$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft File: S0w6zHYgyo0mn3fC-L5soNohdic.mft (raw, json) Hash identifier: i4nBnUyjzi4VMV590rYiBRTp/IENVyZPB0adhQqQyIs= Subject key identifier: CA:21:8B:EC:81:81:A8:36:07:35:FD:21:09:75:E8:8E:16:D8:E6:86 Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 Certificate issuer: /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Certificate serial: 040F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft Manifest number: 0409 Signing time: Fri 25 Apr 2025 00:14:06 +0000 Manifest this update: Fri 25 Apr 2025 00:14:05 +0000 Manifest next update: Fri 02 May 2025 00:14:05 +0000 Files and hashes: 1: S0w6zHYgyo0mn3fC-L5soNohdic.crl (hash: iezv1WODeIPXe2T50p8qEzyCwuz9BPk2CHH80KN1YvY=) 2: AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (hash: Hj2ed/vfEs3kfitU1w0BAdoi0iJDtRaYFfE12UdPkyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1039 (0x40f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CD5, serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Validity Not Before: Apr 25 00:14:05 2025 GMT Not After : May 2 00:14:05 2025 GMT Subject: CN=680ad3cd-5bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e2:d8:a6:5d:b3:df:40:87:c6:b7:fa:4e:f9: 5e:33:cf:e3:de:e8:6a:d1:47:b7:f6:7d:b1:8a:76: 35:1d:70:4e:e1:d8:dd:17:97:d9:67:96:85:f0:ad: 0d:c9:f7:67:40:37:a9:72:c2:4a:c5:15:2a:2e:d2: d4:6d:73:42:6e:ea:61:50:ed:d6:e7:27:6b:b5:b9: 62:7a:d5:53:f1:84:de:66:c0:d8:de:23:3e:2f:4a: 1f:27:70:b2:f8:66:c7:f9:f3:82:27:9c:0f:a1:3f: 64:82:ec:2a:21:c5:e7:d7:b5:0f:2b:52:19:6a:fb: 74:e0:15:12:25:64:0e:42:db:03:9d:4f:c1:52:9b: fd:ff:1e:aa:32:5f:d2:86:96:15:18:85:39:d3:4e: 5f:b8:ce:6a:04:fc:78:ab:e2:9d:b2:55:78:32:bc: b3:09:92:1d:43:69:e7:1c:4c:e9:1b:42:ca:1d:42: d8:22:44:51:e1:29:9b:1f:b7:fd:db:8b:46:9b:0a: 49:ce:c8:83:4c:dc:fd:e2:38:57:3f:a0:46:59:ee: b1:fd:dc:a2:b9:5b:9a:35:ef:ba:ce:56:b0:24:8e: d1:bd:3c:49:5e:0b:b1:d5:6d:05:50:3b:86:8e:6a: 6e:37:ce:b6:7c:8d:22:ab:c7:a9:7e:bd:c9:a6:b0: 02:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:21:8B:EC:81:81:A8:36:07:35:FD:21:09:75:E8:8E:16:D8:E6:86 X509v3 Authority Key Identifier: keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:61:6d:87:9a:b7:3a:73:94:5d:09:49:8a:b0:96:c4:50:73: 2b:3b:f0:74:55:05:ac:87:1b:a4:67:43:73:c4:b1:8e:24:57: a4:e0:e5:c3:d1:b5:bd:42:4c:a6:a5:83:0b:b9:82:f6:cd:7c: ae:c4:8b:3f:30:de:73:13:b5:3d:76:70:99:ca:7f:03:fb:6d: 69:2e:5d:00:0f:75:04:32:b4:28:38:bd:83:67:b1:77:70:45: 0b:de:f6:1e:7b:31:15:9e:31:b4:00:3f:a6:07:2e:97:7e:ba: c2:65:82:91:13:b0:d8:78:1e:ed:20:eb:f9:76:d9:19:ac:b3: cc:0e:28:a8:38:56:e3:f8:3e:a1:c6:ef:f1:c5:61:61:d9:0a: 83:8f:cd:cd:06:c3:9f:75:6c:68:cd:c1:0a:05:02:59:27:a5: d9:4b:be:ba:af:09:56:3b:3e:d6:b0:52:9b:1a:d6:f5:9a:93: 8d:f4:e7:44:1c:f6:9a:a5:15:65:51:4a:31:6f:dd:1e:08:62: 3e:71:f9:85:87:76:b2:4f:35:a3:2e:7d:62:64:6c:b4:a9:e0: 18:5c:f2:8b:05:fe:5d:11:8f:ff:68:20:66:a6:7a:6e:47:60: 6e:a8:e1:98:29:f2:6f:8b:dc:c2:6f:fd:30:75:27:8a:db:92: e6:af:30:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDRDUxMTAvBgNVBAUTKDRCNEMzQUNDNzYyMENBOEQyNjlGNzdDMkY4QkU2Q0Ew REEyMTc2MjcwHhcNMjUwNDI1MDAxNDA1WhcNMjUwNTAyMDAxNDA1WjAYMRYwFAYD VQQDEw02ODBhZDNjZC01YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OLYpl2z30CHxrf6TvleM8/j3uhq0Ue39n2xinY1HXBO4djdF5fZZ5aF8K0N yfdnQDepcsJKxRUqLtLUbXNCbuphUO3W5ydrtblietVT8YTeZsDY3iM+L0ofJ3Cy +GbH+fOCJ5wPoT9kguwqIcXn17UPK1IZavt04BUSJWQOQtsDnU/BUpv9/x6qMl/S hpYVGIU5005fuM5qBPx4q+KdslV4MryzCZIdQ2nnHEzpG0LKHULYIkRR4SmbH7f9 24tGmwpJzsiDTNz94jhXP6BGWe6x/dyiuVuaNe+6zlawJI7RvTxJXgux1W0FUDuG jmpuN862fI0iq8epfr3JprAC+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMohi+yB gag2BzX9IQl16I4W2OaGMB8GA1UdIwQYMBaAFEtMOsx2IMqNJp93wvi+bKDaIXYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNENS84MDRCMUU5MjZB REExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lvMG1uM2ZDLUw1c29Ob2hk aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwdzZ6SFlneW8wbW4zZkMtTDVzb05vaGRpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNENS84MDRCMUU5MjZBREExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lv MG1uM2ZDLUw1c29Ob2hkaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQYW2Hmrc6c5RdCUmKsJbEUHMrO/B0VQWshxukZ0NzxLGOJFek4OXD 0bW9QkympYMLuYL2zXyuxIs/MN5zE7U9dnCZyn8D+21pLl0AD3UEMrQoOL2DZ7F3 cEUL3vYeezEVnjG0AD+mBy6XfrrCZYKRE7DYeB7tIOv5dtkZrLPMDiioOFbj+D6h xu/xxWFh2QqDj83NBsOfdWxozcEKBQJZJ6XZS766rwlWOz7WsFKbGtb1mpON9OdE HPaapRVlUUoxb90eCGI+cfmFh3ayTzWjLn1iZGy0qeAYXPKLBf5dEY//aCBmpnpu R2BuqOGYKfJvi9zCb/0wdSeK25LmrzCr -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:30 2025 by rpki-client