$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft File: 4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json) Hash identifier: ur2DqxkTEPojRf+1G+X+1mAd8+eZ8Y5uLjiZP3EowEs= Subject key identifier: 32:77:F9:DA:49:F0:B9:78:EF:9F:54:ED:94:CC:51:FD:87:B7:A6:5C Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 Certificate issuer: /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft Manifest number: 011D Signing time: Fri 25 Apr 2025 03:51:37 +0000 Manifest this update: Fri 25 Apr 2025 03:51:36 +0000 Manifest next update: Fri 02 May 2025 03:51:36 +0000 Files and hashes: 1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: iAy7vJun7T41W7eH6tyjGd2I36/zTFdtywzXBsP9rZ4=) 2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: ZZDUXnqWBktvzLbgCqaw7CbFJvjtpkfDVEMt//M7XVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Validity Not Before: Apr 25 03:51:36 2025 GMT Not After : May 2 03:51:36 2025 GMT Subject: CN=680b06c8-705e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:67:b7:0a:cd:b3:9d:d2:17:fd:e5:a8:da: 78:d9:cb:e1:62:69:87:a9:3f:63:d0:67:b0:8f:48: 5a:eb:d7:7d:c4:77:1f:ee:2f:56:9d:31:8d:44:38: 58:ae:9f:87:be:11:b2:57:c7:40:93:33:cc:a5:c7: 2d:92:09:9b:43:3f:e9:0b:af:e8:8e:51:93:3b:c8: b6:b2:77:1a:8a:0a:90:78:97:29:59:da:f7:a9:75: 51:ad:2b:3f:61:91:1d:f8:59:cd:2f:ce:1c:80:f0: 72:9e:ee:17:b4:7c:c0:96:b0:1a:5b:cf:69:61:30: 7f:f1:cc:ce:cd:7d:82:ca:06:8b:dc:95:ee:51:30: ad:ae:c7:2f:19:be:f5:18:54:2f:09:aa:25:0c:4f: 5b:bf:10:16:dc:f8:89:10:ce:6d:16:fc:ac:5e:2e: 63:cf:82:15:97:fa:91:00:9e:f5:fd:bc:88:1e:93: 7d:3e:a3:2b:cc:f6:2e:d5:17:43:6d:e0:e1:69:a9: 8b:81:3e:a5:62:0b:c5:88:cf:69:4e:f6:29:2d:80: f4:22:23:3f:ea:25:c9:c4:71:65:ff:77:0d:2a:0d: 1c:76:0f:83:81:fb:f2:cb:c5:7b:a9:eb:37:28:41: ff:41:a9:e6:6d:57:23:de:80:95:dd:fb:32:3e:c4: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:77:F9:DA:49:F0:B9:78:EF:9F:54:ED:94:CC:51:FD:87:B7:A6:5C X509v3 Authority Key Identifier: keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:31:36:7e:ad:e5:45:bc:b5:4d:86:91:a4:e4:e5:1d:fc:f2: 7e:a2:4c:13:4b:e4:5c:72:8c:19:a4:50:5d:18:d1:9d:13:16: 48:d8:48:d5:80:88:7c:15:72:da:a7:2c:27:99:9c:34:02:a7: 7f:d6:c9:eb:09:85:9e:81:ae:0e:9a:65:b0:1c:e3:f3:ef:9b: 2b:43:2c:ea:63:c9:03:dc:30:43:f5:1a:19:20:e9:34:f9:aa: 58:18:ee:c2:1a:36:2e:38:cc:0f:ae:e4:59:b9:f7:2d:36:65: 9a:7f:c9:54:f7:9e:ea:21:d8:3f:58:ab:e2:e1:2e:fe:c3:4a: 02:ef:49:1a:d0:01:17:18:4c:91:16:9f:f4:0e:d2:f2:44:e7: 25:b5:3d:47:57:ea:69:ab:bb:64:b8:bd:25:78:0b:fd:6c:34: 15:91:10:c4:c6:2c:56:fa:0b:c2:41:23:b0:91:89:03:03:27: 88:47:98:c0:52:b0:75:47:05:3a:cf:66:2d:43:7f:c5:90:ab: 48:ca:d0:78:0a:b3:83:6a:1a:f5:d4:0f:c7:50:47:40:0b:10: 4e:00:f2:dc:c4:50:d2:81:c8:0c:ab:f1:b0:37:ae:2d:44:55: 69:c0:59:d3:99:4c:d2:d2:95:7f:65:04:ee:56:8f:aa:c6:cf: 23:7c:e4:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzMTMxMTAvBgNVBAUTKEUxM0M0NzRERDQ0NTcxQThDRUY0MDY2OTRFMDRBRDZB QzYxQjI1NjYwHhcNMjUwNDI1MDM1MTM2WhcNMjUwNTAyMDM1MTM2WjAYMRYwFAYD VQQDEw02ODBiMDZjOC03MDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVJntwrNs53SF/3lqNp42cvhYmmHqT9j0Gewj0ha69d9xHcf7i9WnTGNRDhY rp+HvhGyV8dAkzPMpcctkgmbQz/pC6/ojlGTO8i2sncaigqQeJcpWdr3qXVRrSs/ YZEd+FnNL84cgPBynu4XtHzAlrAaW89pYTB/8czOzX2CygaL3JXuUTCtrscvGb71 GFQvCaolDE9bvxAW3PiJEM5tFvysXi5jz4IVl/qRAJ71/byIHpN9PqMrzPYu1RdD beDhaamLgT6lYgvFiM9pTvYpLYD0IiM/6iXJxHFl/3cNKg0cdg+Dgfvyy8V7qes3 KEH/QanmbVcj3oCV3fsyPsTFkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJ3+dpJ 8Ll4759U7ZTMUf2Ht6ZcMB8GA1UdIwQYMBaAFOE8R03URXGozvQGaU4ErWrGGyVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDMxMy8wRjIwNzk3NjZF RjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNhak85QVpwVGdTdGFzWWJK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRUeEhUZFJGY2FqTzlBWnBUZ1N0YXNZYkpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDMxMy8wRjIwNzk3NjZFRjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNh ak85QVpwVGdTdGFzWWJKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPMTZ+reVFvLVNhpGk5OUd/PJ+okwTS+RccowZpFBdGNGdExZI2EjV gIh8FXLapywnmZw0Aqd/1snrCYWega4OmmWwHOPz75srQyzqY8kD3DBD9RoZIOk0 +apYGO7CGjYuOMwPruRZufctNmWaf8lU957qIdg/WKvi4S7+w0oC70ka0AEXGEyR Fp/0DtLyROcltT1HV+ppq7tkuL0leAv9bDQVkRDExixW+gvCQSOwkYkDAyeIR5jA UrB1RwU6z2YtQ3/FkKtIytB4CrODahr11A/HUEdACxBOAPLcxFDSgcgMq/GwN64t RFVpwFnTmUzS0pV/ZQTuVo+qxs8jfOSp -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:46 2025 by rpki-client