$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json) Hash identifier: 66Beb7GmL++e1/EB287escc6D+U2NFKahYu5WiLkFNE= Subject key identifier: C4:43:76:C7:6C:59:6D:50:75:74:1B:AB:A2:55:60:32:19:D9:22:CD Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Certificate serial: 1BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft Manifest number: 1BD2 Signing time: Thu 24 Apr 2025 16:15:49 +0000 Manifest this update: Thu 24 Apr 2025 16:15:48 +0000 Manifest next update: Thu 01 May 2025 16:15:48 +0000 Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: oUYoK/KEJbVhdysNhn5swjfLcsVE+0PpVOECMnWhi+I=) 2: 5949B76C00DB11E8A9CA373DC4F9AE02.roa (hash: uYIH2Df820V7sq00NPl6eOckfu5/+u+T1sNhFFho9vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7148 (0x1bec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Validity Not Before: Apr 24 16:15:48 2025 GMT Not After : May 1 16:15:48 2025 GMT Subject: CN=680a63b5-2f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:c0:4c:28:17:b7:86:2b:e5:d7:9b:04:e4: 69:89:4c:c5:54:8c:ca:30:7a:5f:f3:94:2f:51:f0: 8d:18:fb:17:2c:75:ff:53:c7:1e:eb:2f:60:19:87: f9:7c:7a:78:2a:9d:0d:7c:f0:c8:fd:f9:c0:b3:a6: ef:70:7d:d4:64:d1:77:47:66:a1:26:a9:38:90:5f: 23:d6:bb:13:9e:31:15:85:a0:20:b4:4a:a5:19:75: e7:08:1b:e4:63:33:20:12:0f:0a:39:ba:64:29:05: 01:eb:2f:da:c6:de:f7:15:13:6d:b7:d6:f5:2d:15: 2b:89:9f:28:3e:82:14:ce:9d:7e:53:81:1d:65:4e: 5b:97:5a:fb:a6:c2:ba:a8:b3:62:fc:83:61:49:5d: f1:13:a2:10:58:d7:d7:bc:f2:96:7b:c7:11:8f:c3: 8a:12:d0:15:a6:30:6e:56:aa:98:cf:9f:0f:2a:1f: 57:33:05:07:28:df:1b:7a:0d:12:7d:a4:80:91:c4: 90:0e:53:5c:34:bf:ae:e8:79:f2:bb:f1:27:cd:fb: 07:ab:29:19:63:04:76:5d:b3:48:46:3b:88:22:f7: 02:ba:71:99:74:d4:1a:68:f7:42:28:26:90:6c:89: 41:2f:7f:04:3b:8b:06:99:7b:bc:e3:4e:f7:65:83: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:43:76:C7:6C:59:6D:50:75:74:1B:AB:A2:55:60:32:19:D9:22:CD X509v3 Authority Key Identifier: keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:61:3b:99:d4:f8:9a:66:06:db:e7:26:1b:81:3b:60:c6:2a: 0a:05:b8:61:f5:e6:b4:ee:e1:cd:65:44:6b:77:0e:db:c2:61: 95:db:db:05:5c:72:4e:3a:c9:f0:52:5d:3f:95:1c:16:8d:9e: d9:e8:b7:36:fe:88:3b:96:4e:96:ea:9a:cf:9e:bd:1c:34:e0: eb:41:d4:06:c4:40:ba:6c:52:40:61:96:64:6c:1a:1e:f7:27: 1c:4d:8f:fa:b4:78:5e:75:52:e3:d1:d0:fa:be:a3:11:53:6a: 33:79:e1:7c:12:a0:58:fe:4e:11:d8:a4:3c:32:25:8d:95:3a: c0:91:4c:08:b7:5c:ea:9a:d8:6c:e1:60:28:60:7d:cb:f6:5f: f5:59:bb:9e:46:32:ec:ff:1a:3e:03:8f:17:63:1d:dd:4f:de: 5f:76:59:89:80:71:8c:d6:26:3c:9a:ef:a9:a1:e8:35:2f:52: ff:66:8e:b9:9b:e4:ba:37:f0:ff:ee:d7:ea:3f:d6:e7:c9:7e: e4:97:22:02:b8:5e:f3:f3:08:94:b2:9c:97:10:e0:36:9e:49: f4:4e:b9:4d:73:00:0f:73:6f:e0:5b:92:6c:c8:a4:0e:6a:04: 27:93:e2:22:20:74:32:83:10:61:1e:eb:11:f7:a3:ad:18:e2: a0:94:bc:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5 MUYwMjFFNDUwHhcNMjUwNDI0MTYxNTQ4WhcNMjUwNTAxMTYxNTQ4WjAYMRYwFAYD VQQDEw02ODBhNjNiNS0yZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+7ATCgXt4Yr5debBORpiUzFVIzKMHpf85QvUfCNGPsXLHX/U8ce6y9gGYf5 fHp4Kp0NfPDI/fnAs6bvcH3UZNF3R2ahJqk4kF8j1rsTnjEVhaAgtEqlGXXnCBvk YzMgEg8KObpkKQUB6y/axt73FRNtt9b1LRUriZ8oPoIUzp1+U4EdZU5bl1r7psK6 qLNi/INhSV3xE6IQWNfXvPKWe8cRj8OKEtAVpjBuVqqYz58PKh9XMwUHKN8beg0S faSAkcSQDlNcNL+u6Hnyu/EnzfsHqykZYwR2XbNIRjuIIvcCunGZdNQaaPdCKCaQ bIlBL38EO4sGmXu84073ZYN3OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRDdsds WW1QdXQbq6JVYDIZ2SLNMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv NnJMVl9DdG9tUkNSOENIa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwYTuZ1PiaZgbb5yYbgTtgxioKBbhh9ea07uHNZURrdw7bwmGV29sF XHJOOsnwUl0/lRwWjZ7Z6Lc2/og7lk6W6prPnr0cNODrQdQGxEC6bFJAYZZkbBoe 9yccTY/6tHhedVLj0dD6vqMRU2ozeeF8EqBY/k4R2KQ8MiWNlTrAkUwIt1zqmths 4WAoYH3L9l/1WbueRjLs/xo+A48XYx3dT95fdlmJgHGM1iY8mu+poeg1L1L/Zo65 m+S6N/D/7tfqP9bnyX7klyICuF7z8wiUspyXEOA2nkn0TrlNcwAPc2/gW5JsyKQO agQnk+IiIHQygxBhHusR96OtGOKglLwy -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:26 2025 by rpki-client