$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft File: 45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json) Hash identifier: 7UbXIVz0dogePHDJWYAxD8XMPdmhquxl9xB/McH8WqQ= Subject key identifier: CB:FD:EC:13:B7:CC:81:09:C2:74:22:EA:E8:DB:44:38:03:07:4A:BF Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 3490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft Manifest number: 347C Signing time: Thu 24 Apr 2025 15:11:57 +0000 Manifest this update: Thu 24 Apr 2025 15:11:56 +0000 Manifest next update: Thu 01 May 2025 15:11:56 +0000 Files and hashes: 1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: jRcXkFXB1kqQf+jnfeGgvhb59iRLSh2ahnUlBXjaXG4=) 2: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: cqg+DSKnyJEQ2eZBDWRlzFwbq68PCAP4lP7BZ9uGoSY=) 3: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: 48skWMAdj9drhHu2eh7bahmOkoZkfvFChpuIgM6+7w8=) 4: AAF9A7AC41AC11EA9BD8CB25C4F9AE02.roa (hash: wZnaCk/gJYbevnAK1yVFsEKeXrhTNDea/rw+miTZiyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13456 (0x3490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Apr 24 15:11:56 2025 GMT Not After : May 1 15:11:56 2025 GMT Subject: CN=680a54bc-e42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:7d:38:74:1d:32:d4:b9:52:7f:c0:fc:64: f0:e6:41:0b:ff:02:f1:df:69:08:16:82:7f:ed:be: 8e:63:49:9c:87:8f:f1:2c:74:af:df:b9:0e:5a:c0: de:d8:57:6d:35:36:d3:d8:b1:e0:73:c2:1f:ee:f0: 36:a8:be:59:50:28:3a:c0:18:6d:fe:42:09:33:76: 4e:fe:2f:1f:ab:f3:39:ae:c3:27:59:5b:0f:6f:b9: 65:8c:95:ff:e8:b4:36:91:a7:cd:2e:bd:11:11:8f: 5e:56:78:a3:18:21:f5:d0:05:b0:fd:74:54:a1:7f: c1:ce:21:5b:58:55:8e:bc:91:7e:8c:ff:bf:d7:02: 59:db:f8:ed:f6:9b:55:04:13:3d:09:de:a3:02:39: ac:53:9c:9d:c4:bf:d1:0c:25:ae:6a:d9:34:29:21: 9f:ad:78:0f:56:cd:e7:dd:8a:ac:be:14:1f:e9:78: fd:aa:ac:2c:c8:c0:43:1a:36:30:e5:c6:1e:2f:21: 5f:68:12:b4:76:29:93:57:0b:43:89:cc:26:b7:a7: 71:99:14:71:bb:80:fd:8d:99:3b:06:84:a7:8d:3b: db:d8:ca:91:a9:82:2e:4b:18:00:53:33:fe:f5:ce: 2b:4b:80:fe:04:72:21:75:91:6d:8f:97:47:b5:7f: ab:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FD:EC:13:B7:CC:81:09:C2:74:22:EA:E8:DB:44:38:03:07:4A:BF X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e6:91:0b:91:d9:78:4a:0f:c7:a0:6c:db:12:32:3a:16:98: ff:be:b6:1f:46:22:51:b5:ec:7a:0d:a6:73:de:42:e4:25:6e: b4:53:55:b7:83:ec:f3:2b:72:0a:e5:74:4f:39:c2:af:3f:a4: d5:21:67:8b:09:bf:bc:bf:42:4e:67:fc:1b:6d:8c:8a:71:a2: 4e:7f:82:9f:7a:d6:75:2e:08:66:4d:e7:90:47:44:5d:ba:a7: 9d:d7:98:b5:3e:1e:c2:72:c8:fd:5d:29:e6:00:87:b5:74:c6: bc:de:a6:55:7a:c5:86:0b:a7:81:fa:2b:cf:12:18:1e:53:ff: d2:b6:44:3d:75:1d:85:63:94:0c:3f:a4:06:61:41:b2:c9:b6: 4b:04:6c:61:51:62:fe:77:ae:c6:ab:5e:2a:8b:cf:db:ba:6c: 10:93:d3:78:6a:d6:3e:69:71:16:f4:43:28:7b:f0:85:cb:3f: 7a:5c:8b:aa:b0:a1:10:d5:bb:ca:79:52:92:22:2a:69:cd:66: b8:7a:7e:e3:21:5a:d2:ca:60:f6:af:b8:c6:19:74:d2:68:01: 85:40:1b:c3:97:8d:6f:0d:87:55:2f:18:17:22:69:d2:4e:6a: d5:ca:bd:56:28:82:02:aa:3e:c1:bc:87:a7:89:f3:15:39:be: b0:a4:d9:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjUwNDI0MTUxMTU2WhcNMjUwNTAxMTUxMTU2WjAYMRYwFAYD VQQDEw02ODBhNTRiYy1lNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI19OHQdMtS5Un/A/GTw5kEL/wLx32kIFoJ/7b6OY0mch4/xLHSv37kOWsDe 2FdtNTbT2LHgc8If7vA2qL5ZUCg6wBht/kIJM3ZO/i8fq/M5rsMnWVsPb7lljJX/ 6LQ2kafNLr0REY9eVnijGCH10AWw/XRUoX/BziFbWFWOvJF+jP+/1wJZ2/jt9ptV BBM9Cd6jAjmsU5ydxL/RDCWuatk0KSGfrXgPVs3n3YqsvhQf6Xj9qqwsyMBDGjYw 5cYeLyFfaBK0dimTVwtDicwmt6dxmRRxu4D9jZk7BoSnjTvb2MqRqYIuSxgAUzP+ 9c4rS4D+BHIhdZFtj5dHtX+rzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMv97BO3 zIEJwnQi6ujbRDgDB0q/MB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEUwMy8zRjQ4RjIyNDFEQTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3 bXI0c3RSelpzZU9scUZSU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm5pELkdl4Sg/HoGzbEjI6Fpj/vrYfRiJRtex6DaZz3kLkJW60U1W3 g+zzK3IK5XRPOcKvP6TVIWeLCb+8v0JOZ/wbbYyKcaJOf4KfetZ1LghmTeeQR0Rd uqed15i1Ph7Ccsj9XSnmAIe1dMa83qZVesWGC6eB+ivPEhgeU//StkQ9dR2FY5QM P6QGYUGyybZLBGxhUWL+d67Gq14qi8/bumwQk9N4atY+aXEW9EMoe/CFyz96XIuq sKEQ1bvKeVKSIippzWa4en7jIVrSymD2r7jGGXTSaAGFQBvDl41vDYdVLxgXImnS TmrVyr1WKIICqj7BvIenifMVOb6wpNl3 -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:24 2025 by rpki-client