$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft File: PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json) Hash identifier: XctpPIuH0J18A/uvNg/3L7Oo6u3tRGWUT2iyITyt200= Subject key identifier: 3C:66:F9:43:A1:33:C7:3E:F2:9B:A2:91:7F:2F:D2:31:0B:64:A4:BF Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 Certificate issuer: /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Certificate serial: 0409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft Manifest number: 0404 Signing time: Fri 25 Apr 2025 00:14:26 +0000 Manifest this update: Fri 25 Apr 2025 00:14:26 +0000 Manifest next update: Fri 02 May 2025 00:14:26 +0000 Files and hashes: 1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: 6KNc4uwcOO/DtvabzfSAKmBwNagIqVqOZaH8sDHhsm8=) 2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: TIDwy9LVcXS4MQZ5z7Q3BUlFE+wSiwfGMr/OEXHL42A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1033 (0x409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423 Validity Not Before: Apr 25 00:14:26 2025 GMT Not After : May 2 00:14:26 2025 GMT Subject: CN=680ad3e2-6a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:c8:b6:17:10:f2:c7:c0:1e:3f:1c:17:d8: 4a:e9:bc:88:09:6b:63:9e:e5:26:8d:12:0a:8b:1a: 05:52:a4:a7:b0:26:a5:9a:fb:88:2f:42:8f:6b:65: 61:73:b3:c6:98:fd:1f:1a:10:3b:0e:e3:ca:a7:ac: 6d:db:75:37:fd:f6:58:47:92:18:7f:3b:d3:b7:72: e3:19:db:03:0f:42:73:04:d3:de:32:e1:56:f3:a4: a1:ef:ec:5a:1d:d0:d2:32:20:3e:2a:b8:aa:1c:d4: 80:cc:e3:60:62:43:6f:a3:bc:73:e4:2d:ea:c0:6e: 79:a5:51:ae:27:69:ca:bd:bd:0f:78:7b:92:ac:f9: 3c:ad:5c:df:ee:3a:c2:7b:3c:e1:b6:27:03:6e:7c: fe:a4:3e:07:8d:94:24:bf:93:71:21:2c:d9:e3:a9: 05:0e:f9:f3:52:91:6f:ea:c3:34:0d:dd:52:46:fc: 1d:b3:12:f3:6f:34:5c:6c:b0:e0:a5:75:2f:c8:b4: 1c:20:9e:a4:28:77:da:19:20:9f:3d:ce:59:29:3b: ff:84:02:83:37:e4:45:3e:1c:4f:01:d0:25:26:30: 60:86:08:c7:b3:7e:e9:c8:1b:10:4b:7e:71:b8:c1: e8:27:75:12:26:9c:73:6f:05:dc:ac:9b:52:99:22: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:66:F9:43:A1:33:C7:3E:F2:9B:A2:91:7F:2F:D2:31:0B:64:A4:BF X509v3 Authority Key Identifier: keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:12:e9:9b:5a:35:d8:69:76:1d:fd:05:66:b4:80:03:9f:dd: 6e:b2:03:5c:fa:b0:09:87:41:72:1a:e4:20:d2:20:03:b1:ba: c3:60:3e:07:22:93:48:ce:18:16:77:8c:19:47:70:09:f7:88: 34:2f:4c:07:af:f2:7e:74:68:3f:a1:97:79:d6:7b:f9:cd:7d: 07:40:53:a4:64:f1:0c:ad:58:74:84:42:21:21:1b:00:ec:13: 34:97:6c:c2:d9:87:a9:4f:87:d3:b3:34:c6:a0:18:52:c9:e4: c6:10:d4:bb:4d:1f:9f:9d:c9:81:e3:fe:16:e1:55:fa:4c:f5: 41:ea:7b:36:c8:52:91:1d:02:fd:8b:38:09:98:7e:75:8a:8d: 86:9d:3f:0a:10:a7:03:03:51:d1:b5:40:ec:b6:ba:d6:52:dd: fc:75:33:4f:41:b9:9f:a7:fc:73:15:70:e5:95:e9:d0:19:d2: 19:dd:6e:2a:f3:e8:c3:5d:1c:57:eb:3b:1e:80:5a:30:7b:f7: 99:24:30:0d:c9:d2:b3:71:c1:0a:ed:10:80:ad:5e:89:48:2b: 7e:75:06:8f:1f:a0:28:ea:d7:ba:41:d0:6b:a1:fe:d1:ec:75: ac:b1:58:9c:c7:90:15:5a:64:00:75:d6:a1:11:d2:1e:c2:21: 38:fe:0b:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0QUMxMTAvBgNVBAUTKDNFRUIxOTY4OEQzM0Q2MjE5OTRFNUIzRDlFNDZFQ0FB QTUwOUY0MjMwHhcNMjUwNDI1MDAxNDI2WhcNMjUwNTAyMDAxNDI2WjAYMRYwFAYD VQQDEw02ODBhZDNlMi02YTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuH3IthcQ8sfAHj8cF9hK6byICWtjnuUmjRIKixoFUqSnsCalmvuIL0KPa2Vh c7PGmP0fGhA7DuPKp6xt23U3/fZYR5IYfzvTt3LjGdsDD0JzBNPeMuFW86Sh7+xa HdDSMiA+KriqHNSAzONgYkNvo7xz5C3qwG55pVGuJ2nKvb0PeHuSrPk8rVzf7jrC ezzhticDbnz+pD4HjZQkv5NxISzZ46kFDvnzUpFv6sM0Dd1SRvwdsxLzbzRcbLDg pXUvyLQcIJ6kKHfaGSCfPc5ZKTv/hAKDN+RFPhxPAdAlJjBghgjHs37pyBsQS35x uMHoJ3USJpxzbwXcrJtSmSJVQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxm+UOh M8c+8puikX8v0jELZKS/MB8GA1UdIwQYMBaAFD7rGWiNM9YhmU5bPZ5G7KqlCfQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTRBQy8zNDQxRDJEMDZD NkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFpR1pUbHM5bmtic3FxVUo5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1c1phSTB6MWlHWlRsczlua2JzcXFVSjlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTRBQy8zNDQxRDJEMDZDNkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFp R1pUbHM5bmtic3FxVUo5Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKEumbWjXYaXYd/QVmtIADn91usgNc+rAJh0FyGuQg0iADsbrDYD4H IpNIzhgWd4wZR3AJ94g0L0wHr/J+dGg/oZd51nv5zX0HQFOkZPEMrVh0hEIhIRsA 7BM0l2zC2YepT4fTszTGoBhSyeTGENS7TR+fncmB4/4W4VX6TPVB6ns2yFKRHQL9 izgJmH51io2GnT8KEKcDA1HRtUDstrrWUt38dTNPQbmfp/xzFXDllenQGdIZ3W4q 8+jDXRxX6zsegFowe/eZJDANydKzccEK7RCArV6JSCt+dQaPH6Ao6te6QdBrof7R 7HWssVicx5AVWmQAddahEdIewiE4/gtN -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:35 2025 by rpki-client