$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: PUWqxJKIBt1i1bsUTZ61DlNFuFtwhuY9diXmhUImRGE= Subject key identifier: 3B:8A:7E:99:5F:D3:28:41:6F:3F:09:68:7A:30:A3:E4:BF:35:7F:2D Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 166F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 1664 Signing time: Thu 24 Apr 2025 16:43:23 +0000 Manifest this update: Thu 24 Apr 2025 16:43:22 +0000 Manifest next update: Thu 01 May 2025 16:43:22 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: hI+QI/PSsdwQsnWD4fxB/QIPSO83ohMqSv7biSV52LE=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: v3sjoQSpuFWRMhTWonBiueiIp4Y61jfzrKe4k2e0JcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5743 (0x166f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Apr 24 16:43:22 2025 GMT Not After : May 1 16:43:22 2025 GMT Subject: CN=680a6a2a-b7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:48:1e:b6:66:08:1a:2e:d7:2c:2c:15:fb: 08:df:f3:e8:6e:2b:fd:a4:2c:7f:e3:49:7c:7c:53: 50:18:2a:1a:69:b7:c0:c3:ce:52:34:6a:4a:13:79: d8:36:d0:91:5a:d8:1a:24:f2:ae:4b:6c:31:cd:d6: a8:eb:48:46:1e:b1:c5:ba:fd:06:02:e4:38:6c:d3: 28:4b:a9:b2:49:b4:53:2e:fc:35:e7:3a:33:8e:22: cf:2f:57:c7:99:4b:f4:ca:a8:c3:29:5e:1c:33:a6: 3a:98:bc:18:eb:fc:f7:78:30:c6:4b:1b:02:cd:43: d2:08:75:56:ef:48:1d:59:aa:66:d1:8c:68:22:dd: 8c:b8:94:b0:42:56:07:c1:78:ad:50:f8:eb:3f:f9: fe:f4:5b:bc:73:80:45:27:90:25:02:51:ba:95:d7: a4:6e:7b:e2:54:84:c4:9f:ec:78:32:aa:1a:36:2a: b3:a3:fc:93:ab:1b:bc:6c:b7:d1:7a:bf:18:48:ae: fd:e6:0e:8b:29:81:9b:93:44:cf:f2:21:77:d6:da: 22:9f:c6:43:95:89:e0:fe:88:fe:5b:0f:b7:b7:7f: 42:cf:7d:8b:0c:e5:56:56:ea:bf:8c:ba:7a:24:de: 6a:9e:62:23:33:42:46:bc:03:80:3f:0e:6c:41:f7: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8A:7E:99:5F:D3:28:41:6F:3F:09:68:7A:30:A3:E4:BF:35:7F:2D X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:c3:ba:38:0e:25:85:d7:70:02:36:39:2a:35:2e:a5:31:f1: 8c:9e:62:c6:b4:1c:34:2b:60:de:2c:75:db:d7:7f:86:0b:54: 0f:48:e8:aa:7c:58:18:66:13:9d:43:ca:24:1e:e9:dc:09:17: 50:fc:ee:0e:2b:fc:81:f2:3f:3a:f8:d9:90:40:08:ca:6c:3c: 1e:f1:58:9d:55:3f:1c:b9:63:41:07:f6:04:75:4b:01:b9:1d: 81:f8:72:5b:7f:4d:41:48:8c:9c:52:58:61:de:6d:2f:2d:0c: f8:5f:1c:07:b0:38:0b:da:23:c4:c5:b8:0c:1f:80:51:b3:1a: 95:39:cc:92:bf:ad:30:2c:bd:96:ce:1d:10:a1:21:6b:c4:6f: a6:57:36:f2:63:01:32:26:de:d1:4f:f6:fe:f6:59:aa:96:c4: 49:bc:db:2e:f3:c3:c4:7d:f5:c3:0a:55:a0:ab:2b:9d:99:96: fc:02:f8:0f:22:03:17:e4:f2:88:fe:67:4a:d1:09:31:52:4a: 7f:50:75:ae:2d:a6:be:ba:f7:17:79:1c:ab:7d:71:dd:71:84: de:73:5a:b2:3b:c3:ca:68:e3:e8:b5:b1:d3:c5:b6:8a:42:2d: a4:02:45:0a:8e:71:e3:c4:d0:2e:64:7d:4d:1b:b8:ac:c3:21: aa:d1:32:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjUwNDI0MTY0MzIyWhcNMjUwNTAxMTY0MzIyWjAYMRYwFAYD VQQDEw02ODBhNmEyYS1iN2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx1IHrZmCBou1ywsFfsI3/Pobiv9pCx/40l8fFNQGCoaabfAw85SNGpKE3nY NtCRWtgaJPKuS2wxzdao60hGHrHFuv0GAuQ4bNMoS6mySbRTLvw15zozjiLPL1fH mUv0yqjDKV4cM6Y6mLwY6/z3eDDGSxsCzUPSCHVW70gdWapm0YxoIt2MuJSwQlYH wXitUPjrP/n+9Fu8c4BFJ5AlAlG6ldekbnviVITEn+x4MqoaNiqzo/yTqxu8bLfR er8YSK795g6LKYGbk0TP8iF31toin8ZDlYng/oj+Ww+3t39Cz32LDOVWVuq/jLp6 JN5qnmIjM0JGvAOAPw5sQfdsyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuKfplf 0yhBbz8JaHowo+S/NX8tMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUw7o4DiWF13ACNjkqNS6lMfGMnmLGtBw0K2DeLHXb13+GC1QPSOiq fFgYZhOdQ8okHuncCRdQ/O4OK/yB8j86+NmQQAjKbDwe8VidVT8cuWNBB/YEdUsB uR2B+HJbf01BSIycUlhh3m0vLQz4XxwHsDgL2iPExbgMH4BRsxqVOcySv60wLL2W zh0QoSFrxG+mVzbyYwEyJt7RT/b+9lmqlsRJvNsu88PEffXDClWgqyudmZb8AvgP IgMX5PKI/mdK0QkxUkp/UHWuLaa+uvcXeRyrfXHdcYTec1qyO8PKaOPotbHTxbaK Qi2kAkUKjnHjxNAuZH1NG7iswyGq0TKK -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:37 2025 by rpki-client