$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json) Hash identifier: n/9r1sRFzcqgpCAE5sDTicL88Yti9MbOFwQUhvK0WwE= Subject key identifier: F9:2B:12:E4:41:10:71:63:9A:91:01:C4:7C:3D:F7:82:79:CC:15:FA Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft Manifest number: 04B0 Signing time: Thu 24 Apr 2025 23:43:37 +0000 Manifest this update: Thu 24 Apr 2025 23:43:37 +0000 Manifest next update: Thu 01 May 2025 23:43:37 +0000 Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: 47hCd9SFBr098bKFafO4Knm/IAC453ParZZpEWj7d4A=) 2: E747402C940211EFAAB77C3DC4F9AE02.roa (hash: V4kNzC9BCFB4bEAtUd+qwvHLEbfnpMX9a/DaKQbhUdI=) 3: DA655484CF0811EF9CF05B4FC4F9AE02.roa (hash: OtFmSPwV6EFHA0PFmeCzNbPWu4B2WoMirQl5I+it6TQ=) 4: 9C3B0AB8911A11EFB0F2DB5DC4F9AE02.roa (hash: 1ZwXIYT8WEQ8AXmik6kQ0iyXkhUrX8a9G8G1OnokxHI=) 5: DF2C7C5E8A3E11EF96BEBB3AC4F9AE02.roa (hash: Po0zIGF8aATq1hFnPm65zoH3mTgzDOjtTV7rd5eqe/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Apr 24 23:43:37 2025 GMT Not After : May 1 23:43:37 2025 GMT Subject: CN=680acca9-9192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:24:f4:89:8d:f6:3d:39:9b:4c:ab:6b:4c: a5:b2:07:6e:65:dd:63:c0:60:a8:31:00:18:fb:fd: 34:58:25:0e:f8:13:cf:2b:d4:c6:f7:a8:34:dd:de: 26:b3:86:3b:7f:26:8d:96:4a:b8:33:28:bc:76:2b: 07:35:f5:2a:0c:15:e1:b8:6b:50:41:94:d9:b3:fa: 25:c0:c2:03:8d:b3:20:b0:ee:bc:6a:5c:40:29:9e: 2b:20:d5:a6:a0:36:3d:9d:97:cc:99:80:cd:ed:fc: 37:84:10:b7:a0:7b:ce:68:75:cd:09:cd:38:ed:f3: 32:43:17:30:dd:23:67:68:af:8b:bb:1a:f1:17:93: 38:c4:c0:38:c5:4d:83:af:35:8b:5f:17:c1:62:f7: b8:b0:12:9e:7b:f4:a9:ac:0d:13:1e:0e:1f:29:d4: c9:9e:56:32:df:e2:1f:f7:d1:07:50:52:a1:ee:34: 5c:d5:0b:be:14:75:bd:c5:a5:7d:05:3c:2e:0f:46: b5:6c:6b:0d:a4:e3:59:6f:34:16:73:d4:29:47:4b: 86:68:8e:24:32:b2:f4:5b:90:4f:48:24:df:d6:49: 58:c2:14:07:e8:d5:f9:40:1b:74:68:a3:0e:b8:51: 04:c1:b1:4a:eb:e6:c6:fb:5f:cf:4e:59:b5:45:0d: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2B:12:E4:41:10:71:63:9A:91:01:C4:7C:3D:F7:82:79:CC:15:FA X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:6b:47:d5:d2:41:3c:84:12:08:e0:f5:a3:bf:47:4e:f9:8f: 13:0c:ee:fa:69:2c:c9:d1:b3:b8:0d:74:8d:37:66:36:30:85: 78:fb:b8:95:e9:f2:28:ea:a5:3f:a5:4e:2e:68:e2:99:04:1e: 72:ee:08:c0:f9:43:bd:94:56:a7:fd:06:cd:68:b4:36:e5:b4: c0:c7:3a:18:e6:09:7c:49:9b:02:03:b6:31:30:c1:94:3e:13: 61:34:c5:a4:e1:ed:5e:9a:a0:5b:38:5d:8c:fa:d1:7b:09:4b: f2:2d:f9:1d:8c:5c:34:87:84:e2:56:11:62:a3:9d:76:c7:72: ed:df:fb:42:03:5b:15:c8:2e:71:df:22:f5:97:b4:46:e4:6d: a3:7b:0b:0b:56:6e:06:2e:c3:65:45:1b:4d:7e:f6:18:54:a3: 60:9b:02:98:34:a6:87:8e:fa:7b:c6:08:c2:65:83:c1:e8:9b: 1a:0d:59:11:00:d4:45:7c:42:b2:42:65:c2:a7:03:c6:20:ee: 61:6f:c8:b4:cd:85:5d:9d:fc:01:b5:f8:38:ce:f9:c7:0c:f5: 98:80:45:aa:9c:28:f8:9e:d1:ae:36:c4:6e:62:95:35:f0:fd: 70:0c:2f:7b:fd:a6:06:2d:70:d6:c3:25:9b:c3:ae:d9:b8:16: ad:79:eb:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUwNDI0MjM0MzM3WhcNMjUwNTAxMjM0MzM3WjAYMRYwFAYD VQQDEw02ODBhY2NhOS05MTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Uwk9ImN9j05m0yra0ylsgduZd1jwGCoMQAY+/00WCUO+BPPK9TG96g03d4m s4Y7fyaNlkq4Myi8disHNfUqDBXhuGtQQZTZs/olwMIDjbMgsO68alxAKZ4rINWm oDY9nZfMmYDN7fw3hBC3oHvOaHXNCc047fMyQxcw3SNnaK+LuxrxF5M4xMA4xU2D rzWLXxfBYve4sBKee/SprA0THg4fKdTJnlYy3+If99EHUFKh7jRc1Qu+FHW9xaV9 BTwuD0a1bGsNpONZbzQWc9QpR0uGaI4kMrL0W5BPSCTf1klYwhQH6NX5QBt0aKMO uFEEwbFK6+bG+1/PTlm1RQ0oUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkrEuRB EHFjmpEBxHw994J5zBX6MB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0 VTVaNURLY3lQVG9KQnY3WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFa0fV0kE8hBII4PWjv0dO+Y8TDO76aSzJ0bO4DXSNN2Y2MIV4+7iV 6fIo6qU/pU4uaOKZBB5y7gjA+UO9lFan/QbNaLQ25bTAxzoY5gl8SZsCA7YxMMGU PhNhNMWk4e1emqBbOF2M+tF7CUvyLfkdjFw0h4TiVhFio512x3Lt3/tCA1sVyC5x 3yL1l7RG5G2jewsLVm4GLsNlRRtNfvYYVKNgmwKYNKaHjvp7xgjCZYPB6JsaDVkR ANRFfEKyQmXCpwPGIO5hb8i0zYVdnfwBtfg4zvnHDPWYgEWqnCj4ntGuNsRuYpU1 8P1wDC97/aYGLXDWwyWbw67ZuBateeuR -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:03 2025 by rpki-client