$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json) Hash identifier: AtwEjCMScPtrCuQ9EJxMIXWewZWi78LM40NkRbQ8j68= Subject key identifier: D4:D7:BA:88:AB:F0:3D:20:9D:21:D3:6D:C8:86:DB:5B:76:EF:CD:8D Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft Manifest number: 0836 Signing time: Thu 24 Apr 2025 20:38:03 +0000 Manifest this update: Thu 24 Apr 2025 20:38:02 +0000 Manifest next update: Thu 01 May 2025 20:38:02 +0000 Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: 4vwPh018Zg0zM12OEyS/FL+RLYHL+0n2QD0L1i+ZCKU=) 2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: Orts9nJAHIeXwpDUPuUMiOuSaf1VvGVbpuD8ge8k//4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Validity Not Before: Apr 24 20:38:02 2025 GMT Not After : May 1 20:38:02 2025 GMT Subject: CN=680aa12a-46c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:88:30:13:19:33:52:3e:85:80:17:c0:74:07: ab:8d:2d:41:df:30:5e:9b:41:31:48:06:7b:5b:7d: 4c:c5:14:1f:87:71:e3:19:c5:99:69:21:e0:9f:bc: 9c:9f:32:41:5a:fb:5f:c7:ec:52:e1:10:5d:03:00: 5f:5b:74:0c:10:d1:bb:ab:3a:d2:3d:ab:ca:7f:10: 46:65:ec:8f:dd:6c:ff:13:58:a6:cd:02:c9:76:69: 8b:71:08:98:85:a1:d4:a8:38:80:23:82:75:56:8b: 4f:85:bd:dc:4f:16:8e:90:d3:31:08:99:c0:3a:90: 56:4f:9d:23:96:de:d4:c8:1b:8c:47:5c:80:c5:72: 80:30:28:63:a0:d3:03:4c:85:59:60:7c:8f:f7:48: 12:2c:c6:b1:05:ce:29:09:4a:d9:f1:74:5f:e8:05: 43:5b:4f:b4:43:d8:57:82:4a:03:36:b1:2e:98:d8: e4:3c:f5:02:83:65:e4:fa:84:ca:c0:b8:fb:27:23: 60:21:bb:e9:21:07:06:54:4f:e0:52:d2:b9:0b:cb: 1b:b2:a5:d8:f0:a3:d1:15:61:b5:fe:de:f5:e3:b6: 25:d9:81:a1:21:0d:d2:c3:14:e5:29:64:1c:6c:f7: e1:f1:17:0c:04:fa:83:79:ea:aa:4d:e0:ef:b7:a4: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D7:BA:88:AB:F0:3D:20:9D:21:D3:6D:C8:86:DB:5B:76:EF:CD:8D X509v3 Authority Key Identifier: keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6f:9b:8f:5d:12:19:d2:a6:6a:c4:e7:eb:54:10:25:d0:41: 6b:1b:70:52:9b:65:4c:19:81:f6:74:72:85:01:40:c9:de:98: 46:6c:14:9a:5c:88:ad:32:30:15:58:29:f3:af:45:28:f0:bf: e5:df:e4:95:c4:22:1a:6a:4a:01:82:c6:4e:d3:13:a9:c3:ac: cf:f9:70:6d:75:d1:94:52:a7:a5:f2:66:a9:32:3d:f0:44:08: 1e:89:61:d1:d2:0f:90:b2:68:d2:0f:24:08:7c:bb:b5:65:84: d1:b1:6d:9c:b5:63:36:8e:00:d9:2b:33:27:d4:75:99:ec:07: 08:d4:4a:69:84:fa:03:1d:f7:39:8b:ef:da:25:e8:8f:5a:b6: b1:fd:8a:43:c3:de:27:f9:eb:76:7c:79:60:ba:ad:28:04:81: 64:7b:ac:a7:5a:f1:32:66:7f:43:ff:8b:d4:59:60:39:9a:62: 6e:21:7d:c4:37:21:58:f2:eb:00:ad:99:b0:17:ef:7c:af:be: 50:96:46:f6:50:e6:ed:e5:ae:a0:dc:d0:d2:37:35:1c:22:7a: 0d:1d:fb:7b:21:37:0f:6f:70:8d:dd:37:91:89:d0:45:96:a9: 33:6a:95:91:65:a3:4a:fc:6d:7b:8a:ff:08:02:e7:1b:3c:0e: 96:73:30:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCNDgxMTAvBgNVBAUTKDc1RDc1QkRBNTFCQ0EwMDYwRjcwODExMzIzNEM0MTQ1 RTQ0NDQyMUEwHhcNMjUwNDI0MjAzODAyWhcNMjUwNTAxMjAzODAyWjAYMRYwFAYD VQQDEw02ODBhYTEyYS00NmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34gwExkzUj6FgBfAdAerjS1B3zBem0ExSAZ7W31MxRQfh3HjGcWZaSHgn7yc nzJBWvtfx+xS4RBdAwBfW3QMENG7qzrSPavKfxBGZeyP3Wz/E1imzQLJdmmLcQiY haHUqDiAI4J1VotPhb3cTxaOkNMxCJnAOpBWT50jlt7UyBuMR1yAxXKAMChjoNMD TIVZYHyP90gSLMaxBc4pCUrZ8XRf6AVDW0+0Q9hXgkoDNrEumNjkPPUCg2Xk+oTK wLj7JyNgIbvpIQcGVE/gUtK5C8sbsqXY8KPRFWG1/t7147Yl2YGhIQ3SwxTlKWQc bPfh8RcMBPqDeeqqTeDvt6QrZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTXuoir 8D0gnSHTbciG21t2782NMB8GA1UdIwQYMBaAFHXXW9pRvKAGD3CBEyNMQUXkREIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkI0OC85MEM0NzkxQ0NC QjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9BWVBjSUVUSTB4QlJlUkVR aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkZGIybEc4b0FZUGNJRVRJMHhCUmVSRVFoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkI0OC85MEM0NzkxQ0NCQjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9B WVBjSUVUSTB4QlJlUkVRaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfb5uPXRIZ0qZqxOfrVBAl0EFrG3BSm2VMGYH2dHKFAUDJ3phGbBSa XIitMjAVWCnzr0Uo8L/l3+SVxCIaakoBgsZO0xOpw6zP+XBtddGUUqel8mapMj3w RAgeiWHR0g+QsmjSDyQIfLu1ZYTRsW2ctWM2jgDZKzMn1HWZ7AcI1EpphPoDHfc5 i+/aJeiPWrax/YpDw94n+et2fHlguq0oBIFke6ynWvEyZn9D/4vUWWA5mmJuIX3E NyFY8usArZmwF+98r75Qlkb2UObt5a6g3NDSNzUcInoNHft7ITcPb3CN3TeRidBF lqkzapWRZaNK/G17iv8IAucbPA6WczAY -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:51 2025 by rpki-client