$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: pffebQYaWeIVGPoNXMyGOW8IYs1FNp5r4aSWj/9SBhM= Subject key identifier: 5B:E2:B3:34:5E:45:09:7D:8B:78:40:EA:FC:14:60:0E:10:9A:43:13 Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 0881 Signing time: Thu 24 Apr 2025 20:29:21 +0000 Manifest this update: Thu 24 Apr 2025 20:29:21 +0000 Manifest next update: Thu 01 May 2025 20:29:21 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: WHTzwmTcPHlB7QMvn3iTnHyINqscmmLRvdRfWr0VJk4=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: jrXgAGT3lqn2oPe4fiJJc8FiNv+5i0XvozNfLQNBQxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Apr 24 20:29:21 2025 GMT Not After : May 1 20:29:21 2025 GMT Subject: CN=680a9f21-136f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:05:1b:ce:ef:c7:b6:11:fe:2d:ef:99:30: 10:82:38:e1:37:ac:bf:1d:0d:c8:74:bc:c4:6d:1c: 91:74:ab:68:89:ee:eb:86:e4:c9:7c:a3:06:2b:96: f4:95:03:26:63:ab:a0:c0:99:56:ab:85:2b:2d:95: 71:8e:15:7c:38:28:96:cc:53:a3:1c:d3:65:42:c9: 0a:a0:2f:3c:a8:3b:c9:fc:e5:d2:5c:0f:5d:d5:2e: 17:01:ca:3c:77:b4:38:90:08:a1:c8:ca:73:af:d5: bf:16:9c:7e:64:5f:b5:65:aa:29:0d:b6:e8:75:ed: ce:ae:61:3e:33:a2:1f:b9:03:eb:06:50:a9:3b:aa: 50:12:73:4a:e5:18:57:71:8d:a6:83:2a:ff:87:3b: b7:71:9b:3e:64:62:02:13:c8:48:f0:2e:0d:6d:e2: 3c:3b:4f:5f:7d:e5:57:5a:7c:40:c6:0d:1b:0e:81: 9b:f1:f9:7d:7a:ea:85:bc:bb:f1:9f:57:3e:1b:4b: 2a:79:00:69:cb:2c:58:f1:19:aa:59:aa:c3:d4:34: 82:f0:6c:0f:28:e7:17:83:e2:72:71:52:6c:97:00: 79:b6:ed:3a:4a:90:51:15:30:cb:32:fb:66:f6:f4: 96:e6:90:d5:22:a4:48:0c:95:0e:9e:c6:55:df:5c: 45:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E2:B3:34:5E:45:09:7D:8B:78:40:EA:FC:14:60:0E:10:9A:43:13 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:25:79:04:45:2c:1b:fe:36:93:0c:22:bc:0b:38:f9:ca:bf: c3:bb:54:34:fc:8f:17:1a:af:32:02:3b:9b:44:de:dc:96:02: 25:59:c2:d2:f2:d3:cf:cf:e2:6d:5c:cb:67:42:87:28:0e:0f: 5c:14:5b:1b:63:e6:f0:2c:24:31:ff:52:65:d3:5d:a0:fc:ed: 1a:47:3e:42:01:93:bb:d2:60:b0:ca:07:a4:ab:d2:72:7a:9a: 6c:54:a6:e0:0d:8d:19:d7:bb:43:a6:ee:a8:98:1c:36:2d:c9: 04:9d:07:0b:79:04:27:30:79:6f:38:a6:9f:54:f4:b2:a3:17: e8:47:ac:07:b8:6e:0a:2b:32:07:43:4c:cb:d6:36:e0:b3:3b: f9:4f:82:a8:11:2e:41:0c:39:4a:37:15:c6:e0:8b:c9:32:d7: a6:a8:25:cb:25:f3:ab:58:65:32:a6:65:c3:48:80:18:5b:85: 26:1d:ef:32:e5:14:60:4f:ea:c8:2f:5c:5e:3c:83:c4:6a:3a: 18:fe:7a:eb:bb:18:5d:b7:23:f6:a9:f5:10:fe:16:68:21:e7: aa:38:10:70:8a:15:03:ae:68:03:0a:d9:da:5f:2c:05:b7:70: ca:62:5a:37:62:e7:ff:d5:72:66:f2:52:c3:83:5e:66:cb:04: 64:43:f6:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjUwNDI0MjAyOTIxWhcNMjUwNTAxMjAyOTIxWjAYMRYwFAYD VQQDEw02ODBhOWYyMS0xMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUoFG87vx7YR/i3vmTAQgjjhN6y/HQ3IdLzEbRyRdKtoie7rhuTJfKMGK5b0 lQMmY6ugwJlWq4UrLZVxjhV8OCiWzFOjHNNlQskKoC88qDvJ/OXSXA9d1S4XAco8 d7Q4kAihyMpzr9W/Fpx+ZF+1ZaopDbbode3OrmE+M6IfuQPrBlCpO6pQEnNK5RhX cY2mgyr/hzu3cZs+ZGICE8hI8C4NbeI8O09ffeVXWnxAxg0bDoGb8fl9euqFvLvx n1c+G0sqeQBpyyxY8RmqWarD1DSC8GwPKOcXg+JycVJslwB5tu06SpBRFTDLMvtm 9vSW5pDVIqRIDJUOnsZV31xFPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFviszRe RQl9i3hA6vwUYA4QmkMTMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1JXkERSwb/jaTDCK8Czj5yr/Du1Q0/I8XGq8yAjubRN7clgIlWcLS 8tPPz+JtXMtnQocoDg9cFFsbY+bwLCQx/1Jl012g/O0aRz5CAZO70mCwygekq9Jy eppsVKbgDY0Z17tDpu6omBw2LckEnQcLeQQnMHlvOKafVPSyoxfoR6wHuG4KKzIH Q0zL1jbgszv5T4KoES5BDDlKNxXG4IvJMtemqCXLJfOrWGUypmXDSIAYW4UmHe8y 5RRgT+rIL1xePIPEajoY/nrruxhdtyP2qfUQ/hZoIeeqOBBwihUDrmgDCtnaXywF t3DKYlo3Yuf/1XJm8lLDg15mywRkQ/Z1 -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:47 2025 by rpki-client