$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft File: PudBKv6HPx1FurYUcUoyAeNilpE.mft (raw, json) Hash identifier: b9kMfg2H8yvqX38O4o6RZ6TVXbSpH+4nR1TKoDnDYUg= Subject key identifier: FB:4E:67:39:C5:F3:09:6C:2C:7F:01:41:7E:5E:1A:82:E1:9B:7A:4C Authority key identifier: 3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 Certificate issuer: /CN=A91E3680/serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft Manifest number: 05A8 Signing time: Mon 28 Apr 2025 23:41:55 +0000 Manifest this update: Mon 28 Apr 2025 23:41:55 +0000 Manifest next update: Mon 05 May 2025 23:41:55 +0000 Files and hashes: 1: PudBKv6HPx1FurYUcUoyAeNilpE.crl (hash: RwNPF2tMhPKKu1z8AeGFCJirB+vn7J1/sqe0ORW+Vjw=) 2: B46FE2D0C5CA11EBB86D320BC4F9AE02.roa (hash: akcQJOcqn6Cqm1e0k8wvVS6O2vanCte0Cwevg6oh+R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 23:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3680, serialNumber=3EE7412AFE873F1D45BAB614714A3201E3629691 Validity Not Before: Apr 28 23:41:55 2025 GMT Not After : May 5 23:41:55 2025 GMT Subject: CN=68101243-41d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:25:80:41:fe:1e:50:30:7c:e0:6b:49:57: e7:8f:22:6a:28:2c:2f:46:a0:95:61:28:0d:17:34: 8c:15:4e:43:c0:d8:ee:dd:3c:b0:8a:84:52:43:32: 7e:b3:9f:5b:b6:f7:09:1f:06:88:69:f8:18:13:b0: 62:60:88:66:a6:e4:d4:29:eb:f3:db:7d:f7:80:35: 1e:3c:bb:0d:3f:db:c2:50:bf:82:bf:ce:75:fb:ce: 62:04:65:a0:ad:20:88:42:be:3d:95:df:e7:27:b4: 3f:38:a0:34:bd:73:f0:75:0b:cf:b8:0d:69:87:b4: da:77:25:24:42:d4:30:ef:a3:5a:f3:3b:25:e3:7a: 77:4c:3f:1c:47:c9:28:7f:af:7e:a8:1f:d6:4e:df: 77:1d:22:51:b6:af:da:af:0c:03:82:4b:4f:74:57: ce:cc:8b:7e:07:ae:13:0c:7d:a7:91:33:f7:a9:b2: 87:46:b0:0a:a7:c9:70:22:fa:b3:ed:fa:bd:2f:08: b3:a5:d9:8e:65:d3:f7:00:92:cb:5c:3f:79:21:52: 61:d7:33:db:2e:4e:ac:cb:ef:1c:81:3d:14:a6:70: 0f:99:90:3b:01:d3:3a:c6:ce:7b:c6:9b:69:fb:10: 11:aa:05:89:86:eb:e8:cd:b0:da:dc:97:32:2a:be: 98:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4E:67:39:C5:F3:09:6C:2C:7F:01:41:7E:5E:1A:82:E1:9B:7A:4C X509v3 Authority Key Identifier: keyid:3E:E7:41:2A:FE:87:3F:1D:45:BA:B6:14:71:4A:32:01:E3:62:96:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PudBKv6HPx1FurYUcUoyAeNilpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3680/D4991862C5C811EB890C0D0BC4F9AE02/PudBKv6HPx1FurYUcUoyAeNilpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:9a:d9:9a:87:85:19:c7:8c:6c:4a:1f:1d:a2:67:b3:53:b6: 2e:1e:f3:51:6a:7e:3d:7c:07:e4:60:8b:47:91:1b:e5:43:ab: 16:20:06:91:d3:df:5c:cf:23:7d:0b:db:a8:0b:92:cf:07:d2: b0:91:39:0e:7a:e2:30:b4:ca:78:c8:6b:1a:58:10:ab:39:a0: 0d:5d:29:0a:eb:70:be:5e:2b:a5:a8:07:2d:0d:7f:d1:48:01: 18:36:61:ca:81:d8:4c:fa:21:7a:8f:bc:49:21:82:95:56:a4: 1f:93:fb:4c:53:ab:e4:9d:79:a5:2b:8c:57:01:95:55:32:6f: 45:87:f5:18:bb:3b:0e:bc:78:f2:fe:9c:14:1b:0b:ae:6a:37: 19:d9:81:d9:ad:fc:0e:98:b5:ee:d9:60:f6:73:1a:00:6c:35: 71:de:fc:c6:24:7d:7d:90:73:ea:01:af:52:a4:62:da:10:8c: b9:d9:f7:45:27:59:fb:40:70:fb:9b:25:98:62:b6:27:3d:5c: ae:09:5a:6d:36:75:41:05:33:55:85:a1:18:e3:52:2b:ea:71: 98:9b:8d:b1:e1:f1:a9:1b:8b:5d:50:73:c8:34:ba:7a:a9:ca: 57:1a:dc:da:ab:3a:ca:20:e0:11:62:e8:36:80:d8:de:5e:a1: c2:5b:95:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM2ODAxMTAvBgNVBAUTKDNFRTc0MTJBRkU4NzNGMUQ0NUJBQjYxNDcxNEEzMjAx RTM2Mjk2OTEwHhcNMjUwNDI4MjM0MTU1WhcNMjUwNTA1MjM0MTU1WjAYMRYwFAYD VQQDEw02ODEwMTI0My00MWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyklgEH+HlAwfOBrSVfnjyJqKCwvRqCVYSgNFzSMFU5DwNju3TywioRSQzJ+ s59btvcJHwaIafgYE7BiYIhmpuTUKevz2333gDUePLsNP9vCUL+Cv851+85iBGWg rSCIQr49ld/nJ7Q/OKA0vXPwdQvPuA1ph7TadyUkQtQw76Na8zsl43p3TD8cR8ko f69+qB/WTt93HSJRtq/arwwDgktPdFfOzIt+B64TDH2nkTP3qbKHRrAKp8lwIvqz 7fq9LwizpdmOZdP3AJLLXD95IVJh1zPbLk6sy+8cgT0UpnAPmZA7AdM6xs57xptp +xARqgWJhuvozbDa3JcyKr6YsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtOZznF 8wlsLH8BQX5eGoLhm3pMMB8GA1UdIwQYMBaAFD7nQSr+hz8dRbq2FHFKMgHjYpaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzY4MC9ENDk5MTg2MkM1 QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4MUZ1cllVY1VveUFlTmls cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1ZEJLdjZIUHgxRnVyWVVjVW95QWVOaWxwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzY4MC9ENDk5MTg2MkM1QzgxMUVCODkwQzBEMEJDNEY5QUUwMi9QdWRCS3Y2SFB4 MUZ1cllVY1VveUFlTmlscEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFmtmah4UZx4xsSh8domezU7YuHvNRan49fAfkYItHkRvlQ6sWIAaR 099czyN9C9uoC5LPB9KwkTkOeuIwtMp4yGsaWBCrOaANXSkK63C+XiulqActDX/R SAEYNmHKgdhM+iF6j7xJIYKVVqQfk/tMU6vknXmlK4xXAZVVMm9Fh/UYuzsOvHjy /pwUGwuuajcZ2YHZrfwOmLXu2WD2cxoAbDVx3vzGJH19kHPqAa9SpGLaEIy52fdF J1n7QHD7myWYYrYnPVyuCVptNnVBBTNVhaEY41Ir6nGYm42x4fGpG4tdUHPINLp6 qcpXGtzaqzrKIOARYug2gNjeXqHCW5X+ -----END CERTIFICATE-----Generated at Tue Apr 29 05:21:32 2025 by rpki-client