$ rpki-client -vvf rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft File: bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft (raw, json) Hash identifier: nOy7n+TwfhuF4Z/rSarurKfJC8bhx9Nf4xzUtyeDZ/o= Subject key identifier: C8:4E:E1:63:0F:50:11:87:AB:1D:55:4E:78:67:47:83:DE:AF:F1:AF Authority key identifier: 6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2 Certificate issuer: /CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2 Certificate serial: 056E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft Manifest number: 056A Signing time: Thu 24 Apr 2025 23:08:34 +0000 Manifest this update: Thu 24 Apr 2025 23:08:33 +0000 Manifest next update: Thu 01 May 2025 23:08:33 +0000 Files and hashes: 1: bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl (hash: O+/K3mKM82sDPM+iZRv9z4pRYGUirN/AbsqbcTb5Tp0=) 2: BF811486DC1E11EBB2C72F52C4F9AE02.roa (hash: iBf35JbhfXTByYtXYWLsbRPZqGHn3gi9s/hG2voZLCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167C9C, serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2 Validity Not Before: Apr 24 23:08:33 2025 GMT Not After : May 1 23:08:33 2025 GMT Subject: CN=680ac471-ea0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:c2:8f:f1:4b:a0:8c:cb:f1:b8:b8:23:5d: 8a:19:63:54:c5:42:5a:d1:dc:f2:32:dc:4f:1c:72: e1:8b:4c:f6:54:8b:19:40:30:b3:04:14:28:9f:5e: 6c:f7:53:23:3a:28:47:b4:1d:e0:50:87:de:b5:80: 8d:c3:88:3a:8e:a2:10:60:16:20:c2:36:61:ee:c9: 7b:5a:dd:48:7f:5a:94:04:05:7f:a7:91:26:e6:ee: 8f:8b:83:af:d4:f4:2a:a3:cb:db:c3:fd:b0:e0:9b: ad:57:cc:4b:93:03:bd:7b:1c:d2:2d:6d:38:f3:f8: 54:4d:f7:ce:4e:70:cf:f6:19:c0:18:dc:67:44:b8: 8d:f7:a1:06:25:4e:65:dc:ba:f0:7a:a7:9d:01:5f: 35:ed:05:99:30:3a:cf:b0:27:19:a3:43:0b:42:4c: 2f:82:26:7a:2f:10:9c:e2:56:18:e0:79:8a:d0:c5: 3d:f2:fc:eb:3b:12:1d:46:d3:ed:2f:b9:26:31:48: 81:21:81:b1:8b:12:30:15:88:3d:68:18:9f:86:b0: 56:a8:1b:15:9b:07:d5:16:c0:f7:05:c1:0a:28:66: eb:7a:c1:f1:c8:60:11:d6:24:23:ac:f0:8a:57:c7: e8:63:65:20:09:08:1e:87:6f:cb:9c:19:12:7f:04: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4E:E1:63:0F:50:11:87:AB:1D:55:4E:78:67:47:83:DE:AF:F1:AF X509v3 Authority Key Identifier: keyid:6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:97:32:af:44:7c:75:ca:1b:4c:7d:6d:11:76:6b:8a:1e:21: 7e:b9:7e:60:23:19:af:cf:0e:bd:2d:c4:6b:9f:6d:e6:23:40: 02:5f:89:37:33:84:45:47:6b:b9:58:37:7a:10:7a:83:29:b1: 84:dd:cf:81:8f:42:13:cd:5c:50:2e:0c:9f:b5:e8:07:65:01: da:df:c6:bf:6f:0d:31:0e:50:17:4d:7b:2d:6a:73:59:76:49: f1:03:35:1f:d7:10:20:8d:9b:7e:da:99:ff:50:df:c6:af:81: 45:91:73:6e:21:43:24:f0:ac:18:11:54:6c:b2:bd:5d:ad:7f: 83:25:02:62:12:0e:c0:7b:a1:bc:ab:92:79:8f:44:94:a0:b5: 7f:5d:9b:11:bc:10:70:96:81:af:ad:8c:bc:32:e2:06:bb:78: ce:75:55:d7:07:10:3a:4b:b0:3a:42:d8:62:68:d9:ca:fb:dd: 40:00:dc:2a:a2:88:7d:58:f8:f8:e0:65:6d:8d:26:4c:55:df: d8:f3:3c:75:33:7c:87:d4:33:2b:1f:76:6a:59:b6:37:15:1f: f3:26:96:4b:95:ff:fc:fe:50:8e:fc:10:41:6a:96:94:5a:c5: a6:28:66:7a:24:7c:73:7a:af:9f:7d:a1:16:7f:b5:cd:1e:9c: 4d:01:b7:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDOUMxMTAvBgNVBAUTKDZEREVDNkExNzEyOTIzMEVFRUZFNTA4QUYxMTk2MkZC NEMwRjZGQzIwHhcNMjUwNDI0MjMwODMzWhcNMjUwNTAxMjMwODMzWjAYMRYwFAYD VQQDEw02ODBhYzQ3MS1lYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykXCj/FLoIzL8bi4I12KGWNUxUJa0dzyMtxPHHLhi0z2VIsZQDCzBBQon15s 91MjOihHtB3gUIfetYCNw4g6jqIQYBYgwjZh7sl7Wt1If1qUBAV/p5Em5u6Pi4Ov 1PQqo8vbw/2w4JutV8xLkwO9exzSLW048/hUTffOTnDP9hnAGNxnRLiN96EGJU5l 3LrweqedAV817QWZMDrPsCcZo0MLQkwvgiZ6LxCc4lYY4HmK0MU98vzrOxIdRtPt L7kmMUiBIYGxixIwFYg9aBifhrBWqBsVmwfVFsD3BcEKKGbresHxyGAR1iQjrPCK V8foY2UgCQgeh2/LnBkSfwRTIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhO4WMP UBGHqx1VTnhnR4Per/GvMB8GA1UdIwQYMBaAFG3exqFxKSMO7v5QivEZYvtMD2/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0M5Qy85QjZDNDI4MERD MUIxMUVCQTYzNTUwNEVDNEY5QUUwMi9iZDdHb1hFcEl3N3VfbENLOFJsaS0wd1Bi OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JkN0dvWEVwSXc3dV9sQ0s4UmxpLTB3UGI4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0M5Qy85QjZDNDI4MERDMUIxMUVCQTYzNTUwNEVDNEY5QUUwMi9iZDdHb1hFcEl3 N3VfbENLOFJsaS0wd1BiOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDelzKvRHx1yhtMfW0RdmuKHiF+uX5gIxmvzw69LcRrn23mI0ACX4k3 M4RFR2u5WDd6EHqDKbGE3c+Bj0ITzVxQLgyftegHZQHa38a/bw0xDlAXTXstanNZ dknxAzUf1xAgjZt+2pn/UN/Gr4FFkXNuIUMk8KwYEVRssr1drX+DJQJiEg7Ae6G8 q5J5j0SUoLV/XZsRvBBwloGvrYy8MuIGu3jOdVXXBxA6S7A6QthiaNnK+91AANwq ooh9WPj44GVtjSZMVd/Y8zx1M3yH1DMrH3ZqWbY3FR/zJpZLlf/8/lCO/BBBapaU WsWmKGZ6JHxzeq+ffaEWf7XNHpxNAbcw -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:38 2025 by rpki-client