be: 1e:ae:cc:bb:e5:62:cf:bb:a2:fa:fd:97:19:2c:56: dd:b2:23:af:d7:a5:2c:cd:a7:7e:17:c8:c8:1e:67: f4:1b:d8:bf:28:89:6f:d1:18:42:93:62:33:1e:44: b6:92:f7:ca:f8:13:a6:45:43:8b:bf:95:bf:c5:84: 61:fe:4f:88:8d:2b:3a:df:ee:bc:33:be:69:82:fb: 7e:78:d8:e5:fc:99:4b:65:20:3c:6b:ba:50:b4:ff: 61:4a:d3:02:28:1c:2a:b2:e2:a2:65:2b:93:7f:84: aa:a6:6b:e5:70:82:5f:cc:f7:0a:a9:6f:32:dd:67: a2:b7:a5:e8:7b:fb:e7:ea:d4:3f:1a:93:b8:82:26: 41:5f:0e:13:35:19:de:f2:dc:be:dc:36:c8:08:b2: 53:96:0d:84:2b:cd:4c:ab:5f:11:3a:f9:3e:2e:11: c1:24:5b:dc:79:70:51:f4:a2:98:35:7b:95:e3:50: ae:7c:52:6b:df:f7:87:11:44:39:28:d4:c3:86:3a: bd:a9:9f:41:e2:0a:3f:08:a3:1e:87:62:04:94:71: f3:27:78:0d:87:f5:cc:cb:1d:08:39:f8:39:21:f9: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:16:13:FF:9C:52:A4:9A:33:BA:0D:40:B5:C1:76:D4:07:46:D8:66 X509v3 Authority Key Identifier: keyid:EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d0:df:ca:93:1c:a8:e9:5f:56:d5:9a:6f:72:e4:10:4c:50: a2:22:ed:28:f7:3f:44:aa:e1:b1:38:0b:7c:44:9a:c2:99:65: e7:f7:b4:a1:1b:2e:47:d7:20:dd:f3:6b:20:86:08:9d:83:51: 98:84:4f:86:cc:0e:8b:57:32:6c:c3:6e:0e:f3:9f:87:0a:8a: 31:50:53:96:90:8b:db:95:97:46:69:ea:ab:eb:1d:b9:80:03: 15:e3:f1:e2:f1:f4:5e:99:7c:64:b1:59:36:93:64:57:9e:d8: b2:ee:ad:f9:af:5f:c3:57:f6:eb:e1:5a:16:08:33:4f:96:83: f4:5b:5a:5e:fb:03:b3:3a:20:1f:f4:09:9f:07:71:4f:9a:63: 16:e8:e5:d7:5f:2f:6e:ef:fb:1e:38:25:45:49:4d:ca:83:81: 91:06:33:74:83:df:ce:d7:69:d2:26:32:d9:49:24:95:36:b3: fd:b2:4f:b9:7c:ad:76:d1:c3:c3:42:75:e3:05:00:c6:fc:c8: 8d:0b:cf:8c:e7:11:bc:a9:44:75:8a:18:94:fd:21:ef:7a:7e: 17:43:34:e9:2e:ff:5b:ad:fc:b7:56:66:dc:84:8e:4c:3b:ac: cb:59:76:0f:21:4e:7a:43:98:7f:66:57:0d:0d:c1:5a:b6:58: 29:4d:84:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE5MjExMTAvBgNVBAUTKEVGQTZDMUU2RUNGQUQxRTg4QTlGNDREMjgwMDJFRUQ2 MzlCMkJBNTQwHhcNMjUwNDI0MjAzNTI4WhcNMjUwNTAxMjAzNTI4WjAYMRYwFAYD VQQDEw02ODBhYTA5MC00YjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6YxpWUsyDSqsFDIjCL1qKTJNMNkZ1NkyvvTNb4ersy75WLPu6L6/ZcZLFbd siOv16Uszad+F8jIHmf0G9i/KIlv0RhCk2IzHkS2kvfK+BOmRUOLv5W/xYRh/k+I jSs63+68M75pgvt+eNjl/JlLZSA8a7pQtP9hStMCKBwqsuKiZSuTf4SqpmvlcIJf zPcKqW8y3Weit6Xoe/vn6tQ/GpO4giZBXw4TNRne8ty+3DbICLJTlg2EK81Mq18R Ovk+LhHBJFvceXBR9KKYNXuV41CufFJr3/eHEUQ5KNTDhjq9qZ9B4go/CKMeh2IE lHHzJ3gNh/XMyx0IOfg5IflwKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMWE/+c UqSaM7oNQLXBdtQHRthmMB8GA1UdIwQYMBaAFO+mwebs+tHoip9E0oAC7tY5srpU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTkyMS9FMzhEMTgyRUM1 QjQxMUVBOTkyNkM4MURDNEY5QUUwMi83NmJCNXV6NjBlaUtuMFRTZ0FMdTFqbXl1 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc2YkI1dXo2MGVpS24wVFNnQUx1MWpteXVsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTkyMS9FMzhEMTgyRUM1QjQxMUVBOTkyNkM4MURDNEY5QUUwMi83NmJCNXV6NjBl aUtuMFRTZ0FMdTFqbXl1bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj0N/Kkxyo6V9W1ZpvcuQQTFCiIu0o9z9EquGxOAt8RJrCmWXn97Sh Gy5H1yDd82sghgidg1GYhE+GzA6LVzJsw24O85+HCooxUFOWkIvblZdGaeqr6x25 gAMV4/Hi8fRemXxksVk2k2RXntiy7q35r1/DV/br4VoWCDNPloP0W1pe+wOzOiAf 9AmfB3FPmmMW6OXXXy9u7/seOCVFSU3Kg4GRBjN0g9/O12nSJjLZSSSVNrP9sk+5 fK120cPDQnXjBQDG/MiNC8+M5xG8qUR1ihiU/SHven4XQzTpLv9brfy3VmbchI5M O6zLWXYPIU56Q5h/ZlcNDcFatlgpTYQ3 -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:57 2025 by rpki-client