$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: /vNuV7cI9i1zmkIRiXZ/GBEindRgsPekT3J9yRg1rX8= Subject key identifier: D6:04:DA:4E:C0:94:64:6A:AC:CE:62:F4:02:91:D2:5A:E0:58:50:3B Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: FB Signing time: Fri 25 Apr 2025 04:13:57 +0000 Manifest this update: Fri 25 Apr 2025 04:13:56 +0000 Manifest next update: Fri 02 May 2025 04:13:56 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: 2uPRmlu7UWHRIu+kWBD6p/XfHsoAO2ZljNaCogMCZyg=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: 7+HziPW8bdU4fmbvKj0ZUtapknCkvsD+7VoRTrV2tSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Apr 25 04:13:56 2025 GMT Not After : May 2 04:13:56 2025 GMT Subject: CN=680b0c04-51cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:9b:e1:f2:0a:f6:ea:70:08:03:ec:00:42: 56:1f:38:4b:78:a5:74:9c:d6:bf:be:88:0e:5b:d0: c0:88:84:85:f2:b1:11:8c:3e:db:b4:b8:0d:a3:c5: 31:7c:9e:76:69:30:a7:d4:8f:d7:0c:59:95:52:33: fb:a5:1f:86:47:f3:c9:a3:47:f1:7f:42:1e:3c:27: bd:35:4a:6d:a8:5b:68:e9:67:e8:c4:e9:c4:ba:b1: 69:43:35:b9:58:61:88:5d:a4:2f:55:ba:b8:c8:6c: a1:74:ac:be:96:91:e1:78:73:0a:c3:dc:18:ca:89: 99:c6:6c:13:55:63:0a:31:37:0a:54:2e:f9:44:be: 69:d6:bb:d1:e3:cb:a8:95:9c:fd:e1:61:90:8c:92: a9:fd:23:72:f3:21:c5:38:94:f1:56:37:71:07:19: 36:52:e0:d9:32:09:d8:eb:a5:f1:3a:c3:86:01:47: cb:13:2a:f0:c5:27:04:7b:d0:a6:18:60:0a:13:dd: c2:50:81:d6:77:4b:a5:83:69:ca:fa:a2:87:fd:6d: 87:7d:27:61:cc:bc:59:f0:3b:3a:63:3d:86:a9:fd: b4:28:f4:32:e2:a9:0e:e8:d3:45:aa:ae:96:01:be: 67:d0:8b:66:5d:3a:a8:9a:2d:da:89:77:4d:6a:ff: 50:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:04:DA:4E:C0:94:64:6A:AC:CE:62:F4:02:91:D2:5A:E0:58:50:3B X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:46:7b:be:d1:72:95:1e:e0:b6:96:4d:39:27:c2:7c:9d:28: 47:68:82:ad:2a:42:f0:50:b7:27:93:29:30:47:81:15:01:1e: f0:46:6c:8b:58:db:dd:d1:52:ed:2c:53:b1:00:67:eb:ce:14: 97:62:f0:df:44:02:84:a2:48:c1:b5:b6:d1:69:6e:2d:f0:36: 60:49:b0:28:f2:a3:8f:0d:2f:c6:29:d6:09:2d:96:d1:68:4f: 75:ba:c8:98:db:1d:b9:59:06:2b:61:21:27:53:31:b7:5b:68: 16:26:03:74:d4:42:13:c0:2d:e8:90:b4:d6:49:d5:0d:39:1d: de:17:4d:b2:ed:e8:16:68:8e:85:44:dd:31:1d:e5:98:47:0b: 78:c7:9d:37:54:4c:3a:f5:a9:d9:1c:13:63:f9:80:ed:46:f5: 8a:8f:64:ab:b7:aa:eb:ae:2d:c5:54:92:90:3f:55:85:23:43: f6:70:70:ed:f3:2a:d5:de:44:3f:9d:3c:54:7c:99:4f:00:60: c8:08:62:ad:4a:05:08:8c:88:d8:87:7a:c0:73:f8:49:b3:e6: ea:f5:21:f0:d0:42:41:96:3a:15:b2:9b:8f:c1:ad:7a:5c:6e: 33:e6:9f:6e:79:e9:7d:6d:af:a0:ca:b4:7a:9a:ea:7b:76:b4: ec:61:0d:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjUwNDI1MDQxMzU2WhcNMjUwNTAyMDQxMzU2WjAYMRYwFAYD VQQDEw02ODBiMGMwNC01MWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C+b4fIK9upwCAPsAEJWHzhLeKV0nNa/vogOW9DAiISF8rERjD7btLgNo8Ux fJ52aTCn1I/XDFmVUjP7pR+GR/PJo0fxf0IePCe9NUptqFto6WfoxOnEurFpQzW5 WGGIXaQvVbq4yGyhdKy+lpHheHMKw9wYyomZxmwTVWMKMTcKVC75RL5p1rvR48uo lZz94WGQjJKp/SNy8yHFOJTxVjdxBxk2UuDZMgnY66XxOsOGAUfLEyrwxScEe9Cm GGAKE93CUIHWd0ulg2nK+qKH/W2HfSdhzLxZ8Ds6Yz2Gqf20KPQy4qkO6NNFqq6W Ab5n0ItmXTqomi3aiXdNav9QMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYE2k7A lGRqrM5i9AKR0lrgWFA7MB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNRnu+0XKVHuC2lk05J8J8nShHaIKtKkLwULcnkykwR4EVAR7wRmyL WNvd0VLtLFOxAGfrzhSXYvDfRAKEokjBtbbRaW4t8DZgSbAo8qOPDS/GKdYJLZbR aE91usiY2x25WQYrYSEnUzG3W2gWJgN01EITwC3okLTWSdUNOR3eF02y7egWaI6F RN0xHeWYRwt4x503VEw69anZHBNj+YDtRvWKj2Srt6rrri3FVJKQP1WFI0P2cHDt 8yrV3kQ/nTxUfJlPAGDICGKtSgUIjIjYh3rAc/hJs+bq9SHw0EJBljoVspuPwa16 XG4z5p9ueel9ba+gyrR6mup7drTsYQ3n -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:35 2025 by rpki-client