$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft File: SmzWcxMVojSw9JbFc8kOEjyflK4.mft (raw, json) Hash identifier: MXzwWr78buZLhegu36bJ/oG8l7DKYnA/jqAA6hwa9Js= Subject key identifier: 34:AD:08:EA:C6:69:34:A9:6A:61:3A:75:EF:AA:8A:A0:F8:07:44:54 Authority key identifier: 4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE Certificate issuer: /CN=A91DF0A8/serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft Manifest number: 017F Signing time: Fri 25 Apr 2025 02:49:00 +0000 Manifest this update: Fri 25 Apr 2025 02:48:59 +0000 Manifest next update: Fri 02 May 2025 02:48:59 +0000 Files and hashes: 1: SmzWcxMVojSw9JbFc8kOEjyflK4.crl (hash: QjlC70tbr2bmmGFQ8o50yAfLJHEimicFrWev3UuVlsM=) 2: D831B39ED77311ED949D8419C4F9AE02.roa (hash: 9kQKFEDsx84E4CpywA7tSIWQG3TRzqIWi8CdC1zIoK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0A8, serialNumber=4A6CD6731315A234B0F496C573C90E123C9F94AE Validity Not Before: Apr 25 02:48:59 2025 GMT Not After : May 2 02:48:59 2025 GMT Subject: CN=680af81c-5d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2a:fb:36:2a:10:3f:60:31:11:75:ac:45:24: 3f:00:c7:8c:f5:70:35:bb:40:46:d0:8a:38:d0:b6: ce:f0:77:7d:be:88:6a:05:98:62:0d:32:8a:0d:50: ec:d3:2f:27:2d:12:14:14:17:d9:68:ab:a5:ab:81: 65:90:f4:07:af:a5:d3:37:6c:af:8d:4b:65:54:a9: 64:74:0f:23:ad:31:4e:c1:31:90:85:4c:6a:25:42: 13:f6:01:e3:e9:eb:bf:a6:a2:e0:5c:0c:e5:e9:a1: 2e:e8:ad:95:ef:7b:4c:91:2a:63:e2:0d:8c:14:cc: bd:f4:dc:80:67:a8:f6:9f:38:7f:67:4b:17:51:b7: 6a:85:90:78:71:52:e2:ed:6e:59:0d:03:50:2b:24: 21:9e:5a:b5:50:47:24:eb:da:5e:da:42:59:c3:44: 51:76:dd:3d:ab:a9:80:2e:21:84:0c:36:76:23:c9: 55:6d:d5:9e:e3:8e:7f:6b:67:56:0c:c4:6f:f7:12: f8:9f:43:3d:f7:a0:83:b7:9a:6e:04:27:0e:f1:08: 06:16:15:94:23:8f:b6:01:35:f8:a5:1a:8c:6d:25: f4:53:a2:6c:b4:0b:7b:7b:93:1d:3d:c1:d1:ed:84: 3f:54:11:32:99:cb:3c:a1:ac:f0:cc:7a:07:18:2c: 67:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AD:08:EA:C6:69:34:A9:6A:61:3A:75:EF:AA:8A:A0:F8:07:44:54 X509v3 Authority Key Identifier: keyid:4A:6C:D6:73:13:15:A2:34:B0:F4:96:C5:73:C9:0E:12:3C:9F:94:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SmzWcxMVojSw9JbFc8kOEjyflK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0A8/05C927E2D76F11ED889E3812C4F9AE02/SmzWcxMVojSw9JbFc8kOEjyflK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:2c:08:68:42:1c:4a:f7:69:47:75:0b:de:5f:3e:31:91:21: 5e:9a:37:98:0d:0e:88:5e:11:05:d7:93:9a:e9:b6:52:30:8b: 42:b1:b8:dc:64:b3:6d:ee:23:98:b7:48:a4:68:2f:b0:92:52: dd:54:ab:fc:ed:e8:00:a9:7e:5b:41:35:e2:5a:ec:7f:62:b7: 97:f9:21:68:dd:e7:d5:47:04:b5:1e:e3:1e:d5:41:ee:36:33: 9a:06:e6:85:43:cb:e9:b5:a4:29:8b:8b:06:5a:de:58:b2:de: 44:2c:16:63:67:1e:23:27:7a:ee:52:05:1f:34:b6:a6:ca:37: 70:63:72:53:49:31:68:a5:82:2b:48:30:9e:55:3b:d6:2f:ec: d3:f0:b6:f4:5d:de:19:6e:e4:4a:cd:e9:c5:02:b4:54:1f:b4: 04:5f:78:2b:0f:f2:e2:09:3a:07:16:85:c6:88:76:33:c8:05: a5:f0:c5:f3:2a:63:59:2f:cc:9f:20:77:5e:69:78:2c:e5:0a: 32:97:1d:ff:9d:85:c7:a5:ad:db:d7:39:50:30:e1:10:4c:f0: 31:bf:e6:28:94:c5:a7:59:ad:3a:ef:d6:be:d1:e4:e4:b8:99: 0b:13:28:52:86:ac:5c:7c:9a:a5:86:8a:4b:27:71:30:19:c4: 34:ff:1d:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwQTgxMTAvBgNVBAUTKDRBNkNENjczMTMxNUEyMzRCMEY0OTZDNTczQzkwRTEy M0M5Rjk0QUUwHhcNMjUwNDI1MDI0ODU5WhcNMjUwNTAyMDI0ODU5WjAYMRYwFAYD VQQDEw02ODBhZjgxYy01ZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yr7NioQP2AxEXWsRSQ/AMeM9XA1u0BG0Io40LbO8Hd9vohqBZhiDTKKDVDs 0y8nLRIUFBfZaKulq4FlkPQHr6XTN2yvjUtlVKlkdA8jrTFOwTGQhUxqJUIT9gHj 6eu/pqLgXAzl6aEu6K2V73tMkSpj4g2MFMy99NyAZ6j2nzh/Z0sXUbdqhZB4cVLi 7W5ZDQNQKyQhnlq1UEck69pe2kJZw0RRdt09q6mALiGEDDZ2I8lVbdWe445/a2dW DMRv9xL4n0M996CDt5puBCcO8QgGFhWUI4+2ATX4pRqMbSX0U6JstAt7e5MdPcHR 7YQ/VBEymcs8oazwzHoHGCxnMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDStCOrG aTSpamE6de+qiqD4B0RUMB8GA1UdIwQYMBaAFEps1nMTFaI0sPSWxXPJDhI8n5Su MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBBOC8wNUM5MjdFMkQ3 NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9qU3c5SmJGYzhrT0VqeWZs SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NteldjeE1Wb2pTdzlKYkZjOGtPRWp5ZmxLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBBOC8wNUM5MjdFMkQ3NkYxMUVEODg5RTM4MTJDNEY5QUUwMi9TbXpXY3hNVm9q U3c5SmJGYzhrT0VqeWZsSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvLAhoQhxK92lHdQveXz4xkSFemjeYDQ6IXhEF15Oa6bZSMItCsbjc ZLNt7iOYt0ikaC+wklLdVKv87egAqX5bQTXiWux/YreX+SFo3efVRwS1HuMe1UHu NjOaBuaFQ8vptaQpi4sGWt5Yst5ELBZjZx4jJ3ruUgUfNLamyjdwY3JTSTFopYIr SDCeVTvWL+zT8Lb0Xd4ZbuRKzenFArRUH7QEX3grD/LiCToHFoXGiHYzyAWl8MXz KmNZL8yfIHdeaXgs5Qoylx3/nYXHpa3b1zlQMOEQTPAxv+YolMWnWa0679a+0eTk uJkLEyhShqxcfJqlhopLJ3EwGcQ0/x1j -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:37 2025 by rpki-client