$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: ibdyXoVfRxFqrW6B2Jm7TgT6mJ6UmtaUjrlnVSRC8fQ= Subject key identifier: 3D:97:DE:BB:14:2B:B0:9C:A7:60:B0:0D:EC:05:CB:CB:3A:09:4E:81 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0B5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0B41 Signing time: Thu 24 Apr 2025 19:05:57 +0000 Manifest this update: Thu 24 Apr 2025 19:05:57 +0000 Manifest next update: Thu 01 May 2025 19:05:57 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: wgl8cYLIItxJI5AoBDTBqlbJrNrJ7rOTvx32kjpcb5U=) 2: BFE21FE09B0511EDB2F0BD4EC4F9AE02.roa (hash: uxCtCSV+O4TDyj5SgoE3dM5DZOqE4xyThfn972D+Swk=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: ep/NR5+KsXHxM/fL5lTu5X9ahtnO2No4DOGzWzbPKmU=) 4: 3C726724C06211EC93514712C4F9AE02.roa (hash: XklDOLYMfLViKkHUeT6z/7hV3PEW4lkSoZ2mUu3ko0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2910 (0xb5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Apr 24 19:05:57 2025 GMT Not After : May 1 19:05:57 2025 GMT Subject: CN=680a8b95-2cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:34:a8:f1:1e:8b:49:a6:35:dd:44:d4:02: 9e:6d:61:89:3a:f4:b5:d9:50:9d:f4:72:24:05:fb: a9:8c:e4:d4:fb:53:d3:7f:7f:e7:db:93:cd:fb:88: 90:0e:23:b9:b9:64:99:94:e7:81:83:c7:7b:bd:4f: c6:38:87:1e:9e:b9:cd:7e:b9:63:da:f0:0c:cb:ae: a7:7a:b3:44:d0:85:12:88:57:e5:8e:65:34:b7:53: 43:22:4c:03:aa:94:18:95:f3:ba:5e:0f:32:d0:bd: 95:b6:28:53:00:da:d7:ec:6f:eb:91:de:d6:36:a5: 81:30:ed:7a:6e:cd:4f:64:fb:5c:6f:c8:90:63:da: 93:e3:5a:de:43:4e:ed:51:a0:ac:8b:8c:b4:a5:b1: 08:63:71:f3:c2:ad:2f:69:c3:8f:ab:91:68:70:42: 42:01:d4:96:b2:dc:8a:78:4e:70:75:fe:38:6f:58: d3:b4:4c:41:89:ab:92:e0:93:45:a2:da:4e:a5:c7: 6d:e4:91:3d:3c:27:83:7d:f7:d1:18:bc:83:d9:6b: ce:2e:e4:1a:8d:7e:b9:98:70:d8:96:e5:65:30:f7: c9:e1:9d:f6:ec:54:b4:56:49:20:4e:1a:d8:bd:fb: 72:51:e7:4e:c7:d0:e3:4f:ac:3b:bb:b7:f5:16:4b: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:97:DE:BB:14:2B:B0:9C:A7:60:B0:0D:EC:05:CB:CB:3A:09:4E:81 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:20:1c:d5:74:16:32:12:e9:d1:80:75:dd:cf:92:a0:bf:3c: f1:78:34:d4:68:af:72:a9:9f:7f:2c:77:51:be:97:48:89:ab: 91:f5:04:f3:e5:ce:86:73:33:15:75:0d:bd:8c:e7:10:18:56: 87:bb:0f:20:93:46:6a:a8:0d:94:74:a0:44:e1:94:4f:cf:77: ba:cf:39:09:9a:dd:bb:d1:46:dd:bd:03:e9:b2:ed:3c:18:0d: 9c:3a:4a:6c:5a:cb:45:39:4f:31:8b:39:b5:0b:ea:ab:01:f1: 77:2b:e5:97:fe:b3:ad:81:88:47:66:e2:4a:f0:27:e3:e9:92: b1:ef:6b:67:71:ef:f9:ff:b9:cf:10:9c:e1:a1:b5:0a:fc:b2: aa:a3:be:45:b3:52:70:30:bd:27:5c:c2:08:eb:34:da:e9:79: 88:f2:47:77:b8:6a:d7:8c:c6:94:2c:ce:69:63:16:07:3b:28: 97:de:25:3f:a6:07:1f:6b:9e:71:6f:16:3b:05:bb:d4:c5:7c: 82:a2:83:32:c6:f9:70:ab:a2:84:f0:89:91:0f:3e:8b:a4:df: 74:45:bd:51:d5:c8:1e:d4:61:b1:3f:29:50:b5:c9:88:f9:b9: 7a:70:e0:8f:66:07:91:2c:4b:97:2c:9c:67:1c:c1:36:8d:94: 17:03:9a:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjUwNDI0MTkwNTU3WhcNMjUwNTAxMTkwNTU3WjAYMRYwFAYD VQQDEw02ODBhOGI5NS0yY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhA0qPEei0mmNd1E1AKebWGJOvS12VCd9HIkBfupjOTU+1PTf3/n25PN+4iQ DiO5uWSZlOeBg8d7vU/GOIcenrnNfrlj2vAMy66nerNE0IUSiFfljmU0t1NDIkwD qpQYlfO6Xg8y0L2VtihTANrX7G/rkd7WNqWBMO16bs1PZPtcb8iQY9qT41reQ07t UaCsi4y0pbEIY3Hzwq0vacOPq5FocEJCAdSWstyKeE5wdf44b1jTtExBiauS4JNF otpOpcdt5JE9PCeDfffRGLyD2WvOLuQajX65mHDYluVlMPfJ4Z327FS0VkkgThrY vftyUedOx9DjT6w7u7f1Fkvy9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2X3rsU K7Ccp2CwDewFy8s6CU6BMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlIBzVdBYyEunRgHXdz5KgvzzxeDTUaK9yqZ9/LHdRvpdIiauR9QTz 5c6GczMVdQ29jOcQGFaHuw8gk0ZqqA2UdKBE4ZRPz3e6zzkJmt270UbdvQPpsu08 GA2cOkpsWstFOU8xizm1C+qrAfF3K+WX/rOtgYhHZuJK8Cfj6ZKx72tnce/5/7nP EJzhobUK/LKqo75Fs1JwML0nXMII6zTa6XmI8kd3uGrXjMaULM5pYxYHOyiX3iU/ pgcfa55xbxY7BbvUxXyCooMyxvlwq6KE8ImRDz6LpN90Rb1R1cge1GGxPylQtcmI +bl6cOCPZgeRLEuXLJxnHME2jZQXA5qr -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:37 2025 by rpki-client