$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft File: ed1SqjF1MIEm0XSGpygF-w4bqlg.mft (raw, json) Hash identifier: f2vkgs8sRma0tFNY+yd7Stt2jRvqa28MxdFko+010QI= Subject key identifier: 66:14:F9:0D:9C:0D:5D:C5:DF:61:8D:97:2B:1E:8E:DF:69:37:74:73 Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58 Certificate issuer: /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58 Certificate serial: 0733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft Manifest number: 072C Signing time: Thu 24 Apr 2025 21:35:22 +0000 Manifest this update: Thu 24 Apr 2025 21:35:21 +0000 Manifest next update: Thu 01 May 2025 21:35:21 +0000 Files and hashes: 1: ed1SqjF1MIEm0XSGpygF-w4bqlg.crl (hash: 3j0H62S8pnEhekyMCMJJBrY3Lp0FsJ7WMjcxD/wEpxw=) 2: 6B5C86022D6811EB86D96027C4F9AE02.roa (hash: t3hqNdqM2MD3ZAVu8FNoGwxlm5G0gcPJniuKJXcYFWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB0E2, serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58 Validity Not Before: Apr 24 21:35:21 2025 GMT Not After : May 1 21:35:21 2025 GMT Subject: CN=680aae99-c8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:49:fd:a0:20:40:e3:92:1c:7b:90:1b:13: ac:a1:3f:29:1c:2c:af:08:cc:02:67:7c:82:20:73: 91:ac:6e:b0:6d:cd:49:5a:63:03:ea:04:f3:5b:11: 6f:b7:e0:d7:3f:c7:ce:88:a0:e2:a2:f0:df:da:4a: 50:91:8a:2e:58:33:99:33:cb:98:ea:79:ff:a5:ea: e4:6f:2a:71:96:91:86:5b:32:72:df:4d:f2:f9:62: 4d:87:81:f3:91:36:7c:e9:3d:2e:08:2d:63:32:65: 79:0f:87:46:03:d1:61:da:62:61:f0:8f:2f:4a:ee: bf:a7:85:65:15:07:03:1e:c5:b5:9e:bb:ca:3c:6a: 79:2c:e9:bc:97:a2:8a:fb:7b:d3:7f:4d:23:5f:82: d9:67:f5:52:5e:db:92:8b:48:4b:64:a5:54:cf:c7: 34:aa:de:9a:14:43:6c:8b:26:7a:24:5a:ff:9c:5d: 09:4a:d2:86:37:b9:e9:db:59:3e:04:56:ad:21:84: 7c:0a:9e:d2:d0:8d:a6:7c:68:5c:dd:b1:d2:b5:85: d5:f7:6e:2f:89:aa:02:a0:7e:bd:51:cd:dc:59:9a: 2d:06:47:b7:61:e4:9d:89:9d:3c:a6:c2:40:81:0a: 75:ee:33:50:8f:57:2b:b5:c9:70:5b:9b:d6:12:78: 6a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:14:F9:0D:9C:0D:5D:C5:DF:61:8D:97:2B:1E:8E:DF:69:37:74:73 X509v3 Authority Key Identifier: keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2b:44:69:a7:e8:0f:de:57:e9:84:b0:1f:96:c0:e1:05:f9: 86:f0:99:1b:44:61:c6:3e:cd:97:bb:d7:2f:b5:6b:e5:65:54: 7d:ff:eb:db:15:d9:33:2f:b2:10:1e:12:46:b1:a0:54:8e:12: 3d:fb:dc:91:d3:06:23:1f:11:d0:2e:68:f3:a9:12:33:25:d8: ac:b4:aa:e6:73:9c:a5:2a:28:cc:07:f8:6c:86:9f:d2:7b:88: 00:ba:27:9a:48:70:e7:b5:e5:83:aa:8c:2d:84:b8:9c:dc:19: 11:30:2f:c7:37:a3:da:41:9f:44:26:b1:77:54:30:6e:d1:f0: 2c:dd:80:f9:ff:2b:1e:ea:b6:3f:49:67:50:1a:3d:e3:e8:b0: 06:35:33:01:b2:a4:c0:8f:26:40:59:1e:41:2c:91:17:88:89: ac:09:89:9e:af:e2:b6:f9:69:b2:16:68:1b:09:82:bc:8a:e5: 5d:e5:c6:02:70:94:f9:39:cc:2f:9b:f6:2c:54:8f:5a:fe:5b: bf:29:ae:7c:f3:d1:c6:f7:bc:5f:84:1c:aa:5d:8a:2f:a9:d2: a1:ae:7c:0a:4b:b5:36:fc:64:c2:45:13:28:44:20:19:c1:5e: 78:be:85:5d:ce:61:92:6c:17:e1:48:a7:52:03:58:4e:f4:6f: 2e:bc:6d:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwRTIxMTAvBgNVBAUTKDc5REQ1MkFBMzE3NTMwODEyNkQxNzQ4NkE3MjgwNUZC MEUxQkFBNTgwHhcNMjUwNDI0MjEzNTIxWhcNMjUwNTAxMjEzNTIxWjAYMRYwFAYD VQQDEw02ODBhYWU5OS1jOGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7pJ/aAgQOOSHHuQGxOsoT8pHCyvCMwCZ3yCIHORrG6wbc1JWmMD6gTzWxFv t+DXP8fOiKDiovDf2kpQkYouWDOZM8uY6nn/perkbypxlpGGWzJy303y+WJNh4Hz kTZ86T0uCC1jMmV5D4dGA9Fh2mJh8I8vSu6/p4VlFQcDHsW1nrvKPGp5LOm8l6KK +3vTf00jX4LZZ/VSXtuSi0hLZKVUz8c0qt6aFENsiyZ6JFr/nF0JStKGN7np21k+ BFatIYR8Cp7S0I2mfGhc3bHStYXV924viaoCoH69Uc3cWZotBke3YeSdiZ08psJA gQp17jNQj1crtclwW5vWEnhqYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYU+Q2c DV3F32GNlysejt9pN3RzMB8GA1UdIwQYMBaAFHndUqoxdTCBJtF0hqcoBfsOG6pY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjBFMi9CNjIzODUyQTJE NjYxMUVCQjQ0RjU3MjVDNEY5QUUwMi9lZDFTcWpGMU1JRW0wWFNHcHlnRi13NGJx bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkMVNxakYxTUlFbTBYU0dweWdGLXc0YnFsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjBFMi9CNjIzODUyQTJENjYxMUVCQjQ0RjU3MjVDNEY5QUUwMi9lZDFTcWpGMU1J RW0wWFNHcHlnRi13NGJxbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqK0Rpp+gP3lfphLAflsDhBfmG8JkbRGHGPs2Xu9cvtWvlZVR9/+vb FdkzL7IQHhJGsaBUjhI9+9yR0wYjHxHQLmjzqRIzJdistKrmc5ylKijMB/hshp/S e4gAuieaSHDnteWDqowthLic3BkRMC/HN6PaQZ9EJrF3VDBu0fAs3YD5/yse6rY/ SWdQGj3j6LAGNTMBsqTAjyZAWR5BLJEXiImsCYmer+K2+WmyFmgbCYK8iuVd5cYC cJT5Ocwvm/YsVI9a/lu/Ka5889HG97xfhByqXYovqdKhrnwKS7U2/GTCRRMoRCAZ wV54voVdzmGSbBfhSKdSA1hO9G8uvG2X -----END CERTIFICATE-----Generated at Sat Apr 26 05:47:21 2025 by rpki-client