$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json) Hash identifier: elZL1LA7ewGeLBNceH0rEMjWEX9T57buWecSFvmDK94= Subject key identifier: D0:C7:0D:7A:EF:72:73:4E:1F:0F:65:EF:C0:69:48:50:2B:73:3E:73 Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Certificate serial: 0C5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft Manifest number: 0C45 Signing time: Thu 24 Apr 2025 18:23:44 +0000 Manifest this update: Thu 24 Apr 2025 18:23:44 +0000 Manifest next update: Thu 01 May 2025 18:23:44 +0000 Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: iqlXEUh6MH2/ZWuuYC1KPblXn30KlGosJJRCSos7cwg=) 2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: Xn8UFabkBh7C11XTNFuqVWX0DQ3YtKdO4oP8X6zIrEU=) 3: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: wQzyXgNB8e39dNmdtHKa5IWJxgKdAoXLBNvYY5X5/EU=) 4: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: ZW4D52b/QqoUPTvkPyb0ztzXgPBkyyW+b1SqWMCRNR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3163 (0xc5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Validity Not Before: Apr 24 18:23:44 2025 GMT Not After : May 1 18:23:44 2025 GMT Subject: CN=680a81b0-8128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:12:30:ae:5c:fb:23:90:d3:84:ba:16:7b: 19:bc:05:7b:2c:4b:06:fe:b7:53:1d:94:b1:38:5d: 87:2e:f2:72:ab:15:23:b0:0b:69:63:7e:6f:ad:9c: 0f:26:4b:31:45:85:44:13:52:6b:65:aa:b9:47:d6: 25:be:78:9d:d0:63:04:55:ef:3a:d9:a1:24:27:80: 4b:29:60:ea:ee:c4:1e:98:f3:1f:01:3b:78:8b:14: bf:69:ea:de:58:0b:58:1c:02:8c:dc:f9:4f:96:62: c1:2a:45:86:3b:a9:b6:ac:c0:27:4c:d5:d2:9b:ab: 92:94:e0:94:64:b3:7a:ed:30:c2:73:a0:fb:6e:5d: 3c:f1:21:70:b1:c3:4f:c9:3e:8f:98:2d:b0:5e:95: 4d:f5:d7:7e:f3:11:d2:a2:82:71:3e:d2:4d:a6:9d: 2b:4a:d0:c2:e2:01:12:3b:a0:1e:07:eb:cd:88:2c: 49:ff:7f:08:2c:6a:40:3f:12:93:50:f8:03:43:9a: 25:35:65:f0:b4:ef:7f:7e:51:70:e8:30:cd:47:70: 73:31:69:61:30:09:70:dc:cc:0c:f4:2b:76:9e:e6: a2:ce:72:aa:a6:c2:a0:48:58:0e:19:0c:96:13:4d: 09:df:78:96:f2:93:cc:e9:92:d5:11:2c:17:5e:8a: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C7:0D:7A:EF:72:73:4E:1F:0F:65:EF:C0:69:48:50:2B:73:3E:73 X509v3 Authority Key Identifier: keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:56:38:ad:e3:92:32:6b:5a:59:a0:30:06:fb:f4:8e:f7:28: 1b:51:6c:9e:ce:6f:e1:4c:79:5b:6d:5c:2c:41:e2:87:61:03: 3c:d8:62:41:e3:d4:72:58:ff:3b:27:70:d9:a9:d4:48:b5:30: 31:80:10:70:96:b9:7d:c6:92:8c:07:3d:2f:4e:0d:49:6f:d5: 61:e0:9f:e7:3a:5b:bf:68:6f:be:7c:23:22:6d:24:a4:4a:26: bd:22:2d:d0:b9:30:84:d4:c8:60:0d:9b:0a:5f:bc:a8:c6:c2: b0:19:d1:60:15:32:e1:4a:aa:1e:6f:06:25:25:fb:87:56:d8: d9:9b:14:f2:9b:b5:8c:9d:29:c1:58:6f:e0:93:05:80:88:e2: db:2e:04:8b:af:fb:f7:7a:6d:f6:0e:e5:ec:17:25:c1:a2:23: 1d:dc:a2:6b:cc:78:5f:32:51:43:a4:f4:f9:77:2a:1f:64:b1: 10:f1:e3:41:ac:f3:83:95:70:06:70:04:91:ee:d9:51:1f:26: 03:41:25:72:11:25:81:b0:7b:2c:f8:05:ac:2a:2f:db:35:52: 74:53:f7:08:ae:a7:04:ef:7d:8f:e2:3f:b2:05:d9:e1:8c:b2: af:01:f8:fb:b6:ce:e6:7b:6e:b4:54:4a:75:34:ac:7f:ca:c6: 36:23:1f:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKDEzNTVENTE4N0QyRTYzRDdFNkQ0OTA3OEQ4RTcxRkEw NTFDNDU2RTMwHhcNMjUwNDI0MTgyMzQ0WhcNMjUwNTAxMTgyMzQ0WjAYMRYwFAYD VQQDEw02ODBhODFiMC04MTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyakSMK5c+yOQ04S6FnsZvAV7LEsG/rdTHZSxOF2HLvJyqxUjsAtpY35vrZwP JksxRYVEE1JrZaq5R9Ylvnid0GMEVe862aEkJ4BLKWDq7sQemPMfATt4ixS/aere WAtYHAKM3PlPlmLBKkWGO6m2rMAnTNXSm6uSlOCUZLN67TDCc6D7bl088SFwscNP yT6PmC2wXpVN9dd+8xHSooJxPtJNpp0rStDC4gESO6AeB+vNiCxJ/38ILGpAPxKT UPgDQ5olNWXwtO9/flFw6DDNR3BzMWlhMAlw3MwM9Ct2nuaiznKqpsKgSFgOGQyW E00J33iW8pPM6ZLVESwXXop/QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDHDXrv cnNOHw9l78BpSFArcz5zMB8GA1UdIwQYMBaAFBNV1Rh9LmPX5tSQeNjnH6BRxFbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS82MzI2NTBGODA1 MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5Zm0xSkI0Mk9jZm9GSEVW dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UxWFZHSDB1WTlmbTFKQjQyT2Nmb0ZIRVZ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS82MzI2NTBGODA1MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5 Zm0xSkI0Mk9jZm9GSEVWdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvVjit45Iya1pZoDAG+/SO9ygbUWyezm/hTHlbbVwsQeKHYQM82GJB 49RyWP87J3DZqdRItTAxgBBwlrl9xpKMBz0vTg1Jb9Vh4J/nOlu/aG++fCMibSSk Sia9Ii3QuTCE1MhgDZsKX7yoxsKwGdFgFTLhSqoebwYlJfuHVtjZmxTym7WMnSnB WG/gkwWAiOLbLgSLr/v3em32DuXsFyXBoiMd3KJrzHhfMlFDpPT5dyofZLEQ8eNB rPODlXAGcASR7tlRHyYDQSVyESWBsHss+AWsKi/bNVJ0U/cIrqcE732P4j+yBdnh jLKvAfj7ts7me260VEp1NKx/ysY2Ix/e -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:35 2025 by rpki-client