$ rpki-client -vvf rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft File: rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft (raw, json) Hash identifier: N/UMGVc9n53gLYwNxylDAM9KxH0p4devtzeCb9t6XkU= Subject key identifier: 97:07:9A:1F:01:7A:A8:B8:A3:BF:01:05:5B:CA:21:9D:F2:C4:82:BF Authority key identifier: AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02 Certificate issuer: /CN=A9190057/serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft Manifest number: 016E Signing time: Fri 25 Apr 2025 03:01:08 +0000 Manifest this update: Fri 25 Apr 2025 03:01:07 +0000 Manifest next update: Fri 02 May 2025 03:01:07 +0000 Files and hashes: 1: rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl (hash: DbtNKbhLQrfji0ley49yAsehV+ZrxLjVQ318Ux+g0a0=) 2: 1EE23948F8F411ED96463014C4F9AE02.roa (hash: P12MNrI/Sv3x/5WhhR/xkFqPpUABisLPf88NE6poKHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190057, serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802 Validity Not Before: Apr 25 03:01:07 2025 GMT Not After : May 2 03:01:07 2025 GMT Subject: CN=680afaf3-f177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:d6:13:6b:e0:29:0b:f7:56:4c:02:8f:50: 89:cc:f6:0a:ed:ff:ae:73:60:11:a1:df:0d:ce:aa: b3:65:59:45:de:ff:62:de:62:92:29:cd:3e:c7:e5: a4:87:bc:10:85:37:5b:ce:4c:27:10:e9:51:13:be: ce:14:2b:2f:10:1a:49:80:95:56:4b:8a:e3:59:63: c2:c8:ed:2c:4e:17:f6:bc:e4:db:d8:71:ee:d8:ba: 40:d1:42:48:4d:0b:8c:b3:3f:ad:fc:02:ec:0a:63: b5:17:91:2a:3c:28:3d:4e:5b:4d:2e:27:cd:d9:c9: d8:3c:9a:e6:01:78:78:b3:9e:97:c6:c0:b0:dd:5a: b4:c6:64:f7:b6:ac:d3:36:5b:39:ff:a4:f0:39:12: 9c:5b:84:be:5d:5d:9c:d9:23:0c:33:e1:00:5a:25: ff:3e:09:fd:17:64:98:d4:35:8c:9e:71:70:04:88: 3b:28:11:f8:51:db:80:09:31:2b:7d:45:18:7b:3f: c8:ce:56:3a:d4:cd:46:37:eb:23:91:92:d4:32:6c: a9:86:c6:82:42:c5:06:38:69:6f:e4:ad:83:65:f1: ae:0c:f0:1d:9a:c6:2d:ad:2a:44:1c:4e:ef:29:5e: 2f:79:94:70:85:54:38:42:66:4b:0f:64:c3:e3:2a: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:07:9A:1F:01:7A:A8:B8:A3:BF:01:05:5B:CA:21:9D:F2:C4:82:BF X509v3 Authority Key Identifier: keyid:AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:5a:c6:c6:ca:ff:a5:d7:d3:1f:77:b3:f7:0b:da:c2:38:e1: da:47:e4:ed:5b:2c:17:de:5c:1b:d6:ad:90:8c:16:ab:7b:2f: d2:2e:31:2b:11:10:e1:ba:1d:fb:33:ed:c4:e9:1d:ab:3f:2b: 7a:a8:2c:6a:36:30:30:37:49:69:2f:a6:2f:71:2d:76:44:67: 8e:b9:ad:86:74:2a:42:c6:96:85:80:6c:bc:a4:2d:27:ce:7d: 7a:bf:85:38:97:68:48:f3:af:1f:c7:47:1a:55:56:8a:db:b9: 83:95:6e:77:2b:fe:0f:04:c5:76:32:33:6e:3b:17:6f:27:54: 4f:38:20:77:73:01:55:4a:2b:bd:d1:71:5c:de:1a:94:6a:5d: b6:e0:93:2b:5e:ca:49:d5:bc:0b:b1:83:0a:35:65:fb:76:7c: 8a:3d:fe:e7:20:5a:1a:36:99:8f:e7:62:f2:6b:35:ee:40:34: 13:1b:6d:1e:9d:27:fb:17:7c:ca:57:5f:d0:34:fa:60:56:40: 0a:7f:c2:72:47:e4:86:f0:20:8f:0f:83:7b:56:4d:19:4b:0f: ad:d4:34:df:a9:89:29:9c:85:c4:6a:9a:14:f7:bf:88:b9:f3: c3:49:a4:6d:fa:ab:a1:1e:21:a3:34:a1:7d:14:a1:4a:2e:cc: 86:d9:10:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAwNTcxMTAvBgNVBAUTKEFEQjI3QUNBQjY1OUZENEU0MTY3NDU1NzNCNDVEN0Iw MkJEOEI4MDIwHhcNMjUwNDI1MDMwMTA3WhcNMjUwNTAyMDMwMTA3WjAYMRYwFAYD VQQDEw02ODBhZmFmMy1mMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9PWE2vgKQv3VkwCj1CJzPYK7f+uc2ARod8NzqqzZVlF3v9i3mKSKc0+x+Wk h7wQhTdbzkwnEOlRE77OFCsvEBpJgJVWS4rjWWPCyO0sThf2vOTb2HHu2LpA0UJI TQuMsz+t/ALsCmO1F5EqPCg9TltNLifN2cnYPJrmAXh4s56XxsCw3Vq0xmT3tqzT Nls5/6TwORKcW4S+XV2c2SMMM+EAWiX/Pgn9F2SY1DWMnnFwBIg7KBH4UduACTEr fUUYez/IzlY61M1GN+sjkZLUMmyphsaCQsUGOGlv5K2DZfGuDPAdmsYtrSpEHE7v KV4veZRwhVQ4QmZLD2TD4yrEzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcHmh8B eqi4o78BBVvKIZ3yxIK/MB8GA1UdIwQYMBaAFK2yesq2Wf1OQWdFVztF17Ar2LgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDA1Ny81N0I5MjE0OEY4 NUMxMUVEQTdFOEZFNzRDNEY5QUUwMi9yYko2eXJaWl9VNUJaMFZYTzBYWHNDdll1 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JiSjZ5clpaX1U1QlowVlhPMFhYc0N2WXVBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDA1Ny81N0I5MjE0OEY4NUMxMUVEQTdFOEZFNzRDNEY5QUUwMi9yYko2eXJaWl9V NUJaMFZYTzBYWHNDdll1QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1WsbGyv+l19Mfd7P3C9rCOOHaR+TtWywX3lwb1q2QjBarey/SLjEr ERDhuh37M+3E6R2rPyt6qCxqNjAwN0lpL6YvcS12RGeOua2GdCpCxpaFgGy8pC0n zn16v4U4l2hI868fx0caVVaK27mDlW53K/4PBMV2MjNuOxdvJ1RPOCB3cwFVSiu9 0XFc3hqUal224JMrXspJ1bwLsYMKNWX7dnyKPf7nIFoaNpmP52LyazXuQDQTG20e nSf7F3zKV1/QNPpgVkAKf8JyR+SG8CCPD4N7Vk0ZSw+t1DTfqYkpnIXEapoU97+I ufPDSaRt+quhHiGjNKF9FKFKLsyG2RDC -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:56 2025 by rpki-client