$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft File: 1f9FyAWBJcJy3wRtwLjgb6owT88.mft (raw, json) Hash identifier: xK61NCfDBV4jinJlGrIqaRI0kka4s6OKRQMRi4elvEs= Subject key identifier: 77:0D:3D:32:71:52:D9:DB:B0:23:78:43:E0:EB:DE:AA:AA:85:A8:17 Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF Certificate issuer: /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft Manifest number: 03C5 Signing time: Fri 25 Apr 2025 00:25:55 +0000 Manifest this update: Fri 25 Apr 2025 00:25:55 +0000 Manifest next update: Fri 02 May 2025 00:25:55 +0000 Files and hashes: 1: 1f9FyAWBJcJy3wRtwLjgb6owT88.crl (hash: dpZpx+QvnaUha1RupkyrK0ITvU7wS0MPYGOXTb5AFNY=) 2: 99F51284A1E911EDAD7CE929C4F9AE02.roa (hash: DgFh0007lZzBIY6/Uazy8v7Lvih8jtP3rAyQ1LouyMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7E29, serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF Validity Not Before: Apr 25 00:25:55 2025 GMT Not After : May 2 00:25:55 2025 GMT Subject: CN=680ad693-2f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e5:93:cc:19:2e:84:47:c7:7e:fc:fe:71:d7: e6:4e:b3:e0:7c:5c:04:04:b6:55:05:88:a2:21:ee: 01:c4:99:4d:d6:4b:02:c1:ee:24:09:0e:8c:44:7b: a8:81:f2:97:62:63:30:ec:90:a1:a9:7c:a6:73:9f: c2:51:26:41:4a:d1:e6:26:b2:bd:e9:24:97:9a:3c: 09:61:9b:ab:4f:52:fa:73:33:49:18:2f:c0:95:a7: 60:bb:c5:d6:1b:09:85:80:76:1f:26:69:3b:58:3f: 56:c3:3b:75:7b:7c:7e:36:93:57:e8:f4:92:db:26: de:72:a8:89:ec:7b:cb:f4:3a:fc:a8:4d:7e:41:ab: d3:3e:1b:49:53:c2:2a:e6:60:40:20:bb:29:b2:3a: 45:d5:48:54:3b:dc:66:89:11:91:4b:5c:3c:6c:af: 5f:f3:5b:53:87:d4:09:1c:93:f8:17:32:e8:fc:6a: 62:fc:ef:5a:91:77:be:ba:76:d9:a8:5a:28:eb:08: 37:0d:2a:4c:b4:84:55:d3:2e:95:ab:2c:52:dd:5b: c8:30:fd:f9:df:b8:b2:01:06:d6:ae:df:98:a4:ae: b3:70:fc:d8:94:88:de:b3:6a:4d:c6:c8:53:d1:62: ae:17:53:05:d5:4a:14:8d:8c:49:8a:ab:b9:ad:d0: f3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0D:3D:32:71:52:D9:DB:B0:23:78:43:E0:EB:DE:AA:AA:85:A8:17 X509v3 Authority Key Identifier: keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:5c:fb:90:a9:e0:06:30:dd:2c:04:b1:07:fe:e9:9f:40:13: 52:89:5a:70:d7:c8:f7:84:97:9a:5a:f6:4b:20:2f:21:b2:16: 5e:18:64:3f:99:4d:a3:f4:9c:01:86:0f:ae:e3:35:4e:47:03: 06:16:c4:bd:bf:53:99:00:95:e6:02:06:6e:a4:19:6f:93:b2: ca:1a:d2:b6:53:8b:55:35:37:f2:5c:2c:79:74:a7:45:e8:3d: c9:e9:91:d4:c9:74:a1:ed:45:6d:21:fe:d2:00:11:aa:ec:35: 1b:c5:d0:1d:28:09:7e:7e:65:51:a5:03:47:9f:43:e6:72:f9: 92:d2:3f:28:dd:0c:b7:68:8a:e9:4b:80:24:cf:fd:2c:69:09: 47:43:c0:0b:1d:3d:21:c4:9d:67:34:a8:04:54:fd:3e:46:ea: 21:52:b4:0a:bb:f9:3e:70:09:d6:70:ad:6c:d5:e6:80:79:f1: f6:76:f9:ea:6f:4a:03:10:f7:96:f3:d0:2e:06:7d:a0:30:16: 08:9c:45:14:03:a7:f8:a0:82:21:b7:14:5d:ee:9f:da:48:5d: ff:0e:a7:c9:9f:54:c9:4b:fd:e8:92:23:50:6f:ff:5c:24:8e: a5:23:58:08:d5:d1:1c:04:40:ea:a0:14:3c:32:9b:4d:79:39: a1:0f:cb:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFMjkxMTAvBgNVBAUTKEQ1RkY0NUM4MDU4MTI1QzI3MkRGMDQ2REMwQjhFMDZG QUEzMDRGQ0YwHhcNMjUwNDI1MDAyNTU1WhcNMjUwNTAyMDAyNTU1WjAYMRYwFAYD VQQDEw02ODBhZDY5My0yZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+WTzBkuhEfHfvz+cdfmTrPgfFwEBLZVBYiiIe4BxJlN1ksCwe4kCQ6MRHuo gfKXYmMw7JChqXymc5/CUSZBStHmJrK96SSXmjwJYZurT1L6czNJGC/Aladgu8XW GwmFgHYfJmk7WD9Wwzt1e3x+NpNX6PSS2ybecqiJ7HvL9Dr8qE1+QavTPhtJU8Iq 5mBAILspsjpF1UhUO9xmiRGRS1w8bK9f81tTh9QJHJP4FzLo/Gpi/O9akXe+unbZ qFoo6wg3DSpMtIRV0y6VqyxS3VvIMP3537iyAQbWrt+YpK6zcPzYlIjes2pNxshT 0WKuF1MF1UoUjYxJiqu5rdDzpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcNPTJx UtnbsCN4Q+Dr3qqqhagXMB8GA1UdIwQYMBaAFNX/RcgFgSXCct8EbcC44G+qME/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0UyOS81NkYxQzUzMjg3 OTAxMUVDODZEMDQ0MUVDNEY5QUUwMi8xZjlGeUFXQkpjSnkzd1J0d0xqZ2I2b3dU ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmOUZ5QVdCSmNKeTN3UnR3TGpnYjZvd1Q4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0UyOS81NkYxQzUzMjg3OTAxMUVDODZEMDQ0MUVDNEY5QUUwMi8xZjlGeUFXQkpj Snkzd1J0d0xqZ2I2b3dUODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0XPuQqeAGMN0sBLEH/umfQBNSiVpw18j3hJeaWvZLIC8hshZeGGQ/ mU2j9JwBhg+u4zVORwMGFsS9v1OZAJXmAgZupBlvk7LKGtK2U4tVNTfyXCx5dKdF 6D3J6ZHUyXSh7UVtIf7SABGq7DUbxdAdKAl+fmVRpQNHn0PmcvmS0j8o3Qy3aIrp S4Akz/0saQlHQ8ALHT0hxJ1nNKgEVP0+RuohUrQKu/k+cAnWcK1s1eaAefH2dvnq b0oDEPeW89AuBn2gMBYInEUUA6f4oIIhtxRd7p/aSF3/DqfJn1TJS/3okiNQb/9c JI6lI1gI1dEcBEDqoBQ8MptNeTmhD8sZ -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:23 2025 by rpki-client