$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft File: 43R0Hh7G7NjwB3XisOiSmLY45mo.mft (raw, json) Hash identifier: tjobdaspQXUoQfaGbOH2A5RknWjzKVciKl8BluaK7tY= Subject key identifier: 2E:3F:53:50:2C:07:98:C7:1B:8C:C6:0E:F3:11:9A:F0:48:C3:2B:D9 Authority key identifier: E3:74:74:1E:1E:C6:EC:D8:F0:07:75:E2:B0:E8:92:98:B6:38:E6:6A Certificate issuer: /CN=A91B0416/serialNumber=E374741E1EC6ECD8F00775E2B0E89298B638E66A Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft Manifest number: 0417 Signing time: Fri 25 Apr 2025 00:11:58 +0000 Manifest this update: Fri 25 Apr 2025 00:11:58 +0000 Manifest next update: Fri 02 May 2025 00:11:58 +0000 Files and hashes: 1: 43R0Hh7G7NjwB3XisOiSmLY45mo.crl (hash: 4x8r3MCe0GBy8JqJMHikjK8smc36DUylr964vtGJ0zg=) 2: B56622C2638011ECAFDDDF20C4F9AE02.roa (hash: 5JVS9rLOFKIljft/lvnWQAQk331+RM1kSimyqz2YLac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.crl rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0416, serialNumber=E374741E1EC6ECD8F00775E2B0E89298B638E66A Validity Not Before: Apr 25 00:11:58 2025 GMT Not After : May 2 00:11:58 2025 GMT Subject: CN=680ad34e-f9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:34:be:ab:11:6e:09:94:a7:62:8a:eb:55: cc:32:b3:65:7f:e7:4e:c8:3c:3e:94:fc:28:5c:63: b2:e9:04:a4:b0:2d:5e:b5:4c:28:88:b1:9b:f2:57: 9a:59:50:a9:49:1c:36:4a:c7:19:45:90:22:da:06: 97:4c:43:54:c4:36:94:c7:74:30:22:0d:62:5f:f9: 53:c2:4d:1c:6f:10:16:b6:00:b1:35:42:0a:34:6d: eb:1f:13:3c:2f:84:7d:b5:83:e1:da:de:00:53:9b: 1b:6b:a6:6b:32:af:88:0c:7e:9a:2a:96:c9:b0:3e: 03:73:8f:37:da:a0:6a:31:c1:b7:01:20:cc:87:ec: 83:44:91:77:f7:fc:50:1a:2b:0f:78:95:1d:17:2b: 24:3d:a7:fb:0e:69:01:09:a1:6c:e0:75:32:1b:69: 1a:61:81:7f:96:9a:eb:74:a9:a0:ac:e2:94:24:17: 97:e2:c3:d9:c7:21:5f:19:be:16:31:fc:36:f9:12: 8a:d3:94:da:15:52:e1:7a:3e:bd:da:e4:2e:aa:b7: 31:37:a9:c7:20:d3:52:a9:5f:ea:6f:24:85:8e:6f: e4:32:00:c8:ae:44:bd:24:8c:8e:bc:c1:1e:66:f8: c9:7c:b0:9c:ab:6a:3f:ac:2b:ef:65:a4:4b:e4:d2: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3F:53:50:2C:07:98:C7:1B:8C:C6:0E:F3:11:9A:F0:48:C3:2B:D9 X509v3 Authority Key Identifier: keyid:E3:74:74:1E:1E:C6:EC:D8:F0:07:75:E2:B0:E8:92:98:B6:38:E6:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/43R0Hh7G7NjwB3XisOiSmLY45mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0416/54750BDA637C11EC9C822317C4F9AE02/43R0Hh7G7NjwB3XisOiSmLY45mo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:2c:02:2e:db:e1:e3:20:9f:cf:90:c5:6c:aa:4d:ec:0a:86: 22:e5:85:82:d1:01:9b:fe:67:fa:24:e6:75:66:4a:71:87:c9: 4e:60:88:de:47:82:af:44:39:3f:3b:ef:2a:4c:c6:d6:e7:3d: 3e:aa:1d:ba:db:03:2d:08:27:36:db:67:27:21:de:c1:ec:60: 44:9e:65:8d:4c:db:07:8f:fd:bd:17:6e:e3:54:e0:97:ad:ab: e5:a3:58:ba:26:91:4b:07:fb:f2:32:0b:94:cf:2a:c4:03:1c: 2b:9c:bf:75:ea:70:8c:45:5b:f5:17:f5:af:3d:4b:fb:17:67: ac:ca:1c:ea:32:98:4d:85:c4:76:16:1d:f1:37:d5:a1:d7:48: d1:25:1c:32:69:da:6e:65:dc:d9:9c:b5:54:77:84:f9:68:e8: b3:33:45:68:b9:93:34:43:51:d2:09:87:85:b0:71:9b:06:18: 81:e3:05:ea:3a:9c:e2:fc:54:52:da:54:41:4f:89:2f:49:33: 44:90:a7:aa:ea:2f:ca:e1:f0:23:98:71:78:2b:73:b1:2d:b8: 71:f8:39:05:f4:1c:be:c8:2a:ad:ab:d6:62:42:a1:86:88:3b: 2c:cc:eb:1b:0b:af:d7:00:7a:94:19:18:13:9d:97:f4:2f:e6: 29:7f:76:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0MTYxMTAvBgNVBAUTKEUzNzQ3NDFFMUVDNkVDRDhGMDA3NzVFMkIwRTg5Mjk4 QjYzOEU2NkEwHhcNMjUwNDI1MDAxMTU4WhcNMjUwNTAyMDAxMTU4WjAYMRYwFAYD VQQDEw02ODBhZDM0ZS1mOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyY0vqsRbgmUp2KK61XMMrNlf+dOyDw+lPwoXGOy6QSksC1etUwoiLGb8lea WVCpSRw2SscZRZAi2gaXTENUxDaUx3QwIg1iX/lTwk0cbxAWtgCxNUIKNG3rHxM8 L4R9tYPh2t4AU5sba6ZrMq+IDH6aKpbJsD4Dc4832qBqMcG3ASDMh+yDRJF39/xQ GisPeJUdFyskPaf7DmkBCaFs4HUyG2kaYYF/lprrdKmgrOKUJBeX4sPZxyFfGb4W Mfw2+RKK05TaFVLhej692uQuqrcxN6nHINNSqV/qbySFjm/kMgDIrkS9JIyOvMEe ZvjJfLCcq2o/rCvvZaRL5NLz0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4/U1As B5jHG4zGDvMRmvBIwyvZMB8GA1UdIwQYMBaAFON0dB4exuzY8Ad14rDokpi2OOZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDQxNi81NDc1MEJEQTYz N0MxMUVDOUM4MjIzMTdDNEY5QUUwMi80M1IwSGg3RzdOandCM1hpc09pU21MWTQ1 bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQzUjBIaDdHN05qd0IzWGlzT2lTbUxZNDVtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDQxNi81NDc1MEJEQTYzN0MxMUVDOUM4MjIzMTdDNEY5QUUwMi80M1IwSGg3RzdO andCM1hpc09pU21MWTQ1bW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGLAIu2+HjIJ/PkMVsqk3sCoYi5YWC0QGb/mf6JOZ1Zkpxh8lOYIje R4KvRDk/O+8qTMbW5z0+qh262wMtCCc222cnId7B7GBEnmWNTNsHj/29F27jVOCX ravlo1i6JpFLB/vyMguUzyrEAxwrnL916nCMRVv1F/WvPUv7F2esyhzqMphNhcR2 Fh3xN9Wh10jRJRwyadpuZdzZnLVUd4T5aOizM0VouZM0Q1HSCYeFsHGbBhiB4wXq Opzi/FRS2lRBT4kvSTNEkKeq6i/K4fAjmHF4K3OxLbhx+DkF9By+yCqtq9ZiQqGG iDsszOsbC6/XAHqUGRgTnZf0L+Ypf3a7 -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:26 2025 by rpki-client