$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json) Hash identifier: uDNjMFAQtxzOGHT2Lhj9P/uONlj6gbe5Zy8R/DfA5OI= Subject key identifier: 64:E5:9D:FD:23:36:BF:70:D9:CB:C5:D0:46:3B:EF:7D:D4:E5:49:B5 Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft Manifest number: 06BC Signing time: Thu 24 Apr 2025 21:55:10 +0000 Manifest this update: Thu 24 Apr 2025 21:55:09 +0000 Manifest next update: Thu 01 May 2025 21:55:09 +0000 Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: vi34oHH3LjBsAdz2h+9adUnxaDeqjpNjXP2QSe3u1UA=) 2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: PFrV9NPTBknSjdmlAsxffe/x4T1O4oXZWiMBMdvbqVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Validity Not Before: Apr 24 21:55:09 2025 GMT Not After : May 1 21:55:09 2025 GMT Subject: CN=680ab33d-aa96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:61:d3:0e:e2:65:be:8a:cf:66:b6:73:b7:c9: bb:a5:02:fc:68:98:6d:99:06:49:21:f2:1e:75:6a: 5f:43:7c:b6:1a:b9:56:04:6c:53:95:d5:77:93:4f: 86:e4:3d:9e:b4:39:1b:d2:81:27:b6:19:0e:b7:10: b6:8b:dd:ee:3d:00:33:a5:84:8c:22:ba:08:26:4d: 6c:fa:32:01:ee:a9:f2:8f:81:f4:39:6d:32:cf:54: 9f:2e:33:4a:bc:ab:04:d0:81:66:ab:a2:d0:b6:e5: 6d:bc:c9:db:eb:16:7a:67:05:bf:ba:3d:f5:0b:14: fe:17:92:07:b6:d5:9f:1b:fa:83:0a:57:92:ac:89: 1e:de:56:93:ce:7d:b9:22:52:73:50:f9:7d:fd:ec: 11:50:5d:7a:fb:af:27:65:96:5d:9f:f1:be:e6:d7: d2:cc:00:87:aa:aa:c2:85:d0:29:f0:c9:23:a2:58: b0:12:19:e3:c2:b9:47:3d:dd:8c:5f:e9:b4:01:fc: 8f:97:bd:7c:0c:5b:a9:ff:b8:0d:e8:f6:f8:55:e4: 1b:4c:93:09:95:e1:37:ff:fc:a5:d4:fe:fe:d0:ea: 5c:f2:af:2e:f0:75:02:81:f8:48:15:1f:83:6c:08: af:26:50:fd:5b:71:f6:7d:a7:4c:1b:d0:bf:c2:1b: 10:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E5:9D:FD:23:36:BF:70:D9:CB:C5:D0:46:3B:EF:7D:D4:E5:49:B5 X509v3 Authority Key Identifier: keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:16:01:3d:b8:09:2a:fa:fc:07:c3:75:57:73:a0:90:47:ff: 4b:dd:3d:bb:ca:5c:51:ea:ed:b0:70:a7:0b:15:6b:67:2b:22: ec:8a:1f:84:93:d3:d1:b6:7b:31:41:f2:07:dd:14:57:74:48: 59:b8:c5:bd:b7:e8:04:c8:7d:90:de:db:37:09:b5:11:69:cc: a8:5d:25:cc:b5:04:01:51:9f:82:db:7e:13:f4:fe:15:1f:3f: f4:ef:00:da:d9:73:9c:bd:c9:05:98:83:ad:46:8f:c2:52:e0: dd:11:89:77:17:4c:37:36:1f:fc:c7:fd:94:03:71:77:77:84: 33:a0:bf:92:70:42:1a:3d:10:6a:43:ff:bf:58:56:a1:48:70: 31:57:85:47:47:45:9e:3d:d8:bc:e7:92:b0:21:41:bf:61:1b: ad:8e:f7:86:43:4f:45:99:8a:70:dc:cf:83:80:82:0c:04:72: 95:8d:d4:6b:a1:50:52:42:fe:6c:ac:50:8f:31:17:e0:a0:77: 62:08:ea:35:51:53:29:4f:5c:d7:78:12:89:42:d1:58:5b:59: 3c:30:c9:45:c2:2f:b3:48:24:5f:6c:2c:e9:e1:4e:b0:9a:82: 4e:2d:ff:7d:42:27:4b:ff:0e:f1:5b:58:82:d8:9a:13:52:3c: 69:fb:f0:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG MjkyRDg2NkEwHhcNMjUwNDI0MjE1NTA5WhcNMjUwNTAxMjE1NTA5WjAYMRYwFAYD VQQDEw02ODBhYjMzZC1hYTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmHTDuJlvorPZrZzt8m7pQL8aJhtmQZJIfIedWpfQ3y2GrlWBGxTldV3k0+G 5D2etDkb0oEnthkOtxC2i93uPQAzpYSMIroIJk1s+jIB7qnyj4H0OW0yz1SfLjNK vKsE0IFmq6LQtuVtvMnb6xZ6ZwW/uj31CxT+F5IHttWfG/qDCleSrIke3laTzn25 IlJzUPl9/ewRUF16+68nZZZdn/G+5tfSzACHqqrChdAp8MkjoliwEhnjwrlHPd2M X+m0AfyPl718DFup/7gN6Pb4VeQbTJMJleE3//yl1P7+0Opc8q8u8HUCgfhIFR+D bAivJlD9W3H2fadMG9C/whsQGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTlnf0j Nr9w2cvF0EY7733U5Um1MB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2 RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR SU1YeDkyODdQZEh5a3RobW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSFgE9uAkq+vwHw3VXc6CQR/9L3T27ylxR6u2wcKcLFWtnKyLsih+E k9PRtnsxQfIH3RRXdEhZuMW9t+gEyH2Q3ts3CbURacyoXSXMtQQBUZ+C234T9P4V Hz/07wDa2XOcvckFmIOtRo/CUuDdEYl3F0w3Nh/8x/2UA3F3d4QzoL+ScEIaPRBq Q/+/WFahSHAxV4VHR0WePdi855KwIUG/YRutjveGQ09FmYpw3M+DgIIMBHKVjdRr oVBSQv5srFCPMRfgoHdiCOo1UVMpT1zXeBKJQtFYW1k8MMlFwi+zSCRfbCzp4U6w moJOLf99QidL/w7xW1iC2JoTUjxp+/Al -----END CERTIFICATE-----Generated at Sat Apr 26 03:37:18 2025 by rpki-client