$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft File: IAAAWsWhdEBL07_CmUMyPpYGJbk.mft (raw, json) Hash identifier: uf2MgNst59d2Lb47yQ98MlVEVz4Auiv3n8yO4pJrrEQ= Subject key identifier: BE:45:26:A4:87:FD:6C:86:E5:94:8D:35:C1:B2:4D:67:9E:68:97:05 Authority key identifier: 20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 Certificate issuer: /CN=A91DA590/serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Certificate serial: 0336 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft Manifest number: 032F Signing time: Fri 25 Apr 2025 00:52:21 +0000 Manifest this update: Fri 25 Apr 2025 00:52:20 +0000 Manifest next update: Fri 02 May 2025 00:52:20 +0000 Files and hashes: 1: IAAAWsWhdEBL07_CmUMyPpYGJbk.crl (hash: In65H/Vblbb3p4KtDYZmXBEqNgbscg6Sel6ig8f9h04=) 2: 09E46A74C07F11ECB0707F18C4F9AE02.roa (hash: fKQvUorpCo1+t6j4CpNdFsIqffZ/KOuD0j+HaDJA0Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA590, serialNumber=2000005AC5A174404BD3BFC29943323E960625B9 Validity Not Before: Apr 25 00:52:20 2025 GMT Not After : May 2 00:52:20 2025 GMT Subject: CN=680adcc4-0f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c8:c1:85:aa:cf:8d:1f:e9:5c:52:cd:15:37: fe:9e:82:5f:80:62:1d:cf:3f:bc:58:df:a1:78:9d: 94:99:5f:85:e2:cc:4d:9a:34:96:7d:e3:fc:d6:d9: 0b:ab:fd:a7:35:fc:f2:82:7e:a9:ab:03:ae:f5:cb: 58:40:46:88:17:25:a6:fb:c4:a6:17:78:c0:02:74: 39:94:ca:44:42:9a:f7:09:25:65:e9:6f:de:d6:a3: c2:f3:08:35:ae:f7:2c:61:21:5b:fa:77:ef:fc:4b: e6:35:92:00:65:17:9e:38:a3:77:70:71:6f:1e:41: 1b:ec:0b:30:12:c6:71:ec:fe:c3:36:e6:9b:4f:cd: 74:f2:b2:0d:9e:7f:1a:ad:68:45:bb:03:f9:93:e3: 8b:88:bd:c5:fb:17:ef:7c:c9:db:2f:a1:c2:c9:52: 90:8c:84:83:49:8a:4c:84:b4:b3:7d:00:35:3b:32: 20:63:6b:fd:50:87:76:02:46:a2:ff:8d:b6:60:d5: 73:9b:75:2c:21:e9:cd:5d:7c:4e:43:b2:03:3c:1b: e7:ea:6e:6b:fa:cf:4b:19:ff:99:ea:57:64:06:0f: d4:63:0f:0c:8b:67:68:7e:ff:58:27:34:53:ee:39: c8:79:ce:25:2f:c6:bf:3a:5d:70:03:78:b5:fe:1e: 68:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:45:26:A4:87:FD:6C:86:E5:94:8D:35:C1:B2:4D:67:9E:68:97:05 X509v3 Authority Key Identifier: keyid:20:00:00:5A:C5:A1:74:40:4B:D3:BF:C2:99:43:32:3E:96:06:25:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAAAWsWhdEBL07_CmUMyPpYGJbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA590/9510E86AC07B11EC987B847FC4F9AE02/IAAAWsWhdEBL07_CmUMyPpYGJbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:bf:15:8f:78:d3:dd:f0:1c:af:97:fe:56:d2:c3:4c:99:fc: d1:92:e2:49:6f:e7:04:68:26:f1:60:cf:61:8f:fb:d6:00:e8: e5:6d:ec:d5:b2:aa:6a:08:dc:1a:b0:3a:e1:81:87:18:61:76: 96:74:29:5a:f7:58:f9:56:6b:11:3d:11:a7:d3:d9:02:a3:d5: 4a:80:68:94:02:54:90:a7:a2:8b:03:a6:dd:bc:a8:82:93:01: 33:19:09:6c:c9:83:12:55:01:bf:fd:d6:af:86:aa:a8:81:00: 32:41:fa:a2:11:61:d8:bd:98:fe:9c:a5:7f:9a:5a:1a:f4:e4: 3b:98:e0:a9:57:ff:97:54:01:92:e4:34:3f:56:d5:aa:3d:82: dd:b4:f7:6b:08:60:b4:f4:df:4f:eb:66:8c:1c:af:40:3e:bf: 43:d4:1b:e3:d2:d3:af:12:80:70:28:86:e1:4f:18:60:85:41: e6:86:4a:8e:ad:c3:df:f5:3b:54:5a:85:bf:4b:ea:74:52:f9: 8f:c5:03:3a:48:66:3f:5a:21:b6:c6:24:55:6b:b7:d2:54:d6: 39:68:7d:b6:44:01:a9:c2:cf:ab:c2:5a:2d:f4:05:fc:bb:1c: a3:4a:cf:8b:50:42:bb:f3:0d:0b:9b:9b:fb:39:b6:a5:77:65: 18:57:b4:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1OTAxMTAvBgNVBAUTKDIwMDAwMDVBQzVBMTc0NDA0QkQzQkZDMjk5NDMzMjNF OTYwNjI1QjkwHhcNMjUwNDI1MDA1MjIwWhcNMjUwNTAyMDA1MjIwWjAYMRYwFAYD VQQDEw02ODBhZGNjNC0wZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48jBharPjR/pXFLNFTf+noJfgGIdzz+8WN+heJ2UmV+F4sxNmjSWfeP81tkL q/2nNfzygn6pqwOu9ctYQEaIFyWm+8SmF3jAAnQ5lMpEQpr3CSVl6W/e1qPC8wg1 rvcsYSFb+nfv/EvmNZIAZReeOKN3cHFvHkEb7AswEsZx7P7DNuabT8108rINnn8a rWhFuwP5k+OLiL3F+xfvfMnbL6HCyVKQjISDSYpMhLSzfQA1OzIgY2v9UId2Akai /422YNVzm3UsIenNXXxOQ7IDPBvn6m5r+s9LGf+Z6ldkBg/UYw8Mi2dofv9YJzRT 7jnIec4lL8a/Ol1wA3i1/h5otwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5FJqSH /WyG5ZSNNcGyTWeeaJcFMB8GA1UdIwQYMBaAFCAAAFrFoXRAS9O/wplDMj6WBiW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTU5MC85NTEwRTg2QUMw N0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRFQkwwN19DbVVNeVBwWUdK YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBQUFXc1doZEVCTDA3X0NtVU15UHBZR0piay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTU5MC85NTEwRTg2QUMwN0IxMUVDOTg3Qjg0N0ZDNEY5QUUwMi9JQUFBV3NXaGRF QkwwN19DbVVNeVBwWUdKYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCvxWPeNPd8Byvl/5W0sNMmfzRkuJJb+cEaCbxYM9hj/vWAOjlbezV sqpqCNwasDrhgYcYYXaWdCla91j5VmsRPRGn09kCo9VKgGiUAlSQp6KLA6bdvKiC kwEzGQlsyYMSVQG//davhqqogQAyQfqiEWHYvZj+nKV/mloa9OQ7mOCpV/+XVAGS 5DQ/VtWqPYLdtPdrCGC09N9P62aMHK9APr9D1Bvj0tOvEoBwKIbhTxhghUHmhkqO rcPf9TtUWoW/S+p0UvmPxQM6SGY/WiG2xiRVa7fSVNY5aH22RAGpws+rwlot9AX8 uxyjSs+LUEK78w0Lm5v7Obald2UYV7QW -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:02 2025 by rpki-client