$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json) Hash identifier: VG7XGpaQVYu0GrNHiiIBnIGBC3trgjFqK5Zl0+kx2/4= Subject key identifier: 37:3B:5A:5D:BE:B4:7C:E1:8F:06:39:4F:3C:57:EA:4C:FE:E5:03:3B Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 0338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft Manifest number: 030F Signing time: Fri 25 Apr 2025 01:05:42 +0000 Manifest this update: Fri 25 Apr 2025 01:05:41 +0000 Manifest next update: Fri 02 May 2025 01:05:41 +0000 Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: q1Rz0sRBKDiLGRCwBb+oY+nx67qwOY8iAZVo4svwQQY=) 2: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: qiPRAo39Nv8HoFoTbRrwivY4p7lSrXMxurkPZTZZGmo=) 3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: +6Qn9fMMN2JTLH3JCNnMkYnKTJVe5wXPrggbGe55SKw=) 4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: tdNvvtBtSkEXNP3bq9ounB53zb+u6cTArykXyU3hS/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Apr 25 01:05:41 2025 GMT Not After : May 2 01:05:41 2025 GMT Subject: CN=680adfe6-6616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:56:36:bf:22:68:06:80:df:a2:3e:20:40: 71:a2:58:5d:4a:03:ca:14:43:9f:a2:12:a7:45:e5: 87:36:bf:44:87:0b:2a:1c:6c:20:23:ae:1f:f7:49: a1:87:6a:76:74:29:12:22:d2:06:5f:a1:85:b7:94: c2:46:9d:f3:50:1a:54:db:2f:e0:3d:b7:bb:05:c6: d0:e4:b6:8f:41:de:49:ca:06:36:c6:53:71:95:ae: c6:a5:74:4e:f8:b9:41:14:0a:dc:62:65:3c:d9:70: 6c:d4:6c:49:21:02:e6:f5:4f:cc:93:b5:15:45:e1: 32:9a:09:fb:27:2b:9b:6a:a7:4b:98:d0:e7:4d:ed: 3f:79:bb:ad:f1:dd:4b:21:43:f5:18:85:db:75:25: 23:cd:86:19:a5:61:c9:f2:bd:3c:01:ff:ff:60:8c: da:c8:fb:0c:79:83:1a:d6:ef:a4:9c:85:3c:d6:56: 97:70:69:9c:a3:5b:fa:04:53:fc:05:cc:c5:ab:18: 81:d2:dd:01:0c:cf:8e:2e:1a:87:e6:0a:91:b4:fa: 56:66:16:4a:81:63:b2:c6:4d:ef:07:57:85:dc:b4: ee:20:bf:b1:e2:8c:99:b7:84:3e:0f:a5:9c:bd:a2: 1c:62:a1:d4:df:82:61:d7:d7:12:74:32:8c:bd:35: f2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3B:5A:5D:BE:B4:7C:E1:8F:06:39:4F:3C:57:EA:4C:FE:E5:03:3B X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ac:e6:c2:59:a1:9a:84:89:f8:81:da:9d:56:58:4d:01:c0: a5:6d:c5:50:2a:7f:65:f8:e5:5f:e3:ce:f4:46:8d:61:bb:ca: 6e:76:7c:43:34:05:c3:00:a0:31:57:cc:8d:04:97:f0:41:d3: b4:1f:4c:37:9f:97:9b:e7:13:d2:ef:6d:97:61:d3:ee:c0:95: 49:4d:0f:e6:b3:f5:39:62:b6:a5:dc:f6:53:a0:ee:12:25:2d: 68:2a:ce:9a:6a:16:24:ca:3a:38:4b:a1:df:14:40:ad:f1:7f: 34:8d:44:05:86:66:8b:a4:f0:2c:ed:61:ea:35:c2:51:d9:b7: b5:21:e1:a1:7c:6f:a9:ed:68:17:b4:7c:96:74:33:c6:fe:43: 4c:65:16:fd:9f:fd:8e:33:fc:bf:0b:47:ef:c8:40:5b:7d:86: 57:0b:a0:a8:f5:f7:11:5d:c5:5a:3a:86:8d:2b:8a:39:a1:f2: 5e:9f:eb:b6:ec:67:18:8c:a8:b5:a0:e0:9d:b1:d4:b4:73:37: 00:39:d2:d6:c2:3b:4c:e8:71:6f:cc:64:77:24:69:f7:11:44: 55:54:33:36:a8:fc:de:78:9d:53:42:60:dc:64:69:a0:ff:42: c7:1f:ac:6b:82:87:f3:fa:a8:e9:05:80:75:77:9b:d9:74:18: 5b:3c:79:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwNDI1MDEwNTQxWhcNMjUwNTAyMDEwNTQxWjAYMRYwFAYD VQQDEw02ODBhZGZlNi02NjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM5WNr8iaAaA36I+IEBxolhdSgPKFEOfohKnReWHNr9EhwsqHGwgI64f90mh h2p2dCkSItIGX6GFt5TCRp3zUBpU2y/gPbe7BcbQ5LaPQd5JygY2xlNxla7GpXRO +LlBFArcYmU82XBs1GxJIQLm9U/Mk7UVReEymgn7JyubaqdLmNDnTe0/ebut8d1L IUP1GIXbdSUjzYYZpWHJ8r08Af//YIzayPsMeYMa1u+knIU81laXcGmco1v6BFP8 BczFqxiB0t0BDM+OLhqH5gqRtPpWZhZKgWOyxk3vB1eF3LTuIL+x4oyZt4Q+D6Wc vaIcYqHU34Jh19cSdDKMvTXy3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDc7Wl2+ tHzhjwY5TzxX6kz+5QM7MB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl aXYyaWpDenFZVkFTY0RoZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBerObCWaGahIn4gdqdVlhNAcClbcVQKn9l+OVf4870Ro1hu8pudnxD NAXDAKAxV8yNBJfwQdO0H0w3n5eb5xPS722XYdPuwJVJTQ/ms/U5Yral3PZToO4S JS1oKs6aahYkyjo4S6HfFECt8X80jUQFhmaLpPAs7WHqNcJR2be1IeGhfG+p7WgX tHyWdDPG/kNMZRb9n/2OM/y/C0fvyEBbfYZXC6Co9fcRXcVaOoaNK4o5ofJen+u2 7GcYjKi1oOCdsdS0czcAOdLWwjtM6HFvzGR3JGn3EURVVDM2qPzeeJ1TQmDcZGmg /0LHH6xrgofz+qjpBYB1d5vZdBhbPHna -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:33 2025 by rpki-client