$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: zrqKocgtnpPTtJtW7B8IsIMp83XmDluxDG0Aqi5n+mA= Subject key identifier: 4E:0F:B4:24:7B:89:10:D6:41:38:8B:4B:B9:C5:9E:D4:9F:2B:A3:C2 Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 07CE Signing time: Thu 24 Apr 2025 20:53:38 +0000 Manifest this update: Thu 24 Apr 2025 20:53:37 +0000 Manifest next update: Thu 01 May 2025 20:53:37 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: 2kjkmKgpgnlIZ51dt9Z0hb1tNn59NqDWBcxxaL1IsA0=) 2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: 6+tk9n+mwKmveOFrTOSyNOKqHKQyrXgQ60Gavs+tji8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: Apr 24 20:53:37 2025 GMT Not After : May 1 20:53:37 2025 GMT Subject: CN=680aa4d2-7380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fb:3e:88:cb:5a:95:68:f4:10:60:f0:9b:8b: d9:ed:34:72:a8:b0:33:3f:15:1e:fc:57:f1:ce:ad: 4c:5d:34:98:a6:1d:e2:a6:c5:8e:c8:fd:f5:0b:06: ef:d5:ec:61:62:8f:f7:c4:83:6c:c1:3f:85:d5:f4: 43:b2:aa:9e:be:cf:b3:b8:5c:31:91:d2:71:6f:b9: 07:0d:04:f7:a4:e5:ac:52:d6:87:8c:63:1b:44:e9: 58:f2:80:b9:13:b3:ae:f9:3c:44:74:5f:de:c9:60: 80:95:ce:ec:87:b5:4c:ed:92:aa:19:fe:09:a7:37: 96:7f:cd:c0:52:9b:ad:ea:33:b5:7c:11:71:b8:53: 21:b5:78:ce:32:27:58:4c:d2:8e:20:04:dc:91:bb: 94:6b:25:52:81:d4:dc:c7:33:b1:90:a8:80:33:b3: 09:e4:8b:8a:f8:1a:e7:b0:02:9e:68:14:5f:e8:0f: 23:cc:23:06:7f:c6:e6:47:2c:03:8c:03:22:f8:35: a4:fe:80:77:7f:47:71:8f:3a:ea:af:8a:6f:3f:7d: 1c:f4:91:f5:9c:74:16:f9:94:36:63:15:e5:6e:38: d9:a7:27:fa:8e:3d:fc:05:93:92:a4:8b:e4:05:0b: 62:6d:93:c0:f7:fb:1a:50:52:d9:1b:47:cb:92:a7: b3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0F:B4:24:7B:89:10:D6:41:38:8B:4B:B9:C5:9E:D4:9F:2B:A3:C2 X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:84:50:fc:16:e7:c1:e1:bb:ba:02:6c:0e:2a:f0:7d:e8:cf: 30:c3:48:99:d7:2e:45:ef:5a:f3:c2:1a:0d:3f:78:40:d3:42: 77:9c:af:bc:d7:d8:d6:66:f0:5c:46:e6:d0:e9:64:1c:cd:b5: 06:4f:27:ac:f6:a9:13:28:69:ee:2c:bf:e0:bb:69:e6:99:a1: ad:d7:0b:35:96:b4:57:cc:24:15:dc:94:78:c6:ca:db:11:a3: 9c:a5:e4:36:c0:a1:06:4a:25:6b:34:6f:13:7f:c9:d3:80:df: c6:a6:ff:1f:94:d6:25:b9:c9:08:6c:94:d6:de:00:42:8c:24: 04:2c:2a:54:26:fd:1a:27:42:85:b9:b2:86:aa:a4:ba:a5:9a: 4a:47:c9:28:57:08:f8:7b:79:be:71:0d:58:25:34:8a:b5:d3: 0f:6a:e4:b1:9e:58:f6:1b:60:0f:29:d6:1d:86:ed:8a:a5:6e: 85:c8:07:6b:5b:df:8f:ad:68:e2:21:79:ec:05:b3:aa:89:41: 4e:42:c5:8f:b4:f2:f5:28:00:df:5e:aa:77:a7:07:c5:13:84: 59:a8:1f:8d:db:6d:00:8f:4f:be:3f:6e:b2:82:36:c7:42:85: c5:87:45:1a:48:1c:c9:f2:66:06:46:94:29:fb:fb:90:e9:37: c6:92:09:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjUwNDI0MjA1MzM3WhcNMjUwNTAxMjA1MzM3WjAYMRYwFAYD VQQDEw02ODBhYTRkMi03MzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vs+iMtalWj0EGDwm4vZ7TRyqLAzPxUe/Ffxzq1MXTSYph3ipsWOyP31Cwbv 1exhYo/3xINswT+F1fRDsqqevs+zuFwxkdJxb7kHDQT3pOWsUtaHjGMbROlY8oC5 E7Ou+TxEdF/eyWCAlc7sh7VM7ZKqGf4JpzeWf83AUput6jO1fBFxuFMhtXjOMidY TNKOIATckbuUayVSgdTcxzOxkKiAM7MJ5IuK+BrnsAKeaBRf6A8jzCMGf8bmRywD jAMi+DWk/oB3f0dxjzrqr4pvP30c9JH1nHQW+ZQ2YxXlbjjZpyf6jj38BZOSpIvk BQtibZPA9/saUFLZG0fLkqezQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4PtCR7 iRDWQTiLS7nFntSfK6PCMB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCohFD8FufB4bu6AmwOKvB96M8ww0iZ1y5F71rzwhoNP3hA00J3nK+8 19jWZvBcRubQ6WQczbUGTyes9qkTKGnuLL/gu2nmmaGt1ws1lrRXzCQV3JR4xsrb EaOcpeQ2wKEGSiVrNG8Tf8nTgN/Gpv8flNYluckIbJTW3gBCjCQELCpUJv0aJ0KF ubKGqqS6pZpKR8koVwj4e3m+cQ1YJTSKtdMPauSxnlj2G2APKdYdhu2KpW6FyAdr W9+PrWjiIXnsBbOqiUFOQsWPtPL1KADfXqp3pwfFE4RZqB+N220Aj0++P26ygjbH QoXFh0UaSBzJ8mYGRpQp+/uQ6TfGkgn1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:56 2025 by rpki-client