$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json) Hash identifier: 0L1nrofyNU8dykUN04S7/Ic+aD4vvlxtg5O3XzDbq0o= Subject key identifier: 5A:E4:D2:52:7E:78:9D:B6:1D:75:39:E2:BE:1D:D2:E6:01:5F:FD:6E Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Certificate serial: 347F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft Manifest number: 347A Signing time: Thu 24 Apr 2025 15:01:07 +0000 Manifest this update: Thu 24 Apr 2025 15:01:06 +0000 Manifest next update: Thu 01 May 2025 15:01:06 +0000 Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: Cke3Yoov3AueA4E7h7PJvBg05OwbQbX03oyN1DH+4/A=) 2: 450B9058E3B511EF8A23824BC4F9AE02.roa (hash: r37bpTTUcU1lH0DUSQwsabLyee9wQt2kebjFicJO4a8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13439 (0x347f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Validity Not Before: Apr 24 15:01:06 2025 GMT Not After : May 1 15:01:06 2025 GMT Subject: CN=680a5233-f7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:3f:75:f0:cc:f6:65:7b:16:81:39:d0:12: 4d:a8:8c:92:10:bb:8b:66:b1:b4:73:7d:31:5a:ac: 64:a6:18:a0:ea:ef:72:96:fc:33:41:d8:58:9d:87: 24:55:5c:7f:6f:f8:f3:29:7f:43:70:ad:f4:cf:bc: 57:a0:18:96:da:01:2e:d8:a7:49:37:16:e6:6c:89: 61:ec:0f:88:f8:75:28:e1:f3:8d:85:f2:89:5d:51: 2d:22:94:a8:e5:a1:c3:ba:70:d2:aa:21:19:96:fe: da:cf:52:c6:d1:14:a2:26:6b:d5:7a:a1:f4:cf:b2: 1d:43:4e:7d:cd:3b:15:f7:e4:a1:35:d1:05:cb:61: 9b:90:6a:a9:1a:15:36:08:c9:33:f6:c4:3d:47:1a: 6b:2a:81:c7:4c:60:c0:7d:6a:a4:94:7a:ba:2f:f8: 0a:59:94:2f:ca:f2:08:b6:1a:71:69:1e:eb:e9:1e: 2a:79:51:3f:9e:14:f2:dc:4f:84:ba:fd:61:81:bd: ab:b9:6c:c0:bf:7f:2d:ad:34:38:b6:78:92:af:82: b8:b7:46:58:6a:cf:27:90:eb:24:80:0d:55:dd:fc: 0b:41:88:ce:36:5c:2c:64:c1:11:22:1a:ae:6d:67: fe:2a:ef:f1:4a:59:e0:b5:c7:a3:ca:2d:7b:7a:54: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E4:D2:52:7E:78:9D:B6:1D:75:39:E2:BE:1D:D2:E6:01:5F:FD:6E X509v3 Authority Key Identifier: keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:08:2b:0b:f0:ef:30:9d:da:f3:f7:fe:15:3b:e8:4d:10:fd: 9e:2a:23:53:41:2b:9e:f1:5b:31:19:b1:5d:52:45:45:8b:c1: 70:b1:13:80:39:b5:61:2c:d0:5c:76:92:a3:5b:96:29:2f:32: 62:3d:55:65:3b:61:eb:21:22:1b:07:83:43:23:84:5f:28:b5: ec:de:a2:5c:cb:63:ee:26:8f:4e:4c:cc:57:72:76:5e:cc:88: c7:05:51:22:cb:39:fd:0b:d9:44:26:dc:c0:9e:95:6b:c6:84: d4:73:00:68:ec:de:99:46:4b:e9:65:eb:50:1b:7e:94:3b:57: 34:08:8e:c2:7a:ad:81:8b:ce:4f:57:98:0e:8a:3c:cc:d4:93: 0f:3c:04:ff:53:89:c7:e7:fa:9c:13:a2:8f:b8:db:28:6b:a1: 07:16:6d:0a:45:5a:a5:3b:53:1d:fb:bf:09:b8:55:30:ad:2c: 52:b0:9b:03:1f:c5:c4:85:7a:41:28:48:dc:99:8e:0e:5e:92: d0:33:f2:54:ec:bc:54:3d:1f:51:d7:f2:75:77:26:31:c9:2c: 20:b8:ba:00:0a:5d:9d:73:8b:70:dc:c3:d6:dd:df:5d:dc:36: 9b:74:e5:87:d8:39:93:3d:bb:5e:b2:ec:30:3e:c1:ce:8d:34: 1d:c9:11:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVERTUxMTAvBgNVBAUTKDIzRTk4M0VCOEJCN0Y4NkJBNTkyMzUyNDFBMTAxNjBD ODA1MkM2NEUwHhcNMjUwNDI0MTUwMTA2WhcNMjUwNTAxMTUwMTA2WjAYMRYwFAYD VQQDEw02ODBhNTIzMy1mN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy14/dfDM9mV7FoE50BJNqIySELuLZrG0c30xWqxkphig6u9ylvwzQdhYnYck VVx/b/jzKX9DcK30z7xXoBiW2gEu2KdJNxbmbIlh7A+I+HUo4fONhfKJXVEtIpSo 5aHDunDSqiEZlv7az1LG0RSiJmvVeqH0z7IdQ059zTsV9+ShNdEFy2GbkGqpGhU2 CMkz9sQ9RxprKoHHTGDAfWqklHq6L/gKWZQvyvIIthpxaR7r6R4qeVE/nhTy3E+E uv1hgb2ruWzAv38trTQ4tniSr4K4t0ZYas8nkOskgA1V3fwLQYjONlwsZMERIhqu bWf+Ku/xSlngtcejyi17elSIKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrk0lJ+ eJ22HXU54r4d0uYBX/1uMB8GA1UdIwQYMBaAFCPpg+uLt/hrpZI1JBoQFgyAUsZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RURFNS80QTJCNkNDRTFE OUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1HdWxralVrR2hBV0RJQlN4 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktbUQ2NHUzLUd1bGtqVWtHaEFXRElCU3hrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RURFNS80QTJCNkNDRTFEOUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1H dWxralVrR2hBV0RJQlN4azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlCCsL8O8wndrz9/4VO+hNEP2eKiNTQSue8VsxGbFdUkVFi8FwsROA ObVhLNBcdpKjW5YpLzJiPVVlO2HrISIbB4NDI4RfKLXs3qJcy2PuJo9OTMxXcnZe zIjHBVEiyzn9C9lEJtzAnpVrxoTUcwBo7N6ZRkvpZetQG36UO1c0CI7Ceq2Bi85P V5gOijzM1JMPPAT/U4nH5/qcE6KPuNsoa6EHFm0KRVqlO1Md+78JuFUwrSxSsJsD H8XEhXpBKEjcmY4OXpLQM/JU7LxUPR9R1/J1dyYxySwguLoACl2dc4tw3MPW3d9d 3DabdOWH2DmTPbtesuwwPsHOjTQdyRHO -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:39 2025 by rpki-client