$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json) Hash identifier: eat0CRYfgJSN5KhpW1maiKA/fvKuHaJ/Q/CR1axdDN8= Subject key identifier: 2E:C8:1E:18:E7:14:AD:20:C6:B4:9A:40:2D:8F:BD:AA:35:77:0B:F0 Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0A71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft Manifest number: 0A5E Signing time: Thu 24 Apr 2025 19:33:36 +0000 Manifest this update: Thu 24 Apr 2025 19:33:36 +0000 Manifest next update: Thu 01 May 2025 19:33:36 +0000 Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: alF30p+D0SX6cBxO/QG9GLQePQyE5d9U5ygNHl1DNGs=) 2: E56559AA7CAD11EEB3536044C4F9AE02.roa (hash: 0eEfoYZVPT+i1jAQtAFcxmDQsIWicbTtDWldCs89vv8=) 3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: +qdSnSMI4Cq6GPacx1y6troGvfBHeu8mDwsrgTG91us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2673 (0xa71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: Apr 24 19:33:36 2025 GMT Not After : May 1 19:33:36 2025 GMT Subject: CN=680a9210-07d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:52:61:8b:b5:5a:a6:f4:d2:84:92:62:36: 07:f3:09:eb:66:18:46:4d:60:33:66:5f:8d:54:a2: 2d:fd:59:84:ae:8e:c6:21:db:74:b0:6a:f5:6f:4f: 1f:0b:6f:66:5e:fc:60:3a:16:e9:df:a5:47:af:40: b2:ca:23:66:e1:ce:39:b7:54:1f:ae:9f:c8:9f:0b: 9e:fa:4d:c0:5d:06:5d:e2:ce:19:bc:ba:6a:07:c8: a5:e4:a8:09:8b:e9:26:ea:4b:84:50:e2:5f:ba:f5: ca:cd:fb:22:21:84:50:32:39:af:7e:89:1c:84:a8: f0:fd:13:61:e7:c2:89:4d:d6:54:9f:c8:94:3d:2f: 6e:19:9c:bb:85:b2:c8:37:b7:13:97:37:e3:1c:88: fd:90:4e:09:eb:04:d3:e6:ed:0f:66:88:25:de:d2: 13:91:2c:00:15:5d:c0:06:d1:c8:60:73:b4:d0:00: 82:ea:b9:64:cd:a7:ea:00:e5:a1:41:fd:71:ec:9f: 00:b2:20:89:0b:30:54:2a:89:72:6c:5e:eb:45:b3: 65:ff:30:b7:bc:71:e9:b1:51:33:01:9e:04:0f:48: a6:63:c1:1e:48:64:92:b6:18:a9:16:6b:6a:60:7a: 24:cc:32:b0:07:a7:22:c6:2d:fa:0c:2a:09:a2:8f: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C8:1E:18:E7:14:AD:20:C6:B4:9A:40:2D:8F:BD:AA:35:77:0B:F0 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:65:67:c4:e6:b5:07:dd:45:d3:3c:6f:f9:15:7c:70:a8:5d: 00:51:80:9e:7e:00:e3:87:54:55:8a:62:33:ad:42:78:a2:c6: 82:89:ab:27:86:6b:0b:43:f0:ad:45:31:d3:e8:d5:34:36:94: 3b:58:36:dd:b6:81:78:e3:60:d8:e3:d8:11:03:8c:9c:82:a7: 71:81:b6:5f:aa:1d:bd:0e:af:cd:df:0d:26:b0:f6:21:0d:5d: 5e:e0:48:c6:c5:52:d0:15:0e:4e:e7:34:9f:c4:2e:34:ce:6c: 5d:a6:a2:c1:4d:87:96:6c:a3:80:25:5b:42:99:9a:ce:24:25: 23:c5:de:b6:2b:c7:81:1e:46:6a:33:21:a6:09:05:20:56:9f: 11:63:e6:e2:63:1d:39:08:17:ee:33:a5:14:12:98:23:e1:55: 40:93:bb:1e:00:06:c7:f3:27:4f:af:51:32:bb:0e:85:6c:ef: 6b:c8:7d:01:5b:11:d7:38:1d:71:57:7a:21:1e:69:58:3b:8b: d9:0a:4e:41:23:ed:53:7f:eb:01:4b:95:37:45:9f:8a:25:4a: 43:53:d9:ab:87:fd:82:a2:d4:22:a6:5e:c0:d0:07:f0:13:0a: c2:01:8b:f0:ef:6b:22:f3:fb:fa:96:b9:22:a7:ab:a1:f9:27: 0e:05:79:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjUwNDI0MTkzMzM2WhcNMjUwNTAxMTkzMzM2WjAYMRYwFAYD VQQDEw02ODBhOTIxMC0wN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxZSYYu1Wqb00oSSYjYH8wnrZhhGTWAzZl+NVKIt/VmEro7GIdt0sGr1b08f C29mXvxgOhbp36VHr0CyyiNm4c45t1Qfrp/Inwue+k3AXQZd4s4ZvLpqB8il5KgJ i+km6kuEUOJfuvXKzfsiIYRQMjmvfokchKjw/RNh58KJTdZUn8iUPS9uGZy7hbLI N7cTlzfjHIj9kE4J6wTT5u0PZogl3tITkSwAFV3ABtHIYHO00ACC6rlkzafqAOWh Qf1x7J8AsiCJCzBUKolybF7rRbNl/zC3vHHpsVEzAZ4ED0imY8EeSGSSthipFmtq YHokzDKwB6cixi36DCoJoo+ZnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7IHhjn FK0gxrSaQC2Pvao1dwvwMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5 MDBza1M5T1NuT19hM1piRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgZWfE5rUH3UXTPG/5FXxwqF0AUYCefgDjh1RVimIzrUJ4osaCiasn hmsLQ/CtRTHT6NU0NpQ7WDbdtoF442DY49gRA4ycgqdxgbZfqh29Dq/N3w0msPYh DV1e4EjGxVLQFQ5O5zSfxC40zmxdpqLBTYeWbKOAJVtCmZrOJCUjxd62K8eBHkZq MyGmCQUgVp8RY+biYx05CBfuM6UUEpgj4VVAk7seAAbH8ydPr1Eyuw6FbO9ryH0B WxHXOB1xV3ohHmlYO4vZCk5BI+1Tf+sBS5U3RZ+KJUpDU9mrh/2CotQipl7A0Afw EwrCAYvw72si8/v6lrkip6uh+ScOBXn6 -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:53 2025 by rpki-client