$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json) Hash identifier: e7eRjN5qgQyM5qW/CL5rH+afKKls25bRAkwDToZYq/o= Subject key identifier: CF:71:98:4C:B4:2B:6E:06:24:C5:99:51:04:0F:04:0B:F4:F5:0E:6D Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft Manifest number: 01B5 Signing time: Fri 25 Apr 2025 02:17:48 +0000 Manifest this update: Fri 25 Apr 2025 02:17:47 +0000 Manifest next update: Fri 02 May 2025 02:17:47 +0000 Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: TzA+B5LHNnrpqWyv8FnWfPSRsPVFJYqB3lUV+iuP468=) 2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: 8hmKlSyIYm+hEMbljQN7ZPJxD7JA/JzX6lz/de7dJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Validity Not Before: Apr 25 02:17:47 2025 GMT Not After : May 2 02:17:47 2025 GMT Subject: CN=680af0cc-5c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:08:fd:ed:a9:d6:b2:99:0b:86:55:44:3a: 93:97:83:81:18:57:a6:02:1f:df:19:5b:5f:a0:db: e1:fd:a8:cc:56:d0:2a:36:38:b5:08:a9:52:45:4b: 32:c5:d5:cf:27:ce:97:6f:03:f7:c7:08:c5:c2:7a: 40:20:3f:9b:ce:73:b0:2d:04:96:3b:e0:49:cd:40: 15:78:48:27:a6:1a:8f:b5:c6:99:d8:8b:9d:9c:f2: c6:d8:f2:93:44:51:13:58:22:e6:e4:4b:b4:44:11: 74:5c:a0:c7:d3:e8:9d:8c:86:91:44:31:ee:4f:b1: bd:40:59:cb:40:b8:b8:57:88:8f:ce:7d:ea:89:35: 60:e9:01:33:9f:c4:67:a5:44:97:3d:40:08:d7:95: 3f:a5:3a:02:d5:44:ea:1a:61:23:78:11:fa:1f:7a: ef:97:4b:69:02:13:25:40:bc:f7:1b:27:51:05:89: e9:d4:03:9b:6e:43:62:46:99:29:d6:4f:b0:40:83: b9:4f:73:fc:2f:bc:1f:0d:77:f8:8c:2d:9b:9a:9c: 54:e8:00:2b:81:b3:9c:77:55:ce:d1:46:dd:f2:45: ed:b2:98:d7:76:e8:69:0f:f9:ba:22:6d:6e:aa:39: a9:73:df:d5:32:a6:4a:7a:10:8a:be:69:55:46:40: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:71:98:4C:B4:2B:6E:06:24:C5:99:51:04:0F:04:0B:F4:F5:0E:6D X509v3 Authority Key Identifier: keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:04:18:c1:e1:11:60:39:4e:8d:e1:bc:a2:f9:05:08:84:9f: c1:0e:a6:0a:ba:b9:6e:34:6e:b6:08:ed:d9:fc:cd:82:cc:a6: 00:6b:89:26:3a:73:81:60:17:3d:23:8d:f6:4a:77:cd:bf:69: 3d:d8:ce:95:06:c9:7b:60:30:d7:87:37:16:b9:ee:8b:3c:b4: fb:78:ee:2e:2c:c1:a3:4e:10:ba:85:90:f5:5e:bb:fe:49:d3: ee:b9:f4:ec:82:58:d4:f0:ac:24:85:8c:11:94:5d:75:84:18: 44:40:b3:77:ad:92:69:cf:cf:e0:f6:80:00:4e:e5:52:dd:c0: 7b:eb:bc:04:a6:a4:e6:bc:91:2b:8f:c6:d2:79:fb:af:11:8d: 43:c7:ac:ba:9c:bd:a6:08:68:c9:de:82:8b:a9:d3:66:f8:e8: 63:64:8b:79:21:2e:00:12:b3:9c:5a:52:33:71:ec:f4:2c:cd: b5:30:31:ad:fe:ea:28:28:43:6d:98:ae:3b:64:55:15:33:50: d9:cc:5f:e1:f8:e2:0e:27:f5:9f:3f:07:fa:e3:22:8e:6d:14: 15:dd:c2:5f:a6:fe:50:28:f9:4b:26:99:6f:94:ba:48:04:d8: 7c:ad:6c:75:af:79:45:fe:77:a1:ee:ae:14:f2:f5:d2:ba:6d: 04:c1:3b:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwNzcxMTAvBgNVBAUTKEUzRjdDRUY2RTdBNTY5RTQ2QjJEOTAzOTMyMkI2OTc1 NTMxQzI1NjYwHhcNMjUwNDI1MDIxNzQ3WhcNMjUwNTAyMDIxNzQ3WjAYMRYwFAYD VQQDEw02ODBhZjBjYy01YzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCcI/e2p1rKZC4ZVRDqTl4OBGFemAh/fGVtfoNvh/ajMVtAqNji1CKlSRUsy xdXPJ86XbwP3xwjFwnpAID+bznOwLQSWO+BJzUAVeEgnphqPtcaZ2IudnPLG2PKT RFETWCLm5Eu0RBF0XKDH0+idjIaRRDHuT7G9QFnLQLi4V4iPzn3qiTVg6QEzn8Rn pUSXPUAI15U/pToC1UTqGmEjeBH6H3rvl0tpAhMlQLz3GydRBYnp1AObbkNiRpkp 1k+wQIO5T3P8L7wfDXf4jC2bmpxU6AArgbOcd1XO0Ubd8kXtspjXduhpD/m6Im1u qjmpc9/VMqZKehCKvmlVRkD70wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9xmEy0 K24GJMWZUQQPBAv09Q5tMB8GA1UdIwQYMBaAFOP3zvbnpWnkay2QOTIraXVTHCVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA3Ny81MDZBRTIzMDgx MDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFlUnJMWkE1TWl0cGRWTWNK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfZk85dWVsYWVSckxaQTVNaXRwZFZNY0pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA3Ny81MDZBRTIzMDgxMDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFl UnJMWkE1TWl0cGRWTWNKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2BBjB4RFgOU6N4byi+QUIhJ/BDqYKurluNG62CO3Z/M2CzKYAa4km OnOBYBc9I432SnfNv2k92M6VBsl7YDDXhzcWue6LPLT7eO4uLMGjThC6hZD1Xrv+ SdPuufTsgljU8KwkhYwRlF11hBhEQLN3rZJpz8/g9oAATuVS3cB767wEpqTmvJEr j8bSefuvEY1Dx6y6nL2mCGjJ3oKLqdNm+OhjZIt5IS4AErOcWlIzcez0LM21MDGt /uooKENtmK47ZFUVM1DZzF/h+OIOJ/WfPwf64yKObRQV3cJfpv5QKPlLJplvlLpI BNh8rWx1r3lF/neh7q4U8vXSum0EwTuy -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:48 2025 by rpki-client