$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: +f3qC98rMXmH43vONOcVHqJnSCQGXUyGi+ACmTnVBlI= Subject key identifier: 6C:88:B8:5F:6A:89:D6:EA:E2:AB:91:68:FC:3D:BE:FB:CC:71:2F:75 Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 026D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 0269 Signing time: Fri 25 Apr 2025 01:30:23 +0000 Manifest this update: Fri 25 Apr 2025 01:30:23 +0000 Manifest next update: Fri 02 May 2025 01:30:23 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: RhZrLKsPyk0s5z6BKi4pA4FTga34pKJ+6mxvNjft4gc=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: Apr 25 01:30:23 2025 GMT Not After : May 2 01:30:23 2025 GMT Subject: CN=680ae5af-e0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:61:a4:38:06:20:9a:66:25:62:ae:fa:a8: 05:7b:15:07:d6:ce:85:60:8b:c7:c0:09:23:46:a4: e8:83:e6:d6:bd:6c:c2:c4:68:b4:78:6d:28:c3:66: ec:1d:17:d1:0c:b3:38:8e:8b:c8:51:1a:68:cf:6a: 66:24:1d:56:34:cd:bf:2f:74:74:d8:0b:ed:69:8f: 4d:d4:c8:75:94:43:2b:49:1a:e3:9a:79:13:f1:bb: d6:f3:37:d8:a5:55:d8:67:a3:69:02:1b:f7:79:c0: 10:e2:84:f4:3c:49:13:03:05:9f:23:85:03:60:11: ee:f8:44:79:6b:99:5b:df:26:8e:f9:1e:20:1d:60: bc:62:f3:df:6e:00:4e:e0:86:3f:9d:7e:56:be:f5: c3:6d:b5:40:81:32:e0:dd:65:be:fa:52:02:42:cc: 6f:0c:c8:61:bd:21:55:57:22:59:b2:25:32:3f:3d: 93:54:38:20:d9:95:07:dd:82:62:ea:bb:27:59:5a: 13:9f:6e:7a:16:5f:99:17:db:45:83:cb:30:57:5a: 91:e1:b6:6d:2b:fd:60:75:b9:43:b7:a2:55:f4:ea: e3:b1:aa:32:de:ff:c0:75:be:85:3f:29:14:c1:43: ec:88:26:e5:c7:87:b4:bb:1a:60:5c:f4:d4:95:56: 81:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:88:B8:5F:6A:89:D6:EA:E2:AB:91:68:FC:3D:BE:FB:CC:71:2F:75 X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e9:19:3c:9a:02:a5:68:a8:8d:9f:ef:ff:ba:10:13:66:17: 7d:67:0a:59:ec:c6:ce:be:a2:18:be:98:01:d2:75:01:4a:f9: aa:cb:76:41:5e:3c:ca:af:52:0a:06:80:12:a8:4d:74:24:87: 23:c2:1e:a6:e4:3d:3d:db:09:c9:9e:ce:28:47:c6:c8:d3:ab: db:27:37:64:d0:35:a3:3c:e9:09:6a:35:98:6b:4b:67:78:8c: f5:8e:b2:0e:28:67:27:a4:d0:b3:1a:83:2d:6d:e0:32:f5:dc: ea:90:e1:5a:6e:03:cd:95:0a:83:18:8d:9c:63:03:d6:06:d0: 1c:0b:f4:7e:c3:59:2a:f5:b1:5a:30:e6:63:41:09:44:b1:9f: fd:90:0a:ef:0b:b1:b2:11:dc:2a:5c:21:9b:21:93:1f:a2:d3: bd:50:eb:b6:0f:7d:be:8a:04:34:da:25:70:10:3d:bd:6a:f1: 50:1a:17:30:c3:75:af:48:be:5c:72:ea:ff:f5:2a:8c:51:50: 5a:0c:81:71:fd:5d:8b:b2:e4:4b:4b:48:d5:6b:d1:23:51:b8: e2:b6:7d:82:2f:22:d5:2e:40:98:ed:47:a4:63:08:9e:bd:86: 46:d1:84:93:b6:bd:dc:d2:4d:12:6c:1b:60:75:a2:a7:e4:67: e4:df:1c:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjUwNDI1MDEzMDIzWhcNMjUwNTAyMDEzMDIzWjAYMRYwFAYD VQQDEw02ODBhZTVhZi1lMGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOJhpDgGIJpmJWKu+qgFexUH1s6FYIvHwAkjRqTog+bWvWzCxGi0eG0ow2bs HRfRDLM4jovIURpoz2pmJB1WNM2/L3R02AvtaY9N1Mh1lEMrSRrjmnkT8bvW8zfY pVXYZ6NpAhv3ecAQ4oT0PEkTAwWfI4UDYBHu+ER5a5lb3yaO+R4gHWC8YvPfbgBO 4IY/nX5WvvXDbbVAgTLg3WW++lICQsxvDMhhvSFVVyJZsiUyPz2TVDgg2ZUH3YJi 6rsnWVoTn256Fl+ZF9tFg8swV1qR4bZtK/1gdblDt6JV9Orjsaoy3v/Adb6FPykU wUPsiCblx4e0uxpgXPTUlVaBqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyIuF9q idbq4quRaPw9vvvMcS91MB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx6Rk8mgKlaKiNn+//uhATZhd9ZwpZ7MbOvqIYvpgB0nUBSvmqy3ZB XjzKr1IKBoASqE10JIcjwh6m5D092wnJns4oR8bI06vbJzdk0DWjPOkJajWYa0tn eIz1jrIOKGcnpNCzGoMtbeAy9dzqkOFabgPNlQqDGI2cYwPWBtAcC/R+w1kq9bFa MOZjQQlEsZ/9kArvC7GyEdwqXCGbIZMfotO9UOu2D32+igQ02iVwED29avFQGhcw w3WvSL5ccur/9SqMUVBaDIFx/V2LsuRLS0jVa9EjUbjitn2CLyLVLkCY7UekYwie vYZG0YSTtr3c0k0SbBtgdaKn5Gfk3xx0 -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:57 2025 by rpki-client