$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft File: -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json) Hash identifier: pdFegYVV16bFUSIQApvjbWygEw3VH29LOKDP5KnYmYE= Subject key identifier: 3B:DE:93:87:13:9D:B0:BC:FE:05:1D:C1:1F:56:DD:63:09:17:53:27 Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE Certificate issuer: /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft Manifest number: 0313 Signing time: Fri 25 Apr 2025 01:26:47 +0000 Manifest this update: Fri 25 Apr 2025 01:26:47 +0000 Manifest next update: Fri 02 May 2025 01:26:47 +0000 Files and hashes: 1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: 36u25r/OmJw0NiA0LxfjjVb8GX0C1mNNcCG4FQu3TeI=) 2: 3E62F2ECC9EA11ECB6295B34C4F9AE02.roa (hash: mfXzwKGY7gUqiLkJW1SqazxLmJ2CAU7Yff9kCtQmKuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD056, serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE Validity Not Before: Apr 25 01:26:47 2025 GMT Not After : May 2 01:26:47 2025 GMT Subject: CN=680ae4d7-7c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:78:2f:31:cf:d4:69:d0:b3:61:cc:ff:d1: 72:c8:fd:e6:60:6e:db:8b:df:bb:f9:a9:49:c1:5c: 90:05:e1:da:27:d2:b1:d8:00:55:b7:b3:04:f7:22: a4:47:fd:60:07:14:65:08:85:e5:f9:6f:89:72:b4: d8:49:5b:19:59:be:37:24:f4:04:ce:af:6e:7d:b9: 7f:cf:62:44:c6:cd:1b:cb:bc:5d:e2:42:09:cd:6f: 91:a7:60:a8:61:ff:25:69:39:7b:cf:d3:37:db:88: 3e:5b:25:48:0d:e3:29:99:16:b4:8c:30:6a:c3:ca: 95:2a:77:bd:8a:2f:29:96:51:d3:94:07:c5:07:e8: 88:84:31:4e:b5:84:54:8b:54:c7:52:36:a9:1c:68: 52:dd:3b:ea:8e:5b:fb:0d:bc:2e:a2:87:c6:02:a2: fc:0d:f2:11:bf:95:8a:01:b0:f2:e4:eb:ed:8c:79: 19:e7:b8:3e:78:f1:37:04:0a:9f:b2:2e:67:c3:d3: bd:69:12:f3:f9:bd:6f:c9:31:ba:74:68:4d:76:25: fc:b5:7e:32:fb:ac:0d:7e:72:60:30:01:13:86:9e: 05:d9:31:00:e9:f1:7c:3b:cb:03:41:73:c6:7c:d7: 3b:0a:1e:26:20:6d:d6:6b:fc:fe:55:d0:d6:2e:0a: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DE:93:87:13:9D:B0:BC:FE:05:1D:C1:1F:56:DD:63:09:17:53:27 X509v3 Authority Key Identifier: keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:12:a4:d6:04:d6:fc:ec:0d:ac:7f:a8:14:d9:47:d8:b4:c3: 18:a8:8a:e0:c5:15:1f:47:23:d9:d0:70:84:b8:dd:18:e3:f5: 97:3e:c3:8d:33:38:0a:69:42:4b:a5:6e:08:77:d6:dd:46:00: 05:83:a8:58:86:a6:c7:02:6e:8d:85:7d:4a:63:20:58:30:0d: 1a:dd:15:cf:23:2c:23:0c:d6:ee:43:f6:e5:4a:5a:f0:3e:97: e4:76:bb:c4:a9:21:b6:97:28:f8:99:68:2d:0f:9a:63:d4:42: b6:84:41:b8:10:cc:5d:6c:2a:94:d3:d6:69:f4:4b:bf:dd:75: eb:e3:dd:12:30:81:bc:b8:39:bd:c5:03:c6:c5:1a:87:34:47: 15:48:66:21:b5:35:2e:1e:de:f3:de:d9:ca:4a:1b:4e:77:7c: 74:34:03:48:5b:3f:70:f5:ae:4a:bf:32:eb:14:e3:a7:24:35: d4:2d:ed:ab:a9:a0:c9:85:4c:d5:c1:d0:cf:71:b9:23:d0:a2: 59:9b:1b:c7:86:44:cc:6c:43:95:4c:35:b5:57:71:29:b2:20: 32:b6:19:06:14:55:19:d5:9d:21:e8:d9:59:fe:5b:f5:fc:b2: 0e:c8:c6:4b:b0:6a:29:b9:a1:63:08:27:0f:b0:e3:c1:20:e3: 42:86:f2:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwNTYxMTAvBgNVBAUTKEZBNjdENTMwQTg3MDBBQThFQjdENEY2Q0JFOTY0N0JF NTM3RjVGQ0UwHhcNMjUwNDI1MDEyNjQ3WhcNMjUwNTAyMDEyNjQ3WjAYMRYwFAYD VQQDEw02ODBhZTRkNy03YzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl14LzHP1GnQs2HM/9FyyP3mYG7bi9+7+alJwVyQBeHaJ9Kx2ABVt7ME9yKk R/1gBxRlCIXl+W+JcrTYSVsZWb43JPQEzq9ufbl/z2JExs0by7xd4kIJzW+Rp2Co Yf8laTl7z9M324g+WyVIDeMpmRa0jDBqw8qVKne9ii8pllHTlAfFB+iIhDFOtYRU i1THUjapHGhS3Tvqjlv7DbwuoofGAqL8DfIRv5WKAbDy5OvtjHkZ57g+ePE3BAqf si5nw9O9aRLz+b1vyTG6dGhNdiX8tX4y+6wNfnJgMAEThp4F2TEA6fF8O8sDQXPG fNc7Ch4mIG3Wa/z+VdDWLgqlXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvek4cT nbC8/gUdwR9W3WMJF1MnMB8GA1UdIwQYMBaAFPpn1TCocAqo631PbL6WR75Tf1/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA1Ni9ENzAyNjRBQUM5 RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0NxanJmVTlzdnBaSHZsTl9Y ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1tZlZNS2h3Q3FqcmZVOXN2cFpIdmxOX1g4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA1Ni9ENzAyNjRBQUM5RTYxMUVDQUMyMjhEMzBDNEY5QUUwMi8tbWZWTUtod0Nx anJmVTlzdnBaSHZsTl9YODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEEqTWBNb87A2sf6gU2UfYtMMYqIrgxRUfRyPZ0HCEuN0Y4/WXPsON MzgKaUJLpW4Id9bdRgAFg6hYhqbHAm6NhX1KYyBYMA0a3RXPIywjDNbuQ/blSlrw PpfkdrvEqSG2lyj4mWgtD5pj1EK2hEG4EMxdbCqU09Zp9Eu/3XXr490SMIG8uDm9 xQPGxRqHNEcVSGYhtTUuHt7z3tnKShtOd3x0NANIWz9w9a5KvzLrFOOnJDXULe2r qaDJhUzVwdDPcbkj0KJZmxvHhkTMbEOVTDW1V3EpsiAythkGFFUZ1Z0h6NlZ/lv1 /LIOyMZLsGopuaFjCCcPsOPBIONChvI0 -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:34 2025 by rpki-client