$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json) Hash identifier: Ho+bzk6bBiZ38TsEyEnibiog5NKTxV+IQnWi5PIadzk= Subject key identifier: F9:7F:58:66:C2:98:36:A8:42:30:98:B4:F4:2D:DE:42:47:8F:87:74 Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Certificate serial: 05D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft Manifest number: 05CD Signing time: Thu 24 Apr 2025 22:48:50 +0000 Manifest this update: Thu 24 Apr 2025 22:48:49 +0000 Manifest next update: Thu 01 May 2025 22:48:49 +0000 Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: KkFlywDXVN07s6fw2cZHq6TNtiY3w7PsmBtRJhJ5PGY=) 2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: OWf8PDQ8WMymcLSHEfIQAksI7XQ+plK8c+CWI6STWXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1493 (0x5d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Validity Not Before: Apr 24 22:48:49 2025 GMT Not After : May 1 22:48:49 2025 GMT Subject: CN=680abfd1-8f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:f3:ac:db:03:ed:10:69:a8:33:e0:dd:2a: 75:27:ec:6c:b8:a0:fd:3d:a3:24:85:1b:18:ab:40: 3d:70:17:1e:9e:fe:96:42:de:53:fd:4c:85:38:30: d7:d9:e5:30:49:43:fd:e4:e6:88:18:22:a1:da:40: d9:91:ad:f5:01:12:bd:0b:3b:a5:ce:a9:27:50:a3: e1:a5:2c:a0:f5:02:75:81:e6:ce:a8:83:68:13:6b: e9:ee:2b:3e:5c:99:85:fa:16:29:33:58:e5:9d:b1: b8:04:5b:d6:6e:de:90:98:35:88:0e:05:fa:10:77: 8c:9f:91:a2:26:4d:37:42:cb:98:d6:12:29:8f:3f: 12:30:09:d2:6f:77:8a:ea:a2:10:10:73:ab:70:3f: ed:a3:dc:e2:91:37:66:54:c2:61:f5:89:12:80:6c: dd:3a:53:75:89:15:7d:72:e2:1a:35:ce:c4:51:1e: 0b:a2:69:68:6f:9a:22:0f:19:ad:25:8f:da:66:86: 52:eb:dc:dc:ad:96:44:61:7a:34:7a:c7:f7:71:79: 4f:a6:12:1d:08:01:a1:81:c2:25:eb:bd:ec:5b:5e: 10:53:03:f6:0e:42:8a:78:26:e1:58:57:3c:fd:62: d3:71:d8:06:e6:0e:ee:e6:c2:31:0d:43:e6:89:f5: 49:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7F:58:66:C2:98:36:A8:42:30:98:B4:F4:2D:DE:42:47:8F:87:74 X509v3 Authority Key Identifier: keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:32:57:b8:c9:e4:b5:3f:c2:22:77:c4:64:b3:d0:9a:a6:bd: 3e:ee:4f:4a:ae:5d:c0:30:c6:f9:90:64:3d:d3:f4:1a:80:75: 11:e1:23:bc:eb:93:56:0f:45:80:5f:52:ef:6e:b5:38:1f:5e: 61:10:f3:92:8d:88:69:49:8d:aa:f2:9b:9c:4b:2a:7b:57:f8: c5:3f:14:2c:71:6a:a0:05:de:32:20:26:2e:77:bf:28:30:c3: 89:12:f4:d7:29:b0:68:ad:9f:8e:23:cb:1c:17:bb:ce:85:63: 29:62:64:42:3b:c7:ba:e4:46:f5:f0:b5:72:1a:9c:ba:ef:99: e5:9d:9e:40:23:e4:89:8c:6a:a1:3d:8a:f1:b0:6f:47:ab:86: 4d:d4:8a:a6:86:0c:dd:66:19:b6:61:07:ab:31:b9:08:76:bc: 10:ea:cf:8f:6f:b4:5b:c6:c8:03:9a:2b:0e:b6:44:e6:a8:fc: 32:9f:b9:e7:0a:54:97:3d:a4:17:63:ec:19:60:5c:5b:3f:c1: bf:1a:39:39:ab:d7:61:ad:03:a7:b3:29:a1:a9:a9:9b:b7:06: 9f:43:c3:12:1f:f0:48:20:bf:96:e4:32:6d:7a:24:a4:1b:af: 24:fd:67:2f:b5:51:81:05:1b:71:92:80:c8:48:a7:c8:05:3e: b6:a0:7f:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC OEFDNzQwQzkwHhcNMjUwNDI0MjI0ODQ5WhcNMjUwNTAxMjI0ODQ5WjAYMRYwFAYD VQQDEw02ODBhYmZkMS04ZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl7zrNsD7RBpqDPg3Sp1J+xsuKD9PaMkhRsYq0A9cBcenv6WQt5T/UyFODDX 2eUwSUP95OaIGCKh2kDZka31ARK9CzulzqknUKPhpSyg9QJ1gebOqINoE2vp7is+ XJmF+hYpM1jlnbG4BFvWbt6QmDWIDgX6EHeMn5GiJk03QsuY1hIpjz8SMAnSb3eK 6qIQEHOrcD/to9zikTdmVMJh9YkSgGzdOlN1iRV9cuIaNc7EUR4Lomlob5oiDxmt JY/aZoZS69zcrZZEYXo0esf3cXlPphIdCAGhgcIl673sW14QUwP2DkKKeCbhWFc8 /WLTcdgG5g7u5sIxDUPmifVJcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl/WGbC mDaoQjCYtPQt3kJHj4d0MB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2 Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh MFN6WWkzWk5PWXk0ckhRTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgMle4yeS1P8Iid8Rks9Capr0+7k9Krl3AMMb5kGQ90/QagHUR4SO8 65NWD0WAX1LvbrU4H15hEPOSjYhpSY2q8pucSyp7V/jFPxQscWqgBd4yICYud78o MMOJEvTXKbBorZ+OI8scF7vOhWMpYmRCO8e65Eb18LVyGpy675nlnZ5AI+SJjGqh PYrxsG9Hq4ZN1IqmhgzdZhm2YQerMbkIdrwQ6s+Pb7RbxsgDmisOtkTmqPwyn7nn ClSXPaQXY+wZYFxbP8G/Gjk5q9dhrQOnsymhqambtwafQ8MSH/BIIL+W5DJteiSk G68k/WcvtVGBBRtxkoDISKfIBT62oH/M -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:14 2025 by rpki-client