$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft File: D3l9fCpdNafL2-hN_HPLmBnV7yM.mft (raw, json) Hash identifier: YIwMNIjiO5znOwYcuNoxP69tnVy0AmmYUrfrlMCQYE4= Subject key identifier: E8:11:2D:06:5F:44:42:C4:DD:55:D2:50:D4:35:66:92:40:71:8F:70 Authority key identifier: 0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 Certificate issuer: /CN=A91B0913/serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft Manifest number: 0256 Signing time: Fri 25 Apr 2025 01:34:27 +0000 Manifest this update: Fri 25 Apr 2025 01:34:26 +0000 Manifest next update: Fri 02 May 2025 01:34:26 +0000 Files and hashes: 1: D3l9fCpdNafL2-hN_HPLmBnV7yM.crl (hash: 3PvuGcTPOiF4TIxNwtb6dt9F4xbHHEmib2I4uvvxApA=) 2: A1B8513612FE11ED8A1DA356C4F9AE02.roa (hash: zKt5rIlG3Ic7UH3iJOhsHCuRIq5p4/W7QWgInl/Ff3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0913, serialNumber=0F797D7C2A5D35A7CBDBE84DFC73CB9819D5EF23 Validity Not Before: Apr 25 01:34:26 2025 GMT Not After : May 2 01:34:26 2025 GMT Subject: CN=680ae6a3-c8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:91:d4:90:b9:3f:9d:b6:af:30:3f:d1:8f: 63:d1:5a:9e:e6:be:4d:18:fe:75:e3:2d:1d:b3:8c: fe:20:8b:51:93:bc:98:4e:77:63:18:9d:75:c4:cd: 87:f6:99:33:ac:44:08:2f:6e:72:76:3e:c3:c3:1b: 38:00:e2:4a:47:da:38:1d:4f:66:d0:3b:8f:63:33: 14:ee:ce:44:55:a3:d7:ef:1c:b7:ce:84:84:60:2c: 02:e8:f4:b8:90:f8:80:b0:1c:85:df:c2:18:e7:97: 42:ec:f5:b9:fe:22:6f:b6:9c:4c:4d:ae:e9:22:58: e8:aa:6c:13:6c:b2:50:25:ac:66:d8:60:a9:c9:0e: cd:2b:a2:8d:a0:bf:30:07:c2:27:17:dc:a2:61:cc: 34:26:39:20:bd:b9:6e:c8:14:ab:dc:0a:30:73:0e: 08:8d:c0:da:e5:fa:6e:e4:1a:5e:d5:e2:f9:9c:6d: 9d:1b:04:18:42:da:8a:3e:dc:d6:4a:ab:a4:9c:aa: fa:35:bc:60:44:7d:26:c8:05:c7:9c:b1:1e:5d:cf: b9:9b:27:48:ba:da:43:3b:99:28:cf:c1:38:de:cc: 87:6c:bb:1a:53:a2:b0:d6:a7:53:40:ff:5a:81:2e: 91:4e:4b:70:56:fd:63:2b:89:cf:8a:45:af:6c:62: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:11:2D:06:5F:44:42:C4:DD:55:D2:50:D4:35:66:92:40:71:8F:70 X509v3 Authority Key Identifier: keyid:0F:79:7D:7C:2A:5D:35:A7:CB:DB:E8:4D:FC:73:CB:98:19:D5:EF:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D3l9fCpdNafL2-hN_HPLmBnV7yM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0913/DA713F9612FA11ED84AD7251C4F9AE02/D3l9fCpdNafL2-hN_HPLmBnV7yM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6a:42:88:00:91:84:79:fe:cc:6f:7f:8d:b4:bc:9b:49:15: ee:41:05:6e:c7:0b:b0:95:e7:91:fd:d9:8c:64:24:00:df:a5: 3c:65:d4:44:4a:4f:93:fa:36:a4:e8:ab:7f:c6:8d:10:ef:b4: 2a:19:e2:aa:97:76:ca:60:65:a7:4c:4d:10:09:e4:28:3a:e4: 21:37:35:b4:2a:e0:db:9f:17:b4:df:b4:3f:b7:f3:04:0c:c9: 85:38:2f:2a:89:d5:22:3f:38:fb:2c:26:de:b0:85:f8:a9:ab: 15:89:42:42:5c:5b:9e:d2:24:b9:96:f0:fe:2c:07:ca:41:a3: 3c:36:78:51:0e:28:9e:18:29:6f:c6:4a:f7:c3:46:f5:5c:5a: 86:a1:c1:d1:af:2a:75:70:0a:74:eb:d1:e2:6f:bf:0b:37:65: 0c:74:cf:c5:61:c3:62:09:80:bb:90:47:31:41:8b:9f:a9:63: e2:68:10:74:96:1c:ca:74:23:66:0b:c1:f6:c6:4e:89:9d:94: 29:89:75:79:4f:ee:ef:f8:95:1e:4b:f8:a3:88:57:67:d6:af: c4:41:21:2e:88:18:90:78:d7:f3:43:bb:1a:1b:7c:c6:bb:10: 5b:16:3f:ec:29:db:80:88:ce:97:59:b6:42:42:b6:79:83:50: 29:39:ad:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA5MTMxMTAvBgNVBAUTKDBGNzk3RDdDMkE1RDM1QTdDQkRCRTg0REZDNzNDQjk4 MTlENUVGMjMwHhcNMjUwNDI1MDEzNDI2WhcNMjUwNTAyMDEzNDI2WjAYMRYwFAYD VQQDEw02ODBhZTZhMy1jOGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TuR1JC5P522rzA/0Y9j0Vqe5r5NGP514y0ds4z+IItRk7yYTndjGJ11xM2H 9pkzrEQIL25ydj7Dwxs4AOJKR9o4HU9m0DuPYzMU7s5EVaPX7xy3zoSEYCwC6PS4 kPiAsByF38IY55dC7PW5/iJvtpxMTa7pIljoqmwTbLJQJaxm2GCpyQ7NK6KNoL8w B8InF9yiYcw0JjkgvbluyBSr3Aowcw4IjcDa5fpu5Bpe1eL5nG2dGwQYQtqKPtzW SquknKr6NbxgRH0myAXHnLEeXc+5mydIutpDO5koz8E43syHbLsaU6Kw1qdTQP9a gS6RTktwVv1jK4nPikWvbGISCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgRLQZf RELE3VXSUNQ1ZpJAcY9wMB8GA1UdIwQYMBaAFA95fXwqXTWny9voTfxzy5gZ1e8j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDkxMy9EQTcxM0Y5NjEy RkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5hZkwyLWhOX0hQTG1CblY3 eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QzbDlmQ3BkTmFmTDItaE5fSFBMbUJuVjd5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDkxMy9EQTcxM0Y5NjEyRkExMUVEODRBRDcyNTFDNEY5QUUwMi9EM2w5ZkNwZE5h ZkwyLWhOX0hQTG1CblY3eU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfakKIAJGEef7Mb3+NtLybSRXuQQVuxwuwleeR/dmMZCQA36U8ZdRE Sk+T+jak6Kt/xo0Q77QqGeKql3bKYGWnTE0QCeQoOuQhNzW0KuDbnxe037Q/t/ME DMmFOC8qidUiPzj7LCbesIX4qasViUJCXFue0iS5lvD+LAfKQaM8NnhRDiieGClv xkr3w0b1XFqGocHRryp1cAp069Hib78LN2UMdM/FYcNiCYC7kEcxQYufqWPiaBB0 lhzKdCNmC8H2xk6JnZQpiXV5T+7v+JUeS/ijiFdn1q/EQSEuiBiQeNfzQ7saG3zG uxBbFj/sKduAiM6XWbZCQrZ5g1ApOa20 -----END CERTIFICATE-----Generated at Sat Apr 26 05:47:22 2025 by rpki-client