$ rpki-client -vvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft File: EdV6dX7VZXXQSeQpyOxzelYFC3k.mft (raw, json) Hash identifier: /5YieG09JTYCcHnXHnjsXWP14yphNttNBOijrEWnwXk= Subject key identifier: 4C:6F:06:10:25:49:A9:CE:59:B4:2E:6D:54:BC:E6:AA:FA:E2:E7:4B Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79 Certificate issuer: /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79 Certificate serial: 0ED6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft Manifest number: 0ECF Signing time: Thu 24 Apr 2025 17:39:19 +0000 Manifest this update: Thu 24 Apr 2025 17:39:18 +0000 Manifest next update: Thu 01 May 2025 17:39:18 +0000 Files and hashes: 1: EdV6dX7VZXXQSeQpyOxzelYFC3k.crl (hash: G9JwX+czqu6ec15ldHt1tbSVC0cskdj4/VGlEH6bdXU=) 2: 6F89ECBE80D611E99C76DF63C4F9AE02.roa (hash: aXwfGlxqPqu7b393NAPdLMtIQdRhwXxgAFjX3VEBtag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3798 (0xed6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672F2, serialNumber=11D57A757ED56575D049E429C8EC737A56050B79 Validity Not Before: Apr 24 17:39:18 2025 GMT Not After : May 1 17:39:18 2025 GMT Subject: CN=680a7747-4133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:12:0e:00:a3:26:4c:39:db:68:b3:bb:29:7c: 68:ce:3f:c9:e1:49:d7:6d:89:a6:dc:ad:af:8e:03: 9f:9b:ef:c0:f2:0a:f6:af:49:94:5c:74:36:4b:92: dc:63:b5:4f:b9:83:b2:64:44:67:a9:5c:33:e7:0d: e5:72:83:4d:6a:48:90:b3:d9:23:e3:e7:48:24:eb: 52:3e:72:96:66:d6:27:b6:cf:6a:9e:82:8e:e8:23: 11:14:8c:29:a2:77:14:d6:c5:42:20:d9:57:ff:71: c1:49:ea:97:43:f2:b4:fd:b3:8c:ba:11:78:d1:23: 40:a6:30:d1:3f:9e:01:c7:26:73:70:89:27:1a:71: 4c:fa:f4:5c:2d:c2:cf:8c:03:c4:4f:48:62:1c:76: 6c:78:48:a1:34:ca:5d:eb:8b:28:48:6d:df:c7:d4: 9f:c1:24:13:90:0c:db:99:58:29:7c:62:5c:f1:7e: 3d:18:11:15:c4:44:94:e0:74:4f:8c:c9:19:78:cd: fc:2b:5f:ba:53:82:da:fd:4a:79:93:31:1f:f8:33: 71:69:4f:0d:6f:a0:46:da:4d:ab:be:bf:e0:7d:9c: 70:52:10:67:bc:7f:77:ce:60:e4:ad:b6:17:65:70: 62:a2:90:80:cd:4f:ca:fb:48:b4:c8:b7:b5:25:4e: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6F:06:10:25:49:A9:CE:59:B4:2E:6D:54:BC:E6:AA:FA:E2:E7:4B X509v3 Authority Key Identifier: keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:2a:fd:dc:41:c7:60:dc:8a:22:d7:9d:5d:6b:b8:dd:ba:7d: 9a:eb:82:d6:41:e3:81:44:93:37:b6:60:47:03:66:16:3e:a3: a8:dd:b7:ff:16:cc:b3:fd:ff:47:e7:a9:c0:77:9e:bc:da:21: 2d:fb:61:da:b5:40:43:ee:da:b3:56:73:05:36:24:78:6e:0a: f1:6c:fb:87:b9:72:2b:2d:a9:1f:33:2d:fb:78:ed:10:3d:41: 59:80:af:29:59:35:9f:02:38:cc:a0:9c:d1:b6:9e:3d:6c:8e: 47:fb:e3:f7:54:71:91:dd:00:fa:f6:89:b0:5d:fa:9f:20:2a: 3a:8d:cb:db:b1:6e:f6:93:37:8e:e3:07:d2:f2:fc:66:ad:a2: 1d:9e:76:ef:c7:b6:ab:8f:f0:b8:0d:68:b1:cf:73:48:ce:17: 02:7f:6e:38:08:ee:a4:ed:16:62:f2:f7:8d:6f:e3:8e:f2:6d: e1:e3:06:9e:4f:f3:10:f4:f9:1a:a0:f1:7b:b5:c4:8d:a1:05: 6b:c7:f1:6b:17:13:96:ff:82:0e:42:79:0d:0c:53:8f:dc:f3: 0b:2d:db:eb:4b:26:24:25:50:a4:be:bd:76:23:00:33:73:64: a7:23:5d:25:35:01:10:37:e1:8d:31:c4:f0:8a:09:9d:64:e8: 4a:f1:0b:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRjIxMTAvBgNVBAUTKDExRDU3QTc1N0VENTY1NzVEMDQ5RTQyOUM4RUM3MzdB NTYwNTBCNzkwHhcNMjUwNDI0MTczOTE4WhcNMjUwNTAxMTczOTE4WjAYMRYwFAYD VQQDEw02ODBhNzc0Ny00MTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxIOAKMmTDnbaLO7KXxozj/J4UnXbYmm3K2vjgOfm+/A8gr2r0mUXHQ2S5Lc Y7VPuYOyZERnqVwz5w3lcoNNakiQs9kj4+dIJOtSPnKWZtYnts9qnoKO6CMRFIwp oncU1sVCINlX/3HBSeqXQ/K0/bOMuhF40SNApjDRP54BxyZzcIknGnFM+vRcLcLP jAPET0hiHHZseEihNMpd64soSG3fx9SfwSQTkAzbmVgpfGJc8X49GBEVxESU4HRP jMkZeM38K1+6U4La/Up5kzEf+DNxaU8Nb6BG2k2rvr/gfZxwUhBnvH93zmDkrbYX ZXBiopCAzU/K+0i0yLe1JU5CpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExvBhAl SanOWbQubVS85qr64udLMB8GA1UdIwQYMBaAFBHVenV+1WV10EnkKcjsc3pWBQt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJGMi9ERDhFQzFDODgw RDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpYWFFTZVFweU94emVsWUZD M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkVjZkWDdWWlhYUVNlUXB5T3h6ZWxZRkMzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJGMi9ERDhFQzFDODgwRDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpY WFFTZVFweU94emVsWUZDM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGKv3cQcdg3Ioi151da7jdun2a64LWQeOBRJM3tmBHA2YWPqOo3bf/ Fsyz/f9H56nAd5682iEt+2HatUBD7tqzVnMFNiR4bgrxbPuHuXIrLakfMy37eO0Q PUFZgK8pWTWfAjjMoJzRtp49bI5H++P3VHGR3QD69omwXfqfICo6jcvbsW72kzeO 4wfS8vxmraIdnnbvx7arj/C4DWixz3NIzhcCf244CO6k7RZi8veNb+OO8m3h4wae T/MQ9PkaoPF7tcSNoQVrx/FrFxOW/4IOQnkNDFOP3PMLLdvrSyYkJVCkvr12IwAz c2SnI10lNQEQN+GNMcTwigmdZOhK8Qs9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:57 2025 by rpki-client