$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json) Hash identifier: MnQv1kmwDGFeno2B2FSw7wdM1HfN/iPm2ALou9Zu7TI= Subject key identifier: CE:58:35:A0:C8:11:BD:9C:87:DC:90:1D:89:E9:9E:7E:0A:3E:72:F6 Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft Manifest number: BF Signing time: Fri 25 Apr 2025 04:57:30 +0000 Manifest this update: Fri 25 Apr 2025 04:57:29 +0000 Manifest next update: Fri 02 May 2025 04:57:29 +0000 Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: 5Nnryk2zIvv/+3OWyPIaDlXOfm7y5nPU03jyA0xVDW4=) 2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: 5eMEB5vOjKQ5wQgd27+ZUWTTg4x5gmrbf6+2h3hRHcw=) 3: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: qJIeqrgvCSqMs8+P3KeM1F5hY5WT3B+IFIjWWFc0WLk=) 4: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: wEtGlzkarGn03dBjE4SQLfRy6nk8r9fN3HDFHlt9mQY=) 5: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: OxXlFTh6o0hdm5zRnG9YrbxWsj3c5r5ToTCPNyKoHps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: Apr 25 04:57:29 2025 GMT Not After : May 2 04:57:29 2025 GMT Subject: CN=680b163a-3212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f9:b6:76:e0:e8:79:92:36:0a:50:76:4f:b8: 63:28:66:3c:9a:5f:d2:a4:81:2e:03:36:46:02:65: 5e:04:3e:65:1f:2b:58:50:6a:8a:82:1d:d7:6b:9b: ae:80:b2:02:64:9e:df:79:dc:41:c1:99:c5:63:7d: 86:3c:4c:f2:63:79:44:d4:87:56:ff:78:96:b5:9d: df:e6:08:2a:91:70:92:8c:84:e0:47:e9:b0:98:72: 9b:c9:49:d7:a8:db:28:40:43:d6:99:5d:03:9c:f8: 9c:29:ef:5d:79:b8:6f:77:d6:59:29:86:3f:70:f3: 05:33:a7:1d:e1:06:d2:82:6b:2f:cb:08:ef:99:d1: 5c:64:3c:f5:0f:ea:7e:82:c0:af:7f:a6:de:1b:03: 8e:b5:e0:3d:ce:4c:4a:ab:fb:31:bc:20:30:85:04: 3e:fc:95:a9:82:e2:6b:a9:f2:6a:a2:de:b7:9c:90: dc:27:a9:f8:dd:4f:57:af:d9:ca:50:95:48:11:de: a6:de:fe:e8:a8:bc:8a:d3:bf:14:05:fd:31:25:41: 51:6a:35:44:22:b8:73:89:0a:38:f0:35:76:2d:07: 5b:4e:ad:76:46:17:3e:6c:86:61:7f:a2:c5:8a:05: 5f:76:ae:fd:0f:22:b0:21:cb:af:e7:e5:d0:1a:29: 09:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:58:35:A0:C8:11:BD:9C:87:DC:90:1D:89:E9:9E:7E:0A:3E:72:F6 X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:1b:da:61:0a:94:82:a6:f2:40:e6:62:72:f1:c0:7e:cf:47: c7:78:3a:de:7b:c8:8b:5f:98:c6:f4:8c:c5:b2:20:30:ef:6b: d6:af:3a:4d:93:27:2e:54:bb:68:8a:26:65:87:89:0f:68:67: 85:79:84:e1:69:ce:3d:55:55:ae:6c:b2:0e:84:f6:c3:9c:db: 03:b5:7e:21:7f:19:8f:d7:a9:8a:a3:4a:47:ea:ff:09:08:50: 6a:bf:e4:cf:07:58:6c:2c:70:2d:aa:e0:8b:8c:d6:9f:24:b0: 11:6d:29:d0:0d:93:ca:ff:61:c4:95:e0:37:9d:6d:21:77:42: a2:04:47:49:d3:f4:7d:ac:8a:b4:30:d1:28:e6:aa:8e:a0:63: 54:db:7b:62:27:de:6e:55:24:86:05:b3:87:4a:3d:f1:e9:1b: 7d:2d:31:14:6f:20:60:c2:76:fe:60:78:18:8b:0b:c1:7a:a7: 5a:20:98:04:f8:59:aa:66:05:6e:c8:79:11:7f:e7:26:24:ed: da:e0:8b:8f:77:f7:6a:5d:58:78:5c:ba:26:2b:a1:2c:c0:c1: 89:8e:4d:26:27:9a:37:70:fd:70:8e:79:ae:b7:9c:22:36:f0: e4:b9:d5:35:02:63:75:19:6f:49:7c:0d:32:19:37:98:a1:68: c6:cf:16:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD NjAwNTg5MDIwHhcNMjUwNDI1MDQ1NzI5WhcNMjUwNTAyMDQ1NzI5WjAYMRYwFAYD VQQDEw02ODBiMTYzYS0zMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPm2duDoeZI2ClB2T7hjKGY8ml/SpIEuAzZGAmVeBD5lHytYUGqKgh3Xa5uu gLICZJ7fedxBwZnFY32GPEzyY3lE1IdW/3iWtZ3f5ggqkXCSjITgR+mwmHKbyUnX qNsoQEPWmV0DnPicKe9debhvd9ZZKYY/cPMFM6cd4QbSgmsvywjvmdFcZDz1D+p+ gsCvf6beGwOOteA9zkxKq/sxvCAwhQQ+/JWpguJrqfJqot63nJDcJ6n43U9Xr9nK UJVIEd6m3v7oqLyK078UBf0xJUFRajVEIrhziQo48DV2LQdbTq12Rhc+bIZhf6LF igVfdq79DyKwIcuv5+XQGikJMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5YNaDI Eb2ch9yQHYnpnn4KPnL2MB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2 QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda aWh6SlVLeHZvUXZHQUZpUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDG9phCpSCpvJA5mJy8cB+z0fHeDree8iLX5jG9IzFsiAw72vWrzpN kycuVLtoiiZlh4kPaGeFeYThac49VVWubLIOhPbDnNsDtX4hfxmP16mKo0pH6v8J CFBqv+TPB1hsLHAtquCLjNafJLARbSnQDZPK/2HEleA3nW0hd0KiBEdJ0/R9rIq0 MNEo5qqOoGNU23tiJ95uVSSGBbOHSj3x6Rt9LTEUbyBgwnb+YHgYiwvBeqdaIJgE +FmqZgVuyHkRf+cmJO3a4IuPd/dqXVh4XLomK6EswMGJjk0mJ5o3cP1wjnmut5wi NvDkudU1AmN1GW9JfA0yGTeYoWjGzxaN -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:15 2025 by rpki-client