$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json) Hash identifier: 9tT6GQpM0S0Y5hMaceShlXKRpwAWO/nB9Orf8+N5afU= Subject key identifier: E3:C4:AA:15:B3:A5:6C:59:83:20:14:21:CC:87:2A:CC:B7:8E:22:A9 Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft Manifest number: 0235 Signing time: Fri 25 Apr 2025 01:40:37 +0000 Manifest this update: Fri 25 Apr 2025 01:40:36 +0000 Manifest next update: Fri 02 May 2025 01:40:36 +0000 Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: woyhfB4ydSfpUQ3YTRT5ixsXK+eGHgc7W6eYuNJPKis=) 2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: 1MS8BgQSeLxFZfjzI2XVs+BA1y3N2nYBN3Uvkoalvq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Validity Not Before: Apr 25 01:40:36 2025 GMT Not After : May 2 01:40:36 2025 GMT Subject: CN=680ae814-8959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:eb:5e:2e:2b:33:01:64:d8:e5:5e:4b:be:41: 52:88:1b:2a:13:34:a1:5b:4a:30:88:87:7e:84:cd: 58:97:d7:79:a8:c4:44:01:33:9a:53:59:36:58:aa: 5e:a5:ef:b4:07:27:62:ef:8e:2e:0a:5d:f1:fa:b6: 14:86:30:63:2c:64:89:64:d4:21:ff:55:2e:a0:93: 3d:81:7b:36:53:a1:41:25:c0:2b:87:30:14:25:31: 3d:21:40:49:c8:4b:9b:b5:7a:e4:82:46:36:9a:d5: 80:77:63:c1:e9:15:17:cb:97:ab:73:b8:7c:16:c3: 12:11:72:e0:01:13:44:cc:24:3d:2b:f0:d4:42:c4: 47:0d:fd:1c:a2:2c:56:4f:d2:45:7a:9e:66:35:88: fb:84:ad:7c:33:7f:7a:a6:5e:1d:ed:a7:ed:38:97: e3:f0:d9:c7:c4:02:f9:ba:1f:c2:c0:be:9e:4f:2f: 53:39:96:3e:8b:7a:35:bd:ac:05:5b:1f:b1:37:50: 51:79:50:1d:05:f7:b6:c0:c4:63:8b:5f:5d:ff:d5: ca:13:e3:0c:d4:68:f4:3c:fb:01:84:ef:a5:53:30: 1d:cc:80:cf:98:ed:68:2c:2a:0d:98:9b:e9:ad:56: 1c:9b:42:2f:2c:03:b7:0d:70:04:f3:90:b9:9e:ce: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C4:AA:15:B3:A5:6C:59:83:20:14:21:CC:87:2A:CC:B7:8E:22:A9 X509v3 Authority Key Identifier: keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:83:60:c0:e4:7c:f9:6a:26:27:67:7c:50:05:19:9b:aa:3c: ae:7c:eb:83:03:96:fd:d5:f6:44:bd:e3:d0:a2:cf:81:b5:c8: af:56:3d:79:3c:50:a0:2b:ed:9a:b6:cb:ba:bd:c9:1b:15:69: 2d:10:57:b7:ab:c6:60:cf:f6:4d:97:6d:67:e5:e4:11:11:6f: cb:e7:c6:26:c9:d3:be:29:10:c0:71:e0:22:58:6c:9b:e1:a3: 83:f8:c7:b2:22:c9:3f:f3:75:91:e9:0b:dc:2a:5e:1c:91:90: 68:b0:5f:d0:ed:69:1e:70:ce:7a:7e:90:18:4a:69:f1:e8:bc: ba:9b:39:f2:38:9b:59:ca:39:cb:00:cf:07:c8:e3:89:e0:aa: ef:c4:ed:c8:03:db:d1:c2:9e:6d:6d:56:5e:82:ee:66:d3:50: 4c:d9:97:b4:e0:3c:e6:93:09:cc:84:1e:97:25:88:1c:c4:4c: ca:9d:17:e1:5e:7c:4f:9f:d9:e3:aa:90:67:38:36:e9:6c:78: 84:4a:cf:1d:c8:78:ef:63:77:bf:e5:41:a5:0c:02:27:31:84: e2:a3:96:4f:66:4a:c0:14:7b:77:61:a5:34:58:94:e9:f4:a5: ba:f3:b2:97:0f:ed:de:62:39:69:b6:34:2c:76:ca:bc:c5:b9: 69:1e:fa:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5RjExMTAvBgNVBAUTKEQ5MDg0Q0FEQzNCRUM4QzIwMEM1QTk2QjcyRURBRkQ0 QTAwRUFFRTgwHhcNMjUwNDI1MDE0MDM2WhcNMjUwNTAyMDE0MDM2WjAYMRYwFAYD VQQDEw02ODBhZTgxNC04OTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+teLiszAWTY5V5LvkFSiBsqEzShW0owiId+hM1Yl9d5qMREATOaU1k2WKpe pe+0Bydi744uCl3x+rYUhjBjLGSJZNQh/1UuoJM9gXs2U6FBJcArhzAUJTE9IUBJ yEubtXrkgkY2mtWAd2PB6RUXy5erc7h8FsMSEXLgARNEzCQ9K/DUQsRHDf0coixW T9JFep5mNYj7hK18M396pl4d7aftOJfj8NnHxAL5uh/CwL6eTy9TOZY+i3o1vawF Wx+xN1BReVAdBfe2wMRji19d/9XKE+MM1Gj0PPsBhO+lUzAdzIDPmO1oLCoNmJvp rVYcm0IvLAO3DXAE85C5ns4LUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPEqhWz pWxZgyAUIcyHKsy3jiKpMB8GA1UdIwQYMBaAFNkITK3DvsjCAMWpa3Ltr9SgDq7o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTlGMS82OTVGOTNGRTIx RUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlNSUF4YWxyY3UydjFLQU9y dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRaE1yY08teU1JQXhhbHJjdTJ2MUtBT3J1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTlGMS82OTVGOTNGRTIxRUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlN SUF4YWxyY3UydjFLQU9ydWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkg2DA5Hz5aiYnZ3xQBRmbqjyufOuDA5b91fZEvePQos+BtcivVj15 PFCgK+2atsu6vckbFWktEFe3q8Zgz/ZNl21n5eQREW/L58YmydO+KRDAceAiWGyb 4aOD+MeyIsk/83WR6QvcKl4ckZBosF/Q7WkecM56fpAYSmnx6Ly6mznyOJtZyjnL AM8HyOOJ4KrvxO3IA9vRwp5tbVZegu5m01BM2Ze04DzmkwnMhB6XJYgcxEzKnRfh XnxPn9njqpBnODbpbHiESs8dyHjvY3e/5UGlDAInMYTio5ZPZkrAFHt3YaU0WJTp 9KW687KXD+3eYjlptjQsdsq8xblpHvpz -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:14 2025 by rpki-client