$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json) Hash identifier: CeDSwIfnhwgwoeSkn6pLou97vIB8pkbP4ZH96HkOWf4= Subject key identifier: 4C:04:9C:F9:F8:C8:FE:14:76:8A:F9:6A:7E:50:50:C9:53:50:96:CC Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft Manifest number: 0645 Signing time: Thu 24 Apr 2025 22:20:46 +0000 Manifest this update: Thu 24 Apr 2025 22:20:46 +0000 Manifest next update: Thu 01 May 2025 22:20:46 +0000 Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: ObW2ZkJrKcFXeJUVESz6mWqtYTzlGX8R1RPYmwsNF+g=) 2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: 60iJClNHfCYL5vJ0EICnhz/EaXVeffgn8z0vbfJvk+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Validity Not Before: Apr 24 22:20:46 2025 GMT Not After : May 1 22:20:46 2025 GMT Subject: CN=680ab93e-1d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:6c:89:c6:a3:3a:71:e9:9b:52:e8:d7:44: f7:6c:0c:77:ae:22:69:0b:38:ec:df:49:ce:cc:0c: 7f:f3:6b:19:68:d3:58:72:e7:32:cb:f7:1f:72:f2: 74:f1:37:fe:07:0f:91:bc:a7:57:a2:ce:9c:69:69: bf:b5:d1:98:31:ab:e0:ab:d4:59:07:57:05:85:15: b1:b5:55:79:70:a4:0b:6b:19:b4:c6:d5:27:d0:25: 87:ae:1a:15:a3:5b:98:c9:5f:40:ce:a6:4b:3a:a6: 42:df:57:fc:07:d8:73:67:48:4c:9e:18:58:c1:9e: 45:20:cb:f4:68:bc:82:40:ec:2e:24:8a:74:b6:02: 4d:9d:ef:3e:a3:7f:5d:bc:c5:d7:d7:06:18:5e:e2: 4e:89:e2:f8:f1:15:8a:13:41:e8:89:ef:8f:63:df: 6e:31:bc:a1:63:46:b8:4c:46:f3:92:87:8a:db:fe: 0a:a4:d6:2d:c8:8b:4c:e4:87:a2:c2:f4:89:ae:1a: 29:86:f9:29:3a:0e:d2:6a:bc:e8:2a:c3:0b:e3:9d: b4:00:9e:4b:e6:d2:54:8b:c6:c8:c7:64:a1:ee:bb: 22:e4:05:cb:9c:e4:66:bd:53:2d:6c:59:99:9b:a4: 10:c8:f8:a6:8b:68:ff:93:35:83:b3:c6:a0:f4:41: 70:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:04:9C:F9:F8:C8:FE:14:76:8A:F9:6A:7E:50:50:C9:53:50:96:CC X509v3 Authority Key Identifier: keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:21:79:c9:e9:31:da:ce:e4:b5:57:97:12:3c:3d:ed:a0:6b: 34:c1:be:6d:23:43:ca:64:9d:98:d0:80:b6:70:52:66:50:41: 6c:6c:3c:a2:e9:d8:52:4d:c5:1b:a8:94:db:f4:c1:55:aa:03: 0c:28:b1:7d:76:0e:e6:87:6f:6c:4c:26:61:eb:e7:68:83:be: 58:a2:90:9d:45:71:d1:06:e8:46:95:2a:f2:38:c7:a7:37:5b: d8:7e:50:c5:7c:93:2a:ec:5b:48:60:a7:06:76:d4:92:e9:09: 8c:4e:c6:d4:fa:d2:72:c4:c8:05:42:95:30:af:6f:bf:4e:77: b4:06:7b:6f:54:9a:4a:da:6b:d0:83:40:76:55:cb:3a:85:3a: 08:8c:72:3d:5e:05:3f:23:dc:c8:cf:c4:67:f4:8a:bb:c7:3e: ce:6a:d3:c2:a4:ad:60:f2:86:3e:b7:9a:17:24:60:66:08:35: 94:dc:7d:a2:d9:d3:58:b9:ca:8d:e8:83:e9:1a:1f:32:04:55: 5f:67:27:cb:13:0a:1a:cd:65:ba:1c:69:9c:af:40:df:0f:f1: 42:08:72:b8:e0:03:bf:48:7e:bb:c0:91:22:f3:01:6b:ea:5b: dd:a7:15:5d:6a:af:14:1f:f6:6c:28:91:84:c9:21:68:d1:36: 22:aa:ae:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz MEFEQTVGMzIwHhcNMjUwNDI0MjIyMDQ2WhcNMjUwNTAxMjIyMDQ2WjAYMRYwFAYD VQQDEw02ODBhYjkzZS0xZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8dsicajOnHpm1Lo10T3bAx3riJpCzjs30nOzAx/82sZaNNYcucyy/cfcvJ0 8Tf+Bw+RvKdXos6caWm/tdGYMavgq9RZB1cFhRWxtVV5cKQLaxm0xtUn0CWHrhoV o1uYyV9AzqZLOqZC31f8B9hzZ0hMnhhYwZ5FIMv0aLyCQOwuJIp0tgJNne8+o39d vMXX1wYYXuJOieL48RWKE0Hoie+PY99uMbyhY0a4TEbzkoeK2/4KpNYtyItM5Iei wvSJrhophvkpOg7SarzoKsML4520AJ5L5tJUi8bIx2Sh7rsi5AXLnORmvVMtbFmZ m6QQyPimi2j/kzWDs8ag9EFwGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwEnPn4 yP4Udor5an5QUMlTUJbMMB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1 RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzM0RC8yN0U4NjFEODg1RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFF VG5UNnFsU1gwR2N3cmFYekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzIXnJ6THazuS1V5cSPD3toGs0wb5tI0PKZJ2Y0IC2cFJmUEFsbDyi 6dhSTcUbqJTb9MFVqgMMKLF9dg7mh29sTCZh6+dog75YopCdRXHRBuhGlSryOMen N1vYflDFfJMq7FtIYKcGdtSS6QmMTsbU+tJyxMgFQpUwr2+/Tne0BntvVJpK2mvQ g0B2Vcs6hToIjHI9XgU/I9zIz8Rn9Iq7xz7OatPCpK1g8oY+t5oXJGBmCDWU3H2i 2dNYucqN6IPpGh8yBFVfZyfLEwoazWW6HGmcr0DfD/FCCHK44AO/SH67wJEi8wFr 6lvdpxVdaq8UH/ZsKJGEySFo0TYiqq4m -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:37 2025 by rpki-client