$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json) Hash identifier: JIJ3bBuEdgHBemFQSAKDiru2H8hzBMI1SmItgvvAlNg= Subject key identifier: BF:02:CE:A5:6A:00:94:6E:82:EC:82:51:BE:1E:BA:26:54:C5:11:57 Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Certificate serial: 11AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft Manifest number: 1190 Signing time: Thu 24 Apr 2025 17:13:48 +0000 Manifest this update: Thu 24 Apr 2025 17:13:48 +0000 Manifest next update: Thu 01 May 2025 17:13:48 +0000 Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: KwhV1mxlkm2dYw+SPaRqnxSr+61Zs48oMb8Td/hTnl8=) 2: 70F8E50039AF11EE8486453DC4F9AE02.roa (hash: CQ2YO4KFwTMH/P0kajoe5d8Btg/O5fE6q6xcjIQsWNk=) 3: BA1EA120E6FC11EE96775810C4F9AE02.roa (hash: sB4pmseHL4MX5nc05THnJz70E6W3QfcckHXpmWVSxtQ=) 4: FEDDF63AE6FC11EE8AD61644C4F9AE02.roa (hash: nPDF1Ky8Z4ZJlPWH1PkLPctnsIih8GHSZ5cqXRTU56A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4525 (0x11ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Validity Not Before: Apr 24 17:13:48 2025 GMT Not After : May 1 17:13:48 2025 GMT Subject: CN=680a714c-229d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:d7:8e:a8:e4:92:1d:af:ab:81:68:8a:04: b9:8a:c7:2a:0a:c2:19:8d:03:8c:3d:3a:6f:ac:90: 43:d7:3e:7a:08:f9:c7:21:11:c4:de:98:bf:f7:9a: 3b:5f:29:9d:21:96:fe:64:1d:80:e6:40:28:f8:2e: b4:50:14:8b:68:81:e0:71:a6:58:ff:f8:ac:4c:68: 5c:bc:b2:3e:8a:c5:d7:41:17:82:53:a7:1c:68:bf: 73:15:93:71:b3:f8:99:e8:cb:1e:9c:6f:3f:06:f9: 9d:4d:be:4d:11:d8:cd:29:2d:d5:69:d4:7e:f3:f0: e9:6e:8b:2c:0f:cc:a1:de:b3:4d:65:6b:81:67:d5: 29:7e:c6:7d:a7:71:48:b1:5d:f8:b1:b3:30:12:37: 55:11:59:9d:7c:ce:66:96:18:4f:a5:33:66:29:4d: 63:41:82:d8:3a:18:ab:f0:13:ed:ff:42:68:1c:20: 83:86:d7:c5:ce:e4:79:df:c8:f7:88:4b:95:5b:a7: cc:3e:1e:9b:df:e4:23:24:1f:0d:b1:cb:35:65:7c: 48:3a:c7:f7:44:9f:20:83:e0:b8:6c:c2:e4:48:16: 38:94:95:7c:8c:76:f8:3b:e9:ec:b4:91:6d:e5:2a: 5f:60:43:39:4f:7b:11:6f:72:f3:38:da:6f:a9:16: 48:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:02:CE:A5:6A:00:94:6E:82:EC:82:51:BE:1E:BA:26:54:C5:11:57 X509v3 Authority Key Identifier: keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:4a:f3:fe:cb:d7:40:ae:7e:f3:26:ca:ed:39:7a:83:fd:da: 58:b4:61:b3:67:d6:4e:e2:fd:b9:49:51:ec:11:d9:dc:e9:23: 86:fa:42:8a:2b:d0:e3:9c:fe:09:1a:02:82:2f:18:52:ef:78: 2d:8c:91:38:6a:e6:15:f7:29:5d:6b:c2:ba:23:fa:1b:7b:45: 4e:61:8c:08:dd:0a:8f:a5:17:fe:40:91:4c:02:c8:13:7f:44: 78:e8:4c:a0:67:b2:76:95:40:8d:5d:16:2a:bb:44:6c:5d:50: 35:68:7e:fb:12:3c:5b:85:df:61:fa:22:bf:17:04:28:29:19: 87:0c:9f:c0:3f:c3:a9:f3:48:5c:dc:61:3b:0d:17:46:e6:a6: 39:0a:36:e8:7c:18:03:af:1e:00:89:39:69:88:31:e8:4a:ee: c5:e4:6b:33:64:19:19:37:d6:f6:73:e7:48:ce:85:4a:7d:f2: 53:75:1b:67:cc:53:f8:68:cf:fd:90:1a:ec:61:7f:a3:99:4b: e0:18:a5:98:17:fc:19:7a:aa:4f:07:1d:68:91:09:c7:45:18: 25:c9:71:01:d4:00:b7:d1:41:5b:f1:fe:2a:d2:b4:d9:e9:a7: 01:8c:85:c6:da:39:25:28:af:60:25:78:58:c7:d6:d7:c8:24: 91:51:b1:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG MEVDQjIwQTIwHhcNMjUwNDI0MTcxMzQ4WhcNMjUwNTAxMTcxMzQ4WjAYMRYwFAYD VQQDEw02ODBhNzE0Yy0yMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywjXjqjkkh2vq4FoigS5iscqCsIZjQOMPTpvrJBD1z56CPnHIRHE3pi/95o7 XymdIZb+ZB2A5kAo+C60UBSLaIHgcaZY//isTGhcvLI+isXXQReCU6ccaL9zFZNx s/iZ6MsenG8/BvmdTb5NEdjNKS3VadR+8/DpbossD8yh3rNNZWuBZ9UpfsZ9p3FI sV34sbMwEjdVEVmdfM5mlhhPpTNmKU1jQYLYOhir8BPt/0JoHCCDhtfFzuR538j3 iEuVW6fMPh6b3+QjJB8Nscs1ZXxIOsf3RJ8gg+C4bMLkSBY4lJV8jHb4O+nstJFt 5SpfYEM5T3sRb3LzONpvqRZISQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8CzqVq AJRuguyCUb4euiZUxRFXMB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTVFRi82MDc3MjlEMEZBQzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFV WC05UExZcmN1UW53N0xJS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkSvP+y9dArn7zJsrtOXqD/dpYtGGzZ9ZO4v25SVHsEdnc6SOG+kKK K9DjnP4JGgKCLxhS73gtjJE4auYV9ylda8K6I/obe0VOYYwI3QqPpRf+QJFMAsgT f0R46EygZ7J2lUCNXRYqu0RsXVA1aH77Ejxbhd9h+iK/FwQoKRmHDJ/AP8Op80hc 3GE7DRdG5qY5CjbofBgDrx4AiTlpiDHoSu7F5GszZBkZN9b2c+dIzoVKffJTdRtn zFP4aM/9kBrsYX+jmUvgGKWYF/wZeqpPBx1okQnHRRglyXEB1AC30UFb8f4q0rTZ 6acBjIXG2jklKK9gJXhYx9bXyCSRUbGK -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:34 2025 by rpki-client