$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft File: s0it0HgdstIdxNM510-HoDk4ycc.mft (raw, json) Hash identifier: cFafwUC4kmWGn3UrD+DCmvMxJFgmzYjqwIES8NNAXzE= Subject key identifier: A5:3B:24:AC:A7:8D:20:18:F6:1E:27:A6:C5:32:FF:5D:77:82:2F:5A Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 Certificate issuer: /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft Manifest number: 01D1 Signing time: Fri 25 Apr 2025 02:03:46 +0000 Manifest this update: Fri 25 Apr 2025 02:03:46 +0000 Manifest next update: Fri 02 May 2025 02:03:46 +0000 Files and hashes: 1: s0it0HgdstIdxNM510-HoDk4ycc.crl (hash: 41Ie/JFsB1s7DLmjap7itPOxR+2Ko7khUBS/jPr+TnI=) 2: 945D844463E311EDAD1B0B3FC4F9AE02.roa (hash: N+dN6EXW9kLpuaXIDcRP+SypH2TkoWeKEFt5XA9cnJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C44, serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7 Validity Not Before: Apr 25 02:03:46 2025 GMT Not After : May 2 02:03:46 2025 GMT Subject: CN=680aed82-fc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:47:3e:fd:4e:e9:e3:75:e3:59:ed:38:e1: f7:0c:a1:f3:58:e0:67:ef:5f:2d:c3:ff:55:f1:ad: 7d:43:25:07:2c:de:22:6c:03:10:1a:c8:e4:14:90: 06:7b:b2:e6:25:57:7a:c1:da:e0:15:bd:78:05:e4: c9:c4:64:b0:51:b4:91:fc:6c:ef:b1:6d:91:a8:fc: f3:f6:f3:17:4e:a3:38:b0:a5:78:c8:32:e0:a3:33: 9c:c6:38:f4:e4:e5:f0:7b:15:8c:08:64:7d:fb:23: 6e:b3:ca:b6:fd:16:48:b0:19:04:db:ce:6b:5d:10: 05:2a:64:92:30:37:dd:6b:33:dc:4e:48:8d:84:18: ba:6c:31:2e:2d:49:93:94:22:1d:a7:0d:ed:cd:f4: a2:94:2e:66:51:5f:2d:98:8c:84:28:1b:82:14:73: bb:a0:5e:f1:47:05:66:25:ed:71:79:18:a2:57:32: 05:6a:ef:e9:f9:c1:12:c0:09:d8:d6:27:bc:b8:ec: 54:5f:fa:fa:7b:fe:97:64:03:8d:c7:df:cd:3f:02: a7:36:1b:f9:ef:0c:7a:86:34:80:eb:e5:86:b6:39: 50:90:d6:e3:7a:64:74:fd:3f:44:c9:d5:f3:af:b3: 20:95:74:2b:d4:c4:cb:31:67:2f:ef:4c:22:b2:5c: 35:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3B:24:AC:A7:8D:20:18:F6:1E:27:A6:C5:32:FF:5D:77:82:2F:5A X509v3 Authority Key Identifier: keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1b:61:9d:a1:61:52:ff:12:c4:a0:3f:22:df:5c:15:2f:e9: 15:81:cc:26:f1:b9:7c:c0:44:b0:e1:4b:ad:5f:13:ce:77:ff: f8:1d:aa:16:38:ac:62:ff:db:55:21:8d:2a:52:c2:45:29:7d: ad:81:a2:05:d2:59:a7:c2:71:67:de:d8:96:40:53:a6:77:ae: 2a:2d:79:c5:e9:7d:a3:21:3e:7e:0f:5e:dd:f1:54:00:8e:9f: 68:53:06:7f:6e:e5:a1:1e:f8:11:d4:07:5b:3b:4a:cc:21:f4: e7:95:3c:eb:d8:dc:23:dc:50:a7:05:40:2b:ed:30:a6:a3:29: 64:be:b1:b6:6b:c0:48:58:03:ec:56:d6:9d:72:ac:01:73:0f: c2:5d:03:2f:80:0b:c4:f6:8a:4b:b0:d9:9b:5e:5a:d7:e7:2a: 13:77:2d:8a:fa:40:7a:be:0b:99:e5:8a:8f:06:41:75:3c:69: 4d:4e:11:bc:f6:77:21:01:1b:f7:9d:db:2c:b4:03:77:33:3e: 5a:dc:3e:45:2a:5f:0b:e6:80:68:53:b9:ff:53:e5:ea:4b:54: ac:cd:69:6d:69:e5:8e:1a:78:4e:79:f6:39:dc:88:c5:fd:48: f1:c5:fc:8d:08:3e:99:38:e1:b9:80:fa:10:ea:10:35:3f:ea: 9a:64:fc:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDNDQxMTAvBgNVBAUTKEIzNDhBREQwNzgxREIyRDIxREM0RDMzOUQ3NEY4N0Ew MzkzOEM5QzcwHhcNMjUwNDI1MDIwMzQ2WhcNMjUwNTAyMDIwMzQ2WjAYMRYwFAYD VQQDEw02ODBhZWQ4Mi1mYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEtHPv1O6eN141ntOOH3DKHzWOBn718tw/9V8a19QyUHLN4ibAMQGsjkFJAG e7LmJVd6wdrgFb14BeTJxGSwUbSR/GzvsW2RqPzz9vMXTqM4sKV4yDLgozOcxjj0 5OXwexWMCGR9+yNus8q2/RZIsBkE285rXRAFKmSSMDfdazPcTkiNhBi6bDEuLUmT lCIdpw3tzfSilC5mUV8tmIyEKBuCFHO7oF7xRwVmJe1xeRiiVzIFau/p+cESwAnY 1ie8uOxUX/r6e/6XZAONx9/NPwKnNhv57wx6hjSA6+WGtjlQkNbjemR0/T9EydXz r7MglXQr1MTLMWcv70wislw1bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU7JKyn jSAY9h4npsUy/113gi9aMB8GA1UdIwQYMBaAFLNIrdB4HbLSHcTTOddPh6A5OMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0M0NC9ENTMzQTdCNDYz REUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0SWR4Tk01MTAtSG9EazR5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MwaXQwSGdkc3RJZHhOTTUxMC1Ib0RrNHljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0M0NC9ENTMzQTdCNDYzREUxMUVEODBCQ0QzMzdDNEY5QUUwMi9zMGl0MEhnZHN0 SWR4Tk01MTAtSG9EazR5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSG2GdoWFS/xLEoD8i31wVL+kVgcwm8bl8wESw4UutXxPOd//4HaoW OKxi/9tVIY0qUsJFKX2tgaIF0lmnwnFn3tiWQFOmd64qLXnF6X2jIT5+D17d8VQA jp9oUwZ/buWhHvgR1AdbO0rMIfTnlTzr2Nwj3FCnBUAr7TCmoylkvrG2a8BIWAPs VtadcqwBcw/CXQMvgAvE9opLsNmbXlrX5yoTdy2K+kB6vguZ5YqPBkF1PGlNThG8 9nchARv3ndsstAN3Mz5a3D5FKl8L5oBoU7n/U+XqS1SszWltaeWOGnhOefY53IjF /UjxxfyNCD6ZOOG5gPoQ6hA1P+qaZPz6 -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:05 2025 by rpki-client