$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft File: 480mJgfLdDTJiY967Pbnw2o09pM.mft (raw, json) Hash identifier: nn8ltIA3HnrS9Fz1tKw0a8kZ6h3tiXrpd150th926nA= Subject key identifier: 38:62:AE:68:23:76:DE:60:F0:5B:A6:4C:0D:1E:56:B5:EC:0D:CD:0D Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93 Certificate issuer: /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693 Certificate serial: 0555 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft Manifest number: 054E Signing time: Thu 24 Apr 2025 22:29:36 +0000 Manifest this update: Thu 24 Apr 2025 22:29:36 +0000 Manifest next update: Thu 01 May 2025 22:29:36 +0000 Files and hashes: 1: 480mJgfLdDTJiY967Pbnw2o09pM.crl (hash: Bjd5TJGFWFJVKgnOCbRJ8/QcbOpa7UeVhi5oqj/y6Mk=) 2: 0F106C42E9BF11EB9287F045C4F9AE02.roa (hash: RvNzl03JDVUp48sMZXLXZA1zzsN0lAMQGmHnXdeMUAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1365 (0x555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B33, serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693 Validity Not Before: Apr 24 22:29:36 2025 GMT Not After : May 1 22:29:36 2025 GMT Subject: CN=680abb50-85fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:ad:45:07:37:a3:6e:ba:95:44:16:1d:45: a2:7d:ee:56:d9:22:61:80:0f:ea:f8:29:32:e9:ce: f2:34:5e:82:6a:5d:6b:c4:5b:bf:9d:d9:32:34:b6: 0b:9d:76:01:25:bf:c2:bf:42:02:d4:af:b7:79:ec: 58:72:9d:15:9b:4e:e7:f0:f5:dd:63:19:1a:b0:b4: 67:a6:66:d0:3f:4a:45:4b:89:75:1f:57:6b:7f:f6: 4e:c9:f3:0a:b4:8d:12:11:45:b9:e8:55:8b:5d:b2: d1:59:5f:eb:b2:29:9b:2a:69:c3:49:a0:16:6b:e7: 83:30:cd:c9:52:58:c1:25:48:8c:a0:33:99:04:7e: ea:87:bf:47:04:91:60:c8:e3:26:74:4f:13:80:48: 0c:ba:bf:1b:4b:8c:46:c4:a3:74:a8:ca:1d:18:a9: 9e:54:13:73:b3:b5:d8:6f:ba:5a:bd:a2:ca:92:d6: d1:42:b1:41:f8:d3:10:58:b4:3b:51:89:5c:46:53: 70:b7:b3:03:d6:54:9c:2b:40:e3:59:40:8b:2c:35: 96:85:41:e7:92:2b:a1:dc:b7:a4:e3:83:ee:52:e6: e7:1f:f8:f9:c3:fb:67:15:87:82:84:2b:7a:f5:ba: 4f:0e:b5:7f:31:6e:fe:fa:ba:5b:74:1b:13:d7:18: 3b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:62:AE:68:23:76:DE:60:F0:5B:A6:4C:0D:1E:56:B5:EC:0D:CD:0D X509v3 Authority Key Identifier: keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f7:28:c8:af:7c:37:03:22:c9:61:7c:aa:78:84:1c:78:06: 0f:7f:fa:f5:ba:e3:2f:9f:23:8c:84:3d:f7:58:87:68:56:a1: 87:26:dc:79:89:d7:14:9d:01:34:37:ce:f5:a1:fc:b3:54:6e: 2b:0a:c8:6a:11:e3:ca:58:60:75:2d:d4:93:65:88:17:8f:02: a4:de:6d:0c:9a:d8:e4:a0:42:7e:bd:9b:2e:15:cb:a1:c0:ac: 43:8f:af:f8:29:a6:31:85:a5:81:e6:55:08:b4:20:ee:35:82: 89:87:fc:65:fa:55:b5:43:0f:8a:7d:45:89:12:a0:ee:49:6f: 32:d8:5d:14:b8:de:a0:d8:f8:34:2d:1d:30:e7:46:fd:68:63: 4e:56:e4:a6:10:5a:1c:13:1e:65:c6:6b:a3:83:73:78:e4:6b: ee:83:6f:4a:33:7d:df:75:08:4b:41:aa:73:8c:4d:65:65:d9: f2:fb:60:cc:a9:61:e1:cd:cf:be:f9:43:3c:4e:00:fd:e2:4e: 12:e7:13:cf:fc:c7:86:aa:b0:ff:96:db:c0:6f:57:78:36:b4: 12:53:88:0e:8a:ee:1a:5c:d9:8f:31:6a:4f:d5:4e:f2:e1:9e: 3b:14:95:94:05:35:d7:82:fb:14:06:c4:44:d2:3b:42:20:d8: c5:f6:a9:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCMzMxMTAvBgNVBAUTKEUzQ0QyNjI2MDdDQjc0MzRDOTg5OEY3QUVDRjZFN0Mz NkEzNEY2OTMwHhcNMjUwNDI0MjIyOTM2WhcNMjUwNTAxMjIyOTM2WjAYMRYwFAYD VQQDEw02ODBhYmI1MC04NWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvCtRQc3o266lUQWHUWife5W2SJhgA/q+Cky6c7yNF6Cal1rxFu/ndkyNLYL nXYBJb/Cv0IC1K+3eexYcp0Vm07n8PXdYxkasLRnpmbQP0pFS4l1H1drf/ZOyfMK tI0SEUW56FWLXbLRWV/rsimbKmnDSaAWa+eDMM3JUljBJUiMoDOZBH7qh79HBJFg yOMmdE8TgEgMur8bS4xGxKN0qModGKmeVBNzs7XYb7pavaLKktbRQrFB+NMQWLQ7 UYlcRlNwt7MD1lScK0DjWUCLLDWWhUHnkiuh3Lek44PuUubnH/j5w/tnFYeChCt6 9bpPDrV/MW7++rpbdBsT1xg7vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhirmgj dt5g8FumTA0eVrXsDc0NMB8GA1UdIwQYMBaAFOPNJiYHy3Q0yYmPeuz258NqNPaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9CMkFCMzc1OEU5 QkQxMUVCODI1Qzc1MjZDNEY5QUUwMi80ODBtSmdmTGREVEppWTk2N1BibncybzA5 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4MG1KZ2ZMZERUSmlZOTY3UGJudzJvMDlwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0IzMy9CMkFCMzc1OEU5QkQxMUVCODI1Qzc1MjZDNEY5QUUwMi80ODBtSmdmTGRE VEppWTk2N1BibncybzA5cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf9yjIr3w3AyLJYXyqeIQceAYPf/r1uuMvnyOMhD33WIdoVqGHJtx5 idcUnQE0N871ofyzVG4rCshqEePKWGB1LdSTZYgXjwKk3m0MmtjkoEJ+vZsuFcuh wKxDj6/4KaYxhaWB5lUItCDuNYKJh/xl+lW1Qw+KfUWJEqDuSW8y2F0UuN6g2Pg0 LR0w50b9aGNOVuSmEFocEx5lxmujg3N45Gvug29KM33fdQhLQapzjE1lZdny+2DM qWHhzc+++UM8TgD94k4S5xPP/MeGqrD/ltvAb1d4NrQSU4gOiu4aXNmPMWpP1U7y 4Z47FJWUBTXXgvsUBsRE0jtCINjF9qkx -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:38 2025 by rpki-client