$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft File: Ci5d8bLD15feoVNn-qncOITNGzM.mft (raw, json) Hash identifier: nrKQPoiGmaHBPJM+gKYMoFe7u2avpVUxR9Hw3E2LDis= Subject key identifier: C8:52:86:0D:8E:D1:0E:B7:DB:56:14:7F:4C:5D:3C:49:C2:1E:36:38 Authority key identifier: 0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 Certificate issuer: /CN=A91CD096/serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Certificate serial: 0D6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft Manifest number: 0D62 Signing time: Thu 24 Apr 2025 17:56:21 +0000 Manifest this update: Thu 24 Apr 2025 17:56:21 +0000 Manifest next update: Thu 01 May 2025 17:56:21 +0000 Files and hashes: 1: Ci5d8bLD15feoVNn-qncOITNGzM.crl (hash: 7OfXfbOG5Yi3T8RlFue514ZC+xEr2Ap3uHBZ+fFvdOY=) 2: 4EEE01FCE15611EF9560323EC4F9AE02.roa (hash: x8jTl1An+uSOMMAGf8hO7SL91nc57EGm6DraZTYeQXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3437 (0xd6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD096, serialNumber=0A2E5DF1B2C3D797DEA15367FAA9DC3884CD1B33 Validity Not Before: Apr 24 17:56:21 2025 GMT Not After : May 1 17:56:21 2025 GMT Subject: CN=680a7b45-65ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e4:44:4c:7a:34:e7:ef:c3:e0:01:f3:c6:f9: 92:58:72:f0:01:9a:40:b5:5d:b0:3f:79:27:8a:a1: da:16:d8:fc:28:39:03:b3:4c:23:3a:66:fa:a8:dc: 63:e4:f4:3e:fb:67:22:78:9f:59:83:a7:27:7a:2a: 3c:b6:09:40:35:10:1c:24:b1:8f:4d:9c:51:00:db: d5:d5:a3:b3:b5:0e:dd:c4:2e:04:05:51:d2:72:f9: e9:4b:f1:09:86:71:9f:b2:56:e5:51:b9:da:6b:d4: f1:90:96:03:d1:8f:9b:3c:b9:58:8c:60:ab:cc:0c: c8:3c:08:bb:07:68:bd:45:1d:84:ae:e1:b2:80:4b: d0:e2:38:ca:2a:e3:f6:5a:a1:57:fe:d8:0a:5a:05: 8c:d4:86:ad:90:a0:83:95:da:9c:41:e3:40:86:c4: 0b:23:af:d1:6d:42:90:16:b1:65:83:8d:8b:72:ab: 3d:9e:d6:b0:96:95:7d:4a:c2:be:8f:77:4b:a6:95: f9:ea:d2:7f:21:f9:e8:11:b1:67:d1:6e:68:cc:5f: dc:61:9b:47:0b:33:c4:77:b1:b2:bd:b2:e3:e9:02: 84:96:6d:40:24:6f:c7:5e:85:13:29:61:03:bb:43: fc:2b:c6:c6:55:ea:fe:7c:1f:f7:88:41:02:b2:06: 3a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:52:86:0D:8E:D1:0E:B7:DB:56:14:7F:4C:5D:3C:49:C2:1E:36:38 X509v3 Authority Key Identifier: keyid:0A:2E:5D:F1:B2:C3:D7:97:DE:A1:53:67:FA:A9:DC:38:84:CD:1B:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ci5d8bLD15feoVNn-qncOITNGzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD096/E5042C2ACA3211E9A739B753C4F9AE02/Ci5d8bLD15feoVNn-qncOITNGzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:9c:3b:04:db:3f:b8:91:c2:76:f7:b3:b9:e3:ea:0d:ad:be: ba:46:29:5e:51:e1:7f:6b:dd:2f:d5:3c:3e:3f:1e:d8:2a:8a: 18:30:d0:1e:0c:e4:40:fa:2a:e8:bc:cf:a3:2d:d1:c9:f7:7f: f1:af:1a:a0:d4:57:4f:96:8b:94:cc:0a:e8:95:15:b8:12:a2: 5e:d4:4e:8a:5a:2d:4c:dd:be:c9:a1:ba:5c:08:33:49:a3:da: 10:69:0a:9d:c9:2b:9e:4c:af:ee:53:0d:cf:66:7d:dc:2e:d7: 58:91:c9:4b:70:42:e8:f3:82:5e:82:7d:33:41:21:68:a6:f3: b3:1a:cd:ff:d5:36:df:64:c0:9a:9c:8d:0f:3d:ba:e5:7d:f9: 49:08:c9:e9:79:e5:f9:32:8d:d6:dc:ff:95:88:3a:46:4f:1d: c2:98:8f:63:bc:9a:4f:37:1a:86:ce:6e:15:08:f3:f3:02:be: 24:66:cc:81:86:46:06:77:54:71:f0:b2:ae:aa:23:25:e3:03: 4a:94:c8:3b:70:8b:a1:d4:e3:64:b9:64:b4:b5:c2:40:47:69: 9c:d4:1b:06:2b:1d:04:cd:95:ae:cf:f2:5a:a8:07:f0:43:07: 3b:62:9d:f5:02:9b:8d:15:13:96:63:a9:67:86:e5:c1:51:91: a9:99:75:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwOTYxMTAvBgNVBAUTKDBBMkU1REYxQjJDM0Q3OTdERUExNTM2N0ZBQTlEQzM4 ODRDRDFCMzMwHhcNMjUwNDI0MTc1NjIxWhcNMjUwNTAxMTc1NjIxWjAYMRYwFAYD VQQDEw02ODBhN2I0NS02NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+RETHo05+/D4AHzxvmSWHLwAZpAtV2wP3kniqHaFtj8KDkDs0wjOmb6qNxj 5PQ++2cieJ9Zg6cneio8tglANRAcJLGPTZxRANvV1aOztQ7dxC4EBVHScvnpS/EJ hnGfslblUbnaa9TxkJYD0Y+bPLlYjGCrzAzIPAi7B2i9RR2EruGygEvQ4jjKKuP2 WqFX/tgKWgWM1IatkKCDldqcQeNAhsQLI6/RbUKQFrFlg42Lcqs9ntawlpV9SsK+ j3dLppX56tJ/IfnoEbFn0W5ozF/cYZtHCzPEd7GyvbLj6QKElm1AJG/HXoUTKWED u0P8K8bGVer+fB/3iEECsgY64wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhShg2O 0Q6321YUf0xdPEnCHjY4MB8GA1UdIwQYMBaAFAouXfGyw9eX3qFTZ/qp3DiEzRsz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDA5Ni9FNTA0MkMyQUNB MzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1ZmVvVk5uLXFuY09JVE5H ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpNWQ4YkxEMTVmZW9WTm4tcW5jT0lUTkd6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDA5Ni9FNTA0MkMyQUNBMzIxMUU5QTczOUI3NTNDNEY5QUUwMi9DaTVkOGJMRDE1 ZmVvVk5uLXFuY09JVE5Hek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFnDsE2z+4kcJ297O54+oNrb66RileUeF/a90v1Tw+Px7YKooYMNAe DORA+irovM+jLdHJ93/xrxqg1FdPlouUzArolRW4EqJe1E6KWi1M3b7JobpcCDNJ o9oQaQqdySueTK/uUw3PZn3cLtdYkclLcELo84Jegn0zQSFopvOzGs3/1TbfZMCa nI0PPbrlfflJCMnpeeX5Mo3W3P+ViDpGTx3CmI9jvJpPNxqGzm4VCPPzAr4kZsyB hkYGd1Rx8LKuqiMl4wNKlMg7cIuh1ONkuWS0tcJAR2mc1BsGKx0EzZWuz/JaqAfw Qwc7Yp31ApuNFROWY6lnhuXBUZGpmXWB -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:34 2025 by rpki-client