$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft File: 556bUhJjfjPKXcthdpCc4ZYhumQ.mft (raw, json) Hash identifier: 4IoiHV0shW7QfytvNKMqFVRMXlbrplaMMFzMUtpjj6A= Subject key identifier: 7E:C8:69:A4:0E:25:F6:3D:61:A9:2D:AB:E6:AE:B3:43:BF:45:06:EC Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 Certificate issuer: /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Certificate serial: 0444 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft Manifest number: 043E Signing time: Thu 24 Apr 2025 17:03:57 +0000 Manifest this update: Thu 24 Apr 2025 17:03:56 +0000 Manifest next update: Thu 01 May 2025 17:03:56 +0000 Files and hashes: 1: 556bUhJjfjPKXcthdpCc4ZYhumQ.crl (hash: iM0zil8tJBoLS72CB222ujCqYZgJ/qDOgIUwLKbIVMk=) 2: B7E86B40595311EC9ECF510BC4F9AE02.roa (hash: I3AqCAvryjVR50FDwOB2eOkU4GLBFJs3HZ3gb9KEimo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Validity Not Before: Apr 24 17:03:56 2025 GMT Not After : May 1 17:03:56 2025 GMT Subject: CN=680a6efd-de74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:7d:36:39:02:a3:95:f5:14:ce:c7:17:a1: c5:d4:00:77:73:a1:8a:d6:c1:b1:45:b1:46:f6:b1: 60:04:39:55:16:06:54:bf:a7:c5:0e:85:21:a7:c0: 67:a7:6b:a5:21:4d:a4:6b:47:03:0d:40:97:d0:41: 70:0a:92:65:2e:99:f4:e7:78:a6:d7:f0:ef:de:57: 59:f0:88:b9:50:e3:b7:3a:15:04:c7:db:32:42:fa: 65:fe:da:40:f6:e6:e2:ac:9d:b7:93:8f:47:c2:ba: f5:bf:11:33:06:fc:30:83:ec:e2:99:d7:b0:45:dd: 5e:9a:99:fb:86:04:8e:e7:6c:52:80:8d:cf:86:8c: 1b:18:9a:47:84:a8:4f:14:3f:a0:20:a0:a8:3a:9f: d8:95:1d:17:b5:9c:27:b7:8a:c4:6f:be:a2:cd:5a: 98:a4:af:08:68:a7:e4:7e:4c:88:f8:b5:1c:86:26: 1e:1c:f1:83:70:76:5e:1f:f5:b5:3d:ad:80:e2:2c: 3a:39:c5:e7:1d:b8:7a:f7:a3:07:d5:32:1f:c9:7e: e8:60:5a:85:52:cc:35:02:c3:3f:27:f8:1c:9d:29: d9:cf:54:54:a4:ef:69:b6:d0:47:52:2c:4f:ae:c7: 49:b3:1b:d6:1c:35:92:b3:2e:80:75:2a:c8:9c:7a: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C8:69:A4:0E:25:F6:3D:61:A9:2D:AB:E6:AE:B3:43:BF:45:06:EC X509v3 Authority Key Identifier: keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:8e:4e:24:e5:20:0f:8f:e6:ef:08:4d:ea:de:74:7e:ab:fe: cb:98:cc:a4:38:04:2c:d6:26:14:56:29:70:2b:8d:d9:dd:55: 4b:0c:06:34:51:59:2e:29:8b:64:59:71:65:35:74:75:3b:e1: 81:25:8c:eb:44:88:ae:44:99:f7:b4:09:ff:00:47:00:a7:b6: 8d:f0:7c:e7:78:81:b4:e1:23:a4:38:cd:10:74:62:29:5e:60: 88:8b:a3:4d:41:34:a7:9b:9a:0d:b5:70:62:4b:15:39:9e:e9: ab:d5:ff:cd:2d:58:95:4c:48:95:29:69:46:bd:b8:2d:e5:6d: 03:d6:e9:b4:5d:0b:df:e4:41:1d:2a:f6:b9:86:90:41:4c:82: c0:3e:c0:15:35:eb:0c:22:f5:c4:1e:e7:f6:d8:ff:f6:fd:6f: b1:c4:ef:4f:2b:5f:40:78:dc:35:f1:31:35:2f:67:91:ab:43: ee:cc:79:04:6f:9d:d9:7f:45:5c:67:2f:56:c6:b9:07:4c:48: 6d:19:74:f9:c7:10:3f:e9:23:10:fb:b7:42:2a:b1:16:c3:66: a7:97:12:15:a8:5a:98:cf:06:61:11:64:31:50:eb:fb:1a:36: bd:66:ff:d5:74:a5:68:55:29:18:e3:b4:57:87:fb:bd:a4:72: 8c:9d:c4:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKEU3OUU5QjUyMTI2MzdFMzNDQTVEQ0I2MTc2OTA5Q0Ux OTYyMUJBNjQwHhcNMjUwNDI0MTcwMzU2WhcNMjUwNTAxMTcwMzU2WjAYMRYwFAYD VQQDEw02ODBhNmVmZC1kZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FB9NjkCo5X1FM7HF6HF1AB3c6GK1sGxRbFG9rFgBDlVFgZUv6fFDoUhp8Bn p2ulIU2ka0cDDUCX0EFwCpJlLpn053im1/Dv3ldZ8Ii5UOO3OhUEx9syQvpl/tpA 9ubirJ23k49Hwrr1vxEzBvwwg+zimdewRd1empn7hgSO52xSgI3PhowbGJpHhKhP FD+gIKCoOp/YlR0XtZwnt4rEb76izVqYpK8IaKfkfkyI+LUchiYeHPGDcHZeH/W1 Pa2A4iw6OcXnHbh696MH1TIfyX7oYFqFUsw1AsM/J/gcnSnZz1RUpO9pttBHUixP rsdJsxvWHDWSsy6AdSrInHqLlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7IaaQO JfY9Yaktq+aus0O/RQbsMB8GA1UdIwQYMBaAFOeem1ISY34zyl3LYXaQnOGWIbpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS8xRTc1MzY1MDU5 NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZqUEtYY3RoZHBDYzRaWWh1 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzU1NmJVaEpqZmpQS1hjdGhkcENjNFpZaHVtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS8xRTc1MzY1MDU5NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZq UEtYY3RoZHBDYzRaWWh1bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQjk4k5SAPj+bvCE3q3nR+q/7LmMykOAQs1iYUVilwK43Z3VVLDAY0 UVkuKYtkWXFlNXR1O+GBJYzrRIiuRJn3tAn/AEcAp7aN8HzneIG04SOkOM0QdGIp XmCIi6NNQTSnm5oNtXBiSxU5numr1f/NLViVTEiVKWlGvbgt5W0D1um0XQvf5EEd Kva5hpBBTILAPsAVNesMIvXEHuf22P/2/W+xxO9PK19AeNw18TE1L2eRq0PuzHkE b53Zf0VcZy9WxrkHTEhtGXT5xxA/6SMQ+7dCKrEWw2anlxIVqFqYzwZhEWQxUOv7 Gja9Zv/VdKVoVSkY47RXh/u9pHKMncSE -----END CERTIFICATE-----Generated at Sat Apr 26 15:11:27 2025 by rpki-client