$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json) Hash identifier: dis9K3w6umDVp9Dc2E9ErkJQTmELMX3hfvl5wZFcycY= Subject key identifier: 86:89:B3:BD:94:72:C8:8A:80:E8:4E:47:7C:9A:D5:76:0B:DB:BB:9F Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft Manifest number: 0159 Signing time: Fri 25 Apr 2025 03:11:23 +0000 Manifest this update: Fri 25 Apr 2025 03:11:23 +0000 Manifest next update: Fri 02 May 2025 03:11:23 +0000 Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: YAWQ8653DQy5EIMsThB7IGjWu9HHIfwPnzWlmymsqe8=) 2: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: 4bHJddjDshspH/1XIJ/4VQJxh31gIJKernZ8Tce+/MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Validity Not Before: Apr 25 03:11:23 2025 GMT Not After : May 2 03:11:23 2025 GMT Subject: CN=680afd5b-1c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:cb:5a:e5:f6:a7:44:a8:d2:00:81:ba:fb: d7:8d:28:22:24:6c:b7:1a:c6:ff:5c:db:be:29:9d: 8a:59:eb:65:2a:63:54:bf:c3:2f:fa:9e:5b:b0:52: e1:eb:1e:30:03:6e:d6:27:39:b9:5b:3a:aa:84:71: 97:8c:d1:d8:7d:d7:e1:f7:2f:92:2d:cb:3e:6b:d4: 6f:89:21:d7:9b:7c:ff:19:b0:10:9d:28:c5:c3:20: 15:2b:7c:bb:eb:60:09:87:04:d4:e4:62:5d:bc:38: f5:54:2b:3e:6a:c8:98:a5:1d:79:67:fe:75:8c:c3: e9:dc:62:bb:f7:62:d7:ec:32:61:3e:a9:a3:79:fd: fd:4c:1c:44:db:3f:f0:c3:4f:77:3c:7c:fb:02:7d: c8:91:6a:7a:49:2f:9e:61:e8:2d:51:f6:cb:e5:37: a2:3c:16:4b:2e:5d:17:03:11:52:05:5a:d5:ec:84: 91:42:0e:9b:2b:53:b8:c7:ca:a6:a8:b7:b0:c3:f0: b7:65:d6:a7:a3:26:5f:55:6d:20:ae:77:18:d4:6f: 3d:98:0a:75:23:a1:2a:9a:e6:18:79:0e:1f:2f:cf: 3a:b0:6d:bb:ae:a1:5a:38:fa:ca:c8:a3:57:97:39: 79:7a:02:78:d7:34:de:53:5f:7d:f4:f5:b7:d5:45: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:89:B3:BD:94:72:C8:8A:80:E8:4E:47:7C:9A:D5:76:0B:DB:BB:9F X509v3 Authority Key Identifier: keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c3:34:cc:d0:41:9c:af:91:95:3a:e0:61:42:e7:63:3c:4b: 65:14:88:d5:88:05:0e:61:8c:93:b9:f6:9e:c7:2a:05:a5:4f: 65:ad:80:60:92:20:ac:a0:fa:98:c0:8e:a7:ca:05:13:d0:af: 53:46:a1:e3:9d:96:a2:e8:0e:fb:fe:23:2a:26:50:4f:8c:cd: df:2d:fe:a1:81:1b:0c:3f:37:c7:69:31:c6:3f:38:a7:39:bf: 08:f9:b8:22:2b:cc:5d:c5:8b:b8:fc:08:05:72:05:87:26:d1: b4:38:c0:5f:1c:81:56:f3:3e:45:64:c1:ce:e2:ce:a9:d1:e8: 80:27:03:26:d3:49:93:79:61:0e:97:91:36:21:66:6e:62:7c: 5e:10:32:5b:d1:94:55:5a:a3:eb:a6:f8:3e:e1:dc:39:e9:59: e2:8e:68:62:4d:86:96:0f:6f:80:66:42:7d:84:6a:76:8f:ad: ae:df:3f:0d:f9:51:19:d1:7c:b8:b6:b0:33:c9:9c:18:67:7a: 58:5e:20:d0:1a:75:c6:a1:38:75:8c:ce:61:19:b9:cd:39:0b: bc:1c:ca:53:6e:51:e9:e8:06:3b:e6:95:23:55:15:b4:bb:22: 84:d0:58:90:13:4a:57:6f:dd:58:09:95:f3:a6:40:f2:67:45: 27:b9:bf:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE NTMzM0RBNEYwHhcNMjUwNDI1MDMxMTIzWhcNMjUwNTAyMDMxMTIzWjAYMRYwFAYD VQQDEw02ODBhZmQ1Yi0xYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaHLWuX2p0So0gCBuvvXjSgiJGy3Gsb/XNu+KZ2KWetlKmNUv8Mv+p5bsFLh 6x4wA27WJzm5WzqqhHGXjNHYfdfh9y+SLcs+a9RviSHXm3z/GbAQnSjFwyAVK3y7 62AJhwTU5GJdvDj1VCs+asiYpR15Z/51jMPp3GK792LX7DJhPqmjef39TBxE2z/w w093PHz7An3IkWp6SS+eYegtUfbL5TeiPBZLLl0XAxFSBVrV7ISRQg6bK1O4x8qm qLeww/C3ZdanoyZfVW0grncY1G89mAp1I6EqmuYYeQ4fL886sG27rqFaOPrKyKNX lzl5egJ41zTeU1999PW31UXUKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaJs72U csiKgOhOR3ya1XYL27ufMB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDdBNC8zQ0M3MTk5NjExODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5 S1RTVFhuVWdjaXZWTXoyazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQwzTM0EGcr5GVOuBhQudjPEtlFIjViAUOYYyTufaexyoFpU9lrYBg kiCsoPqYwI6nygUT0K9TRqHjnZai6A77/iMqJlBPjM3fLf6hgRsMPzfHaTHGPzin Ob8I+bgiK8xdxYu4/AgFcgWHJtG0OMBfHIFW8z5FZMHO4s6p0eiAJwMm00mTeWEO l5E2IWZuYnxeEDJb0ZRVWqPrpvg+4dw56VnijmhiTYaWD2+AZkJ9hGp2j62u3z8N +VEZ0Xy4trAzyZwYZ3pYXiDQGnXGoTh1jM5hGbnNOQu8HMpTblHp6AY75pUjVRW0 uyKE0FiQE0pXb91YCZXzpkDyZ0Unub9B -----END CERTIFICATE-----Generated at Sat Apr 26 05:51:48 2025 by rpki-client