$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json) Hash identifier: +BGcvh97unC6jsu5JawhFgYnLxnVSiKA38uOm6y+t6g= Subject key identifier: D7:FC:D1:62:C4:FD:AE:4A:04:A7:08:CD:39:1A:60:97:1C:F3:22:68 Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Certificate serial: 06F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft Manifest number: 06F0 Signing time: Thu 24 Apr 2025 21:46:47 +0000 Manifest this update: Thu 24 Apr 2025 21:46:47 +0000 Manifest next update: Thu 01 May 2025 21:46:47 +0000 Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: /Fhx+1sEkmq13akhxgyZSsYPShvIlSiKxcKw46dJxfY=) 2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: 4rISf9Z0gDtlAylgqmkLRj4oHpOaisWHbdYvnEyJBHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1781 (0x6f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Validity Not Before: Apr 24 21:46:47 2025 GMT Not After : May 1 21:46:47 2025 GMT Subject: CN=680ab147-dbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:85:4c:a2:b1:5e:0e:e2:b2:4e:7c:2d:0a: 86:d3:63:73:fe:ca:0d:dd:e5:9b:8f:ae:a7:59:f2: 75:72:95:01:a0:a8:1d:8c:0b:97:1a:c7:aa:e9:3d: 95:9a:fa:50:9c:68:a8:89:2a:90:bf:0a:e9:2c:e3: b0:db:d6:62:16:07:fa:4a:26:b3:10:2a:21:6b:8b: b2:92:b7:56:1a:27:93:05:62:d4:61:ba:78:ed:bf: c5:90:a0:cf:8a:11:42:10:c9:8f:94:33:70:77:7d: 75:97:e0:d5:67:0b:3a:06:14:18:69:a6:5c:e7:3d: 0a:d1:d2:fd:77:00:ec:ef:5e:3f:12:f8:b0:16:00: a7:fb:33:8a:11:fd:c8:e1:a8:b1:0d:36:18:05:6a: 0f:fd:da:cf:16:df:5d:b3:48:41:d5:8f:6b:02:49: 49:a1:4e:9c:fb:39:b4:cb:53:94:d4:b6:f2:6a:8c: b2:ba:5e:bb:e2:4f:b9:90:c2:81:c7:b0:07:50:e6: 85:a7:20:5b:48:07:6e:a1:c8:e3:0c:ed:f4:e2:7f: 0b:57:dd:ec:1f:71:ca:69:7f:d6:80:ad:fd:0c:a6: e2:05:58:e6:db:8a:6a:2a:19:b7:a5:26:f2:5e:93: 33:9b:82:76:ee:1b:77:5c:2d:ac:93:aa:74:e6:31: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FC:D1:62:C4:FD:AE:4A:04:A7:08:CD:39:1A:60:97:1C:F3:22:68 X509v3 Authority Key Identifier: keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:c8:60:7c:fa:40:6a:60:43:b8:16:98:1c:ab:1b:c3:21:a4: 85:1c:1a:47:83:05:90:bd:5b:f1:1e:67:47:b5:e1:93:a4:0d: 09:11:31:3a:e6:8f:2f:c7:76:0e:af:3a:f6:5f:71:52:5e:48: db:2e:29:a3:79:a7:f7:9f:1f:ce:14:af:b8:8a:bf:7a:59:6f: b0:38:11:68:09:44:ea:4d:1c:e8:e9:d0:a1:27:55:90:62:bf: 72:52:f8:dc:e3:70:a3:0e:d2:92:0d:f8:1e:1e:e5:ac:da:94: 66:ab:68:ae:c2:26:07:71:e8:b5:13:3c:24:a6:7c:78:d6:44: 3d:66:cd:fd:d4:84:76:28:57:31:12:4d:10:67:49:d7:23:4e: e8:5a:3e:41:ab:81:e9:17:8d:cc:a7:a5:45:f9:7c:d5:54:4a: b7:d4:7c:51:17:3c:9b:bc:13:ef:b5:07:0e:46:2c:eb:cc:c0: f0:45:a2:11:70:4a:7e:48:4e:ba:65:74:ed:99:34:21:9b:37: 17:4e:a8:38:7d:e4:1c:fc:9d:e3:21:3e:fc:62:2e:00:36:d3: 2a:0f:0c:c5:51:4a:52:8e:e0:8e:16:7b:8f:56:47:c6:0c:67: 05:15:f8:72:ec:9a:37:dd:55:4a:4b:44:3a:cb:11:9b:0d:dc: 00:15:57:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMwRkY5OUY2RTQ3 Mjg1MkJBOTkwHhcNMjUwNDI0MjE0NjQ3WhcNMjUwNTAxMjE0NjQ3WjAYMRYwFAYD VQQDEw02ODBhYjE0Ny1kYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv+FTKKxXg7isk58LQqG02Nz/soN3eWbj66nWfJ1cpUBoKgdjAuXGseq6T2V mvpQnGioiSqQvwrpLOOw29ZiFgf6SiazECoha4uykrdWGieTBWLUYbp47b/FkKDP ihFCEMmPlDNwd311l+DVZws6BhQYaaZc5z0K0dL9dwDs714/EviwFgCn+zOKEf3I 4aixDTYYBWoP/drPFt9ds0hB1Y9rAklJoU6c+zm0y1OU1Lbyaoyyul674k+5kMKB x7AHUOaFpyBbSAduocjjDO304n8LV93sH3HKaX/WgK39DKbiBVjm24pqKhm3pSby XpMzm4J27ht3XC2sk6p05jHqnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNf80WLE /a5KBKcIzTkaYJcc8yJoMB8GA1UdIwQYMBaAFJXfeoEA2XlTaHOsD/mfbkcoUrqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODdEMC8xOEVCMDc1MjQy QkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVWTm9jNndQLVo5dVJ5aFN1 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkOTZnUURaZVZOb2M2d1AtWjl1UnloU3Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVW Tm9jNndQLVo5dVJ5aFN1cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAyGB8+kBqYEO4FpgcqxvDIaSFHBpHgwWQvVvxHmdHteGTpA0JETE6 5o8vx3YOrzr2X3FSXkjbLimjeaf3nx/OFK+4ir96WW+wOBFoCUTqTRzo6dChJ1WQ Yr9yUvjc43CjDtKSDfgeHuWs2pRmq2iuwiYHcei1Ezwkpnx41kQ9Zs391IR2KFcx Ek0QZ0nXI07oWj5Bq4HpF43Mp6VF+XzVVEq31HxRFzybvBPvtQcORizrzMDwRaIR cEp+SE66ZXTtmTQhmzcXTqg4feQc/J3jIT78Yi4ANtMqDwzFUUpSjuCOFnuPVkfG DGcFFfhy7Jo33VVKS0Q6yxGbDdwAFVd6 -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:46 2025 by rpki-client