$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft File: W9l8Mex4xvFX13LBu1drgCSCtyg.mft (raw, json) Hash identifier: yZM/+rITEGqaodKqTTgr9O46NsBLTiYJUOJ+/ORoa2s= Subject key identifier: AE:AE:5B:E6:72:50:6E:2F:1A:21:AB:C0:D8:26:81:7B:50:6B:30:B0 Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 Certificate issuer: /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Certificate serial: 0C40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft Manifest number: 0C36 Signing time: Thu 24 Apr 2025 18:21:08 +0000 Manifest this update: Thu 24 Apr 2025 18:21:08 +0000 Manifest next update: Thu 01 May 2025 18:21:08 +0000 Files and hashes: 1: W9l8Mex4xvFX13LBu1drgCSCtyg.crl (hash: Vnc5f5iE5jxgTk9TtEQsU+qjGLNwwbCVVp+nPHZ7Jc0=) 2: 753703FE045C11EAB8BF0932C4F9AE02.roa (hash: S/ofOXTredoKUYwl0LoZXr2usuoq2v/owpoDEv+TetE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Validity Not Before: Apr 24 18:21:08 2025 GMT Not After : May 1 18:21:08 2025 GMT Subject: CN=680a8114-42f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:ea:b6:25:4b:f9:c5:38:1c:ad:47:b5:db: 2f:5c:37:5c:cb:e6:2c:68:72:e9:fb:c2:44:33:aa: f2:bb:14:28:08:03:26:b3:c8:ad:f1:33:04:69:f3: 8c:48:a9:d9:49:56:42:71:9f:77:2c:c9:81:b7:00: c1:8c:6a:c4:40:48:68:ee:9c:33:06:dd:3a:19:07: 40:88:04:a3:9d:51:f0:40:f2:2e:10:0f:19:15:a9: f3:af:51:f3:9a:9b:2a:f4:28:91:de:9b:d9:c9:05: f4:94:ec:cc:f9:ad:9b:09:a9:6f:52:1e:de:8b:83: 92:a9:12:0e:2c:96:63:b8:37:90:f6:26:92:f1:03: af:5b:e0:9c:d4:36:de:19:d9:f6:92:89:68:41:fd: 7d:cd:d4:e4:77:2f:9e:e2:30:28:db:de:69:f8:be: 77:57:27:62:62:c9:d5:43:d3:ac:f2:1b:68:0b:51: 4e:2f:2a:d9:67:ea:00:11:60:db:21:f1:89:53:5c: 19:4e:31:1b:c5:d6:0f:f2:04:07:d9:ad:04:6b:ad: c6:84:4d:c7:68:13:8e:2b:e8:38:df:32:c2:9e:40: 3e:55:75:fb:68:6c:44:cb:bf:8a:9a:85:06:b7:85: 5a:b1:84:4b:71:94:80:1b:61:73:f3:a4:4a:cc:b6: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AE:5B:E6:72:50:6E:2F:1A:21:AB:C0:D8:26:81:7B:50:6B:30:B0 X509v3 Authority Key Identifier: keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:49:eb:ea:dd:78:1c:d7:8f:2b:a9:d4:bd:99:bf:da:0c:8d: 71:73:e9:90:05:6a:aa:8d:62:f2:63:ad:11:27:3b:97:98:19: 16:80:85:8a:aa:cc:00:52:ee:b6:e9:dc:45:4c:7a:74:58:dc: 38:ba:2a:6c:23:26:57:1c:70:39:5e:c9:a3:db:f7:88:e6:f0: e0:09:ed:71:2a:4a:d2:c3:e4:c1:da:95:8b:8b:5b:36:23:e8: 22:69:0f:64:20:ef:4f:af:44:a3:e9:c8:1b:e8:ac:5e:ad:7b: a7:9a:f8:38:61:f3:6f:30:2b:09:3f:a6:d0:cb:c2:23:af:6f: 95:f1:ba:60:d7:fe:b1:e3:fe:b5:95:75:6f:be:12:7d:c5:c7: d1:fe:1a:ab:b9:2d:e8:0e:e6:8e:48:cd:21:56:f9:09:00:32: c6:42:79:63:77:4f:27:a5:31:99:63:04:0e:44:89:43:ee:a6: 3c:ff:bc:2b:8d:ad:87:e1:86:db:83:de:41:ad:42:aa:3c:d8: 3e:ae:c7:49:77:25:2a:05:25:45:84:2a:9b:9c:4b:5b:ff:23: a1:2e:88:0e:8c:e8:c2:66:b3:4b:39:7d:3c:6f:f2:ab:25:55: 08:14:d5:7c:70:e8:be:a9:9e:cb:82:80:ae:9d:f6:95:28:3d: f9:40:41:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0QTExMTAvBgNVBAUTKDVCRDk3QzMxRUM3OEM2RjE1N0Q3NzJDMUJCNTc2Qjgw MjQ4MkI3MjgwHhcNMjUwNDI0MTgyMTA4WhcNMjUwNTAxMTgyMTA4WjAYMRYwFAYD VQQDEw02ODBhODExNC00MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrfqtiVL+cU4HK1HtdsvXDdcy+YsaHLp+8JEM6ryuxQoCAMms8it8TMEafOM SKnZSVZCcZ93LMmBtwDBjGrEQEho7pwzBt06GQdAiASjnVHwQPIuEA8ZFanzr1Hz mpsq9CiR3pvZyQX0lOzM+a2bCalvUh7ei4OSqRIOLJZjuDeQ9iaS8QOvW+Cc1Dbe Gdn2koloQf19zdTkdy+e4jAo295p+L53VydiYsnVQ9Os8htoC1FOLyrZZ+oAEWDb IfGJU1wZTjEbxdYP8gQH2a0Ea63GhE3HaBOOK+g43zLCnkA+VXX7aGxEy7+KmoUG t4VasYRLcZSAG2Fz86RKzLZ0lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6uW+Zy UG4vGiGrwNgmgXtQazCwMB8GA1UdIwQYMBaAFFvZfDHseMbxV9dywbtXa4Akgrco MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRBMS82QjdENjlBNjA0 NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2RlgxM0xCdTFkcmdDU0N0 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c5bDhNZXg0eHZGWDEzTEJ1MWRyZ0NTQ3R5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRBMS82QjdENjlBNjA0NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2 RlgxM0xCdTFkcmdDU0N0eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrSevq3Xgc148rqdS9mb/aDI1xc+mQBWqqjWLyY60RJzuXmBkWgIWK qswAUu626dxFTHp0WNw4uipsIyZXHHA5Xsmj2/eI5vDgCe1xKkrSw+TB2pWLi1s2 I+giaQ9kIO9Pr0Sj6cgb6KxerXunmvg4YfNvMCsJP6bQy8Ijr2+V8bpg1/6x4/61 lXVvvhJ9xcfR/hqruS3oDuaOSM0hVvkJADLGQnljd08npTGZYwQORIlD7qY8/7wr ja2H4Ybbg95BrUKqPNg+rsdJdyUqBSVFhCqbnEtb/yOhLogOjOjCZrNLOX08b/Kr JVUIFNV8cOi+qZ7LgoCunfaVKD35QEF1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:05 2025 by rpki-client