$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft File: 71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json) Hash identifier: czXwrl8X3icinr21/z8diqAe7d9oogOIcsdiTNV3Q54= Subject key identifier: BB:DA:01:42:9F:94:0D:8C:A6:D8:56:8B:A1:DA:0B:82:83:16:4F:F9 Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 Certificate issuer: /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Certificate serial: 0553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft Manifest number: 0549 Signing time: Thu 24 Apr 2025 23:14:09 +0000 Manifest this update: Thu 24 Apr 2025 23:14:08 +0000 Manifest next update: Thu 01 May 2025 23:14:08 +0000 Files and hashes: 1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: 6XTRT3xDKvcvkmKVQux68Fyh9x81XI6h/DaADkspdZU=) 2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: QKEbNflHaMtrKPpklQ7n3QZ+8DscnEW1cfHLjHUSUv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Validity Not Before: Apr 24 23:14:08 2025 GMT Not After : May 1 23:14:08 2025 GMT Subject: CN=680ac5c1-8ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:98:38:4b:fd:3b:3a:d7:08:a0:4d:bc:6e: d4:ab:d6:7b:f0:4b:e7:86:a0:da:18:47:80:0a:b9: 42:db:ac:34:0f:55:ee:88:c5:ff:fa:cc:63:7f:a2: 9f:e6:9d:22:bf:eb:ea:49:e6:fb:f6:a7:61:90:5e: a4:f8:e2:7e:2b:41:cd:d0:e5:f6:90:b2:0d:aa:e4: a8:a2:a1:b2:c8:a3:5a:68:46:4c:01:44:47:92:26: fe:30:12:bc:42:92:c1:d4:ae:f6:85:45:e2:a9:71: d9:c8:34:b5:2e:44:e4:e8:d4:d0:d3:d4:ac:3c:bc: 37:ae:fd:83:10:e6:c5:43:73:08:32:a9:7e:29:b2: 74:de:80:64:ce:ef:89:95:51:fc:ce:6f:fc:59:c5: 8f:1a:71:66:b4:4f:dc:8e:cd:7f:a2:a9:ac:cb:cb: 03:2c:ea:31:b5:9c:0b:5a:13:d5:98:94:ff:c6:43: 48:32:4f:92:95:80:62:50:9a:12:0b:a4:c7:29:9b: 4b:05:cb:d3:dc:7d:f5:a1:14:13:db:3b:aa:b6:01: 18:dd:03:ff:b9:8a:ad:ca:7b:80:68:2e:a6:42:5b: b3:2c:3d:bd:61:5e:fd:38:70:3b:c8:4c:3a:25:ad: a3:6b:6d:32:cc:54:bb:d8:3b:61:13:39:76:63:0f: 2f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DA:01:42:9F:94:0D:8C:A6:D8:56:8B:A1:DA:0B:82:83:16:4F:F9 X509v3 Authority Key Identifier: keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:29:07:5e:fa:36:f3:92:7e:91:05:1c:d4:1f:c5:e5:72:09: de:c2:66:0d:8c:1c:47:86:aa:1f:5f:8c:32:04:75:38:d6:78: 47:28:fb:f1:3c:55:f6:05:8a:15:43:84:4f:c8:0b:48:d3:7f: e8:cd:b3:fd:53:bb:da:b9:75:fc:b4:5b:46:63:ce:cc:1d:da: d0:f0:57:a1:97:e6:0c:50:f4:2f:35:55:01:cb:84:d5:03:39: fd:82:39:72:89:9f:8c:4b:6a:a0:0c:ff:02:84:5c:c8:bc:92: 4b:55:61:d2:cb:e6:10:4b:e7:23:97:f1:e1:dc:5a:60:12:f8: cb:fe:c0:e6:6e:66:f5:84:59:fa:85:f5:80:b2:52:c4:63:2b: 71:59:2a:08:82:f7:44:8b:40:ac:fc:f0:3b:03:e8:d9:df:13: e0:5c:cc:ac:f2:df:79:32:3d:5d:fc:37:2c:26:bd:cf:83:1b: 2a:c1:2f:d4:c1:9f:68:17:79:ce:0c:92:d5:3a:70:12:2d:71: 0d:23:5c:c7:33:6c:1b:8f:14:65:cd:f1:4a:87:b7:d5:ef:3a: 10:36:83:e7:61:e2:78:70:bb:68:da:eb:b9:6d:0c:6e:3c:07: 2a:26:7f:35:e8:b7:71:ee:d9:b7:f4:00:28:e7:d6:30:30:f5: 9c:53:87:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFMTkxMTAvBgNVBAUTKEVGNTAwMUE3NUI1ODA1OUQ5M0E1RDMxNjM4NTRCNDZB RDY2QTlFQzgwHhcNMjUwNDI0MjMxNDA4WhcNMjUwNTAxMjMxNDA4WjAYMRYwFAYD VQQDEw02ODBhYzVjMS04Y2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1L+YOEv9OzrXCKBNvG7Uq9Z78EvnhqDaGEeACrlC26w0D1XuiMX/+sxjf6Kf 5p0iv+vqSeb79qdhkF6k+OJ+K0HN0OX2kLINquSooqGyyKNaaEZMAURHkib+MBK8 QpLB1K72hUXiqXHZyDS1LkTk6NTQ09SsPLw3rv2DEObFQ3MIMql+KbJ03oBkzu+J lVH8zm/8WcWPGnFmtE/cjs1/oqmsy8sDLOoxtZwLWhPVmJT/xkNIMk+SlYBiUJoS C6THKZtLBcvT3H31oRQT2zuqtgEY3QP/uYqtynuAaC6mQluzLD29YV79OHA7yEw6 Ja2ja20yzFS72DthEzl2Yw8vVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvaAUKf lA2MpthWi6HaC4KDFk/5MB8GA1UdIwQYMBaAFO9QAadbWAWdk6XTFjhUtGrWap7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEUxOS83MDcxNDY0RUVE RUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJaMlRwZE1XT0ZTMGF0WnFu c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcxQUJwMXRZQloyVHBkTVdPRlMwYXRacW5zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEUxOS83MDcxNDY0RUVERUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJa MlRwZE1XT0ZTMGF0WnFuc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaKQde+jbzkn6RBRzUH8XlcgnewmYNjBxHhqofX4wyBHU41nhHKPvx PFX2BYoVQ4RPyAtI03/ozbP9U7vauXX8tFtGY87MHdrQ8Fehl+YMUPQvNVUBy4TV Azn9gjlyiZ+MS2qgDP8ChFzIvJJLVWHSy+YQS+cjl/Hh3FpgEvjL/sDmbmb1hFn6 hfWAslLEYytxWSoIgvdEi0Cs/PA7A+jZ3xPgXMys8t95Mj1d/DcsJr3PgxsqwS/U wZ9oF3nODJLVOnASLXENI1zHM2wbjxRlzfFKh7fV7zoQNoPnYeJ4cLto2uu5bQxu PAcqJn816Ldx7tm39AAo59YwMPWcU4eK -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:23 2025 by rpki-client