$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: KPz9Bl4XoHe6vXpjiOt3+M4bA9knV7zC/qDeTlMvhqI= Subject key identifier: 00:D2:75:9B:98:FD:AB:5D:D7:C9:50:29:9E:B5:7B:34:00:C8:FB:F9 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 0154 Signing time: Fri 25 Apr 2025 03:38:02 +0000 Manifest this update: Fri 25 Apr 2025 03:38:01 +0000 Manifest next update: Fri 02 May 2025 03:38:01 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: AGhPBm8ka25VEyODLQOlTr8euJm8RWJaErOT2BorKPo=) 2: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: o6iFpFIV0jtxY3uECfavGNZC5f2SO5jee3QS3JMuNlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Apr 25 03:38:01 2025 GMT Not After : May 2 03:38:01 2025 GMT Subject: CN=680b0399-2d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:51:53:5a:c7:6c:ef:a0:0f:47:69:38:88: 06:c3:1c:4d:80:6b:74:89:d6:d5:aa:4c:2e:45:61: 8e:84:7e:17:9a:10:73:2a:ba:45:05:02:57:3b:45: fb:08:38:de:7b:d2:96:af:9f:00:aa:3a:ae:4f:7a: 7d:4f:bf:8a:5f:10:f8:4a:5c:cf:f6:85:81:14:11: 30:5d:df:f0:a8:c0:a4:b2:d0:3e:c3:b5:1a:65:84: b8:90:53:ea:e1:87:f2:f8:b6:5f:58:74:9e:a5:df: d1:ed:dd:a1:1e:9f:6e:71:17:61:94:28:34:28:c9: 38:b9:ca:c0:51:4d:9e:da:78:1a:33:c5:34:0f:c0: 06:ab:5e:95:39:62:af:df:5e:94:09:4a:0a:5b:6a: 62:58:c7:c1:cd:b6:b0:33:c9:7c:a8:67:6e:b4:e5: f1:82:55:15:24:72:19:ca:bd:7f:8b:db:46:3d:ab: 35:4c:8b:64:e4:59:fa:94:20:6c:ce:9a:61:d3:82: c8:72:82:6e:db:eb:8e:99:a0:86:96:36:b4:61:94: 57:bf:53:3d:7b:a7:00:28:9b:38:a6:e2:ea:82:cd: a0:b6:ee:2e:39:63:1f:55:19:3d:e0:1a:a5:b0:c3: c0:42:71:dd:6a:fe:b2:bf:77:32:3c:73:45:7f:0c: 90:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D2:75:9B:98:FD:AB:5D:D7:C9:50:29:9E:B5:7B:34:00:C8:FB:F9 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:80:ab:d3:e6:82:64:ed:bf:a2:cc:ed:8a:b4:c5:b8:9e:08: 74:73:b4:70:9f:da:f0:89:78:11:96:89:4a:f0:81:0e:f9:55: a4:f5:f4:89:ac:e2:b0:25:39:9c:f1:71:1f:60:f8:ce:db:8d: 92:e2:e2:62:bb:ac:ad:4e:0b:cb:54:1f:2d:f9:70:1b:c1:0e: 8b:9e:0e:94:09:25:13:72:58:39:a7:19:43:06:9a:af:c1:dc: 07:bd:cc:3f:84:74:fa:9e:b9:01:03:56:73:be:fd:8d:74:dd: 0d:fc:9e:e9:9a:fb:1e:b9:03:fb:bb:de:e4:db:fb:01:90:5c: 12:fe:24:8f:15:4b:e5:56:04:68:5e:f1:64:18:9d:c6:ff:03: fe:7e:19:2e:42:19:bb:54:5f:d9:76:93:98:8c:c8:00:7c:37: 3f:9a:06:e2:af:77:d2:61:a8:e1:71:f8:02:75:6e:f7:09:30: 2d:81:b5:59:ca:97:31:f2:f0:ec:5d:a8:d0:c0:1c:41:43:fb: c6:12:0b:26:6c:ab:88:76:2e:f5:7f:7b:e8:b8:a3:92:ca:77: 79:fa:7c:59:d6:40:91:87:e9:dc:e6:9c:cc:12:50:4f:ad:4d: 7d:4e:8f:96:1b:71:2d:18:a3:df:6c:b3:aa:77:d7:15:02:ca: 53:a2:15:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUwNDI1MDMzODAxWhcNMjUwNTAyMDMzODAxWjAYMRYwFAYD VQQDEw02ODBiMDM5OS0yZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2BRU1rHbO+gD0dpOIgGwxxNgGt0idbVqkwuRWGOhH4XmhBzKrpFBQJXO0X7 CDjee9KWr58AqjquT3p9T7+KXxD4SlzP9oWBFBEwXd/wqMCkstA+w7UaZYS4kFPq 4Yfy+LZfWHSepd/R7d2hHp9ucRdhlCg0KMk4ucrAUU2e2ngaM8U0D8AGq16VOWKv 316UCUoKW2piWMfBzbawM8l8qGdutOXxglUVJHIZyr1/i9tGPas1TItk5Fn6lCBs zpph04LIcoJu2+uOmaCGlja0YZRXv1M9e6cAKJs4puLqgs2gtu4uOWMfVRk94Bql sMPAQnHdav6yv3cyPHNFfwyQEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADSdZuY /atd18lQKZ61ezQAyPv5MB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZgKvT5oJk7b+izO2KtMW4ngh0c7Rwn9rwiXgRlolK8IEO+VWk9fSJ rOKwJTmc8XEfYPjO242S4uJiu6ytTgvLVB8t+XAbwQ6Lng6UCSUTclg5pxlDBpqv wdwHvcw/hHT6nrkBA1Zzvv2NdN0N/J7pmvseuQP7u97k2/sBkFwS/iSPFUvlVgRo XvFkGJ3G/wP+fhkuQhm7VF/ZdpOYjMgAfDc/mgbir3fSYajhcfgCdW73CTAtgbVZ ypcx8vDsXajQwBxBQ/vGEgsmbKuIdi71f3vouKOSynd5+nxZ1kCRh+nc5pzMElBP rU19To+WG3EtGKPfbLOqd9cVAspTohXd -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:51 2025 by rpki-client