$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json) Hash identifier: lYxSxGKLz4QhJ/a3lXUAf9wTZ3atqcSBzIOiD8wkhnA= Subject key identifier: 3B:15:8B:21:7F:88:7F:69:0B:48:BA:49:70:26:5E:92:D1:92:3D:CF Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft Manifest number: 012B Signing time: Fri 25 Apr 2025 03:40:29 +0000 Manifest this update: Fri 25 Apr 2025 03:40:29 +0000 Manifest next update: Fri 02 May 2025 03:40:29 +0000 Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: 9vhwIGaJDTEwktPqsCdAuDLXSul16ch77wsQn7Bnskw=) 2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: Fm4uHiAUi3X+9CLHzcIf57OhsNaBKsN/1TP2wSaWGkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Validity Not Before: Apr 25 03:40:29 2025 GMT Not After : May 2 03:40:29 2025 GMT Subject: CN=680b042d-545f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:71:71:10:40:91:89:3a:c1:a1:b0:93:e9:db: 9a:e4:e5:9f:1c:d9:0a:09:4b:89:72:7d:8c:98:2f: 6b:a4:27:31:d4:0b:70:6d:6e:31:18:18:52:20:53: 0a:99:26:5e:06:01:f6:4f:65:4f:1a:8c:76:6a:c8: 9a:a3:6e:65:d0:58:45:50:7e:68:ec:aa:e6:ef:6d: c2:d0:cc:72:36:4f:29:de:c9:85:3e:5a:04:62:4d: 97:59:3f:e1:01:57:91:64:be:27:2d:3d:79:08:c8: 76:be:54:16:cc:a6:0d:27:97:8e:17:36:c1:c6:12: 04:99:db:de:48:89:c5:cc:90:94:1a:c7:91:ec:bc: da:15:7d:0c:56:61:69:d4:a6:bd:08:ab:f1:c0:13: 91:46:39:ef:8d:c6:bc:21:5f:85:b7:be:fb:10:42: 85:66:7c:6c:4e:98:31:b1:7b:f3:0d:2a:0e:a6:80: ae:7f:2e:be:d2:a4:46:2e:80:5e:97:18:28:ee:bc: f7:bb:20:8e:f2:d0:89:93:64:70:96:af:23:26:c0: b8:bf:66:a0:23:97:e1:89:c7:8b:64:a3:b1:71:13: d6:12:7e:b6:89:8f:d2:e7:10:4f:b4:66:79:84:88: 32:99:02:66:df:48:f3:c0:d2:59:62:aa:91:2f:bb: 81:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:15:8B:21:7F:88:7F:69:0B:48:BA:49:70:26:5E:92:D1:92:3D:CF X509v3 Authority Key Identifier: keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:7b:5a:12:c6:a3:92:04:63:0d:94:37:ff:76:b3:02:18:c9: e5:0f:d3:6f:d1:1b:81:64:13:5a:8c:61:c5:1a:e5:f4:72:1d: f1:d2:34:3a:8a:d3:1a:d6:8b:50:64:78:33:71:7a:11:7f:fb: e6:12:b2:aa:dd:45:75:25:1f:0a:c6:e5:74:9c:78:ba:7a:06: ee:f8:b3:13:5f:df:b7:9e:84:6f:2b:d5:4f:88:ae:d3:49:8c: a0:85:2e:77:5b:cc:12:b1:42:be:9e:f7:b9:27:43:87:a9:e2: b7:fe:87:50:0b:7a:c7:c0:ec:79:a3:3d:d5:0a:2c:27:2e:74: 9a:5b:e5:82:f0:6b:9b:fa:7e:53:df:32:bf:0f:74:22:cf:cf: a6:ae:dd:0e:97:6d:ca:fd:46:fc:61:a1:7b:0f:60:44:74:25: 8b:40:6a:f1:d5:99:40:b1:ce:6d:36:fa:b1:51:3e:f5:f3:ac: 0e:7f:e1:80:e7:83:11:78:20:11:76:37:88:14:b2:a5:cf:55: 34:f6:ef:6f:04:e6:64:8f:d8:d5:cb:e0:1c:b0:67:6a:2d:5d: d6:4f:ef:a2:f8:1a:74:d2:0f:6f:bc:c4:56:b8:d7:44:ed:4b: 25:e1:78:3d:a9:89:26:27:35:f0:38:e6:b9:82:36:d5:59:1f: d2:ef:1d:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB QzZGQTM3NDgwHhcNMjUwNDI1MDM0MDI5WhcNMjUwNTAyMDM0MDI5WjAYMRYwFAYD VQQDEw02ODBiMDQyZC01NDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XFxEECRiTrBobCT6dua5OWfHNkKCUuJcn2MmC9rpCcx1AtwbW4xGBhSIFMK mSZeBgH2T2VPGox2asiao25l0FhFUH5o7Krm723C0MxyNk8p3smFPloEYk2XWT/h AVeRZL4nLT15CMh2vlQWzKYNJ5eOFzbBxhIEmdveSInFzJCUGseR7LzaFX0MVmFp 1Ka9CKvxwBORRjnvjca8IV+Ft777EEKFZnxsTpgxsXvzDSoOpoCufy6+0qRGLoBe lxgo7rz3uyCO8tCJk2Rwlq8jJsC4v2agI5fhiceLZKOxcRPWEn62iY/S5xBPtGZ5 hIgymQJm30jzwNJZYqqRL7uBGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsViyF/ iH9pC0i6SXAmXpLRkj3PMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3 NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4e1oSxqOSBGMNlDf/drMCGMnlD9Nv0RuBZBNajGHFGuX0ch3x0jQ6 itMa1otQZHgzcXoRf/vmErKq3UV1JR8KxuV0nHi6egbu+LMTX9+3noRvK9VPiK7T SYyghS53W8wSsUK+nve5J0OHqeK3/odQC3rHwOx5oz3VCiwnLnSaW+WC8Gub+n5T 3zK/D3Qiz8+mrt0Ol23K/Ub8YaF7D2BEdCWLQGrx1ZlAsc5tNvqxUT7186wOf+GA 54MReCARdjeIFLKlz1U09u9vBOZkj9jVy+AcsGdqLV3WT++i+Bp00g9vvMRWuNdE 7Usl4Xg9qYkmJzXwOOa5gjbVWR/S7x19 -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:52 2025 by rpki-client