$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft File: 67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json) Hash identifier: 8j8NXUhfeEcC3Yzht99wT+IZOlI99cDrauzQqe5dj5A= Subject key identifier: 95:83:8C:03:74:41:02:E1:C4:5B:F5:AE:DA:7A:F2:08:A0:7F:1F:45 Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 Certificate issuer: /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft Manifest number: 01D9 Signing time: Fri 25 Apr 2025 02:28:42 +0000 Manifest this update: Fri 25 Apr 2025 02:28:41 +0000 Manifest next update: Fri 02 May 2025 02:28:41 +0000 Files and hashes: 1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: Evk4aWGV8Qv+8KN9Fr+MwrC9Mzk2Ag9ARqn107p33So=) 2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: T+4lg8d9jLKTS/9QxB/dn+qV3gmWtO4Nms49RgwAEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Validity Not Before: Apr 25 02:28:41 2025 GMT Not After : May 2 02:28:41 2025 GMT Subject: CN=680af359-17e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:f8:34:6f:92:7e:fb:2d:86:9e:46:3d:c9: f2:f8:61:e9:74:c4:c8:3d:13:5a:4d:f2:64:48:27: e7:65:f3:16:ef:37:10:06:45:9a:04:09:bf:f0:38: 64:07:84:73:fc:ec:1d:6e:fd:e3:1a:bd:bf:0e:46: 72:39:64:ae:f4:24:47:37:43:dc:a4:6d:39:21:6d: 52:26:61:8d:1a:a2:20:c5:19:52:25:51:02:a0:6d: 2e:7d:72:4c:02:14:b0:95:44:e7:5e:08:46:21:01: e8:ad:ca:33:52:18:b4:bc:49:33:ce:04:8d:6b:82: 62:f6:ba:5a:39:49:e9:69:fa:50:a1:3d:e9:b3:b9: dd:d3:00:5b:e6:ce:3d:20:f1:2c:f2:4c:6b:99:3d: de:a9:57:10:a5:29:45:89:60:ba:f7:e1:6f:af:80: a0:2c:6a:f8:39:fb:1b:c5:98:de:11:d3:22:ee:62: 85:97:4f:2b:88:25:4f:b1:80:d2:19:da:c8:1a:8c: 9c:d0:c7:5d:11:e6:29:21:c1:79:e1:64:2c:0f:cb: 67:7c:ed:d1:d6:f4:96:82:6f:25:61:9e:e0:10:f3: 5a:24:32:78:f7:1a:56:ed:59:b2:9b:39:0c:4a:ec: e3:bb:8e:83:bb:d2:2d:31:91:d1:2d:98:ad:c6:bd: 0c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:83:8C:03:74:41:02:E1:C4:5B:F5:AE:DA:7A:F2:08:A0:7F:1F:45 X509v3 Authority Key Identifier: keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e6:b5:8b:51:f9:7c:4c:75:18:e1:6d:1b:f3:ea:ef:04:01: 58:37:c4:c9:64:a7:6a:32:3b:46:53:1b:c4:42:34:0a:89:f7: 7a:52:00:ec:76:52:aa:90:e3:b4:15:8e:4a:87:7f:b6:a0:ad: 60:c6:ba:6c:4e:57:82:3c:c1:cc:b9:2f:a6:e8:3e:35:7d:38: 5c:a1:bb:c3:e9:d0:13:2e:21:b0:f9:b2:64:0e:69:82:52:3d: de:75:6f:6d:f9:63:6c:96:a1:86:81:7f:b2:04:5c:88:1e:50: ca:f2:ec:ab:63:7b:f6:f9:c6:24:f2:8c:91:47:7a:89:9e:b9: ee:f4:e2:b8:bb:83:b6:5b:c7:3d:b2:8f:6f:8f:e7:3e:5b:54: 55:e3:ae:f6:a5:fa:f6:c5:6d:62:ca:45:71:bf:84:3e:63:7b: 30:c8:54:87:fa:f6:6e:f9:e7:86:06:3f:76:5e:49:d1:ec:94: 6c:85:fd:cc:51:a9:37:b2:71:b5:1b:e1:53:e7:fb:78:e3:d2: 11:4e:dc:f7:66:1b:6f:14:9e:d3:50:cd:b0:0e:9e:e3:16:c8: 3e:89:bb:52:13:76:6d:a2:a1:86:c4:65:fb:1b:99:31:dc:5a: 42:d1:0e:73:65:04:6c:d3:85:91:ae:18:b5:ff:92:e6:46:0f: 54:d8:61:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QzgxMTAvBgNVBAUTKEVCQjU2RUY1QTQzRDFFNTZCOEFFNkMzNUVGREY5MDZB Qjg1RDI3NTUwHhcNMjUwNDI1MDIyODQxWhcNMjUwNTAyMDIyODQxWjAYMRYwFAYD VQQDEw02ODBhZjM1OS0xN2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr934NG+Sfvsthp5GPcny+GHpdMTIPRNaTfJkSCfnZfMW7zcQBkWaBAm/8Dhk B4Rz/Owdbv3jGr2/DkZyOWSu9CRHN0PcpG05IW1SJmGNGqIgxRlSJVECoG0ufXJM AhSwlUTnXghGIQHorcozUhi0vEkzzgSNa4Ji9rpaOUnpafpQoT3ps7nd0wBb5s49 IPEs8kxrmT3eqVcQpSlFiWC69+Fvr4CgLGr4OfsbxZjeEdMi7mKFl08riCVPsYDS GdrIGoyc0MddEeYpIcF54WQsD8tnfO3R1vSWgm8lYZ7gEPNaJDJ49xpW7VmymzkM Suzju46Du9ItMZHRLZitxr0MZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWDjAN0 QQLhxFv1rtp68gigfx9FMB8GA1UdIwQYMBaAFOu1bvWkPR5WuK5sNe/fkGq4XSdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhDOC85OTQ1RkRBNDUw M0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhsYTRybXcxNzktUWFyaGRK MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3VnU5YVE5SGxhNHJtdzE3OS1RYXJoZEoxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhDOC85OTQ1RkRBNDUwM0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhs YTRybXcxNzktUWFyaGRKMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB85rWLUfl8THUY4W0b8+rvBAFYN8TJZKdqMjtGUxvEQjQKifd6UgDs dlKqkOO0FY5Kh3+2oK1gxrpsTleCPMHMuS+m6D41fThcobvD6dATLiGw+bJkDmmC Uj3edW9t+WNslqGGgX+yBFyIHlDK8uyrY3v2+cYk8oyRR3qJnrnu9OK4u4O2W8c9 so9vj+c+W1RV4672pfr2xW1iykVxv4Q+Y3swyFSH+vZu+eeGBj92XknR7JRshf3M Uak3snG1G+FT5/t449IRTtz3ZhtvFJ7TUM2wDp7jFsg+ibtSE3ZtoqGGxGX7G5kx 3FpC0Q5zZQRs04WRrhi1/5LmRg9U2GFX -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:50 2025 by rpki-client