$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json) Hash identifier: pBleQatkLaB6LuHG4JSenJBlb99kESMkbEdi12KhNDU= Subject key identifier: 25:1F:55:6A:6F:2D:75:52:71:09:95:7C:3E:01:48:B9:1F:53:2B:03 Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0C42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft Manifest number: 0C3B Signing time: Thu 24 Apr 2025 18:20:45 +0000 Manifest this update: Thu 24 Apr 2025 18:20:44 +0000 Manifest next update: Thu 01 May 2025 18:20:44 +0000 Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: OHBZSD5/6z/mvDqDuZpimLCbAaEQI5f3GOurxej+Rhs=) 2: 719728B803EF11EAB301F66FC4F9AE02.roa (hash: //Y9sRim1JuVKbuAKlrRjn3d7mdHR+lghtxL77FdfiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3138 (0xc42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Apr 24 18:20:44 2025 GMT Not After : May 1 18:20:44 2025 GMT Subject: CN=680a80fd-eb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:31:43:9a:66:83:45:3f:ef:ef:58:42:d5: 7b:44:25:09:95:f4:55:72:54:05:c2:80:cf:f9:04: f1:f4:a6:e6:f9:85:75:39:55:fa:74:e6:3a:d7:62: 4e:66:53:aa:fc:2b:8b:a1:28:31:6f:4f:60:aa:07: fd:a0:ef:13:0a:fe:83:1f:b9:2f:02:e4:2b:7a:bc: 8e:3e:93:e6:7b:1b:34:33:cb:1c:82:f9:c5:f5:84: dd:27:24:62:b2:e5:02:eb:5d:6d:65:9f:a4:40:30: bb:69:cc:ba:99:0f:22:9b:b9:82:c7:03:a4:f7:c5: 26:6c:ad:1d:d8:ad:93:2d:a0:73:27:ae:64:09:bf: ab:bb:75:c7:0d:05:6c:23:8c:4c:fa:21:66:1a:cc: b8:83:3a:7e:bd:bd:ae:82:ec:be:e8:8a:e7:94:60: 78:99:35:fb:92:28:60:d9:bd:82:16:86:ee:27:cb: 4d:9c:50:8d:9d:2e:0c:af:5e:2f:92:1f:8c:7c:89: 98:35:38:8c:9b:11:2e:eb:f3:64:2d:54:05:38:4b: a2:54:3c:c4:02:20:f2:63:10:f4:d0:e3:68:61:47: 53:04:3f:ef:5f:b1:69:a5:d2:de:63:ab:f7:89:96: f6:da:c6:ea:36:cb:90:b6:66:55:24:30:2d:57:23: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1F:55:6A:6F:2D:75:52:71:09:95:7C:3E:01:48:B9:1F:53:2B:03 X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:9c:63:2c:df:32:b2:29:f3:4a:60:32:5c:83:6f:23:ac:d3: 1e:0a:d8:32:a3:f5:42:c3:55:fb:d9:71:6e:4d:f7:db:9b:02: 91:11:93:fd:4b:fc:f4:51:ad:0b:68:a4:ed:9a:d9:71:56:d5: 3a:cf:73:3d:d3:e1:ee:d5:5b:55:59:43:05:f2:95:5f:23:e8: db:4f:ed:ef:48:1f:2e:69:5d:58:31:9d:fc:e9:d9:71:4c:67: 11:a1:01:93:eb:0d:3c:dc:4b:47:3d:e3:33:0f:f3:d7:36:68: e3:31:1f:84:1a:10:1a:c9:70:fb:05:e7:cc:a0:90:27:c7:a3: c1:5a:71:0b:89:4b:31:6f:51:24:85:28:88:ac:f0:d2:32:da: 52:ba:37:53:d8:b4:ea:66:e5:f7:80:2c:fb:32:4a:84:24:df: ed:0f:f0:d6:0a:03:61:4b:ed:fd:4c:45:4a:04:e1:e3:44:19: bc:1c:d4:af:c9:92:ed:fd:17:e2:aa:98:f3:f7:fc:57:ae:ca: ea:df:6b:2f:4e:a0:49:14:d9:08:68:41:c7:bf:e0:20:18:5b: e3:fa:9e:1a:55:d9:5e:25:79:7b:d9:06:25:a2:69:c7:48:dc: 30:cf:01:d5:cd:c1:45:d0:fc:b8:48:ca:f4:1e:5e:06:a5:5d: cb:a8:e6:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjUwNDI0MTgyMDQ0WhcNMjUwNTAxMTgyMDQ0WjAYMRYwFAYD VQQDEw02ODBhODBmZC1lYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApO4xQ5pmg0U/7+9YQtV7RCUJlfRVclQFwoDP+QTx9Kbm+YV1OVX6dOY612JO ZlOq/CuLoSgxb09gqgf9oO8TCv6DH7kvAuQreryOPpPmexs0M8scgvnF9YTdJyRi suUC611tZZ+kQDC7acy6mQ8im7mCxwOk98UmbK0d2K2TLaBzJ65kCb+ru3XHDQVs I4xM+iFmGsy4gzp+vb2uguy+6IrnlGB4mTX7kihg2b2CFobuJ8tNnFCNnS4Mr14v kh+MfImYNTiMmxEu6/NkLVQFOEuiVDzEAiDyYxD00ONoYUdTBD/vX7FppdLeY6v3 iZb22sbqNsuQtmZVJDAtVyMC7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUfVWpv LXVScQmVfD4BSLkfUysDMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M TUcwVXBrTUFjb2I0blduTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXnGMs3zKyKfNKYDJcg28jrNMeCtgyo/VCw1X72XFuTffbmwKREZP9 S/z0Ua0LaKTtmtlxVtU6z3M90+Hu1VtVWUMF8pVfI+jbT+3vSB8uaV1YMZ386dlx TGcRoQGT6w083EtHPeMzD/PXNmjjMR+EGhAayXD7BefMoJAnx6PBWnELiUsxb1Ek hSiIrPDSMtpSujdT2LTqZuX3gCz7MkqEJN/tD/DWCgNhS+39TEVKBOHjRBm8HNSv yZLt/Rfiqpjz9/xXrsrq32svTqBJFNkIaEHHv+AgGFvj+p4aVdleJXl72QYlomnH SNwwzwHVzcFF0Py4SMr0Hl4GpV3LqOZ0 -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:39 2025 by rpki-client