$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft File: w-IA1ABdmiPkv66uDtty6kPx0JY.mft (raw, json) Hash identifier: yv3VzJzdjT1UucHmHDZAoACVWZIHw4b/G8MpiK+llZ8= Subject key identifier: 36:4F:72:FD:22:D6:07:DE:4D:66:BE:26:39:89:27:DD:FE:0E:2A:4C Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft Manifest number: E4 Signing time: Fri 25 Apr 2025 04:11:59 +0000 Manifest this update: Fri 25 Apr 2025 04:11:59 +0000 Manifest next update: Fri 02 May 2025 04:11:59 +0000 Files and hashes: 1: w-IA1ABdmiPkv66uDtty6kPx0JY.crl (hash: nGRgAemocioW8ClwR+y0KGtn3MMOMHBDOa+FlxIQpCQ=) 2: C19C2720CA2711EE82C12B0CC4F9AE02.roa (hash: VHJTWsm4wzJziIer/htU6hv3gqL/KMd1K2nOD3+RJsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Validity Not Before: Apr 25 04:11:59 2025 GMT Not After : May 2 04:11:59 2025 GMT Subject: CN=680b0b8f-4cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:bd:d0:af:f8:8a:4d:f9:1f:11:c5:1b:32: 23:7c:18:0b:a0:c0:3b:ca:0a:07:81:fb:cb:90:fb: 25:ae:7a:c0:ac:33:21:bc:0b:af:c6:5a:74:04:a1: 05:44:80:03:e9:3b:77:3c:6c:85:ad:e4:d0:e4:ab: 1a:28:ef:75:93:ca:13:9a:3c:62:e7:d3:3f:3a:36: 97:2d:8a:63:ff:9f:b0:32:65:73:76:76:2a:44:8e: 81:8b:6e:53:01:f5:7b:ad:a1:b5:f2:e4:ae:97:1d: ce:1d:eb:21:58:42:9f:f7:17:2c:ba:b7:14:8f:36: 0b:66:d1:0e:67:1f:00:73:e8:e3:10:a3:54:c0:35: 3c:4c:cd:82:e9:6c:2c:71:91:23:6f:56:f6:a9:b6: ba:cf:a9:a1:48:88:bb:e8:31:b3:85:36:d1:5c:a4: 0c:82:5b:15:e9:9b:4c:65:46:f4:2f:9b:2e:57:cc: 46:4b:18:45:05:aa:8d:46:4b:74:b0:ac:06:c7:22: bb:92:9c:43:1b:f7:3c:f0:4e:66:6d:20:70:a3:b5: c6:af:2a:1f:8b:a9:91:c9:d6:85:1a:8e:99:ec:a0: 53:dd:0d:57:6a:85:cc:f2:04:5e:d9:96:b2:eb:c0: cc:42:9a:71:35:d3:e7:fe:74:3d:27:f3:20:fc:20: 48:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4F:72:FD:22:D6:07:DE:4D:66:BE:26:39:89:27:DD:FE:0E:2A:4C X509v3 Authority Key Identifier: keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ae:14:e7:71:ad:5f:3e:4b:a1:1d:c2:3b:24:df:60:df:5e: cc:d4:bc:18:5d:ee:83:d5:5d:22:19:82:7f:e7:c2:fe:44:54: b1:20:42:43:22:f5:08:80:81:75:ba:2d:b0:57:68:bd:b6:af: 71:1d:57:d8:17:00:91:d6:70:e3:1a:63:e5:fc:69:6c:52:9a: 74:24:be:18:4f:2f:1d:b8:0f:69:b7:64:de:55:c6:9d:c0:d4: 8d:0b:71:51:4a:84:26:8f:bb:f5:c6:74:d2:f9:50:f2:1a:c4: 50:76:fd:3e:7b:30:b4:ee:bb:41:c3:4d:fa:47:de:0b:59:96: 8a:c5:3f:6f:d2:a0:32:d5:98:03:cc:a0:dd:92:99:93:a3:55: df:45:02:93:19:34:7e:f4:1e:99:0f:37:4b:80:8f:69:e7:50: ac:00:ab:e5:c3:13:47:4b:9d:d4:fa:72:b4:48:22:4e:2d:ae: fd:7a:64:3a:a7:25:bb:79:de:03:a8:a3:8c:14:7c:6b:e0:94: b2:03:44:47:b2:13:37:f8:16:b0:a9:2c:42:6f:c6:a6:c0:ed: 3c:c3:ee:0e:4a:bd:44:ca:44:3a:91:92:40:ce:4b:76:c3:4f: 9e:98:1f:e9:90:bc:16:89:f8:72:ae:6e:f0:24:d8:7a:ce:c9: 0d:ae:ea:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKEMzRTIwMEQ0MDA1RDlBMjNFNEJGQUVBRTBFREI3MkVB NDNGMUQwOTYwHhcNMjUwNDI1MDQxMTU5WhcNMjUwNTAyMDQxMTU5WjAYMRYwFAYD VQQDEw02ODBiMGI4Zi00Y2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyb+90K/4ik35HxHFGzIjfBgLoMA7ygoHgfvLkPslrnrArDMhvAuvxlp0BKEF RIAD6Tt3PGyFreTQ5KsaKO91k8oTmjxi59M/OjaXLYpj/5+wMmVzdnYqRI6Bi25T AfV7raG18uSulx3OHeshWEKf9xcsurcUjzYLZtEOZx8Ac+jjEKNUwDU8TM2C6Wws cZEjb1b2qba6z6mhSIi76DGzhTbRXKQMglsV6ZtMZUb0L5suV8xGSxhFBaqNRkt0 sKwGxyK7kpxDG/c88E5mbSBwo7XGryofi6mRydaFGo6Z7KBT3Q1XaoXM8gRe2Zay 68DMQppxNdPn/nQ9J/Mg/CBIywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZPcv0i 1gfeTWa+JjmJJ93+DipMMB8GA1UdIwQYMBaAFMPiANQAXZoj5L+urg7bcupD8dCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi8xQTFFM0RFNEM5 RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1pUGt2NjZ1RHR0eTZrUHgw SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ctSUExQUJkbWlQa3Y2NnVEdHR5NmtQeDBKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi8xQTFFM0RFNEM5RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1p UGt2NjZ1RHR0eTZrUHgwSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBrhTnca1fPkuhHcI7JN9g317M1LwYXe6D1V0iGYJ/58L+RFSxIEJD IvUIgIF1ui2wV2i9tq9xHVfYFwCR1nDjGmPl/GlsUpp0JL4YTy8duA9pt2TeVcad wNSNC3FRSoQmj7v1xnTS+VDyGsRQdv0+ezC07rtBw036R94LWZaKxT9v0qAy1ZgD zKDdkpmTo1XfRQKTGTR+9B6ZDzdLgI9p51CsAKvlwxNHS53U+nK0SCJOLa79emQ6 pyW7ed4DqKOMFHxr4JSyA0RHshM3+BawqSxCb8amwO08w+4OSr1EykQ6kZJAzkt2 w0+emB/pkLwWifhyrm7wJNh6zskNrupu -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:12 2025 by rpki-client