$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json) Hash identifier: kJx5tHtvWlLjoW6Hy7flFyFMrsxY16E4Wadnz1fY9Jg= Subject key identifier: A7:3E:3A:54:87:3B:C1:A1:66:53:00:17:E1:CD:A0:3B:CB:8C:EC:4E Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft Manifest number: 4F Signing time: Fri 25 Apr 2025 06:17:58 +0000 Manifest this update: Fri 25 Apr 2025 06:17:57 +0000 Manifest next update: Fri 02 May 2025 06:17:57 +0000 Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: RbN/cqxmTrtfQ8eXnSw1FRXbJ3wsEFX9xZNQxRFLegw=) 2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: JnGUEG/UELgRSrXf0UwtaiJ+4LEhgtXWroHpv/a9KQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Validity Not Before: Apr 25 06:17:57 2025 GMT Not After : May 2 06:17:57 2025 GMT Subject: CN=680b2915-d870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:43:97:c9:66:6e:d1:39:c3:2b:f1:dc:01: a3:3e:69:a6:79:5e:26:70:f9:7b:2f:3b:86:71:17: 2d:d5:55:a4:f2:f8:57:52:c6:05:36:12:cb:cf:fa: 8a:48:f9:58:a3:b4:4a:d4:96:39:c3:2f:98:0b:15: 28:03:77:c0:73:38:9b:94:71:75:67:94:a9:a0:8b: 83:ca:2a:42:92:7f:49:49:78:3f:07:1d:b5:af:96: 01:9f:ef:9d:8a:ef:53:f3:95:2f:bd:73:7c:14:54: a5:3c:e1:96:ce:79:45:77:64:c7:bd:2d:f8:a9:1f: 2b:5a:82:0a:35:9f:2a:a1:8a:f9:df:df:cc:2a:60: 45:79:47:7d:5a:2e:12:ce:08:6b:81:d7:f4:f6:85: 3f:d3:81:08:30:35:bb:b1:40:ba:d7:ec:d5:d5:59: fd:21:4b:d5:ce:44:b6:a4:88:6e:6e:63:dd:b5:6b: 34:6e:f8:bf:32:14:8d:8e:f1:b0:da:68:69:fb:78: 68:c9:d4:6f:40:83:d8:2d:8c:c6:d5:63:84:2a:03: 7e:f3:a9:8a:bb:1d:15:6d:fe:68:d3:81:b7:b9:c9: a4:8e:17:a6:03:40:25:61:bb:e0:91:45:5b:f0:b1: 2b:bf:98:74:3a:d2:44:f7:31:2b:9f:cb:63:26:19: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3E:3A:54:87:3B:C1:A1:66:53:00:17:E1:CD:A0:3B:CB:8C:EC:4E X509v3 Authority Key Identifier: keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:f3:3a:0d:7d:ba:0f:f0:04:53:7b:4f:43:6d:ff:65:b5:85: e7:24:ed:9b:c5:ff:fc:66:1f:95:63:da:9d:6b:c2:85:25:10: 86:f3:6e:92:8e:a8:6d:b4:12:ed:74:cb:e5:53:34:9f:ca:fb: 52:4f:cc:ab:a2:64:ed:16:8d:0f:07:09:30:6f:d0:b1:5f:03: 7f:3f:e5:4f:e2:f6:dd:29:7b:ee:7b:74:bb:54:1f:58:2a:c5: be:3a:a6:0f:72:d5:c5:5c:f1:cb:8d:60:8f:99:fe:0d:ea:1b: 9e:35:fc:1f:20:ec:10:2d:ea:da:f1:cc:3d:ee:77:5c:e7:b8: da:4d:f5:ba:81:4b:bb:bb:ea:81:b3:58:d7:3d:cf:15:55:48: 9a:88:2d:e6:2f:64:05:e0:19:57:4e:af:2c:9f:0c:e2:07:45: 06:aa:9a:66:7d:40:28:38:0f:e3:84:25:af:8c:b3:c7:2a:85: e0:6b:69:da:32:40:32:d3:5e:6b:ed:c9:03:b9:d3:d2:3b:59: 92:28:4f:9f:ed:0e:fd:d9:72:cc:aa:5a:33:45:a4:87:91:dc: 59:b7:9e:fb:3d:4f:94:12:42:5a:d1:69:58:8b:cc:79:43:b1: d1:a5:77:41:9b:e5:fd:04:0c:05:32:de:34:f4:72:97:1f:7d: 6c:09:fa:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUQ1MzExMC8GA1UEBRMoOEY3NEMxNzU1RjE4ODcwOENDRTNBNjdERUMyODU5OTM2 NDhERjE4MzAeFw0yNTA0MjUwNjE3NTdaFw0yNTA1MDIwNjE3NTdaMBgxFjAUBgNV BAMTDTY4MGIyOTE1LWQ4NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/iEOXyWZu0TnDK/HcAaM+aaZ5XiZw+XsvO4ZxFy3VVaTy+FdSxgU2EsvP+opI +VijtErUljnDL5gLFSgDd8BzOJuUcXVnlKmgi4PKKkKSf0lJeD8HHbWvlgGf752K 71PzlS+9c3wUVKU84ZbOeUV3ZMe9LfipHytaggo1nyqhivnf38wqYEV5R31aLhLO CGuB1/T2hT/TgQgwNbuxQLrX7NXVWf0hS9XORLakiG5uY921azRu+L8yFI2O8bDa aGn7eGjJ1G9Ag9gtjMbVY4QqA37zqYq7HRVt/mjTgbe5yaSOF6YDQCVhu+CRRVvw sSu/mHQ60kT3MSufy2MmGUnXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpz46VIc7 waFmUwAX4c2gO8uM7E4wHwYDVR0jBBgwFoAUj3TBdV8YhwjM46Z97ChZk2SN8YMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RDUzL0ZDN0Q2MDg2QUM4 MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdqTTQ2Wjk3Q2haazJTTjhZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvajNUQmRWOFlod2pNNDZaOTdDaFprMlNOOFlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 RDUzL0ZDN0Q2MDg2QUM4MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdq TTQ2Wjk3Q2haazJTTjhZTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALrzOg19ug/wBFN7T0Nt/2W1heck7ZvF//xmH5Vj2p1rwoUlEIbzbpKO qG20Eu10y+VTNJ/K+1JPzKuiZO0WjQ8HCTBv0LFfA38/5U/i9t0pe+57dLtUH1gq xb46pg9y1cVc8cuNYI+Z/g3qG541/B8g7BAt6trxzD3ud1znuNpN9bqBS7u76oGz WNc9zxVVSJqILeYvZAXgGVdOryyfDOIHRQaqmmZ9QCg4D+OEJa+Ms8cqheBradoy QDLTXmvtyQO509I7WZIoT5/tDv3ZcsyqWjNFpIeR3Fm3nvs9T5QSQlrRaViLzHlD sdGld0Gb5f0EDAUy3jT0cpcffWwJ+so= -----END CERTIFICATE-----Generated at Sat Apr 26 15:04:36 2025 by rpki-client