$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json) Hash identifier: MKR1ZbPZlSrRP8YlG459F66m4gYibfd30i5cZRdd4Zs= Subject key identifier: 9C:1A:83:AE:6C:A6:A0:A4:7A:1B:A0:AB:94:F0:18:B0:2C:09:1F:49 Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft Manifest number: 015D Signing time: Fri 25 Apr 2025 03:12:25 +0000 Manifest this update: Fri 25 Apr 2025 03:12:25 +0000 Manifest next update: Fri 02 May 2025 03:12:25 +0000 Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: YAJJx9Fo/K5kP6vg1+/ZRgU4TyhF0kmQaoA7CubG2Kg=) 2: 87695D32591811EE973B1058C4F9AE02.roa (hash: dzvekpBIKEZcV3J3iTc2a3q9pWoOoEEAik7qmwT7yrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884A1, serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Validity Not Before: Apr 25 03:12:25 2025 GMT Not After : May 2 03:12:25 2025 GMT Subject: CN=680afd99-4854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:74:60:b6:81:84:fa:ba:cf:de:dd:e7:66: e1:11:8f:9a:f8:68:df:59:78:26:0c:3d:40:f1:3b: 9b:ae:a5:e7:35:03:81:8f:d9:35:1d:8a:f4:35:e8: 16:d2:7b:3a:84:ff:e4:fc:a7:cf:52:74:60:3f:d4: 5a:b9:2f:f7:30:9b:e9:bb:ab:22:82:c1:b9:02:4b: f5:e6:49:de:2d:54:9a:e5:4e:26:27:91:b9:d7:77: 16:3c:de:bd:dc:3b:e4:59:af:33:8a:e1:14:a9:6d: 6a:2f:df:cc:a8:f0:ab:ce:52:a2:64:6b:66:c9:7f: 02:68:83:c6:5f:de:8d:aa:5c:67:7c:17:29:6d:06: b0:e6:49:b7:f3:8e:b6:56:2e:dc:64:7f:a7:a8:ac: a1:7f:2e:5d:fc:54:86:20:7f:53:1d:6f:a8:e1:3b: 50:f8:ea:54:39:75:61:5d:af:fa:72:c2:14:54:c2: f7:d9:12:35:9d:3f:5e:86:0a:ad:0b:fa:b5:30:22: 2a:da:20:ff:ee:94:96:46:ca:bf:7c:b3:7b:60:46: 6b:52:2e:cf:af:c5:e2:28:30:11:d2:bb:ad:7f:02: 6a:3b:f6:40:60:d6:f2:f2:c2:86:84:c9:9d:6b:2a: 89:1d:31:57:68:7d:32:bf:33:b7:ba:82:1f:73:12: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1A:83:AE:6C:A6:A0:A4:7A:1B:A0:AB:94:F0:18:B0:2C:09:1F:49 X509v3 Authority Key Identifier: keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:e7:d9:ea:76:6b:6c:e7:73:13:46:4b:00:75:4c:02:c7:c1: ed:c8:db:14:34:5e:98:e4:26:d2:fe:4d:6a:7f:1a:e5:aa:95: 6f:88:7a:d4:ab:b5:1b:85:86:45:f0:da:84:3b:f9:37:86:eb: 41:80:df:e7:3d:dc:b2:5f:38:bb:26:e2:0c:66:1d:25:23:21: 03:16:4f:af:86:5d:cb:48:b1:2f:c9:04:e7:0f:2f:66:0f:de: 01:91:dc:76:86:d3:dc:b7:fb:f5:3b:ea:f9:e0:a1:b6:db:35: cb:13:3f:35:cb:c4:fc:1f:47:e3:96:b5:6c:bf:16:2b:f4:45: c4:76:d6:48:2a:9d:2e:0a:80:e6:00:c2:bc:5f:f7:ec:03:89: 99:66:3b:7c:d1:e1:35:d9:eb:b8:04:8a:14:7e:eb:20:a3:d1: 58:b4:c5:c0:8f:a1:e1:8e:3b:82:cf:06:2c:eb:13:93:5f:76: 8d:4d:2e:a1:de:7e:56:e8:d5:ec:2e:d4:7d:56:f4:69:cf:55: 3d:4e:19:4a:75:a9:a0:77:5e:96:c3:fa:2d:7b:3b:c5:b2:66: 8c:5d:22:31:68:32:7d:c3:79:5b:01:78:d3:af:08:22:4f:7b: 08:37:f2:2c:1b:35:4c:56:73:6e:81:bc:84:40:58:0b:38:ad: 7d:de:f1:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB RjM2ODMxQUIwHhcNMjUwNDI1MDMxMjI1WhcNMjUwNTAyMDMxMjI1WjAYMRYwFAYD VQQDEw02ODBhZmQ5OS00ODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSh0YLaBhPq6z97d52bhEY+a+GjfWXgmDD1A8TubrqXnNQOBj9k1HYr0NegW 0ns6hP/k/KfPUnRgP9RauS/3MJvpu6sigsG5Akv15kneLVSa5U4mJ5G513cWPN69 3DvkWa8ziuEUqW1qL9/MqPCrzlKiZGtmyX8CaIPGX96NqlxnfBcpbQaw5km38462 Vi7cZH+nqKyhfy5d/FSGIH9THW+o4TtQ+OpUOXVhXa/6csIUVML32RI1nT9ehgqt C/q1MCIq2iD/7pSWRsq/fLN7YEZrUi7Pr8XiKDAR0rutfwJqO/ZAYNby8sKGhMmd ayqJHTFXaH0yvzO3uoIfcxJWnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwag65s pqCkehugq5TwGLAsCR9JMB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0 OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr dFc5Q3owYlo4U092Tm9NYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv59nqdmts53MTRksAdUwCx8HtyNsUNF6Y5CbS/k1qfxrlqpVviHrU q7UbhYZF8NqEO/k3hutBgN/nPdyyXzi7JuIMZh0lIyEDFk+vhl3LSLEvyQTnDy9m D94Bkdx2htPct/v1O+r54KG22zXLEz81y8T8H0fjlrVsvxYr9EXEdtZIKp0uCoDm AMK8X/fsA4mZZjt80eE12eu4BIoUfusgo9FYtMXAj6HhjjuCzwYs6xOTX3aNTS6h 3n5W6NXsLtR9VvRpz1U9ThlKdamgd16Ww/otezvFsmaMXSIxaDJ9w3lbAXjTrwgi T3sIN/IsGzVMVnNugbyEQFgLOK193vHU -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:54 2025 by rpki-client