$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft File: cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json) Hash identifier: VHwVOe+N6sio9MjGfUif9xwyKU9nwI3N52sNR2Rac5s= Subject key identifier: 81:E5:20:05:A6:3B:45:AE:6C:F6:EE:26:CD:BF:E2:B4:2E:CA:C4:CE Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft Manifest number: 0180 Signing time: Fri 25 Apr 2025 02:52:24 +0000 Manifest this update: Fri 25 Apr 2025 02:52:23 +0000 Manifest next update: Fri 02 May 2025 02:52:23 +0000 Files and hashes: 1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: dMZErvekQHYDaVu/bORGECX95kf82Ku8DSrulD6HR1U=) 2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: ViKM5e5iyaoZ2fwSNhoyHsddKA5yuwX0C7qKIyKJX7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: Apr 25 02:52:23 2025 GMT Not After : May 2 02:52:23 2025 GMT Subject: CN=680af8e8-05cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:f6:c3:6a:24:76:9a:d2:24:ef:72:13:7b: 2e:06:3d:ca:49:ef:fc:df:15:c2:78:fe:e0:b1:22: ec:d7:37:df:cb:8e:6a:a1:9d:f2:36:2f:af:10:be: 77:f8:15:8e:63:84:72:86:b8:02:fb:b1:d7:bd:ff: d4:f0:84:cf:52:70:1a:99:6e:68:cb:06:8d:6f:fe: 67:63:c6:18:34:ff:94:a1:a3:79:34:fd:6a:68:2a: 87:c8:2e:42:cc:db:1c:bc:19:6a:7b:00:07:df:6e: df:e1:93:29:95:71:fd:af:3c:46:4a:76:ef:a6:95: c2:30:d0:a7:46:ea:47:0f:b5:7b:13:f5:70:51:90: 3f:aa:64:d2:8b:bb:db:97:d7:e5:3d:ce:2f:7a:0d: 5c:c9:6e:05:0b:bc:4f:18:ad:f7:19:fd:10:87:b4: 59:f1:d9:21:32:04:33:f6:bf:fb:c2:eb:f6:88:c5: d6:bb:2d:39:f5:19:77:71:4b:25:24:d5:a8:8d:ce: c9:ed:8e:51:3d:17:9a:82:3c:4b:45:29:02:97:45: 6c:90:9d:64:6b:6d:16:04:50:83:85:48:68:e8:00: 50:29:b2:c4:3f:10:12:b0:7a:a0:41:1d:78:7b:8e: ee:49:ae:0f:90:b6:05:0a:d6:e4:60:59:d3:30:d0: ec:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E5:20:05:A6:3B:45:AE:6C:F6:EE:26:CD:BF:E2:B4:2E:CA:C4:CE X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b3:27:54:fe:3b:bf:85:e1:6b:6a:05:c4:78:67:e5:a4:c9: a9:c1:80:68:8a:b2:6a:fb:28:01:26:f8:77:43:51:46:79:01: 17:45:6a:69:39:63:60:ba:eb:50:ed:5c:53:45:fb:6e:da:50: 87:78:d4:f7:0f:f4:9f:28:0b:98:41:56:b9:b0:d9:18:1f:ba: 11:10:a5:65:3c:3d:5f:d7:1d:0b:f9:59:35:5a:aa:df:2c:6a: aa:14:30:8e:b6:07:4c:42:01:e6:8a:53:e7:b1:7e:46:fa:fc: cd:25:26:14:41:9c:4a:4b:d1:07:b1:04:c0:fd:8b:a5:be:55: 81:ef:dc:00:0e:1f:85:b8:ea:a4:76:5c:14:82:37:a8:7d:7f: 38:73:f8:94:b6:50:40:d0:34:59:6f:ab:4a:37:0b:69:42:72: be:39:a5:f4:a3:a5:98:d0:39:52:6b:72:4e:4c:b3:93:9c:48: a4:f2:66:66:cc:79:c3:2c:b4:ca:ec:81:cb:5f:2a:26:06:df: cd:a8:2f:71:53:52:9f:3e:4e:e2:be:a6:34:09:01:a1:95:17: d2:72:28:c8:94:6f:33:29:86:84:60:ba:0c:3d:08:9c:cb:75: 60:f2:38:7d:0b:26:1a:e0:17:e4:39:71:31:73:70:47:40:80: 75:e1:54:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjUwNDI1MDI1MjIzWhcNMjUwNTAyMDI1MjIzWjAYMRYwFAYD VQQDEw02ODBhZjhlOC0wNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveP2w2okdprSJO9yE3suBj3KSe/83xXCeP7gsSLs1zffy45qoZ3yNi+vEL53 +BWOY4RyhrgC+7HXvf/U8ITPUnAamW5oywaNb/5nY8YYNP+UoaN5NP1qaCqHyC5C zNscvBlqewAH327f4ZMplXH9rzxGSnbvppXCMNCnRupHD7V7E/VwUZA/qmTSi7vb l9flPc4veg1cyW4FC7xPGK33Gf0Qh7RZ8dkhMgQz9r/7wuv2iMXWuy059Rl3cUsl JNWojc7J7Y5RPReagjxLRSkCl0VskJ1ka20WBFCDhUho6ABQKbLEPxASsHqgQR14 e47uSa4PkLYFCtbkYFnTMNDsmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHlIAWm O0WubPbuJs2/4rQuysTOMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjEyOC83QkYyM0FDNERERTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZO ZERzVklENG13aUJHLWlRSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhsydU/ju/heFragXEeGflpMmpwYBoirJq+ygBJvh3Q1FGeQEXRWpp OWNguutQ7VxTRftu2lCHeNT3D/SfKAuYQVa5sNkYH7oREKVlPD1f1x0L+Vk1Wqrf LGqqFDCOtgdMQgHmilPnsX5G+vzNJSYUQZxKS9EHsQTA/YulvlWB79wADh+FuOqk dlwUgjeofX84c/iUtlBA0DRZb6tKNwtpQnK+OaX0o6WY0DlSa3JOTLOTnEik8mZm zHnDLLTK7IHLXyomBt/NqC9xU1KfPk7ivqY0CQGhlRfScijIlG8zKYaEYLoMPQic y3Vg8jh9CyYa4BfkOXExc3BHQIB14VQc -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:13 2025 by rpki-client