$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: I9bA84M5WOxb60aE054COsFD9EMcYy471carEQS36lU= Subject key identifier: 21:FC:13:6A:17:80:9A:05:1E:B1:3B:2A:A6:71:B1:88:56:AF:19:6D Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 05B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 059A Signing time: Thu 24 Apr 2025 23:02:55 +0000 Manifest this update: Thu 24 Apr 2025 23:02:54 +0000 Manifest next update: Thu 01 May 2025 23:02:54 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: RmgvngSz8jmCR0cvKOA+/dqN/bxhrRcq3XKEUg58zHQ=) 2: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=) 3: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: 6AJPVo9vxTgn3yMGe8EXUj+/hKbxpASVzYIJLzUgXCE=) 4: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: RdB+XhDvSvaJvXs7BGUe7hQ0J/yDuFEAfzGv0ijmNPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1456 (0x5b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: Apr 24 23:02:54 2025 GMT Not After : May 1 23:02:54 2025 GMT Subject: CN=680ac31f-b944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:bf:a0:96:9f:a4:4a:87:d3:1e:50:9f:2a:c9: 46:8f:bb:a7:f5:d0:6d:ae:a0:e7:5f:a6:30:ef:04: 37:ef:01:a1:60:78:d8:cc:fc:6b:2d:64:92:58:2e: e9:de:44:5d:97:c6:f7:f9:eb:12:55:22:de:e1:0a: e6:03:d1:c3:7f:e1:02:14:dc:58:79:92:fd:b9:c2: bf:da:8e:23:2a:11:73:8c:cf:49:45:dd:9d:cd:48: 37:45:2c:2e:72:5c:e9:9c:9b:8b:62:1a:fa:80:70: fe:20:21:1c:bf:8f:cd:53:f7:95:13:9e:4e:a1:dc: ec:94:f7:4c:3e:b8:ba:c1:45:56:c6:f6:af:54:a3: db:4f:ae:81:66:e2:80:75:ce:c7:5e:19:73:5c:15: 84:93:3e:0a:81:e5:00:e6:e6:cc:21:c5:24:98:58: 00:8b:80:82:71:04:7b:8e:90:9f:84:4e:58:35:40: 28:ce:ae:95:c0:be:06:54:a7:53:6b:aa:9b:ce:06: e2:7d:c6:7b:e2:06:06:53:f2:72:92:bd:28:38:59: 18:23:5f:63:bb:65:f2:a3:a8:06:00:78:de:f0:a8: a4:76:7a:84:a4:5c:58:64:00:79:67:97:1d:47:d1: f2:3a:88:10:5f:e9:55:54:79:b3:16:16:f6:43:14: 15:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FC:13:6A:17:80:9A:05:1E:B1:3B:2A:A6:71:B1:88:56:AF:19:6D X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:52:f8:00:7d:81:87:18:be:78:99:7e:27:d5:be:bf:19:86: 47:e4:1b:fc:c7:c5:c2:aa:eb:65:b1:a0:57:ce:9c:d9:ad:fa: ff:68:f9:d2:de:f2:8c:d9:2e:a5:87:d9:ec:db:14:10:a1:e1: 28:55:58:fb:99:46:3a:e5:1c:21:89:f9:5b:8a:cf:f3:26:da: b1:91:0d:58:3d:21:ba:34:6f:6b:49:c7:de:4b:66:80:6e:2f: 9a:c5:87:8d:14:30:8f:b7:5d:1f:32:40:64:20:06:06:03:c2: f4:f2:b0:de:99:f6:62:07:db:e5:7c:58:d0:33:a9:9a:16:ba: 87:38:da:90:d0:f8:5e:60:d4:88:fa:7c:02:c9:51:54:76:46: 2b:a4:09:88:77:fa:d4:bc:68:5c:90:a3:4e:c1:59:03:e5:4a: 48:6a:66:20:31:75:6a:84:2a:bc:95:ee:cb:10:6e:bc:3f:3e: f8:56:7e:b7:bb:4b:9a:59:e6:0d:0d:5b:54:42:35:07:60:5e: 71:e6:f5:e1:2f:da:f4:80:42:3c:87:68:e8:53:43:08:94:41: 34:69:db:59:fa:2f:a4:17:bb:3b:6b:b9:bb:fe:f8:e6:45:be: c8:87:79:18:b4:b9:34:2d:12:57:35:85:04:7e:1c:52:3b:04: e5:3f:0c:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUwNDI0MjMwMjU0WhcNMjUwNTAxMjMwMjU0WjAYMRYwFAYD VQQDEw02ODBhYzMxZi1iOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/L+glp+kSofTHlCfKslGj7un9dBtrqDnX6Yw7wQ37wGhYHjYzPxrLWSSWC7p 3kRdl8b3+esSVSLe4QrmA9HDf+ECFNxYeZL9ucK/2o4jKhFzjM9JRd2dzUg3RSwu clzpnJuLYhr6gHD+ICEcv4/NU/eVE55OodzslPdMPri6wUVWxvavVKPbT66BZuKA dc7HXhlzXBWEkz4KgeUA5ubMIcUkmFgAi4CCcQR7jpCfhE5YNUAozq6VwL4GVKdT a6qbzgbifcZ74gYGU/Jykr0oOFkYI19ju2Xyo6gGAHje8KikdnqEpFxYZAB5Z5cd R9HyOogQX+lVVHmzFhb2QxQV+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCH8E2oX gJoFHrE7KqZxsYhWrxltMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFUvgAfYGHGL54mX4n1b6/GYZH5Bv8x8XCqutlsaBXzpzZrfr/aPnS 3vKM2S6lh9ns2xQQoeEoVVj7mUY65Rwhiflbis/zJtqxkQ1YPSG6NG9rScfeS2aA bi+axYeNFDCPt10fMkBkIAYGA8L08rDemfZiB9vlfFjQM6maFrqHONqQ0PheYNSI +nwCyVFUdkYrpAmId/rUvGhckKNOwVkD5UpIamYgMXVqhCq8le7LEG68Pz74Vn63 u0uaWeYNDVtUQjUHYF5x5vXhL9r0gEI8h2joU0MIlEE0adtZ+i+kF7s7a7m7/vjm Rb7Ih3kYtLk0LRJXNYUEfhxSOwTlPwzf -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:11 2025 by rpki-client