$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json) Hash identifier: DkfrO0f54o8Bg1sWU0/UF47la+ed6qc6Ur5ewbBh3bA= Subject key identifier: 51:D4:32:F5:C8:82:EA:54:55:A2:5D:6E:32:26:B4:90:2C:DE:1D:27 Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Certificate serial: 0B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft Manifest number: 0B87 Signing time: Thu 24 Apr 2025 18:56:37 +0000 Manifest this update: Thu 24 Apr 2025 18:56:36 +0000 Manifest next update: Thu 01 May 2025 18:56:36 +0000 Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: au/osb9TOUqE+c3NTD++hBaKusq67jUYYFYMzDXjQ+0=) 2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: hJTBnRNb+rBuco3pui7GARCwhnSPV6pCkk0fRFtrHKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Validity Not Before: Apr 24 18:56:36 2025 GMT Not After : May 1 18:56:36 2025 GMT Subject: CN=680a8965-3f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c4:5c:dd:22:cf:61:de:36:05:39:65:73:4b: 05:5d:d5:67:67:69:20:43:01:28:54:fd:ad:be:16: b2:e1:70:79:21:dd:af:27:ff:77:b9:0d:f0:9a:75: e6:08:5c:19:cb:60:ad:bd:a1:d6:12:62:ff:fc:82: 75:e5:15:dd:be:78:a9:b2:4b:48:b4:cc:3f:e4:21: 3d:d3:b1:7d:fb:93:7d:de:8d:3d:e1:e7:a2:1b:79: 99:2b:a2:b4:a2:de:af:05:c4:bb:fe:5f:6b:84:b6: 17:7a:75:ce:c3:52:4a:87:8f:5f:c1:f2:80:10:25: 88:45:b1:8c:b3:90:89:7b:13:45:61:af:06:f9:bc: 78:e8:bd:7a:2d:c9:f9:6a:0d:3c:72:b1:8a:60:19: 57:d8:d9:90:9c:44:53:4d:f3:47:3b:80:63:af:45: 14:70:54:7f:d6:e1:8c:70:df:0f:b0:80:98:b0:81: 68:c2:81:0b:33:e0:70:8f:ab:db:f6:47:9c:10:50: bf:f4:db:74:36:02:4b:ee:73:d9:f5:db:b0:54:b8: a1:3c:71:1e:cd:9c:54:5c:00:9a:ca:ab:81:6d:99: 5e:bf:c8:08:5a:96:7a:f2:4d:70:0d:14:e9:4c:35: 85:1e:fb:bb:04:ff:68:07:25:1a:24:9a:74:f6:17: 1c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D4:32:F5:C8:82:EA:54:55:A2:5D:6E:32:26:B4:90:2C:DE:1D:27 X509v3 Authority Key Identifier: keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:cc:ee:c2:2c:33:f5:d9:4f:6b:51:17:27:00:8d:63:9f:33: 37:db:82:09:ff:ac:53:64:fd:9d:33:e7:90:22:f1:e1:b3:1e: 8b:a0:cd:60:8c:1d:82:1e:33:dd:f6:fe:d2:66:01:af:d3:84: b6:b5:67:79:d2:36:66:61:72:ef:cb:b0:03:9b:de:96:d3:42: da:b1:90:f8:a1:3a:ad:3c:40:28:81:9b:43:c8:12:6e:90:0c: 41:74:1d:d4:e0:14:4f:17:31:30:2e:87:1a:6e:a8:95:51:32: 0c:6b:46:46:83:9d:65:3e:47:82:4f:91:bf:be:bb:51:ec:14: b1:49:34:f9:aa:76:49:d8:27:ee:ed:91:f3:87:f8:d9:fe:d5: 90:5a:40:b3:15:02:db:15:9e:9c:89:cc:83:71:ae:d1:48:de: 71:df:40:5c:a8:e5:15:21:f9:8b:cd:e8:de:b1:54:87:19:e2: ae:eb:c8:0d:ca:6d:30:5d:4f:38:c4:d2:50:3b:5c:dc:bf:35: cb:73:1f:53:95:9f:6c:83:50:12:6d:d4:d8:94:27:8f:b2:3c: 22:82:f0:e5:85:a1:50:19:bb:f8:48:4e:79:1f:18:43:55:b1: 43:87:21:55:df:bc:32:f6:db:97:26:c3:29:1e:9a:ae:c1:a7: 15:c7:25:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1 ODZENDhGNTcwHhcNMjUwNDI0MTg1NjM2WhcNMjUwNTAxMTg1NjM2WjAYMRYwFAYD VQQDEw02ODBhODk2NS0zZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cRc3SLPYd42BTllc0sFXdVnZ2kgQwEoVP2tvhay4XB5Id2vJ/93uQ3wmnXm CFwZy2CtvaHWEmL//IJ15RXdvnipsktItMw/5CE907F9+5N93o094eeiG3mZK6K0 ot6vBcS7/l9rhLYXenXOw1JKh49fwfKAECWIRbGMs5CJexNFYa8G+bx46L16Lcn5 ag08crGKYBlX2NmQnERTTfNHO4Bjr0UUcFR/1uGMcN8PsICYsIFowoELM+Bwj6vb 9kecEFC/9Nt0NgJL7nPZ9duwVLihPHEezZxUXACayquBbZlev8gIWpZ68k1wDRTp TDWFHvu7BP9oByUaJJp09hccfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHUMvXI gupUVaJdbjImtJAs3h0nMB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2 M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQzO7CLDP12U9rURcnAI1jnzM324IJ/6xTZP2dM+eQIvHhsx6LoM1g jB2CHjPd9v7SZgGv04S2tWd50jZmYXLvy7ADm96W00LasZD4oTqtPEAogZtDyBJu kAxBdB3U4BRPFzEwLocabqiVUTIMa0ZGg51lPkeCT5G/vrtR7BSxSTT5qnZJ2Cfu 7ZHzh/jZ/tWQWkCzFQLbFZ6cicyDca7RSN5x30BcqOUVIfmLzejesVSHGeKu68gN ym0wXU84xNJQO1zcvzXLcx9TlZ9sg1ASbdTYlCePsjwigvDlhaFQGbv4SE55HxhD VbFDhyFV37wy9tuXJsMpHpquwacVxyXx -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:51 2025 by rpki-client