$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft File: Satd0R3JItzI8j3VqSxplN1wNQQ.mft (raw, json) Hash identifier: r58sr2xTS45J4+g96HKF90seHdyH4jbsW9qCFGQWfxY= Subject key identifier: D7:1A:94:16:8C:81:07:59:A7:AE:DD:B6:81:46:AD:1D:41:21:7D:37 Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft Manifest number: 033B Signing time: Fri 25 Apr 2025 00:51:02 +0000 Manifest this update: Fri 25 Apr 2025 00:51:01 +0000 Manifest next update: Fri 02 May 2025 00:51:01 +0000 Files and hashes: 1: Satd0R3JItzI8j3VqSxplN1wNQQ.crl (hash: aRejL2DQsIlCBuKyNyXJzcdrMg/hrot9NvQ1mNzCjCc=) 2: 718673B6BB7F11EC9E187F19C4F9AE02.roa (hash: O8VxzFOTQcqKK+CbKNz7Oarn0uADD/6F4h0/93MvW2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Validity Not Before: Apr 25 00:51:01 2025 GMT Not After : May 2 00:51:01 2025 GMT Subject: CN=680adc76-bd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:04:d9:82:6b:62:9a:77:fe:09:e4:5c:2e: 6a:09:c6:93:09:f1:7e:e1:04:a8:99:01:2f:05:b9: 1c:97:9e:d3:d0:b1:60:24:06:4c:f0:b4:2c:4a:e4: 3a:e5:fe:74:12:3d:6e:43:8e:5f:9f:db:e5:75:64: e4:8a:b6:10:0a:bf:be:91:6d:29:4d:1b:4c:31:51: 4e:84:82:33:3f:47:34:27:55:12:46:a2:9c:b9:3e: 29:77:37:61:55:27:0a:16:f9:ea:06:09:5d:d3:3e: 0e:bb:ae:cc:e7:96:ec:14:17:9f:e5:1c:07:84:a9: 1d:c5:74:55:a0:94:a7:f4:eb:3c:2b:9a:73:0b:9d: 2f:cd:05:e7:b9:82:15:cb:31:54:fc:e6:18:44:e6: af:60:9f:6f:1e:70:a6:4d:7a:b9:c1:a2:2a:a5:89: 2e:49:09:a3:57:51:dd:64:65:e9:1e:da:c3:d3:cf: 8e:f8:8f:c5:0e:f8:57:44:db:ac:2c:ca:65:51:93: 69:e2:8c:ce:59:0a:dd:7b:9b:f5:69:55:71:dd:58: d2:59:b8:dd:67:fa:67:b2:81:ed:c2:c1:ca:b2:ad: 64:df:8c:97:79:d8:01:59:eb:5a:52:9b:a8:91:57: 6c:85:c8:3f:79:73:92:a5:fa:cb:e3:64:c7:71:fe: 84:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1A:94:16:8C:81:07:59:A7:AE:DD:B6:81:46:AD:1D:41:21:7D:37 X509v3 Authority Key Identifier: keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:89:51:ec:16:ab:51:fc:5b:d8:b9:10:b4:f9:62:de:7a:56: 5a:06:d7:e0:77:14:d7:a0:9a:af:28:8a:e9:0e:0a:0e:7a:e3: 09:42:7c:ca:c2:80:be:cd:cb:28:3c:47:dc:1d:c0:df:26:38: 99:c9:87:38:21:75:69:d0:ba:02:35:1d:73:18:05:a0:e9:13: cc:6b:c8:3f:07:f1:0b:70:e4:7f:5a:1d:39:da:89:86:2a:47: 08:38:01:45:dd:2e:f3:dc:29:dd:7a:02:d1:40:e4:65:0a:8e: d3:2e:53:f8:e9:10:df:fb:27:40:7d:82:98:7d:da:6b:76:5e: 2e:11:89:76:a1:00:4a:93:4a:f8:77:06:6f:98:7d:30:55:75: 69:5f:1f:9c:d8:7e:64:0f:2a:09:3a:0c:ae:9a:28:77:b5:3f: 9f:68:dc:34:e2:ea:b0:76:4d:90:10:80:84:f8:5c:85:cf:88: 6c:27:e4:71:b3:59:e8:30:1e:d5:e2:ba:5e:3e:7d:ef:d6:66: ff:62:6b:52:c6:36:3a:54:87:b5:73:31:61:c2:4b:fa:50:7b: e7:94:8d:ad:61:79:36:06:71:c2:d6:0b:24:ec:d1:a5:23:b1: 95:47:2d:5d:7a:80:c8:48:37:f0:85:bf:3f:e7:e0:84:1c:06: 78:05:18:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0 REQ3MDM1MDQwHhcNMjUwNDI1MDA1MTAxWhcNMjUwNTAyMDA1MTAxWjAYMRYwFAYD VQQDEw02ODBhZGM3Ni1iZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ4E2YJrYpp3/gnkXC5qCcaTCfF+4QSomQEvBbkcl57T0LFgJAZM8LQsSuQ6 5f50Ej1uQ45fn9vldWTkirYQCr++kW0pTRtMMVFOhIIzP0c0J1USRqKcuT4pdzdh VScKFvnqBgld0z4Ou67M55bsFBef5RwHhKkdxXRVoJSn9Os8K5pzC50vzQXnuYIV yzFU/OYYROavYJ9vHnCmTXq5waIqpYkuSQmjV1HdZGXpHtrD08+O+I/FDvhXRNus LMplUZNp4ozOWQrde5v1aVVx3VjSWbjdZ/pnsoHtwsHKsq1k34yXedgBWetaUpuo kVdshcg/eXOSpfrL42THcf6EVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcalBaM gQdZp67dtoFGrR1BIX03MB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTkzQi8xMDNDN0QxQ0JCN0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0 ekk4ajNWcVN4cGxOMXdOUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOiVHsFqtR/FvYuRC0+WLeelZaBtfgdxTXoJqvKIrpDgoOeuMJQnzK woC+zcsoPEfcHcDfJjiZyYc4IXVp0LoCNR1zGAWg6RPMa8g/B/ELcOR/Wh052omG KkcIOAFF3S7z3CndegLRQORlCo7TLlP46RDf+ydAfYKYfdprdl4uEYl2oQBKk0r4 dwZvmH0wVXVpXx+c2H5kDyoJOgyumih3tT+faNw04uqwdk2QEICE+FyFz4hsJ+Rx s1noMB7V4rpePn3v1mb/YmtSxjY6VIe1czFhwkv6UHvnlI2tYXk2BnHC1gsk7NGl I7GVRy1deoDISDfwhb8/5+CEHAZ4BRgT -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:59 2025 by rpki-client