$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: NwpG7WUknBviXCLFtbYKlzS5ZgzVbtfPoEULaTkvDAo= Subject key identifier: 1D:67:50:0F:DB:14:CF:FC:DE:82:0C:D1:5F:47:C0:5E:FF:37:E5:D0 Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 0323 Signing time: Fri 25 Apr 2025 00:55:57 +0000 Manifest this update: Fri 25 Apr 2025 00:55:57 +0000 Manifest next update: Fri 02 May 2025 00:55:57 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: cTfbkJ4FQi08xm5Rz45opXxiNlKSkm8943Hp9GFKYVM=) 2: 48DBC234F4DB11EFAC0A7D1AC4F9AE02.roa (hash: MMIkwa2VF05y1vJp43/649+EQByZjCMwwH+3GumiKxU=) 3: EF789834F4DA11EFB3FF6B19C4F9AE02.roa (hash: x6KLXmxialEvQm9chZWjV+m4aGyDo45aTYp7F93yY6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: Apr 25 00:55:57 2025 GMT Not After : May 2 00:55:57 2025 GMT Subject: CN=680add9d-4065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:f5:8c:ff:5a:c5:92:c3:95:dc:17:44:5a: d6:45:37:40:14:8c:ed:26:e2:c6:09:93:7c:a6:2a: 74:8a:c5:7f:3f:1c:9c:fa:ec:33:d0:89:3c:ff:0f: e6:d6:3e:42:c2:ed:d6:d1:bc:0f:1d:a4:21:1a:58: 13:1f:73:8c:21:a5:17:42:1e:11:00:60:d2:d2:2d: 1f:1a:a6:82:64:07:51:fb:62:06:18:d8:da:fd:f7: b9:77:75:b4:98:57:db:8e:1c:cf:51:e5:77:ac:99: 22:35:ca:7e:a7:7e:13:fd:74:e3:f1:a2:94:92:6d: ee:2e:90:f7:22:be:1e:cd:96:72:b6:7f:fd:2a:d5: e4:66:7b:22:02:89:7d:fd:87:15:35:1b:f7:2e:ef: 44:a8:ef:33:9c:a9:84:ee:02:43:46:86:5f:73:d2: 75:60:61:68:0c:6e:72:c0:96:61:6a:21:d3:cd:94: 7a:5d:ad:55:b2:4f:a3:e6:cb:01:54:6e:76:a0:06: 87:96:da:91:23:c1:2a:4d:db:da:3f:e2:03:69:98: 83:c5:af:14:13:bc:51:a1:0e:21:59:da:97:aa:f9: 5c:8f:44:50:72:93:b3:e4:f2:58:2a:9c:0c:4b:13: 35:59:73:5c:11:ae:5f:94:f1:49:84:e5:38:0b:0e: 96:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:67:50:0F:DB:14:CF:FC:DE:82:0C:D1:5F:47:C0:5E:FF:37:E5:D0 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:51:40:21:17:2f:83:e2:08:c4:ec:f4:e3:c0:96:c2:e8:c4: e4:ce:97:73:73:13:4c:5e:48:d8:5f:02:80:ef:c9:79:d4:b6: 89:72:d3:bf:66:00:7a:30:2b:9c:80:c9:e3:40:aa:32:e2:5c: 91:31:0b:53:16:87:f7:19:3a:0c:43:cc:32:94:20:de:45:7c: 92:54:0c:f3:8b:8f:9a:75:65:e3:f5:fb:fe:fd:ea:81:b5:7b: b8:2d:7b:5e:33:97:d2:a8:d0:47:52:14:bf:da:89:04:ef:fd: 57:38:80:81:18:fd:37:70:14:59:76:dc:9d:ec:4c:95:40:b3: 92:28:eb:12:78:55:2a:73:7e:af:48:fd:36:82:93:27:7d:98: 93:c7:60:4b:ee:f1:92:d3:28:60:04:e8:42:bf:95:63:db:2c: 0c:ed:45:56:f0:7a:c2:e7:90:32:7f:44:82:5e:a2:75:39:62: a6:d8:06:01:7c:02:29:b8:6f:08:21:85:13:1f:de:1e:58:89: 5c:c6:f7:4e:4d:a8:c3:ef:af:ec:43:49:41:40:65:b4:6a:f6: a3:23:8a:b3:e3:70:22:76:0d:9d:78:49:16:26:20:58:79:0f: b4:33:01:5a:c7:4b:fa:ec:aa:7e:0d:39:90:d3:19:6b:12:c9: 02:2d:75:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjUwNDI1MDA1NTU3WhcNMjUwNTAyMDA1NTU3WjAYMRYwFAYD VQQDEw02ODBhZGQ5ZC00MDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6j1jP9axZLDldwXRFrWRTdAFIztJuLGCZN8pip0isV/Pxyc+uwz0Ik8/w/m 1j5Cwu3W0bwPHaQhGlgTH3OMIaUXQh4RAGDS0i0fGqaCZAdR+2IGGNja/fe5d3W0 mFfbjhzPUeV3rJkiNcp+p34T/XTj8aKUkm3uLpD3Ir4ezZZytn/9KtXkZnsiAol9 /YcVNRv3Lu9EqO8znKmE7gJDRoZfc9J1YGFoDG5ywJZhaiHTzZR6Xa1Vsk+j5ssB VG52oAaHltqRI8EqTdvaP+IDaZiDxa8UE7xRoQ4hWdqXqvlcj0RQcpOz5PJYKpwM SxM1WXNcEa5flPFJhOU4Cw6WgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1nUA/b FM/83oIM0V9HwF7/N+XQMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6UUAhFy+D4gjE7PTjwJbC6MTkzpdzcxNMXkjYXwKA78l51LaJctO/ ZgB6MCucgMnjQKoy4lyRMQtTFof3GToMQ8wylCDeRXySVAzzi4+adWXj9fv+/eqB tXu4LXteM5fSqNBHUhS/2okE7/1XOICBGP03cBRZdtyd7EyVQLOSKOsSeFUqc36v SP02gpMnfZiTx2BL7vGS0yhgBOhCv5Vj2ywM7UVW8HrC55Ayf0SCXqJ1OWKm2AYB fAIpuG8IIYUTH94eWIlcxvdOTajD76/sQ0lBQGW0avajI4qz43Aidg2deEkWJiBY eQ+0MwFax0v67Kp+DTmQ0xlrEskCLXWS -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:05 2025 by rpki-client