$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: VJ7u+nGCpFc/1siGGL4FGBKepNzDE3m+uW8PzsH3qVc= Subject key identifier: C1:C1:47:B3:97:A5:2B:B9:A8:A1:C1:D3:E9:3C:EC:C5:74:E7:CE:5E Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 3475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 3475 Signing time: Thu 24 Apr 2025 14:35:12 +0000 Manifest this update: Thu 24 Apr 2025 14:35:12 +0000 Manifest next update: Thu 01 May 2025 14:35:12 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: Rsyt56fynoCGf6IXMc5dzBkbeBhThA7qQd/TQAQBRXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13429 (0x3475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Apr 24 14:35:12 2025 GMT Not After : May 1 14:35:12 2025 GMT Subject: CN=680a4c20-5eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:57:a5:b0:5f:83:ba:5b:16:b0:50:40:22: c6:51:e6:90:a0:e3:a3:e3:31:06:10:d7:d5:ac:81: 86:36:03:4a:bc:41:f4:ba:b6:42:fe:f1:b1:63:80: 37:99:ea:6d:81:14:71:c2:ca:d1:cb:da:e5:9d:65: 72:87:58:cc:a7:fb:8d:4c:d9:06:57:8e:fe:23:4d: d3:e2:a8:68:94:ec:69:b3:e5:de:04:0a:c9:9b:b8: dc:ad:5a:f3:4f:c5:16:ae:43:95:e2:de:48:0c:7a: aa:e4:6c:8e:d7:5b:26:23:eb:ed:d6:e3:f1:2d:e8: dc:d1:43:66:ce:e3:fc:73:2a:36:5e:d8:94:29:f4: 80:b4:ff:8e:81:66:e6:1e:8d:7f:4e:06:79:39:d2: 21:71:56:31:db:5e:bf:3d:b6:92:35:99:2c:92:a8: e0:d9:66:c7:3f:b5:5a:d9:66:8b:75:12:87:fb:ec: c3:63:4f:b1:05:90:f0:2b:a7:81:25:a5:ed:46:d5: d2:c4:11:1f:d4:24:03:27:6f:17:fb:0c:87:90:66: f5:f6:18:9e:98:64:7e:9f:20:7e:07:12:d7:49:7a: c8:23:38:9a:19:6c:b2:2a:f9:b1:4a:80:45:d5:f7: b7:a4:7c:67:18:eb:4c:7e:42:83:9b:98:b4:d6:56: b8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C1:47:B3:97:A5:2B:B9:A8:A1:C1:D3:E9:3C:EC:C5:74:E7:CE:5E X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:7b:ba:68:1e:93:e6:7c:c8:df:1f:a6:85:43:f4:02:5f:4c: 15:f4:31:12:f0:3a:4f:57:cb:0b:8e:28:83:52:42:b9:5b:32: 09:c4:54:96:9b:76:5a:9a:98:30:8f:1b:2d:3e:6d:d1:bf:f3: de:46:d9:34:ac:f7:f4:19:06:93:67:14:51:45:9c:34:0d:35: 75:59:89:01:87:b7:89:12:05:0e:19:84:b2:4d:db:48:7f:20: 4c:0f:97:a7:c5:ff:70:4c:a3:51:7a:c7:6d:eb:30:f4:7a:78: 31:9f:f0:17:7f:22:d1:3b:6a:e7:a9:a1:d9:1e:9b:14:6f:d7: 32:e2:89:95:f0:bb:28:1a:41:3c:51:7a:81:ea:d2:fa:e7:52: fe:0a:a9:ce:18:5b:a3:47:31:69:17:af:32:90:cf:39:01:5d: 3c:a7:e6:89:72:1f:01:62:13:82:f5:78:c5:b2:65:a3:6f:9d: 9d:4e:77:6a:db:0b:0c:3a:8b:a9:41:9f:82:25:a5:1f:37:52: 32:81:44:00:97:44:d3:bc:4e:eb:be:71:c2:42:e6:23:30:e8: 40:91:38:92:4c:14:4c:ad:b2:8a:26:92:21:ad:14:02:6f:42: ab:34:4f:77:a6:7a:50:1d:4f:a6:73:e4:34:d4:79:14:1b:a1: dd:85:98:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjUwNDI0MTQzNTEyWhcNMjUwNTAxMTQzNTEyWjAYMRYwFAYD VQQDEw02ODBhNGMyMC01ZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4BXpbBfg7pbFrBQQCLGUeaQoOOj4zEGENfVrIGGNgNKvEH0urZC/vGxY4A3 meptgRRxwsrRy9rlnWVyh1jMp/uNTNkGV47+I03T4qholOxps+XeBArJm7jcrVrz T8UWrkOV4t5IDHqq5GyO11smI+vt1uPxLejc0UNmzuP8cyo2XtiUKfSAtP+OgWbm Ho1/TgZ5OdIhcVYx216/PbaSNZkskqjg2WbHP7Va2WaLdRKH++zDY0+xBZDwK6eB JaXtRtXSxBEf1CQDJ28X+wyHkGb19hiemGR+nyB+BxLXSXrIIziaGWyyKvmxSoBF 1fe3pHxnGOtMfkKDm5i01la4lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHBR7OX pSu5qKHB0+k87MV0585eMB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARe7poHpPmfMjfH6aFQ/QCX0wV9DES8DpPV8sLjiiDUkK5WzIJxFSW m3ZampgwjxstPm3Rv/PeRtk0rPf0GQaTZxRRRZw0DTV1WYkBh7eJEgUOGYSyTdtI fyBMD5enxf9wTKNResdt6zD0engxn/AXfyLRO2rnqaHZHpsUb9cy4omV8LsoGkE8 UXqB6tL651L+CqnOGFujRzFpF68ykM85AV08p+aJch8BYhOC9XjFsmWjb52dTndq 2wsMOoupQZ+CJaUfN1IygUQAl0TTvE7rvnHCQuYjMOhAkTiSTBRMrbKKJpIhrRQC b0KrNE93pnpQHU+mc+Q01HkUG6HdhZh/ -----END CERTIFICATE-----Generated at Sat Apr 26 05:39:42 2025 by rpki-client