$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft File: b35Y0Iljiffn_k6HlapVXVxVUYg.mft (raw, json) Hash identifier: 8rW/59CKqraHzyVdqADvakydf9tjjYROI/lSu+Fa3Rk= Subject key identifier: FC:6F:AC:F1:FB:62:D4:2D:82:13:44:F0:C9:38:4E:60:35:31:E8:D5 Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 Certificate issuer: /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft Manifest number: 53 Signing time: Fri 25 Apr 2025 06:14:05 +0000 Manifest this update: Fri 25 Apr 2025 06:14:05 +0000 Manifest next update: Fri 02 May 2025 06:14:05 +0000 Files and hashes: 1: b35Y0Iljiffn_k6HlapVXVxVUYg.crl (hash: D9ZZzmEmFxTQD2/CbKIi0cTmHfZLZizCSAUuAonAAWc=) 2: 31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (hash: iUCXkP/k8vFDK+xe4w0gGSkxJOnd/FNj32EaA1KJbt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188 Validity Not Before: Apr 25 06:14:05 2025 GMT Not After : May 2 06:14:05 2025 GMT Subject: CN=680b282d-0e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ea:08:6d:20:48:e7:3b:73:a0:01:9c:46:65: 3c:2d:df:0a:7c:cb:57:fd:64:01:47:1c:39:2b:02: 14:5b:31:c9:73:43:4f:d5:fc:cb:ca:1e:e9:90:ef: f8:39:a7:59:a1:5b:b8:8f:ae:50:84:ae:0a:87:a1: 11:36:62:c6:84:f4:02:38:a3:8b:5b:4d:ef:88:17: 2e:c7:65:a5:a1:13:38:7c:10:74:ee:ce:23:3f:1e: 12:06:ef:dd:fe:2e:3b:f8:38:51:f7:d7:b1:05:ad: 3b:44:ac:80:e0:21:1c:ec:f3:5a:f2:5d:21:7e:5d: 90:aa:df:de:39:78:74:c1:4c:12:c8:09:cf:e9:0e: 14:2e:b6:f6:d0:d2:46:25:93:17:4a:3b:f8:f0:3d: 99:5b:69:a5:89:c8:41:83:b2:d4:f3:23:31:d8:64: ea:f2:be:66:e6:d6:04:d3:9d:c6:a3:86:b9:01:1f: ab:d9:b6:87:37:b0:cc:39:6d:b2:b2:7f:35:27:80: 64:67:89:a5:8d:03:01:4e:2d:10:d8:86:65:d2:dc: 35:1a:23:26:fa:db:77:b1:ae:90:c5:10:a9:bb:3d: 64:9a:d3:bd:82:a6:6f:a4:d5:00:68:15:ed:26:d1: 2c:dc:80:20:76:af:2f:4c:b3:62:94:10:1f:da:64: d6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6F:AC:F1:FB:62:D4:2D:82:13:44:F0:C9:38:4E:60:35:31:E8:D5 X509v3 Authority Key Identifier: keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:74:64:bc:05:ef:41:34:c7:32:32:0a:0d:b7:ac:5f:b5:da: 7e:c2:39:78:19:80:33:e1:f7:b3:27:08:d3:4a:31:1e:22:7f: fb:c4:c2:a9:9d:e2:ef:d0:2b:77:91:17:59:b9:3f:48:68:d2: e8:96:c1:f4:7f:98:7a:96:aa:41:80:f3:f0:e6:85:bb:9f:91: 46:19:c3:b2:ca:f7:49:08:c9:0d:76:64:76:8a:78:57:44:dc: e1:23:78:6e:30:24:ee:e2:c6:44:80:2e:e5:86:91:6d:3c:40: 5d:7b:84:ad:a5:58:3d:92:06:98:0d:38:f6:cb:44:32:b7:1c: aa:85:26:9c:a2:2e:8c:94:db:4d:f1:86:8e:aa:c1:b3:b2:2f: 8b:f2:37:0a:df:1c:e6:a3:44:7d:26:dc:5f:67:99:43:95:1d: ae:c3:51:4f:0e:d7:45:a3:9c:ed:40:08:4e:10:08:09:1c:85: 0a:71:63:14:9e:44:96:38:15:df:66:46:9b:66:e2:9a:8b:bf: cb:6e:d5:64:29:7c:a6:9e:a5:20:d0:94:68:eb:1a:b4:bf:c4: 93:6c:9b:a9:88:97:05:ac:9a:07:d1:59:97:41:49:53:f8:6f: 1e:18:c4:38:42:b8:a9:31:44:a7:40:b1:48:ed:53:eb:df:17: 4d:b2:a1:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDZFNDExMC8GA1UEBRMoNkY3RTU4RDA4OTYzODlGN0U3RkU0RTg3OTVBQTU1NUQ1 QzU1NTE4ODAeFw0yNTA0MjUwNjE0MDVaFw0yNTA1MDIwNjE0MDVaMBgxFjAUBgNV BAMTDTY4MGIyODJkLTBlNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDq6ghtIEjnO3OgAZxGZTwt3wp8y1f9ZAFHHDkrAhRbMclzQ0/V/MvKHumQ7/g5 p1mhW7iPrlCErgqHoRE2YsaE9AI4o4tbTe+IFy7HZaWhEzh8EHTuziM/HhIG793+ Ljv4OFH317EFrTtErIDgIRzs81ryXSF+XZCq3945eHTBTBLICc/pDhQutvbQ0kYl kxdKO/jwPZlbaaWJyEGDstTzIzHYZOryvmbm1gTTncajhrkBH6vZtoc3sMw5bbKy fzUngGRniaWNAwFOLRDYhmXS3DUaIyb623exrpDFEKm7PWSa072Cpm+k1QBoFe0m 0SzcgCB2ry9Ms2KUEB/aZNZZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/G+s8fti 1C2CE0TwyThOYDUx6NUwHwYDVR0jBBgwFoAUb35Y0Iljiffn/k6HlapVXVxVUYgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNkU0LzNBQkE4MEFBQTY4 NDExRUY4RjVFRDM3RkM0RjlBRTAyL2IzNVkwSWxqaWZmbl9rNkhsYXBWWFZ4VlVZ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjM1WTBJbGppZmZuX2s2SGxhcFZYVnhWVVlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NkU0LzNBQkE4MEFBQTY4NDExRUY4RjVFRDM3RkM0RjlBRTAyL2IzNVkwSWxqaWZm bl9rNkhsYXBWWFZ4VlVZZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB10ZLwF70E0xzIyCg23rF+12n7COXgZgDPh97MnCNNKMR4if/vEwqmd 4u/QK3eRF1m5P0ho0uiWwfR/mHqWqkGA8/DmhbufkUYZw7LK90kIyQ12ZHaKeFdE 3OEjeG4wJO7ixkSALuWGkW08QF17hK2lWD2SBpgNOPbLRDK3HKqFJpyiLoyU203x ho6qwbOyL4vyNwrfHOajRH0m3F9nmUOVHa7DUU8O10WjnO1ACE4QCAkchQpxYxSe RJY4Fd9mRptm4pqLv8tu1WQpfKaepSDQlGjrGrS/xJNsm6mIlwWsmgfRWZdBSVP4 bx4YxDhCuKkxRKdAsUjtU+vfF02yoXY= -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:06 2025 by rpki-client