$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: o9EeiZAoeIfYbmqhVdcyVD4zZvkNPifRxc2l0XEfqKM= Subject key identifier: 63:BA:67:66:3B:52:A6:DD:D2:84:D1:7D:F9:20:2F:63:CC:7E:4C:4D Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 08FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 124E Signing time: Thu 24 Apr 2025 19:59:35 +0000 Manifest this update: Thu 24 Apr 2025 19:59:34 +0000 Manifest next update: Thu 01 May 2025 19:59:34 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: 6D6HytQO1NGhCuabQIFdo63vCm7Hb3ejAb0Njb7O8OY=) 2: 38548A62EDC011EF82A1C85BC4F9AE02.roa (hash: NR90n3hD0iN+wJNiZGZM+dVTFYNLmapWU9u6Yuwslvs=) 3: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: zfbAmczU0TvDg++Ahlw3nwgh74bmLp4RT834l0v2hLY=) 4: 2944DC90B57E11EFB31B630FC4F9AE02.roa (hash: LIT5TNu9i//v3laD/Jx0lP/RjQSe9WAE0qoyMHUVSVc=) 5: F585B320A4ED11EFBA65C13CC4F9AE02.roa (hash: svSsv7iDDsESPj4djUfhOIqdOSSzOy7GY2n53ZHUYRM=) 6: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: yTR181mMOhFtz0/zNI7qM2KlctQHTJXyuSeldVEFcuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2301 (0x8fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Apr 24 19:59:34 2025 GMT Not After : May 1 19:59:34 2025 GMT Subject: CN=680a9827-af0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:25:d5:26:8f:82:1d:49:89:f5:2f:a0:8d: 3a:e7:ed:31:3b:a9:6e:78:70:64:f6:4d:18:17:ab: 32:de:fe:3d:b9:fe:41:7f:7c:fc:b4:53:41:27:5e: dd:46:f5:84:5c:4e:35:a8:aa:d6:fe:60:db:47:17: 8d:36:97:1e:da:01:00:93:6b:9b:ca:85:24:20:8e: a2:b4:db:1d:bb:95:90:84:21:f5:9a:92:3d:87:2c: 58:da:b1:ac:44:c6:93:ff:c6:a4:ab:0c:b3:25:94: d3:ca:92:fe:37:f1:e9:8c:59:88:e6:6f:6e:95:2e: 5b:a4:11:29:30:83:c9:3b:93:a3:8a:c9:04:1f:38: 9f:ca:f0:28:28:d2:33:0f:5a:a1:2e:46:48:2f:05: 15:46:60:29:5e:63:ea:10:75:1c:ba:4d:97:1e:46: 4c:84:be:8f:8d:74:19:12:a5:73:07:04:04:d6:93: 7f:7a:13:92:59:c3:c1:21:89:bb:07:71:a1:64:3f: c0:79:6e:2a:ce:90:f4:69:16:5c:2b:7d:73:59:4a: 1e:1e:fc:05:76:36:cc:4e:b1:e3:6f:a8:b6:eb:ec: 19:3f:25:1d:b0:7a:46:d3:92:5e:dc:34:27:0b:3b: 35:c2:8a:91:54:b3:ec:7e:bc:bd:bc:87:4b:98:73: 01:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BA:67:66:3B:52:A6:DD:D2:84:D1:7D:F9:20:2F:63:CC:7E:4C:4D X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:2e:9d:03:10:f2:86:80:52:c6:c7:80:a5:3f:53:5f:07:bf: a2:ac:49:4d:aa:45:9e:19:dd:22:79:75:c0:1d:7c:40:6f:22: 5e:21:cd:9c:37:46:f7:5f:86:1b:67:89:d6:61:b9:fd:18:dd: 52:d1:20:88:ff:31:c8:71:bb:a8:76:12:3e:cb:98:cc:f2:98: be:03:f8:f0:fb:73:1a:33:b4:38:43:11:86:07:0a:85:1e:20: fe:87:14:ad:da:19:b4:f8:f3:ed:ce:2c:6f:44:40:c0:56:f7: b0:52:d8:ca:a0:69:76:5d:8d:4e:a1:a4:b2:20:47:0b:0a:6f: 7b:56:26:3b:af:33:11:e6:13:08:08:84:6e:51:79:02:37:89: 94:fe:22:eb:7f:2d:bc:40:c8:73:a1:32:07:e2:16:db:5d:f7: c4:74:65:96:ef:78:a4:35:15:8a:3e:96:2b:d3:17:a5:57:fa: a8:12:60:cf:f8:28:76:98:ec:f7:85:bf:f4:5a:81:fa:cf:0c: 79:16:c5:fd:c5:a3:e4:c6:12:07:e5:0d:65:3f:32:94:0d:b6: 90:78:a7:78:30:61:f5:79:0a:8b:a8:20:b6:cf:db:17:1a:36: 56:34:4b:2a:6d:0e:57:e3:7f:3a:59:79:1f:e0:ea:61:20:ce: 3b:d7:b1:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwNDI0MTk1OTM0WhcNMjUwNTAxMTk1OTM0WjAYMRYwFAYD VQQDEw02ODBhOTgyNy1hZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xMl1SaPgh1JifUvoI065+0xO6lueHBk9k0YF6sy3v49uf5Bf3z8tFNBJ17d RvWEXE41qKrW/mDbRxeNNpce2gEAk2ubyoUkII6itNsdu5WQhCH1mpI9hyxY2rGs RMaT/8akqwyzJZTTypL+N/HpjFmI5m9ulS5bpBEpMIPJO5OjiskEHzifyvAoKNIz D1qhLkZILwUVRmApXmPqEHUcuk2XHkZMhL6PjXQZEqVzBwQE1pN/ehOSWcPBIYm7 B3GhZD/AeW4qzpD0aRZcK31zWUoeHvwFdjbMTrHjb6i26+wZPyUdsHpG05Je3DQn Czs1woqRVLPsfry9vIdLmHMBywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGO6Z2Y7 Uqbd0oTRffkgL2PMfkxNMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVLp0DEPKGgFLGx4ClP1NfB7+irElNqkWeGd0ieXXAHXxAbyJeIc2c N0b3X4YbZ4nWYbn9GN1S0SCI/zHIcbuodhI+y5jM8pi+A/jw+3MaM7Q4QxGGBwqF HiD+hxSt2hm0+PPtzixvREDAVvewUtjKoGl2XY1OoaSyIEcLCm97ViY7rzMR5hMI CIRuUXkCN4mU/iLrfy28QMhzoTIH4hbbXffEdGWW73ikNRWKPpYr0xelV/qoEmDP +Ch2mOz3hb/0WoH6zwx5FsX9xaPkxhIH5Q1lPzKUDbaQeKd4MGH1eQqLqCC2z9sX GjZWNEsqbQ5X4386WXkf4OphIM4717Hk -----END CERTIFICATE-----Generated at Sat Apr 26 12:30:19 2025 by rpki-client