$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft File: eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json) Hash identifier: uBNoCj4EkJYndw9XyhNMVeTqsoYhpaKRpsA524EOWBU= Subject key identifier: 0C:EE:7A:18:78:08:EE:FC:EA:32:97:DA:2F:9C:9E:D9:F3:DC:FB:00 Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Certificate serial: 0412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft Manifest number: 040D Signing time: Fri 25 Apr 2025 00:13:29 +0000 Manifest this update: Fri 25 Apr 2025 00:13:28 +0000 Manifest next update: Fri 02 May 2025 00:13:28 +0000 Files and hashes: 1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: vP7wmPKfjDZ2MDfmox2uarM05ThFUmBjEBXxsGlrzfQ=) 2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: hAIkEeLEWcB2wcEGanDh+e9b0MM5CnTkz5SOu7dH+to=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Validity Not Before: Apr 25 00:13:28 2025 GMT Not After : May 2 00:13:28 2025 GMT Subject: CN=680ad3a8-3b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:59:9a:e3:6f:f6:27:d8:ba:ae:c1:98:72: 94:6d:e8:b6:42:79:cf:ac:aa:d4:e6:89:17:52:c9: ae:4f:07:1b:49:3d:d6:13:b8:f7:94:5b:a6:6a:cf: 82:ba:06:02:7e:90:73:e0:de:07:43:05:3d:7f:4d: d7:a4:33:1d:dd:44:16:6c:68:1b:84:49:7e:80:d8: c2:c0:ea:0e:08:e9:5d:41:26:8a:cf:e3:68:e9:32: 69:c5:ba:ef:7a:67:96:3a:5f:2b:74:c7:81:e4:63: a9:c6:91:f4:bb:90:72:6e:d1:48:fc:c0:35:06:52: 5c:c3:b9:91:1b:ed:23:ef:4c:b8:42:e6:84:f3:87: 4b:f4:ec:7d:72:9d:6f:0a:7d:ed:f8:4b:6e:7a:5c: c9:3d:ed:42:cf:08:1c:cd:98:0b:9b:25:58:c6:9c: a6:4d:9a:d8:62:38:b2:3b:e1:43:30:5b:57:2d:1c: 55:54:0d:b9:92:33:33:0a:5c:d7:ce:21:2f:29:95: 2b:25:e2:77:22:f2:35:25:96:e2:4d:55:3a:76:e8: bb:2b:d8:f0:2e:1e:a6:36:21:5c:bd:c4:42:c7:94: d4:f8:82:f4:94:99:a9:80:1f:eb:7d:0d:43:f1:2f: e7:02:0e:1c:87:18:80:09:14:6a:55:56:99:cf:60: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EE:7A:18:78:08:EE:FC:EA:32:97:DA:2F:9C:9E:D9:F3:DC:FB:00 X509v3 Authority Key Identifier: keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:5a:96:95:52:a0:29:ee:98:d6:25:47:30:8e:78:ba:8b:1b: fe:ec:a4:ea:50:04:96:4c:9f:94:0c:d6:e5:ca:38:96:84:54: 9d:26:42:8b:c8:88:e0:6f:f3:58:65:1b:27:5e:77:da:4a:e6: bf:0e:64:9a:d2:75:d6:4c:56:0e:4c:0d:7d:c4:9b:71:ed:9b: 2d:a4:ee:55:80:7c:a1:f7:b0:49:7b:02:62:88:e3:0b:2a:b8: 58:49:18:6a:e7:62:2e:cb:83:73:93:d0:2a:42:4c:0c:0e:6b: 57:48:8b:c2:42:c4:bc:27:db:49:fa:1b:93:4f:c0:c6:b4:bd: a9:ce:48:b0:1f:b1:2e:26:26:bb:35:18:82:2a:f4:9a:8a:c3: 3f:c1:1f:ef:e1:29:f1:64:60:4c:63:a6:c6:1a:42:5d:18:3e: 78:4d:f9:23:ae:35:29:24:61:b1:8e:dd:d6:5e:82:bb:5a:0e: 32:38:89:59:34:db:f9:f3:72:b8:29:e0:93:44:33:2a:85:cd: 25:ee:95:ff:d2:cd:d8:b0:24:e2:42:c0:38:1e:be:c3:e0:cf: 0e:1d:70:52:3d:16:87:28:ee:3a:aa:11:fc:65:cd:68:7c:ea: b6:15:23:42:9f:93:20:db:e4:a3:d6:fb:51:5c:89:23:72:a1: 1e:1f:be:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGNTIxMTAvBgNVBAUTKDc5N0RGQTE4ODM5Rjg3RDEzMTBFOUNBOUMzNDEwQUJF QjY4MzlFNzQwHhcNMjUwNDI1MDAxMzI4WhcNMjUwNTAyMDAxMzI4WjAYMRYwFAYD VQQDEw02ODBhZDNhOC0zYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0NZmuNv9ifYuq7BmHKUbei2QnnPrKrU5okXUsmuTwcbST3WE7j3lFumas+C ugYCfpBz4N4HQwU9f03XpDMd3UQWbGgbhEl+gNjCwOoOCOldQSaKz+No6TJpxbrv emeWOl8rdMeB5GOpxpH0u5BybtFI/MA1BlJcw7mRG+0j70y4QuaE84dL9Ox9cp1v Cn3t+EtuelzJPe1CzwgczZgLmyVYxpymTZrYYjiyO+FDMFtXLRxVVA25kjMzClzX ziEvKZUrJeJ3IvI1JZbiTVU6dui7K9jwLh6mNiFcvcRCx5TU+IL0lJmpgB/rfQ1D 8S/nAg4chxiACRRqVVaZz2BzXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzuehh4 CO786jKX2i+cntnz3PsAMB8GA1UdIwQYMBaAFHl9+hiDn4fRMQ6cqcNBCr62g550 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y1Mi9FOTQ2NjZDQzY4 QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5RXhEcHlwdzBFS3ZyYURu blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYMzZHSU9maDlFeERweXB3MEVLdnJhRG5uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y1Mi9FOTQ2NjZDQzY4QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5 RXhEcHlwdzBFS3ZyYURublEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2WpaVUqAp7pjWJUcwjni6ixv+7KTqUASWTJ+UDNblyjiWhFSdJkKL yIjgb/NYZRsnXnfaSua/DmSa0nXWTFYOTA19xJtx7ZstpO5VgHyh97BJewJiiOML KrhYSRhq52Iuy4Nzk9AqQkwMDmtXSIvCQsS8J9tJ+huTT8DGtL2pzkiwH7EuJia7 NRiCKvSaisM/wR/v4SnxZGBMY6bGGkJdGD54TfkjrjUpJGGxjt3WXoK7Wg4yOIlZ NNv583K4KeCTRDMqhc0l7pX/0s3YsCTiQsA4Hr7D4M8OHXBSPRaHKO46qhH8Zc1o fOq2FSNCn5Mg2+Sj1vtRXIkjcqEeH75U -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:16 2025 by rpki-client