$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: 03p2IBucoTAbwLBu4OsrVruB1A6ao5IEdD9r5gFcPKc= Subject key identifier: D4:DB:A8:DF:CF:36:34:79:D6:5F:58:3B:40:0C:2C:F2:7B:CE:F6:E0 Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0C83 Signing time: Thu 24 Apr 2025 18:10:08 +0000 Manifest this update: Thu 24 Apr 2025 18:10:07 +0000 Manifest next update: Thu 01 May 2025 18:10:07 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: cAzoCs1HTPZcs/qrFVQbhVmE2BQ4SieJdVy6oILWqnQ=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: srN4MybkybSjP5c+l2pI3OXFvu05+GspG1m/SkxGd6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3209 (0xc89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Apr 24 18:10:07 2025 GMT Not After : May 1 18:10:07 2025 GMT Subject: CN=680a7e80-f366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:87:71:7c:6f:60:2c:b7:44:20:cc:b6:ad: b1:b1:e6:7d:c1:43:db:aa:3a:35:a0:df:00:9d:0a: 58:f7:59:08:c2:7a:3b:47:7a:4d:a3:e0:9b:d0:a7: e7:d6:80:e6:f8:8d:ed:2f:17:cf:70:e5:5a:72:e0: 29:d4:81:b8:a8:ee:0d:1d:8d:c2:a9:be:0c:dc:3f: 8e:20:77:b3:55:66:d8:47:57:c4:fd:1a:cf:a1:ca: 60:5f:e7:8d:90:05:d0:77:f6:2f:7a:cd:32:44:3a: 60:71:7d:5f:c9:f5:4d:6f:20:d3:e7:0e:c3:a0:65: 90:62:89:b8:c5:59:66:18:1b:6f:e4:d8:43:bd:92: 81:7b:31:47:fd:4b:6e:de:6e:14:fd:42:35:b1:9d: e4:0b:6b:c0:bb:4a:00:a6:70:1c:2c:92:f5:53:a2: 81:bf:61:4b:6d:e7:02:63:dc:85:ab:c3:57:d9:a8: 21:27:bc:33:47:d1:32:2c:0f:67:a5:98:72:ac:5a: 46:c5:63:62:eb:f4:8b:72:4a:46:1a:e9:ea:5f:4f: 89:2e:41:85:1b:7e:2e:c1:60:ba:8a:c5:73:af:20: e0:16:88:58:cd:77:47:17:5e:65:05:54:a3:63:b7: 36:87:75:4f:cf:87:82:d9:44:95:66:2b:e2:56:5e: 71:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DB:A8:DF:CF:36:34:79:D6:5F:58:3B:40:0C:2C:F2:7B:CE:F6:E0 X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:27:31:a0:46:a2:cd:e6:7d:4f:ca:c8:c7:a0:ad:4b:4d:37: fa:c0:37:14:8d:16:0f:28:ba:6d:41:ef:34:17:d6:95:db:32: ce:fd:cf:09:00:bf:49:b8:07:23:d0:03:c6:10:1a:ed:5e:92: 1a:a9:a0:e2:ed:b8:0a:b2:bd:f3:6e:a6:f8:a5:27:b4:02:3a: 88:49:25:44:1b:1e:c3:9a:00:f6:8d:f1:6a:ae:a5:44:ee:83: 23:c6:9b:f4:bc:db:30:00:8d:16:ad:da:bc:f1:6c:15:82:bc: 3c:ef:fd:ca:ad:4c:ae:94:26:91:6c:85:4c:38:a6:be:20:62: 54:a6:8f:41:b2:de:fb:bb:93:d4:b1:4c:3a:45:06:15:7d:6b: 73:e9:63:b8:01:b7:11:50:e2:01:ca:60:46:69:b8:26:23:16: b6:49:a0:08:28:5e:53:26:20:62:9e:67:30:e4:01:c3:17:60: 1e:1a:d1:5c:3d:bf:5a:10:8e:e0:40:f1:87:56:fd:fc:8e:fe: 89:a7:8c:df:39:c8:ac:5e:7b:23:8d:67:9a:c2:3c:2b:53:2a: d6:0c:4e:71:3f:18:62:2a:5c:25:18:fe:78:92:d9:9d:31:ec: a4:45:e9:67:2d:30:e9:6d:85:82:8b:88:d8:31:0d:03:30:d0: 3c:b1:dc:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjUwNDI0MTgxMDA3WhcNMjUwNTAxMTgxMDA3WjAYMRYwFAYD VQQDEw02ODBhN2U4MC1mMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9eHcXxvYCy3RCDMtq2xseZ9wUPbqjo1oN8AnQpY91kIwno7R3pNo+Cb0Kfn 1oDm+I3tLxfPcOVacuAp1IG4qO4NHY3Cqb4M3D+OIHezVWbYR1fE/RrPocpgX+eN kAXQd/Yves0yRDpgcX1fyfVNbyDT5w7DoGWQYom4xVlmGBtv5NhDvZKBezFH/Utu 3m4U/UI1sZ3kC2vAu0oApnAcLJL1U6KBv2FLbecCY9yFq8NX2aghJ7wzR9EyLA9n pZhyrFpGxWNi6/SLckpGGunqX0+JLkGFG34uwWC6isVzryDgFohYzXdHF15lBVSj Y7c2h3VPz4eC2USVZiviVl5x4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTbqN/P NjR51l9YO0AMLPJ7zvbgMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3JzGgRqLN5n1PysjHoK1LTTf6wDcUjRYPKLptQe80F9aV2zLO/c8J AL9JuAcj0APGEBrtXpIaqaDi7bgKsr3zbqb4pSe0AjqISSVEGx7DmgD2jfFqrqVE 7oMjxpv0vNswAI0Wrdq88WwVgrw87/3KrUyulCaRbIVMOKa+IGJUpo9Bst77u5PU sUw6RQYVfWtz6WO4AbcRUOIBymBGabgmIxa2SaAIKF5TJiBinmcw5AHDF2AeGtFc Pb9aEI7gQPGHVv38jv6Jp4zfOcisXnsjjWeawjwrUyrWDE5xPxhiKlwlGP54ktmd MeykRelnLTDpbYWCi4jYMQ0DMNA8sdyH -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:04 2025 by rpki-client