$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft File: d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json) Hash identifier: K8PHKQBirpnf2vT5fwy2nPaDuxD0s/kNrfDRJZPgbLQ= Subject key identifier: C4:5A:5E:BF:4D:BD:C4:64:8B:24:A2:01:F8:4A:56:3B:C2:66:74:5E Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Certificate serial: 3477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft Manifest number: 3474 Signing time: Thu 24 Apr 2025 15:17:15 +0000 Manifest this update: Thu 24 Apr 2025 15:17:15 +0000 Manifest next update: Thu 01 May 2025 15:17:15 +0000 Files and hashes: 1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: ov631j4lbIBD2oHuEskNuqMcNchhX+sMcR+4L8nW2sQ=) 2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: zYMb1XnG0WFocOb8g6o9H1kl0CBRuaJqUP3nm71UW5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13431 (0x3477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71 Validity Not Before: Apr 24 15:17:15 2025 GMT Not After : May 1 15:17:15 2025 GMT Subject: CN=680a55fb-bfa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:d3:2c:b8:04:73:89:b5:1e:c8:da:30:6e: b0:3a:92:de:8f:81:b1:61:f8:3b:14:37:8a:1a:ef: 28:7e:84:72:3e:80:01:b9:30:c1:72:fc:6b:66:b1: bf:b4:80:20:40:e1:d2:d4:b9:af:25:2a:b1:c0:15: 21:d4:48:70:41:06:f0:05:df:b8:a2:d1:69:ef:5f: 08:fd:0e:cd:de:fc:c6:57:85:c7:17:ce:0b:be:7e: 37:26:f1:2f:38:a3:8c:22:85:90:0d:55:f0:9c:45: 73:45:5c:96:f4:19:65:e7:c2:02:5e:82:fc:7e:32: 86:18:2f:81:58:52:f4:6b:fb:5c:f1:d0:5f:17:2e: 17:3a:96:df:db:d8:f5:84:90:5f:7f:b4:95:7a:c7: fa:16:2f:11:74:1f:95:d1:b6:b3:5a:66:90:b5:d1: ff:89:da:ed:59:78:c5:68:74:1c:34:68:8e:4f:c8: 15:54:82:e2:40:72:0c:25:ff:f7:b5:5c:cc:38:78: d3:7b:5e:2c:b6:4e:9f:04:95:8c:83:35:57:b6:f9: ff:fa:ae:0d:e0:e2:6a:a5:16:e7:37:b5:78:cc:d0: 5b:2e:e1:b5:9a:6f:6d:05:17:0d:98:25:05:dc:44: 88:7e:99:e5:b8:04:d2:f0:c1:42:54:ae:80:83:45: 7d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5A:5E:BF:4D:BD:C4:64:8B:24:A2:01:F8:4A:56:3B:C2:66:74:5E X509v3 Authority Key Identifier: keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e8:c7:f2:99:82:57:1c:25:df:23:ea:f9:9a:e6:73:a0:bc: 71:86:fc:5a:c0:93:53:90:14:45:52:c6:e6:a7:4b:ac:e0:5c: bd:80:0b:d6:d5:f8:32:f5:ac:83:30:8f:94:48:66:97:e0:d3: a0:78:af:20:4d:49:4c:f9:d5:da:fa:7d:4e:ca:c8:5b:de:2c: 21:f6:8e:71:48:04:76:01:dc:49:c6:85:80:8b:46:76:ef:d6: 0b:b0:68:35:c3:b8:94:d8:1d:2a:29:72:0e:fe:79:38:f9:9b: ab:06:c9:c1:1c:1e:04:ca:ca:6d:17:64:16:e7:fa:3a:aa:62: 71:da:6d:f4:42:33:06:a4:66:45:87:50:d1:bf:b7:05:66:a9: 3f:76:7f:57:91:bd:94:48:72:29:ab:7c:33:cb:22:b7:f2:94: fa:7b:b2:b7:3c:e9:a6:b3:8f:8f:36:30:77:e7:5a:b3:16:83: 5f:8e:e3:1b:4d:1f:88:3d:3f:2c:f3:4c:49:22:b3:66:59:87: 05:57:68:91:64:76:95:7c:4a:3a:6c:d4:25:f5:21:7a:a4:3c: 14:74:c6:ad:03:cc:3b:27:15:c1:5e:ef:ab:2d:29:f9:2a:0a: a5:3b:6e:a6:0c:1e:2e:91:c8:ab:62:8c:15:de:83:3b:91:53: c4:ef:97:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1MkYxMTAvBgNVBAUTKDc3RTk0NkQwQkQyOUFBMjE3QkYxQjFDNUFGMEIzMTUz NkMxNDdBNzEwHhcNMjUwNDI0MTUxNzE1WhcNMjUwNTAxMTUxNzE1WjAYMRYwFAYD VQQDEw02ODBhNTVmYi1iZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKbTLLgEc4m1HsjaMG6wOpLej4GxYfg7FDeKGu8ofoRyPoABuTDBcvxrZrG/ tIAgQOHS1LmvJSqxwBUh1EhwQQbwBd+4otFp718I/Q7N3vzGV4XHF84Lvn43JvEv OKOMIoWQDVXwnEVzRVyW9Bll58ICXoL8fjKGGC+BWFL0a/tc8dBfFy4XOpbf29j1 hJBff7SVesf6Fi8RdB+V0bazWmaQtdH/idrtWXjFaHQcNGiOT8gVVILiQHIMJf/3 tVzMOHjTe14stk6fBJWMgzVXtvn/+q4N4OJqpRbnN7V4zNBbLuG1mm9tBRcNmCUF 3ESIfpnluATS8MFCVK6Ag0V9VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRaXr9N vcRkiySiAfhKVjvCZnReMB8GA1UdIwQYMBaAFHfpRtC9Kaohe/Gxxa8LMVNsFHpx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzUyRi9GNkZGRTI5RTFE QTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFpRjc4YkhGcndzeFUyd1Vl bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtbEcwTDBwcWlGNzhiSEZyd3N4VTJ3VWVuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzUyRi9GNkZGRTI5RTFEQTkxMUUyQThFRjZFQTUwOEIwMkNEMi9kLWxHMEwwcHFp Rjc4YkhGcndzeFUyd1VlbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa6MfymYJXHCXfI+r5muZzoLxxhvxawJNTkBRFUsbmp0us4Fy9gAvW 1fgy9ayDMI+USGaX4NOgeK8gTUlM+dXa+n1Oyshb3iwh9o5xSAR2AdxJxoWAi0Z2 79YLsGg1w7iU2B0qKXIO/nk4+ZurBsnBHB4EysptF2QW5/o6qmJx2m30QjMGpGZF h1DRv7cFZqk/dn9Xkb2USHIpq3wzyyK38pT6e7K3POmms4+PNjB351qzFoNfjuMb TR+IPT8s80xJIrNmWYcFV2iRZHaVfEo6bNQl9SF6pDwUdMatA8w7JxXBXu+rLSn5 KgqlO26mDB4ukcirYowV3oM7kVPE75dV -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:19 2025 by rpki-client