$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft File: Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft (raw, json) Hash identifier: 0xh9KWcpjL+GBqyMxAvFYuaPCpmjueMZRvxTi4e6weM= Subject key identifier: 87:48:C7:02:B1:A4:B0:68:C9:F0:30:BF:24:FF:78:10:BD:31:53:98 Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA Certificate issuer: /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft Manifest number: 01C5 Signing time: Fri 25 Apr 2025 02:15:36 +0000 Manifest this update: Fri 25 Apr 2025 02:15:35 +0000 Manifest next update: Fri 02 May 2025 02:15:35 +0000 Files and hashes: 1: Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl (hash: euVv01i78Oh/5YG+CdTn2ZNywCSoZX7b/YoELvfRFWE=) 2: 6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa (hash: UPzNqHZtzAjVZqphmOfv2Hp1UJdFW2/M83hc9R8RBqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF, serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Validity Not Before: Apr 25 02:15:35 2025 GMT Not After : May 2 02:15:35 2025 GMT Subject: CN=680af047-2878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:db:77:24:5b:55:d5:9b:e0:cc:14:42:48: 0e:d8:2c:3a:ea:51:00:36:94:71:74:64:47:87:f5: 5c:bc:f1:b5:c6:09:a9:b9:41:69:c4:0c:6c:18:cc: 01:b0:20:9b:74:2d:e0:0e:c7:6b:c6:fe:9e:a8:3c: 8c:fe:dc:f8:8f:01:31:ae:f7:10:24:b0:7f:be:eb: d0:7d:2a:0d:91:0f:5a:52:80:5d:1e:ad:c1:25:49: d5:c2:1b:b2:df:b6:42:a4:9b:e2:b5:6b:00:b5:9a: 5a:9f:06:63:52:a8:37:3c:a7:cd:86:3a:e3:2d:9c: d5:9a:06:7b:a0:6a:29:e0:d0:2c:79:a8:d6:d9:ce: 32:fd:0f:2f:a7:2e:87:1a:b1:4a:23:8b:59:63:0f: 3a:21:6c:82:4a:ad:c8:d6:77:17:a0:a2:e0:b8:a6: 1c:40:c3:47:47:83:04:9c:85:0f:23:5e:7c:22:e8: 83:2e:1c:1a:23:73:84:00:d9:11:84:c3:87:e7:26: ce:7f:f9:c1:56:f0:04:0d:57:85:d1:c2:be:82:66: 20:c8:b3:7a:00:55:33:fa:80:4e:87:50:8f:fd:8f: e3:b5:e5:c5:a2:cd:1b:a4:fc:40:c0:aa:8b:0f:e0: b8:d5:a4:80:1a:b5:5f:1f:47:50:29:41:28:74:49: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:48:C7:02:B1:A4:B0:68:C9:F0:30:BF:24:FF:78:10:BD:31:53:98 X509v3 Authority Key Identifier: keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b9:89:47:e7:b7:5e:4d:58:3c:77:e7:fb:fa:fc:1f:e7:8b: b9:ab:25:e3:2f:74:ba:2e:df:12:2f:b3:33:8e:df:f6:46:9a: 2a:a4:25:a9:fc:63:c7:ac:9c:38:b1:a7:a4:9a:27:d8:b0:7d: cd:01:e8:39:8d:5e:47:bb:89:b2:dd:2b:f7:4a:3e:86:43:91: a5:da:51:fd:98:43:39:60:79:73:a6:aa:df:6a:ca:aa:10:7b: ef:df:ff:fb:e3:97:76:f8:a2:8f:32:87:f3:31:3f:aa:d6:1e: 11:0a:52:94:a1:96:cf:8e:25:38:71:a6:a6:21:84:f3:21:a5: c0:e0:7d:37:1f:76:fe:80:aa:3a:cd:58:15:bd:5e:e4:cb:da: 92:48:b7:af:84:fe:dc:36:9a:99:cd:82:9e:a6:68:cc:34:f9: c2:b4:98:f9:1a:62:a1:65:bc:26:cf:6a:00:38:c5:74:38:6b: 80:58:97:6b:95:72:80:8f:61:66:63:ea:5e:0d:b1:17:59:ad: ec:84:5b:fb:45:03:5f:6b:aa:18:12:0e:53:0f:e0:79:7a:b3: 18:b1:1f:17:ea:f8:c4:32:86:9c:71:fc:ac:b4:1f:89:5f:45: 4d:a0:df:26:42:8b:ba:7f:8d:ae:69:eb:36:55:a8:cd:8a:23: 57:d6:da:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDBBM0NGQzdGMzk1QTM0QkFCRTMxQjhDQTQ2MjNEMzFD NzZBOEQ5RkEwHhcNMjUwNDI1MDIxNTM1WhcNMjUwNTAyMDIxNTM1WjAYMRYwFAYD VQQDEw02ODBhZjA0Ny0yODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylHbdyRbVdWb4MwUQkgO2Cw66lEANpRxdGRHh/VcvPG1xgmpuUFpxAxsGMwB sCCbdC3gDsdrxv6eqDyM/tz4jwExrvcQJLB/vuvQfSoNkQ9aUoBdHq3BJUnVwhuy 37ZCpJvitWsAtZpanwZjUqg3PKfNhjrjLZzVmgZ7oGop4NAseajW2c4y/Q8vpy6H GrFKI4tZYw86IWyCSq3I1ncXoKLguKYcQMNHR4MEnIUPI158IuiDLhwaI3OEANkR hMOH5ybOf/nBVvAEDVeF0cK+gmYgyLN6AFUz+oBOh1CP/Y/jteXFos0bpPxAwKqL D+C41aSAGrVfH0dQKUEodEldPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdIxwKx pLBoyfAwvyT/eBC9MVOYMB8GA1UdIwQYMBaAFAo8/H85WjS6vjG4ykYj0xx2qNn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9GNDZBRERFNjdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5McS1NYmpLUmlQVEhIYW8y Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqejhmemxhTkxxLU1iaktSaVBUSEhhbzJmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVERi9GNDZBRERFNjdDNTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5M cS1NYmpLUmlQVEhIYW8yZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYuYlH57deTVg8d+f7+vwf54u5qyXjL3S6Lt8SL7Mzjt/2RpoqpCWp /GPHrJw4saekmifYsH3NAeg5jV5Hu4my3Sv3Sj6GQ5Gl2lH9mEM5YHlzpqrfasqq EHvv3//745d2+KKPMofzMT+q1h4RClKUoZbPjiU4caamIYTzIaXA4H03H3b+gKo6 zVgVvV7ky9qSSLevhP7cNpqZzYKepmjMNPnCtJj5GmKhZbwmz2oAOMV0OGuAWJdr lXKAj2FmY+peDbEXWa3shFv7RQNfa6oYEg5TD+B5erMYsR8X6vjEMoaccfystB+J X0VNoN8mQou6f42uaes2VajNiiNX1trc -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:48 2025 by rpki-client