$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json) Hash identifier: ZvTlyp7W13j/Im6Qp2K1CkoOACiRDHNVs8z7Q5dA5GA= Subject key identifier: AD:30:CA:83:E3:8A:9C:28:21:97:D4:B0:AA:CB:3C:15:26:2F:BE:89 Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Certificate serial: 0B2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft Manifest number: 0B17 Signing time: Thu 24 Apr 2025 19:09:20 +0000 Manifest this update: Thu 24 Apr 2025 19:09:19 +0000 Manifest next update: Thu 01 May 2025 19:09:19 +0000 Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: VCjjpHpaRWXYeItRgsspcN6mQdViukX+AHwOjZmHpG8=) 2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: da18YanehMb25ZME1c4CpzCwhlEVLs96RlfGiZoiMxU=) 3: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: feQeohVrk3aa2EM/daTKcvI0d6w6k0q2b/efqxvduBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2860 (0xb2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Validity Not Before: Apr 24 19:09:19 2025 GMT Not After : May 1 19:09:19 2025 GMT Subject: CN=680a8c60-d48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5f:c1:42:39:55:a6:db:f8:47:c6:1a:f6:0a: d3:f5:b5:57:34:ba:61:ef:c5:07:f1:75:b1:c5:70: ad:19:83:08:22:54:cb:dc:f9:a7:04:ee:51:cb:e7: 57:33:a8:4a:b0:6b:81:7f:53:20:4e:35:fb:ea:b0: dc:30:82:68:71:51:bd:52:0d:e5:a8:53:8e:2b:41: 5a:6e:8b:44:59:91:ff:3e:ed:1d:37:53:10:d8:16: 2d:d1:6c:70:da:80:7e:93:1a:19:ef:a7:d6:95:bc: e8:36:0c:7b:ec:52:c5:b6:54:bc:9e:07:03:8f:03: 91:6c:bb:79:ce:1b:ac:62:87:41:04:9c:d9:6d:72: 49:a1:80:b5:30:f3:fd:69:4a:55:ac:18:61:08:80: 93:3d:dd:88:22:ff:aa:7e:92:23:0f:9a:2c:cc:9a: 91:8d:8e:53:07:0e:8a:bc:11:dc:40:e8:45:68:af: 3a:52:80:09:f8:fb:fc:7c:26:26:49:04:71:30:a2: 29:9c:f3:88:00:95:cb:ff:3c:58:1b:6a:88:75:30: 3f:42:9f:b3:02:39:1e:a6:a9:d2:d2:58:b5:f2:ad: ae:5e:8f:a9:e3:bd:b9:83:d7:95:14:33:f1:99:71: 2a:9f:76:c5:e9:01:20:a5:07:bd:97:1c:af:fa:13: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:30:CA:83:E3:8A:9C:28:21:97:D4:B0:AA:CB:3C:15:26:2F:BE:89 X509v3 Authority Key Identifier: keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:db:97:61:1f:11:cb:7d:0f:41:b6:d1:1d:e4:61:d1:83:0d: 2b:e1:b2:63:15:5a:f1:bb:d9:54:3d:e2:07:df:ad:94:39:d4: 40:da:75:c9:61:60:b3:04:71:f3:ce:ee:9c:36:0a:a3:5f:95: 34:de:79:0c:13:95:7e:4c:b7:db:b1:59:10:0a:57:c0:3c:aa: 38:ba:fd:b4:bf:f6:6d:0c:d1:90:f4:6f:0b:85:d3:85:84:75: 02:40:c3:5d:3e:ec:d5:be:9b:a0:97:f7:96:e7:b6:d9:5e:ed: c6:57:e9:f4:ae:61:f7:cd:3d:79:3e:69:c5:cd:0a:b6:2b:e7: 60:88:24:06:2c:66:a9:fd:0b:98:81:79:c5:1e:f6:c4:cc:32: 71:22:e5:a2:c6:2a:ad:4b:fd:c1:9f:79:0b:95:ce:cc:27:87: 97:66:6a:ad:ee:0e:34:16:3f:0f:dd:7c:07:a7:89:a7:16:51: 1c:c7:0e:32:77:d0:30:c8:63:e4:50:28:de:be:67:a3:f1:39: d5:de:a1:79:f8:24:27:05:a2:fd:f5:d3:fc:ba:e4:4c:41:78: 11:06:fc:62:81:6e:6f:16:4c:60:f8:f3:9e:83:0b:0a:ed:b7: 07:9e:ad:ae:2a:fe:c4:1f:0a:af:4b:42:f1:6c:d1:3a:e5:89: 79:80:b7:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5 NjA4RTQzQTgwHhcNMjUwNDI0MTkwOTE5WhcNMjUwNTAxMTkwOTE5WjAYMRYwFAYD VQQDEw02ODBhOGM2MC1kNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5l/BQjlVptv4R8Ya9grT9bVXNLph78UH8XWxxXCtGYMIIlTL3PmnBO5Ry+dX M6hKsGuBf1MgTjX76rDcMIJocVG9Ug3lqFOOK0FabotEWZH/Pu0dN1MQ2BYt0Wxw 2oB+kxoZ76fWlbzoNgx77FLFtlS8ngcDjwORbLt5zhusYodBBJzZbXJJoYC1MPP9 aUpVrBhhCICTPd2IIv+qfpIjD5oszJqRjY5TBw6KvBHcQOhFaK86UoAJ+Pv8fCYm SQRxMKIpnPOIAJXL/zxYG2qIdTA/Qp+zAjkepqnS0li18q2uXo+p4725g9eVFDPx mXEqn3bF6QEgpQe9lxyv+hMvwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0wyoPj ipwoIZfUsKrLPBUmL76JMB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0 UU16OUszQk9ZQ1NXQ09RNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt25dhHxHLfQ9BttEd5GHRgw0r4bJjFVrxu9lUPeIH362UOdRA2nXJ YWCzBHHzzu6cNgqjX5U03nkME5V+TLfbsVkQClfAPKo4uv20v/ZtDNGQ9G8LhdOF hHUCQMNdPuzVvpugl/eW57bZXu3GV+n0rmH3zT15PmnFzQq2K+dgiCQGLGap/QuY gXnFHvbEzDJxIuWixiqtS/3Bn3kLlc7MJ4eXZmqt7g40Fj8P3XwHp4mnFlEcxw4y d9AwyGPkUCjevmej8TnV3qF5+CQnBaL99dP8uuRMQXgRBvxigW5vFkxg+POegwsK 7bcHnq2uKv7EHwqvS0LxbNE65Yl5gLcH -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:08 2025 by rpki-client