$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json) Hash identifier: XG/zurfQP4vHm9u46GqPrAWaWdY48+joSmQuRaDCyxY= Subject key identifier: ED:30:96:ED:B8:48:6C:CF:E6:17:44:29:90:2C:79:1B:6F:24:2A:F1 Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft Manifest number: 01D9 Signing time: Fri 25 Apr 2025 02:03:54 +0000 Manifest this update: Fri 25 Apr 2025 02:03:53 +0000 Manifest next update: Fri 02 May 2025 02:03:53 +0000 Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: ZUxUbHuJlItmzVzhWvdWyf7DWKUuqfYqipyT1eiNOBE=) 2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: GYHUkkvyeIFfScmABzCLZTH4inEWtwXGbi+j71xqPHQ=) 3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Validity Not Before: Apr 25 02:03:53 2025 GMT Not After : May 2 02:03:53 2025 GMT Subject: CN=680aed89-60cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:27:18:38:6d:d3:23:9d:09:a3:78:15:8c:e0: bc:1d:68:c1:87:0a:4a:29:ee:66:28:fa:37:47:dc: 7e:55:0b:31:21:e7:3d:15:c9:04:96:a8:b5:31:7b: f5:d3:ea:ad:72:53:41:5b:27:c3:28:67:8b:cb:63: 05:c9:e5:3f:f6:31:e1:7f:c9:cd:3c:bd:99:19:36: c5:9d:2e:c9:7e:fb:4e:89:a9:9c:e8:56:8b:80:45: b0:21:92:f5:f9:4e:8e:9b:7d:d7:d4:30:83:fe:b9: 91:c5:c7:f8:a2:f6:0c:1b:96:69:a1:94:5d:15:3e: a1:d8:20:93:47:2a:89:8d:ed:39:19:24:23:1e:10: 26:88:b2:a7:58:e3:3c:78:ec:64:9a:de:5b:b5:de: 91:4d:63:e6:22:3d:52:f1:78:9a:01:23:eb:7c:44: 1d:fb:91:1f:66:76:37:df:eb:b5:5b:14:9e:d4:5e: a6:2d:41:96:66:93:48:7a:4f:79:d0:59:64:3f:c9: 7b:f3:ac:e1:f0:dc:03:d5:60:b6:14:f1:72:36:c3: 35:2e:d0:2f:0c:6f:fb:89:bb:9d:83:89:21:69:11: 0b:fb:ae:7c:2a:25:13:48:80:d9:ff:29:4e:a1:c9: 69:3c:cc:70:d6:01:3e:09:98:cc:62:8b:16:65:be: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:30:96:ED:B8:48:6C:CF:E6:17:44:29:90:2C:79:1B:6F:24:2A:F1 X509v3 Authority Key Identifier: keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e1:ca:d5:54:33:09:17:c2:1a:90:c3:76:24:31:3d:01:4f: cb:ea:30:52:12:bf:35:36:67:a6:75:c8:31:05:71:b7:14:4d: 96:d5:33:53:b6:15:eb:41:eb:2c:dd:1b:b7:3b:97:25:95:ef: 67:58:c3:0f:cb:09:4f:4a:8e:41:64:84:a8:d8:84:ba:f8:4b: f4:66:d8:d1:20:e4:89:20:80:24:5f:19:3b:d9:72:e4:88:b7: c5:74:3a:cd:7f:97:ca:00:d6:e1:02:ff:35:62:eb:c7:cb:b9: c2:f5:d0:d5:95:06:3a:56:7b:2d:15:77:2d:fb:be:1a:c5:ac: a4:50:f8:00:67:86:10:96:90:04:b2:ca:b0:90:30:82:1d:6a: 79:7c:d6:7b:bf:50:69:e7:6d:f4:75:82:d9:cc:42:40:58:94: 81:7e:16:ef:2e:51:cf:6a:08:a6:50:ff:5c:93:4e:0b:1f:a0: 60:43:ab:b4:e4:74:fc:dc:17:10:14:83:b7:f3:ec:64:89:de: 53:ea:82:92:28:4b:46:7f:94:92:f6:54:e0:fa:15:04:2f:db: 89:0c:ac:04:cf:bf:ae:0b:48:30:1e:a6:cc:ce:34:2f:d0:85: 41:3f:fe:13:9e:fb:60:e4:18:91:21:ee:ec:3f:d1:ad:4d:ed: 33:77:42:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzcxMTAvBgNVBAUTKEU3Q0UxOUExNzg1NTIyODE1REFCNjNGRjY2REI2Rjg5 MDNGQ0Y5RkEwHhcNMjUwNDI1MDIwMzUzWhcNMjUwNTAyMDIwMzUzWjAYMRYwFAYD VQQDEw02ODBhZWQ4OS02MGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ycYOG3TI50Jo3gVjOC8HWjBhwpKKe5mKPo3R9x+VQsxIec9FckElqi1MXv1 0+qtclNBWyfDKGeLy2MFyeU/9jHhf8nNPL2ZGTbFnS7JfvtOiamc6FaLgEWwIZL1 +U6Om33X1DCD/rmRxcf4ovYMG5ZpoZRdFT6h2CCTRyqJje05GSQjHhAmiLKnWOM8 eOxkmt5btd6RTWPmIj1S8XiaASPrfEQd+5EfZnY33+u1WxSe1F6mLUGWZpNIek95 0FlkP8l786zh8NwD1WC2FPFyNsM1LtAvDG/7ibudg4khaREL+658KiUTSIDZ/ylO oclpPMxw1gE+CZjMYosWZb4yMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0wlu24 SGzP5hdEKZAseRtvJCrxMB8GA1UdIwQYMBaAFOfOGaF4VSKBXatj/2bbb4kD/Pn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDNy8wMzRGQzYxQTY0 MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklvRmRxMlBfWnR0dmlRUDgt Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklv RmRxMlBfWnR0dmlRUDgtZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO4crVVDMJF8IakMN2JDE9AU/L6jBSEr81NmemdcgxBXG3FE2W1TNT thXrQess3Ru3O5clle9nWMMPywlPSo5BZISo2IS6+Ev0ZtjRIOSJIIAkXxk72XLk iLfFdDrNf5fKANbhAv81YuvHy7nC9dDVlQY6VnstFXct+74axaykUPgAZ4YQlpAE ssqwkDCCHWp5fNZ7v1Bp5230dYLZzEJAWJSBfhbvLlHPagimUP9ck04LH6BgQ6u0 5HT83BcQFIO38+xkid5T6oKSKEtGf5SS9lTg+hUEL9uJDKwEz7+uC0gwHqbMzjQv 0IVBP/4Tnvtg5BiRIe7sP9GtTe0zd0JR -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:37 2025 by rpki-client