$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: sFTL9T1zsrOo9dH2FkXq8UiJ1hfMr9e8rqRW8oNV1UU= Subject key identifier: 8C:0A:0E:68:6E:2F:F3:7B:BA:1E:76:E8:50:C8:EC:AB:10:DE:FD:A6 Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 249C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 2487 Signing time: Thu 24 Apr 2025 15:48:07 +0000 Manifest this update: Thu 24 Apr 2025 15:48:07 +0000 Manifest next update: Thu 01 May 2025 15:48:07 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: 1DC8QqmevyCtssY/lUXtGvHTABYUgDRuUjv/40CqSh8=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: CE+jGBv1hmvPpnjcj/lZMkYxYBXBElFQLbmvrCZoU3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9372 (0x249c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Apr 24 15:48:07 2025 GMT Not After : May 1 15:48:07 2025 GMT Subject: CN=680a5d37-ba09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c8:44:da:6f:1c:15:92:50:03:ec:29:7e:73: 65:39:08:22:76:93:0e:01:c6:5b:17:5c:4d:b1:38: d3:fe:1c:e6:27:a9:61:ee:fa:e7:70:65:c9:ad:49: e8:34:20:c8:63:82:b4:fc:49:38:73:8d:47:b0:87: c5:8e:73:19:e6:3e:e0:55:45:fc:37:a6:ca:a3:a9: 0b:f5:f7:20:f4:06:b9:4d:4e:51:d4:b3:fb:b6:5a: 7d:0e:42:48:ba:48:be:72:49:83:03:26:e6:9c:de: f7:e2:75:39:c8:0a:35:07:4d:b6:23:d4:05:f4:99: 01:20:0c:e2:4c:ea:65:68:66:ec:93:ce:ed:da:2a: c7:1b:7b:09:05:90:b7:49:ae:6f:60:8a:2c:53:73: d9:3f:94:cc:41:7a:5c:9d:3e:4d:1b:b9:15:20:ab: 4d:24:32:ab:8b:bb:96:8a:cd:6b:cd:e1:2f:e4:fe: ec:8a:3d:15:94:87:1a:9b:f8:19:1f:22:67:db:11: 3d:6a:67:5e:cc:71:a8:eb:2d:05:7b:6a:66:bf:9a: de:87:36:2b:b0:22:30:ab:96:b7:21:18:c9:99:5b: aa:e8:ea:1e:4a:7d:dc:36:6c:85:6b:4c:b4:a1:1b: 96:26:f4:7b:17:d0:f3:fa:02:88:a7:82:6b:e2:82: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0A:0E:68:6E:2F:F3:7B:BA:1E:76:E8:50:C8:EC:AB:10:DE:FD:A6 X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:37:63:dd:36:25:10:e0:20:a9:72:fa:04:f6:24:f8:a9:dd: fe:8a:48:33:27:af:ed:03:20:d1:ff:ec:90:96:4d:d9:dd:01: 33:f5:cb:83:64:42:0c:de:2d:92:bc:1b:2c:53:cb:5f:ce:f8: 54:20:5d:ad:8a:cd:30:f4:73:a7:9c:b1:a2:ab:b0:cd:b8:3a: d8:0a:9d:34:b4:62:d9:7c:ca:0f:84:05:7c:be:6c:1c:9b:13: c3:e7:c3:fa:6c:ac:26:1c:3e:25:7e:98:fc:d6:d8:11:10:77: 3e:1d:a2:3c:c6:85:45:d0:8a:1c:c6:e9:26:8f:8b:e8:d6:c8: 75:9e:c6:7e:13:ff:98:38:b4:3b:bd:5c:a6:b4:4a:b7:ce:b9: cb:6b:90:e4:42:fe:b4:34:27:1e:64:28:71:a4:c9:e5:9f:2b: 5b:ba:c1:68:bd:0a:0b:02:d8:54:6d:29:ff:9a:29:f8:ec:f2: 89:61:45:a6:cc:fc:eb:99:9a:8a:61:4c:3f:99:cb:61:0b:d4: 66:3a:fe:87:4a:b7:e9:26:76:7a:6d:47:96:f9:4d:c2:d4:ae: 81:ff:e4:69:0e:9e:1e:fa:dd:48:de:9b:7b:1b:6e:cb:83:28: b6:54:ce:f9:e1:2d:c0:ae:24:10:03:db:80:c3:91:8b:48:14: 4b:e9:fb:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjUwNDI0MTU0ODA3WhcNMjUwNTAxMTU0ODA3WjAYMRYwFAYD VQQDEw02ODBhNWQzNy1iYTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48hE2m8cFZJQA+wpfnNlOQgidpMOAcZbF1xNsTjT/hzmJ6lh7vrncGXJrUno NCDIY4K0/Ek4c41HsIfFjnMZ5j7gVUX8N6bKo6kL9fcg9Aa5TU5R1LP7tlp9DkJI uki+ckmDAybmnN734nU5yAo1B022I9QF9JkBIAziTOplaGbsk87t2irHG3sJBZC3 Sa5vYIosU3PZP5TMQXpcnT5NG7kVIKtNJDKri7uWis1rzeEv5P7sij0VlIcam/gZ HyJn2xE9amdezHGo6y0Fe2pmv5rehzYrsCIwq5a3IRjJmVuq6OoeSn3cNmyFa0y0 oRuWJvR7F9Dz+gKIp4Jr4oK4sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwKDmhu L/N7uh526FDI7KsQ3v2mMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNN2PdNiUQ4CCpcvoE9iT4qd3+ikgzJ6/tAyDR/+yQlk3Z3QEz9cuD ZEIM3i2SvBssU8tfzvhUIF2tis0w9HOnnLGiq7DNuDrYCp00tGLZfMoPhAV8vmwc mxPD58P6bKwmHD4lfpj81tgREHc+HaI8xoVF0Iocxukmj4vo1sh1nsZ+E/+YOLQ7 vVymtEq3zrnLa5DkQv60NCceZChxpMnlnytbusFovQoLAthUbSn/min47PKJYUWm zPzrmZqKYUw/mcthC9RmOv6HSrfpJnZ6bUeW+U3C1K6B/+RpDp4e+t1I3pt7G27L gyi2VM754S3AriQQA9uAw5GLSBRL6fsj -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:49 2025 by rpki-client