$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft File: TNneNy0DSKwzsWel144wE_wDVx8.mft (raw, json) Hash identifier: FdROSLcuHO0UY/cIh+DSodHQCK9UiXOTGxiiEBeWaxM= Subject key identifier: 10:5B:A1:4E:DC:B5:40:A4:4A:99:39:90:64:B3:10:1D:3D:53:63:19 Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft Manifest number: 01B8 Signing time: Thu 24 Apr 2025 16:23:25 +0000 Manifest this update: Thu 24 Apr 2025 16:23:24 +0000 Manifest next update: Thu 01 May 2025 16:23:24 +0000 Files and hashes: 1: TNneNy0DSKwzsWel144wE_wDVx8.crl (hash: TjazOuD/KtV5pdjMvSTwMaEwCY/d9A0e8I2+3PzC8Sg=) 2: 5CAB3758374A11EFB612084EC4F9AE02.roa (hash: fvbvs2Wqvy4vuNdUjs+4Z/eUaxC5K/4ILoyyJZ0yTFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Apr 24 16:23:24 2025 GMT Not After : May 1 16:23:24 2025 GMT Subject: CN=680a657d-e747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:db:87:b5:da:09:0f:78:54:c8:f9:43:d8:17: 24:35:2a:e7:de:fb:7b:76:ac:3d:15:7f:48:e1:1e: 6c:bb:dd:5d:d5:b8:cc:87:60:c9:0b:4e:9a:9a:5b: e1:e1:f1:53:2c:04:a8:c6:57:20:06:67:12:e8:d7: 96:b1:1b:f4:00:b7:b8:84:f9:f5:ee:a6:54:71:c8: 82:6b:c1:b3:a1:df:e3:cb:f3:ab:4d:31:be:c4:ac: 5d:41:2a:0f:12:2a:cb:34:bd:36:6f:b9:f4:f4:c7: b5:c1:ec:ba:38:ff:9c:07:67:2e:d7:d5:73:ec:9c: 89:c2:fc:a9:e4:cf:b4:5e:b2:57:c8:40:12:0b:7f: af:91:54:49:6d:f1:88:44:01:e7:13:ec:d9:13:f8: 1a:b8:55:e9:f8:d8:8c:b3:20:7c:cc:fe:f7:4c:68: 3e:9d:05:f9:11:1f:93:ab:a4:0a:15:11:4a:ad:8e: f7:da:f1:75:86:d1:35:b8:2e:63:a6:a4:a3:d3:a9: ca:22:a8:32:73:90:51:14:8b:ae:35:63:cb:61:d8: 69:47:49:78:2f:27:6f:4a:ae:41:ce:ed:c5:71:c6: ee:41:c8:ca:e6:ab:eb:af:69:2e:8e:6d:49:67:c3: 4a:a3:24:59:d1:00:c9:9a:5e:4d:be:c5:f8:29:2a: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5B:A1:4E:DC:B5:40:A4:4A:99:39:90:64:B3:10:1D:3D:53:63:19 X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d3:8e:50:04:5b:c5:60:d2:b4:3e:cb:9d:74:42:67:da:8a: 14:3e:01:f4:d7:dc:a6:f2:ec:ea:1a:17:ff:b2:21:58:9e:37: ab:1a:7b:53:46:a0:b4:11:a1:ed:7e:16:fe:a8:86:4f:30:ae: ac:1f:b8:69:af:9f:b6:b0:0f:3e:b2:49:93:86:66:c7:c9:62: 93:f8:b4:e1:3f:50:c2:8e:8d:2f:0e:0f:da:fc:e6:a5:be:1b: 6f:8b:20:c4:a9:0e:f6:68:43:94:80:ca:01:8b:8c:cc:97:a0: 45:dd:42:8f:56:66:ae:35:c0:3c:c5:73:d5:1e:3f:69:cc:14: b1:5a:bf:80:a8:b8:c0:4b:8f:e5:f1:11:7a:d9:ed:eb:71:86: 38:7b:60:47:07:39:84:9e:94:74:59:7f:78:25:f8:04:24:a4: d9:f0:a0:e8:0b:5f:51:28:5c:54:eb:83:ed:0f:e9:2a:24:71: 6d:49:c9:0a:33:86:32:52:07:a9:7c:a2:88:0a:5a:cc:0c:1d: bd:9a:65:20:32:d4:c9:1f:86:f8:ab:c3:56:67:91:36:aa:ff: 70:9d:0f:cb:e2:f0:f9:dd:a0:a8:df:3d:44:cd:d1:a5:05:4e: 8c:54:5f:ec:73:6b:5c:64:8c:4b:b3:64:ca:77:cb:60:3e:3c: 4e:91:d2:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjUwNDI0MTYyMzI0WhcNMjUwNTAxMTYyMzI0WjAYMRYwFAYD VQQDEw02ODBhNjU3ZC1lNzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/NuHtdoJD3hUyPlD2BckNSrn3vt7dqw9FX9I4R5su91d1bjMh2DJC06amlvh 4fFTLASoxlcgBmcS6NeWsRv0ALe4hPn17qZUcciCa8Gzod/jy/OrTTG+xKxdQSoP EirLNL02b7n09Me1wey6OP+cB2cu19Vz7JyJwvyp5M+0XrJXyEASC3+vkVRJbfGI RAHnE+zZE/gauFXp+NiMsyB8zP73TGg+nQX5ER+Tq6QKFRFKrY732vF1htE1uC5j pqSj06nKIqgyc5BRFIuuNWPLYdhpR0l4LydvSq5Bzu3FccbuQcjK5qvrr2kujm1J Z8NKoyRZ0QDJml5NvsX4KSph1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBboU7c tUCkSpk5kGSzEB09U2MZMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS81NzhCMDZDQzg4NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNL d3pzV2VsMTQ0d0Vfd0RWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4045QBFvFYNK0PsuddEJn2ooUPgH019ym8uzqGhf/siFYnjerGntT RqC0EaHtfhb+qIZPMK6sH7hpr5+2sA8+skmThmbHyWKT+LThP1DCjo0vDg/a/Oal vhtviyDEqQ72aEOUgMoBi4zMl6BF3UKPVmauNcA8xXPVHj9pzBSxWr+AqLjAS4/l 8RF62e3rcYY4e2BHBzmEnpR0WX94JfgEJKTZ8KDoC19RKFxU64PtD+kqJHFtSckK M4YyUgepfKKIClrMDB29mmUgMtTJH4b4q8NWZ5E2qv9wnQ/L4vD53aCo3z1EzdGl BU6MVF/sc2tcZIxLs2TKd8tgPjxOkdLD -----END CERTIFICATE-----Generated at Sat Apr 26 14:12:56 2025 by rpki-client