$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json) Hash identifier: aYKAphWUI0CMGI45xzbKrTE/3tUPbyOnyRRIxSxB7p8= Subject key identifier: D8:5C:10:32:39:93:77:89:6C:39:E1:FC:E8:15:27:44:6C:DA:29:D9 Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft Manifest number: E0 Signing time: Fri 25 Apr 2025 04:31:59 +0000 Manifest this update: Fri 25 Apr 2025 04:31:59 +0000 Manifest next update: Fri 02 May 2025 04:31:59 +0000 Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: fsq8jImsEXKPLCUnJNTZ+gWkZ8XqOwTDWKFgvM+vmo0=) 2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: 3XSRq2gf3Qq1teYkUqCY6q4aLkAm0S7clGDEwM9Zv2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Validity Not Before: Apr 25 04:31:59 2025 GMT Not After : May 2 04:31:59 2025 GMT Subject: CN=680b103f-7dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4f:a3:d9:00:47:07:7b:d1:de:15:d1:ed:1a: 93:9d:fe:9c:03:4c:f6:0f:12:73:d2:64:3d:f3:21: 00:98:cd:1a:6e:0d:58:24:69:78:38:90:6d:54:29: c2:47:23:fa:1e:d3:25:58:28:ad:fb:b7:7e:21:72: 1b:7e:a9:0b:f0:31:b7:ba:43:32:8d:91:9a:ba:0d: ac:cd:82:77:d5:23:49:2d:39:f4:67:89:2e:5a:91: cf:c8:60:b4:f2:b6:7c:ee:f9:f6:4f:e5:e6:b7:77: 41:91:cd:22:cd:60:20:47:5b:d2:2b:fa:dc:0c:19: 84:80:b6:75:f7:1e:2d:24:41:ce:62:67:3f:62:58: cc:32:c3:54:e0:1a:3f:70:f2:4e:4e:3d:0a:6b:84: bb:e8:ce:97:c4:d1:5f:92:e8:e4:1e:ab:66:ce:0a: 94:ed:0d:c7:71:8f:4e:6b:dd:84:fc:6d:c0:95:8c: 70:7f:6c:15:94:8d:18:9d:fa:f5:11:1b:d7:bc:01: 1f:ba:f4:c5:bb:b1:ac:e1:d6:a6:90:cd:ee:3c:10: 51:c0:94:52:53:1a:2b:48:dd:4a:f0:da:42:09:c6: fc:39:1e:34:8d:2c:39:6c:1b:e0:17:b1:69:03:71: a0:f5:3b:ad:62:3b:b1:15:7a:36:dd:4f:88:c2:72: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5C:10:32:39:93:77:89:6C:39:E1:FC:E8:15:27:44:6C:DA:29:D9 X509v3 Authority Key Identifier: keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d6:b8:45:ca:04:34:ab:8f:9e:19:19:41:df:66:7f:1b:7b: d4:70:3b:1d:aa:eb:e9:ce:1e:ce:b2:ff:8f:ef:bc:7f:db:04: 4b:ab:57:40:4b:02:a2:cd:a8:5f:b3:e1:f9:34:ad:25:3c:d8: 1b:65:04:44:7d:2e:57:cb:b3:4b:70:1c:6c:45:f0:e2:5e:af: b4:4d:5d:e6:3f:56:b8:e6:ee:5c:1b:fb:8a:d4:3e:6b:59:c2: ee:71:ce:99:4c:b0:66:87:30:23:b0:bc:65:cc:b1:ee:7b:8b: 44:4d:b8:43:90:30:80:d0:2f:60:c4:a1:7c:e7:52:ce:2c:70: 90:2f:d1:bc:51:de:8a:f1:ea:75:bb:67:47:91:df:68:bd:53: 3f:97:be:7d:77:30:14:b3:9c:b0:38:a7:5e:a6:0e:f5:5b:01: dd:7d:b9:ae:e8:05:55:5d:24:68:9d:3c:bf:ad:70:e7:1e:7a: 3d:70:74:9e:ea:0b:4d:e7:8b:6c:16:ad:c9:8c:38:39:2c:a8: 23:8d:8d:68:29:9a:af:69:93:38:c5:71:9f:a8:a2:96:54:ea: ad:97:dc:9b:ce:22:de:e4:ed:ad:aa:1c:d6:15:99:4c:0d:d5: 5f:ec:bc:5d:ee:86:85:f1:c5:8f:d9:40:79:b1:af:18:f6:ec: 1b:4e:77:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4ODUxMTAvBgNVBAUTKEFFNThFM0YzMjREOTQ2QzY4M0Y0QTM4RjhENEUxQ0Q3 MjU3NDgzMEEwHhcNMjUwNDI1MDQzMTU5WhcNMjUwNTAyMDQzMTU5WjAYMRYwFAYD VQQDEw02ODBiMTAzZi03ZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70+j2QBHB3vR3hXR7RqTnf6cA0z2DxJz0mQ98yEAmM0abg1YJGl4OJBtVCnC RyP6HtMlWCit+7d+IXIbfqkL8DG3ukMyjZGaug2szYJ31SNJLTn0Z4kuWpHPyGC0 8rZ87vn2T+Xmt3dBkc0izWAgR1vSK/rcDBmEgLZ19x4tJEHOYmc/YljMMsNU4Bo/ cPJOTj0Ka4S76M6XxNFfkujkHqtmzgqU7Q3HcY9Oa92E/G3AlYxwf2wVlI0Ynfr1 ERvXvAEfuvTFu7Gs4damkM3uPBBRwJRSUxorSN1K8NpCCcb8OR40jSw5bBvgF7Fp A3Gg9TutYjuxFXo23U+IwnK92wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhcEDI5 k3eJbDnh/OgVJ0Rs2inZMB8GA1UdIwQYMBaAFK5Y4/Mk2UbGg/Sjj41OHNcldIMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ERkEwNDA3OEM5 RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJzYUQ5S09QalU0YzF5VjBn d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jsamo4eVRaUnNhRDlLT1BqVTRjMXlWMGd3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4NS9ERkEwNDA3OEM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJz YUQ5S09QalU0YzF5VjBnd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY1rhFygQ0q4+eGRlB32Z/G3vUcDsdquvpzh7Osv+P77x/2wRLq1dA SwKizahfs+H5NK0lPNgbZQREfS5Xy7NLcBxsRfDiXq+0TV3mP1a45u5cG/uK1D5r WcLucc6ZTLBmhzAjsLxlzLHue4tETbhDkDCA0C9gxKF851LOLHCQL9G8Ud6K8ep1 u2dHkd9ovVM/l759dzAUs5ywOKdepg71WwHdfbmu6AVVXSRonTy/rXDnHno9cHSe 6gtN54tsFq3JjDg5LKgjjY1oKZqvaZM4xXGfqKKWVOqtl9ybziLe5O2tqhzWFZlM DdVf7Lxd7oaF8cWP2UB5sa8Y9uwbTnft -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:00 2025 by rpki-client