$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft File: rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json) Hash identifier: jhvdKRdHggBLKNdSjqlnAoZy+skWUwzlrATxwF+5cuQ= Subject key identifier: 5F:08:4B:1A:C4:EA:CF:3A:16:BD:BA:DC:D0:2B:55:7E:8E:AA:5E:35 Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Certificate serial: 12B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft Manifest number: 1295 Signing time: Thu 24 Apr 2025 17:06:54 +0000 Manifest this update: Thu 24 Apr 2025 17:06:53 +0000 Manifest next update: Thu 01 May 2025 17:06:53 +0000 Files and hashes: 1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: vRLXodx4Y/NHQ352uzEsxPPfumAYE0xzyZPCLGTkIbs=) 2: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: cuFQqVlbEJ/udXRPZ56LOiAFU4p5XZPUOiRAjCCaxGQ=) 3: 403398AA233111EEAF768F66C4F9AE02.roa (hash: LFrmkrzanddJe0x2nUkwJLw/OhE7SJ+J+T3fYrc0q4I=) 4: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: mehZcMjFb7HT3F1ePo3UBF+1EGoPOvu0R4233be/rFs=) 5: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: tPqGcusMyqiuDoF3oCEh1MkgveCq5i4UTPc8YjbijQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4789 (0x12b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Validity Not Before: Apr 24 17:06:53 2025 GMT Not After : May 1 17:06:53 2025 GMT Subject: CN=680a6fad-a18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:3e:b6:a7:5b:66:26:ca:b8:c1:28:5f:46: 18:31:1e:db:2e:d4:79:6d:73:b1:82:fa:ad:ec:26: 27:45:26:b5:20:ff:a0:68:29:32:77:d1:77:ca:9d: c5:9d:42:b8:cf:cc:d5:12:c3:c3:3a:05:57:6e:93: d5:3b:77:9c:21:ba:b7:65:24:1b:f2:f6:f2:5e:22: ae:5c:06:05:d0:30:9c:89:8f:42:d9:dd:80:d6:44: 5d:36:8e:9d:a2:1b:86:f7:18:44:05:fa:64:0d:4e: ad:ef:ed:a0:25:fe:27:fd:ec:ad:2a:14:35:28:b2: 56:54:6e:50:b0:93:d4:f6:e1:99:f6:c9:78:f6:20: a0:ba:df:b9:9e:34:a0:e1:d8:cc:ba:85:b8:0e:92: 1c:f1:3a:dd:1a:b5:73:08:83:a0:03:8f:46:bb:58: 0b:b9:d0:1d:ff:00:36:1b:e6:80:01:4c:b5:ba:6e: d4:3c:a1:ba:71:7f:f4:bc:6f:a3:82:59:b7:34:73: 5b:2f:fa:3e:24:2b:86:42:96:bf:9d:4b:cf:4c:d6: 7d:f0:94:93:35:5d:1d:04:ac:89:7d:cb:cd:30:3c: 33:64:5a:59:8b:f8:4d:fb:47:50:77:c2:5e:ab:08: f5:26:0b:1a:c8:58:6b:b2:f4:27:24:ca:49:32:f2: 06:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:08:4B:1A:C4:EA:CF:3A:16:BD:BA:DC:D0:2B:55:7E:8E:AA:5E:35 X509v3 Authority Key Identifier: keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:03:88:a2:6e:67:df:de:c6:e0:e0:69:98:c6:66:eb:63:43: 74:f3:8b:a2:36:5f:e9:71:c9:8d:a9:a4:7b:17:0f:53:44:06: e0:62:e6:a2:8d:88:09:6f:c5:9b:9b:d5:08:7e:3d:a3:6b:62: 1e:e4:3e:eb:42:c6:5d:9e:81:60:ac:65:16:de:fd:af:2e:62: fc:64:72:e4:77:bf:ae:16:9e:ac:a2:09:fa:a9:53:2c:1e:25: 79:d1:5a:c5:16:51:41:c1:ee:e7:1a:04:b8:4f:e8:f3:6f:e7: b4:52:66:32:be:24:34:0b:f1:34:58:79:9b:5f:9b:41:c9:4c: 8a:e6:1a:9c:92:73:af:46:c1:1f:b9:bf:15:bf:f0:f8:c8:d5: 03:2b:93:09:e5:42:b4:69:f1:99:3c:d4:d7:b3:a9:a1:4f:3f: 48:a5:0f:b2:8e:46:93:33:b7:1e:47:ee:7d:dc:18:e7:5f:bb: c5:d9:60:b2:a1:c2:5e:2b:98:b1:ce:1e:f8:9b:5a:04:9f:50: 45:62:6f:ce:a6:1f:a3:59:2c:75:7b:d8:36:2d:b1:55:1d:5b: a0:19:1c:f8:f8:ea:90:b9:25:82:ec:f5:7f:3a:51:29:9e:1a: 65:5d:7a:f9:98:94:15:4f:24:15:5b:c3:98:c5:01:37:8f:40: fc:42:70:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF QzhGOUQzNjcwHhcNMjUwNDI0MTcwNjUzWhcNMjUwNTAxMTcwNjUzWjAYMRYwFAYD VQQDEw02ODBhNmZhZC1hMThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJQ+tqdbZibKuMEoX0YYMR7bLtR5bXOxgvqt7CYnRSa1IP+gaCkyd9F3yp3F nUK4z8zVEsPDOgVXbpPVO3ecIbq3ZSQb8vbyXiKuXAYF0DCciY9C2d2A1kRdNo6d ohuG9xhEBfpkDU6t7+2gJf4n/eytKhQ1KLJWVG5QsJPU9uGZ9sl49iCgut+5njSg 4djMuoW4DpIc8TrdGrVzCIOgA49Gu1gLudAd/wA2G+aAAUy1um7UPKG6cX/0vG+j glm3NHNbL/o+JCuGQpa/nUvPTNZ98JSTNV0dBKyJfcvNMDwzZFpZi/hN+0dQd8Je qwj1JgsayFhrsvQnJMpJMvIGZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8ISxrE 6s86Fr263NArVX6Oql41MB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BMzBCNUE0QUM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15 YlhGV2d2c0VFMUhzajUwMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZA4iibmff3sbg4GmYxmbrY0N084uiNl/pccmNqaR7Fw9TRAbgYuai jYgJb8Wbm9UIfj2ja2Ie5D7rQsZdnoFgrGUW3v2vLmL8ZHLkd7+uFp6sogn6qVMs HiV50VrFFlFBwe7nGgS4T+jzb+e0UmYyviQ0C/E0WHmbX5tByUyK5hqcknOvRsEf ub8Vv/D4yNUDK5MJ5UK0afGZPNTXs6mhTz9IpQ+yjkaTM7ceR+593BjnX7vF2WCy ocJeK5ixzh74m1oEn1BFYm/Oph+jWSx1e9g2LbFVHVugGRz4+OqQuSWC7PV/OlEp nhplXXr5mJQVTyQVW8OYxQE3j0D8QnDJ -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:55 2025 by rpki-client