$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: kG2kQQUAizjkEDmi+zACbDZgDnpg+EW05dwBruMmtII= Subject key identifier: 13:8A:14:B6:47:74:3E:47:65:43:AF:8E:D1:50:66:2D:CF:31:3A:71 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 0969 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 0959 Signing time: Thu 24 Apr 2025 20:05:37 +0000 Manifest this update: Thu 24 Apr 2025 20:05:36 +0000 Manifest next update: Thu 01 May 2025 20:05:36 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: P5ac3P7DdpLgU9CUykkWjlLAwzR60gaYYgGPQrHnha8=) 2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: Xd/9pByFb2cbZ9xoUnmDVjNmjmus87X0lFOERhfsZNI=) 3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: N79J5/addSjvuTRJUjHpGEDoonJ5OZtfdl2v8Aonsr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2409 (0x969) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Apr 24 20:05:36 2025 GMT Not After : May 1 20:05:36 2025 GMT Subject: CN=680a9991-f3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:d7:75:e4:95:c6:bb:66:c1:c3:5f:1f:66: f4:d9:7a:34:bf:6a:f2:d6:2c:0d:c1:ec:5e:c0:04: 75:56:97:9b:76:b1:7b:04:e8:78:5a:4c:41:87:95: f2:7d:96:31:db:4f:c9:ad:0d:76:43:99:b6:8e:8d: 59:b8:09:6e:dd:1b:36:84:07:d0:e1:86:c8:23:15: 17:b1:48:0f:01:1f:26:af:13:1e:47:61:b4:03:84: 66:ff:ae:42:04:bd:9f:7e:a9:fd:3a:39:65:ed:a0: 9e:98:9f:f6:28:41:74:97:35:0f:38:76:4d:9f:95: 98:c2:ec:34:54:66:9d:c1:81:9a:13:79:54:46:79: 77:4a:03:7e:fb:c3:c5:18:85:f8:1a:8a:76:a9:5c: 08:9b:57:c0:e0:cf:16:96:15:56:97:4a:67:3a:4b: 69:1f:39:07:95:a1:88:93:c5:1c:15:f8:67:2b:8f: 45:81:18:22:8e:9c:04:f6:d1:91:d9:50:e7:98:56: 31:f5:f1:44:41:f1:2c:80:13:e4:78:d0:1a:e2:70: 89:d2:0c:78:9f:8e:0f:1d:d6:2d:4b:ea:80:25:f0: 11:7c:4b:a2:c7:70:44:e8:c6:6b:7e:d7:83:20:46: 87:c4:4b:84:55:e7:88:25:ba:e2:e2:16:2e:5f:65: 18:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8A:14:B6:47:74:3E:47:65:43:AF:8E:D1:50:66:2D:CF:31:3A:71 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5d:91:f1:85:0a:47:58:2f:9b:30:40:f4:73:b4:80:05:e4: a7:04:af:7f:d7:f1:48:f6:e0:cc:56:be:24:c9:57:c5:df:10: 72:49:4d:48:a9:94:d7:c8:cb:27:ca:36:a5:c1:9d:47:e4:a7: 61:34:36:28:83:39:db:a2:4e:67:83:d0:c8:32:a5:a7:0d:53: 17:d1:2a:8f:14:42:60:1b:4e:9e:38:5d:aa:5d:84:72:e2:33: 16:7e:d3:c7:1b:fc:7c:56:47:8a:21:ed:33:80:a2:0e:e1:29: b7:6c:6d:5f:45:e1:63:07:58:29:db:78:a0:42:2b:0a:23:0a: 55:91:cb:0c:13:e5:c8:98:5a:cf:1c:b9:39:c1:56:ea:b5:6f: ec:68:e2:6f:95:d6:57:15:ea:65:60:1a:ae:ea:ea:c1:bb:e4: a1:13:a8:2a:f9:9a:b3:74:b9:59:8f:3d:9b:58:cf:7b:00:cb: 9c:29:c1:03:9d:34:6a:67:c8:0d:78:dd:81:21:74:f7:b0:62: 6f:fe:6a:f1:95:e5:4e:4e:bb:f2:4c:95:3d:d9:43:cf:fe:93: 1e:ec:4d:e9:0e:e3:7e:86:36:14:f4:3d:57:15:b1:8a:08:51: 6c:59:ad:f7:4d:0e:51:96:b7:b3:e1:f9:ca:4d:7d:c2:f4:8c: 16:23:db:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjUwNDI0MjAwNTM2WhcNMjUwNTAxMjAwNTM2WjAYMRYwFAYD VQQDEw02ODBhOTk5MS1mM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApk/XdeSVxrtmwcNfH2b02Xo0v2ry1iwNwexewAR1VpebdrF7BOh4WkxBh5Xy fZYx20/JrQ12Q5m2jo1ZuAlu3Rs2hAfQ4YbIIxUXsUgPAR8mrxMeR2G0A4Rm/65C BL2ffqn9Ojll7aCemJ/2KEF0lzUPOHZNn5WYwuw0VGadwYGaE3lURnl3SgN++8PF GIX4Gop2qVwIm1fA4M8WlhVWl0pnOktpHzkHlaGIk8UcFfhnK49FgRgijpwE9tGR 2VDnmFYx9fFEQfEsgBPkeNAa4nCJ0gx4n44PHdYtS+qAJfARfEuix3BE6MZrfteD IEaHxEuEVeeIJbri4hYuX2UYDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOKFLZH dD5HZUOvjtFQZi3PMTpxMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbXZHxhQpHWC+bMED0c7SABeSnBK9/1/FI9uDMVr4kyVfF3xBySU1I qZTXyMsnyjalwZ1H5KdhNDYogznbok5ng9DIMqWnDVMX0SqPFEJgG06eOF2qXYRy 4jMWftPHG/x8VkeKIe0zgKIO4Sm3bG1fReFjB1gp23igQisKIwpVkcsME+XImFrP HLk5wVbqtW/saOJvldZXFeplYBqu6urBu+ShE6gq+ZqzdLlZjz2bWM97AMucKcED nTRqZ8gNeN2BIXT3sGJv/mrxleVOTrvyTJU92UPP/pMe7E3pDuN+hjYU9D1XFbGK CFFsWa33TQ5Rlrez4fnKTX3C9IwWI9sx -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:46 2025 by rpki-client