$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft File: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft (raw, json) Hash identifier: ojVGHZS3umrFFZrsoUKI/ajrBc04XgBXcz0RV43eJqQ= Subject key identifier: D4:7D:C6:7B:99:27:B9:DF:CF:F1:78:CE:37:A3:0F:F7:0C:B9:56:A6 Authority key identifier: 46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 Certificate issuer: /CN=A9188F45/serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft Manifest number: F0 Signing time: Fri 25 Apr 2025 04:23:34 +0000 Manifest this update: Fri 25 Apr 2025 04:23:33 +0000 Manifest next update: Fri 02 May 2025 04:23:33 +0000 Files and hashes: 1: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl (hash: fKES+5oBO9M1syWLuZ7Afq/KEpyQ6eOFunBl3nMEcso=) 2: 8A574D9AB8AB11EEA866EB27C4F9AE02.roa (hash: B74l8KAcZzTJjTG0Mnc+WUicHwzuFyRpUWB92X31DmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F45, serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Validity Not Before: Apr 25 04:23:33 2025 GMT Not After : May 2 04:23:33 2025 GMT Subject: CN=680b0e46-ca7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:aa:c6:d9:02:d2:fc:23:69:c2:b6:00:06: 84:7d:d5:e5:e3:53:73:96:04:02:08:83:78:19:52: fd:92:62:05:2f:e1:27:e6:2f:0c:62:e3:6e:b4:7a: 4c:87:db:37:e5:97:67:97:41:f1:5c:8c:5a:19:77: fa:39:8e:0c:3b:1a:7e:f0:bc:a3:60:52:2c:c5:bd: d0:3b:4e:12:c1:4e:4b:ad:1e:5a:19:00:ce:3c:db: 90:82:16:d3:55:b0:ef:ad:41:e2:d0:29:b8:14:f6: ea:ae:68:20:d3:b8:da:a1:eb:b1:57:78:f9:bd:45: 6a:14:5a:f5:91:c8:2f:d5:db:7d:68:0f:97:1c:af: 45:24:01:c9:e5:fb:88:10:97:7a:2c:6e:05:45:a7: 08:a7:b1:50:ef:80:7a:25:18:2c:2c:b8:63:ba:93: 86:d0:b4:37:67:fc:a5:5e:10:c8:ff:a7:ab:2c:21: 12:ed:7c:21:99:5f:36:1e:51:6b:62:b9:75:33:2d: a4:1b:88:b3:9b:15:44:fe:9f:91:04:9e:d4:aa:65: 77:b6:29:44:38:af:43:31:58:ec:72:77:11:39:bb: e8:83:53:14:1a:6b:bc:ec:35:26:86:16:8d:43:9d: 8c:ac:a5:88:20:88:a8:70:5a:83:d5:e8:00:01:48: b3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7D:C6:7B:99:27:B9:DF:CF:F1:78:CE:37:A3:0F:F7:0C:B9:56:A6 X509v3 Authority Key Identifier: keyid:46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:3e:25:17:46:8d:0f:9b:ff:08:88:88:77:29:0b:24:57:69: 4c:9c:c6:5a:93:ca:06:1d:df:5b:5a:3a:2b:ef:86:9f:4e:0e: 3b:8c:8f:7e:8b:60:3b:af:55:40:b8:3a:41:a6:a2:d9:6c:3b: cf:3f:1a:61:76:ba:c3:38:de:29:7e:cc:fe:3e:44:c1:17:b3: e5:53:85:56:3f:1f:96:86:72:ea:f4:a6:2c:31:e3:47:ba:f8: 7e:c6:11:b0:67:5f:12:cd:c3:59:cb:97:8c:43:44:bf:9a:51: d5:03:86:e7:a4:25:6c:07:bb:41:95:a1:57:04:9b:c1:35:3e: fa:f8:f7:51:8b:1b:37:9f:82:88:5a:dd:8f:bc:c9:87:3c:6c: 24:0c:97:ad:fe:f3:e1:08:35:33:dd:78:4c:da:c6:e9:5d:10: 4c:d4:28:b9:45:82:be:dc:f2:b4:73:8f:21:40:53:24:b9:5d: c7:d9:47:24:0a:83:29:23:b3:35:e0:e3:9f:47:fd:74:99:95: 42:f0:d6:04:ee:51:d2:99:ad:ee:a5:f6:a7:be:68:bc:47:c6: 01:48:97:30:30:4e:e7:0c:ea:19:de:a2:74:7d:ad:5b:b0:56: 1f:02:7c:21:1a:e4:9a:6c:0e:44:66:cf:e8:de:15:25:d9:73: 19:3c:16:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNDUxMTAvBgNVBAUTKDQ2RUYwNEJGMTE5OEJFMEUyQTMxM0FBN0FEMEFCMEZD N0UwODFDNDUwHhcNMjUwNDI1MDQyMzMzWhcNMjUwNTAyMDQyMzMzWjAYMRYwFAYD VQQDEw02ODBiMGU0Ni1jYTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO+qxtkC0vwjacK2AAaEfdXl41NzlgQCCIN4GVL9kmIFL+En5i8MYuNutHpM h9s35Zdnl0HxXIxaGXf6OY4MOxp+8LyjYFIsxb3QO04SwU5LrR5aGQDOPNuQghbT VbDvrUHi0Cm4FPbqrmgg07jaoeuxV3j5vUVqFFr1kcgv1dt9aA+XHK9FJAHJ5fuI EJd6LG4FRacIp7FQ74B6JRgsLLhjupOG0LQ3Z/ylXhDI/6erLCES7XwhmV82HlFr Yrl1My2kG4izmxVE/p+RBJ7UqmV3tilEOK9DMVjscncRObvog1MUGmu87DUmhhaN Q52MrKWIIIiocFqD1egAAUizBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNR9xnuZ J7nfz/F4zjejD/cMuVamMB8GA1UdIwQYMBaAFEbvBL8RmL4OKjE6p60KsPx+CBxF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY0NS9GRDk5NjUxNEI4 QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZnNHFNVHFuclFxd19INElI RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1OEV2eEdZdmc0cU1UcW5yUXF3X0g0SUhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY0NS9GRDk5NjUxNEI4QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZn NHFNVHFuclFxd19INElIRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5PiUXRo0Pm/8IiIh3KQskV2lMnMZak8oGHd9bWjor74afTg47jI9+ i2A7r1VAuDpBpqLZbDvPPxphdrrDON4pfsz+PkTBF7PlU4VWPx+WhnLq9KYsMeNH uvh+xhGwZ18SzcNZy5eMQ0S/mlHVA4bnpCVsB7tBlaFXBJvBNT76+PdRixs3n4KI Wt2PvMmHPGwkDJet/vPhCDUz3XhM2sbpXRBM1Ci5RYK+3PK0c48hQFMkuV3H2Uck CoMpI7M14OOfR/10mZVC8NYE7lHSma3upfanvmi8R8YBSJcwME7nDOoZ3qJ0fa1b sFYfAnwhGuSabA5EZs/o3hUl2XMZPBa0 -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:21 2025 by rpki-client