$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft File: V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft (raw, json) Hash identifier: IW0qK6FRxrtgLwFLzSiNoKGkyXCT/gLtvZ6PFoAPSPc= Subject key identifier: 27:31:74:BE:B9:B9:48:F5:A3:FA:A6:4C:DE:3E:8F:11:D6:42:A6:37 Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft Manifest number: 53 Signing time: Fri 25 Apr 2025 06:14:45 +0000 Manifest this update: Fri 25 Apr 2025 06:14:45 +0000 Manifest next update: Fri 02 May 2025 06:14:45 +0000 Files and hashes: 1: V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl (hash: 3GXRT6781GWyp5ZDIRNbwAf+HmMxVwR7Zps41RwqXVc=) 2: 07D85DDEA7C811EF92C28379C4F9AE02.roa (hash: ZcWeD92UYMu6fLpMaSqSsvoWJIwNEm94vjjCo7cjTrY=) 3: 073CAA38A7C811EF92C28379C4F9AE02.roa (hash: 3RUDCXxLe0lvptsJjUy4NkMr2pEIuvZpBiDjKj7RKDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4786, serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Validity Not Before: Apr 25 06:14:45 2025 GMT Not After : May 2 06:14:45 2025 GMT Subject: CN=680b2855-e90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:86:2a:a5:d0:7e:04:35:f3:39:fe:0e:9f:7a: f8:43:bb:3f:29:01:44:07:b3:af:15:16:12:81:a7: 51:31:65:f5:74:25:12:f2:7d:45:72:dc:a4:f4:ef: 96:65:95:2f:e0:8e:32:2e:3e:d1:55:da:8e:3b:6e: f0:4e:f3:a9:fb:7d:66:9c:54:45:57:01:6c:34:5e: 07:37:a4:42:82:39:a2:35:8e:69:c8:78:e8:03:6d: cc:1d:91:29:04:a4:ba:af:bf:01:0b:4e:71:7a:17: cd:69:fd:a8:c5:01:00:05:2f:e0:41:c5:5d:34:e9: 35:a1:f5:71:2a:ac:99:56:d7:c8:ed:28:44:b8:6e: 74:fc:69:d4:29:22:78:8a:15:78:fc:47:d0:ab:1e: c6:25:7d:b4:43:21:98:7a:0d:a5:ea:50:e1:da:14: cc:c5:51:52:9a:8c:a4:63:45:db:bb:86:42:79:20: 2b:92:a6:54:66:7c:4d:f4:86:dd:6d:45:8d:ae:b5: 1b:82:ad:85:fe:e6:1b:d9:88:3c:29:5a:34:21:d0: 91:9a:8a:93:fa:69:0d:10:51:86:c8:b0:40:b8:c7: 00:c5:14:44:2b:70:7e:de:45:c2:a4:cd:0b:f6:06: d1:2d:86:20:f6:e5:37:0b:4c:e6:f9:97:eb:06:a3: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:31:74:BE:B9:B9:48:F5:A3:FA:A6:4C:DE:3E:8F:11:D6:42:A6:37 X509v3 Authority Key Identifier: keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:53:e2:2a:27:bc:aa:0d:ec:35:16:17:ca:ed:34:38:e7:11: c4:d7:27:55:3b:cb:62:4c:29:19:ba:07:67:f4:fc:e5:b5:9a: 2d:2d:84:28:a7:2c:30:7c:f2:7a:f0:b5:cf:27:85:48:72:d7: 88:b6:ad:2a:3f:22:77:54:a2:6c:dd:55:20:34:3f:81:e4:ca: 8c:36:dd:2a:3c:29:88:7a:91:55:7d:de:d9:5e:97:bb:b2:95: e5:a8:c9:84:ca:9d:4c:7f:03:e8:78:b6:35:d8:86:de:5d:ab: 20:9c:a9:f7:79:74:d9:62:a8:7b:96:5e:15:7b:02:e1:b7:d5: 72:33:20:d6:76:52:e4:54:e8:7c:f9:df:da:f3:e5:87:40:3e: 4f:f5:f3:69:da:fe:a1:00:61:7f:62:32:3a:12:60:0c:06:90: f4:95:01:c6:1f:d3:fb:06:d1:3e:3f:b3:bf:a9:4c:69:cd:b8: 40:c7:1c:03:ef:ce:80:01:e0:4d:0c:ed:5d:01:24:91:3f:55: b2:53:f7:c8:32:4c:2a:f9:93:fd:4f:79:29:52:3e:b3:c5:ac: 17:f6:0a:7b:a6:5e:04:d8:ce:2a:b9:d7:b8:7f:9d:fb:10:31: 25:ca:58:b9:b3:5c:94:e5:e2:2c:0d:79:87:09:81:b4:8d:f9: f5:b3:b8:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDc4NjExMC8GA1UEBRMoNTc4QzhEMDJBRUYwQjQzRTI5RkVDRUExODk1RENDOUQx MDY2MzUzNTAeFw0yNTA0MjUwNjE0NDVaFw0yNTA1MDIwNjE0NDVaMBgxFjAUBgNV BAMTDTY4MGIyODU1LWU5MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKhiql0H4ENfM5/g6fevhDuz8pAUQHs68VFhKBp1ExZfV0JRLyfUVy3KT075Zl lS/gjjIuPtFV2o47bvBO86n7fWacVEVXAWw0Xgc3pEKCOaI1jmnIeOgDbcwdkSkE pLqvvwELTnF6F81p/ajFAQAFL+BBxV006TWh9XEqrJlW18jtKES4bnT8adQpIniK FXj8R9CrHsYlfbRDIZh6DaXqUOHaFMzFUVKajKRjRdu7hkJ5ICuSplRmfE30ht1t RY2utRuCrYX+5hvZiDwpWjQh0JGaipP6aQ0QUYbIsEC4xwDFFEQrcH7eRcKkzQv2 BtEthiD25TcLTOb5l+sGozB1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJzF0vrm5 SPWj+qZM3j6PEdZCpjcwHwYDVR0jBBgwFoAUV4yNAq7wtD4p/s6hiV3MnRBmNTUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0Nzg2LzM0NTk4QzcwQTdD MzExRUZCNTExRTA1M0M0RjlBRTAyL1Y0eU5BcTd3dEQ0cF9zNmhpVjNNblJCbU5U VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjR5TkFxN3d0RDRwX3M2aGlWM01uUkJtTlRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 Nzg2LzM0NTk4QzcwQTdDMzExRUZCNTExRTA1M0M0RjlBRTAyL1Y0eU5BcTd3dEQ0 cF9zNmhpVjNNblJCbU5UVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9T4ionvKoN7DUWF8rtNDjnEcTXJ1U7y2JMKRm6B2f0/OW1mi0thCin LDB88nrwtc8nhUhy14i2rSo/IndUomzdVSA0P4Hkyow23So8KYh6kVV93tlel7uy leWoyYTKnUx/A+h4tjXYht5dqyCcqfd5dNliqHuWXhV7AuG31XIzINZ2UuRU6Hz5 39rz5YdAPk/182na/qEAYX9iMjoSYAwGkPSVAcYf0/sG0T4/s7+pTGnNuEDHHAPv zoAB4E0M7V0BJJE/VbJT98gyTCr5k/1PeSlSPrPFrBf2CnumXgTYziq517h/nfsQ MSXKWLmzXJTl4iwNeYcJgbSN+fWzuLI= -----END CERTIFICATE-----Generated at Sat Apr 26 03:46:35 2025 by rpki-client