$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json) Hash identifier: B7qu93ZiN/EhMIfkbyM5BK6Vo46MYZeTNIBbyQb99HQ= Subject key identifier: BA:32:49:6E:6C:D5:F3:F4:9A:35:EF:6A:74:28:AE:B5:A4:94:9B:65 Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft Manifest number: 01C6 Signing time: Fri 25 Apr 2025 02:12:54 +0000 Manifest this update: Fri 25 Apr 2025 02:12:53 +0000 Manifest next update: Fri 02 May 2025 02:12:53 +0000 Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: 18JOoAqW0jAzBvOTfFzqIkDhkjhhAH+grOs7fybHeK8=) 2: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: inCWlFg4eyi3SZb4mhg7QgWhnaX3zI3I9iGqmhoauLc=) 3: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: 9Oyy54xhiWuTllhGlORwlpgALp6JCiYOJTYLu9JoBj0=) 4: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: 5EKiWHDPeMiKNhe7uJ6GnZoz2bb2Ob3eC5qrY4BOvLk=) 5: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: vg/uug9ogWENghuoz8JvK8TWhFT7WTN1jNAJcLX1AUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Validity Not Before: Apr 25 02:12:53 2025 GMT Not After : May 2 02:12:53 2025 GMT Subject: CN=680aefa5-252f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:11:14:b6:51:c4:25:7b:95:43:e1:a3:7d:f9: 1f:32:75:8c:af:10:83:5c:60:74:f9:2b:39:ff:2c: 90:f5:52:8e:01:18:43:b8:e3:2d:ff:4e:26:77:cb: 18:99:36:98:af:91:35:ea:20:e2:98:46:52:30:74: 8f:80:52:fe:e3:ed:4e:d4:6e:1a:ae:0f:e2:53:68: b7:35:95:de:2e:5c:f7:f1:a7:27:b2:ba:e6:2c:8d: d8:cc:28:5a:34:30:9e:17:12:2e:fd:c5:d7:df:42: bc:6b:ba:41:b8:12:ff:9d:f1:d2:7f:16:c7:b7:a2: 57:cc:41:be:36:5f:61:f3:77:1f:c5:64:53:4d:75: 8b:6c:6e:85:4f:54:0b:cf:89:69:8c:85:f0:c1:38: 42:2f:72:3f:74:bd:02:c1:d9:32:40:eb:bf:e1:8e: 02:cd:b5:75:40:fa:c2:06:d9:bc:b2:03:d6:66:8f: 39:19:67:2d:13:7e:5c:59:8e:f2:95:6d:05:c3:e9: 94:39:a8:92:f9:d4:b1:85:68:b3:2a:e0:17:da:d8: 0c:42:40:8e:e6:d0:5f:cf:da:c1:b2:42:5c:fd:df: 08:53:64:d9:55:69:03:c8:2d:fc:e5:2e:0d:80:29: e8:50:19:69:a5:00:16:d9:03:71:dd:2d:6f:97:69: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:32:49:6E:6C:D5:F3:F4:9A:35:EF:6A:74:28:AE:B5:A4:94:9B:65 X509v3 Authority Key Identifier: keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:4b:fe:36:2d:6e:28:8c:7c:bb:ac:75:66:8a:31:f1:5c:b8: a4:02:e0:7d:55:6d:ee:d8:e9:1b:2d:8c:84:b7:8f:97:fe:7f: 68:7a:12:bd:dc:9d:04:a3:e4:65:f7:c2:cc:1b:c7:6a:ef:91: 73:59:34:39:aa:09:7b:ec:9f:4c:51:c7:ab:ad:8c:6d:9b:2f: dd:7b:0e:99:03:b1:a8:8d:11:bc:0c:46:6e:a4:ee:db:9c:55: 2d:de:0b:f0:ca:fa:3e:18:9a:d6:bc:c6:ec:22:4f:be:c1:3f: 47:bd:be:c7:bd:e9:cb:da:c7:61:67:2a:60:28:f3:4b:98:ba: 7e:61:72:68:00:65:44:27:b6:62:a4:2d:60:a7:3e:d6:c5:cb: d7:97:07:80:ce:4e:25:4f:81:23:af:81:c3:69:01:0d:5b:a6: f9:31:27:82:08:06:41:5d:ec:1c:39:b8:5f:56:de:f4:03:66: 36:dc:cd:0c:35:c0:94:19:57:ea:db:d7:b9:41:13:fd:08:c6: 99:30:ce:d3:84:0a:45:5c:9f:2e:8e:0c:d5:15:49:db:68:98: 61:3e:7b:3e:d0:a4:29:15:bd:d1:91:ce:c5:f3:28:20:e1:fb: fa:59:59:40:0e:15:c8:ff:01:43:84:68:a1:e0:60:65:ec:38: 3b:48:db:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx MTBENDVCRTMwHhcNMjUwNDI1MDIxMjUzWhcNMjUwNTAyMDIxMjUzWjAYMRYwFAYD VQQDEw02ODBhZWZhNS0yNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9BEUtlHEJXuVQ+GjffkfMnWMrxCDXGB0+Ss5/yyQ9VKOARhDuOMt/04md8sY mTaYr5E16iDimEZSMHSPgFL+4+1O1G4arg/iU2i3NZXeLlz38acnsrrmLI3YzCha NDCeFxIu/cXX30K8a7pBuBL/nfHSfxbHt6JXzEG+Nl9h83cfxWRTTXWLbG6FT1QL z4lpjIXwwThCL3I/dL0CwdkyQOu/4Y4CzbV1QPrCBtm8sgPWZo85GWctE35cWY7y lW0Fw+mUOaiS+dSxhWizKuAX2tgMQkCO5tBfz9rBskJc/d8IU2TZVWkDyC385S4N gCnoUBlppQAW2QNx3S1vl2lU0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoySW5s 1fP0mjXvanQorrWklJtlMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU aTBkelJWUzJrRk1SRFVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCS/42LW4ojHy7rHVmijHxXLikAuB9VW3u2OkbLYyEt4+X/n9oehK9 3J0Eo+Rl98LMG8dq75FzWTQ5qgl77J9MUcerrYxtmy/dew6ZA7GojRG8DEZupO7b nFUt3gvwyvo+GJrWvMbsIk++wT9Hvb7HvenL2sdhZypgKPNLmLp+YXJoAGVEJ7Zi pC1gpz7WxcvXlweAzk4lT4Ejr4HDaQENW6b5MSeCCAZBXewcObhfVt70A2Y23M0M NcCUGVfq29e5QRP9CMaZMM7ThApFXJ8ujgzVFUnbaJhhPns+0KQpFb3Rkc7F8ygg 4fv6WVlADhXI/wFDhGih4GBl7Dg7SNvv -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:21 2025 by rpki-client