$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json) Hash identifier: KG3VrWmqSIYmCBSwSgxRi+aaZQABdWn55NwtAnJT1Ho= Subject key identifier: 97:86:B7:11:42:30:FA:1B:F0:20:37:11:FD:BF:79:60:77:52:E5:7D Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft Manifest number: 0639 Signing time: Thu 24 Apr 2025 22:07:06 +0000 Manifest this update: Thu 24 Apr 2025 22:07:05 +0000 Manifest next update: Thu 01 May 2025 22:07:05 +0000 Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: GWEapwVA9kbZ0cfb3NwKuBfwNlc3HxLK+Irrg9nfa7M=) 2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: Ps44UQPvNI+l6dnKBZUyTUvHvKmwO+RBPeKzPiMeBfw=) 3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: gsfWGtMmL+dpa9EjzvC9HprHiy8q0yGq8k/h26d5iH8=) 4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: myGu3py2MJoX+9pcsdAEfeXFlVuZbTSedA0MlFyQwmI=) 5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: IRx8YlQZD3iZNO8ZkV5fm0YkjEB3fazq27IMfHjcxDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Validity Not Before: Apr 24 22:07:05 2025 GMT Not After : May 1 22:07:05 2025 GMT Subject: CN=680ab609-412c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:33:c6:a3:c8:b0:9c:53:36:1d:0f:75:90:d1: ca:da:1f:79:12:b6:2e:ce:0b:0d:b9:94:91:4a:6f: 7a:00:11:a0:94:28:f1:72:80:b4:79:b1:77:4a:73: 5e:e9:3d:18:61:6e:a1:d6:fd:39:86:94:d9:99:00: 06:be:a5:6f:48:48:cd:68:62:91:85:ba:68:bf:a6: 74:de:2d:77:cd:e6:90:6c:fc:07:0c:79:7e:5e:5c: fd:e8:0c:f0:08:fc:21:ef:12:0c:47:2e:d4:6e:d3: ae:01:58:a3:4d:94:bb:4a:b4:24:16:66:63:1e:c7: 7d:c0:9b:87:df:54:0d:d7:a6:95:f4:b2:47:a8:d4: 90:70:22:32:a7:fb:48:36:47:c7:eb:a0:4e:c3:7d: 4f:fa:8b:9f:65:f1:aa:a2:c9:a5:0b:9c:5a:4e:7a: e0:6e:6a:d5:0c:4f:44:46:32:fa:6b:4d:0e:62:fa: 23:22:10:d1:9e:8a:87:8c:da:23:83:fa:2a:1c:57: 87:2b:dd:4a:69:4b:47:cc:60:5c:a2:2a:40:46:83: e1:b8:af:d4:61:51:9f:35:d3:3f:23:21:bd:6d:3b: 3b:66:a5:8a:89:f4:db:24:69:6d:eb:4d:75:d6:05: 57:c3:da:96:8f:95:7d:fb:b8:6d:fa:77:40:62:51: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:86:B7:11:42:30:FA:1B:F0:20:37:11:FD:BF:79:60:77:52:E5:7D X509v3 Authority Key Identifier: keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:11:31:c1:d8:69:06:12:be:02:44:36:0e:c5:7b:d6:bc:34: ee:d9:d5:27:58:15:06:0b:2f:ea:ee:93:37:51:2a:8b:84:a5: 60:12:b3:9a:c1:74:c2:41:07:95:b8:03:57:f5:00:78:cd:01: ed:dc:8d:ca:bc:29:66:8a:25:e1:61:68:33:f7:4c:7b:09:5f: ce:a1:64:51:40:e1:bc:7b:35:47:e3:75:2c:c3:6c:06:a3:ce: 40:a2:6a:ed:33:d7:ea:0b:20:8d:0d:0e:f4:2e:f0:78:70:e8: 91:b0:c6:15:d7:27:8d:42:8b:99:98:ba:9b:f5:4e:a8:8b:d1: 9f:3a:62:89:75:1d:58:ac:d2:60:4e:cf:48:6e:f4:7e:93:dc: 09:8b:29:5c:50:f8:81:e1:a8:29:a7:bf:70:36:73:76:71:a4: d2:7a:be:51:ba:80:ac:15:d6:3b:47:84:da:fd:c9:5d:28:48: b0:61:e5:3d:99:c3:09:41:c6:67:35:4c:19:dc:23:3d:cd:9a: 18:94:af:68:ae:d3:15:7d:57:eb:4b:bc:b8:38:37:fb:d1:85: 52:9a:ea:e6:97:3c:05:3a:c9:ed:81:a9:ce:ad:8f:6f:14:bf: ac:53:03:57:64:91:c9:18:25:00:59:61:4e:84:4c:36:8c:bb: 56:a1:b5:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD MkE0RTI5Q0UwHhcNMjUwNDI0MjIwNzA1WhcNMjUwNTAxMjIwNzA1WjAYMRYwFAYD VQQDEw02ODBhYjYwOS00MTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjPGo8iwnFM2HQ91kNHK2h95ErYuzgsNuZSRSm96ABGglCjxcoC0ebF3SnNe 6T0YYW6h1v05hpTZmQAGvqVvSEjNaGKRhbpov6Z03i13zeaQbPwHDHl+Xlz96Azw CPwh7xIMRy7UbtOuAVijTZS7SrQkFmZjHsd9wJuH31QN16aV9LJHqNSQcCIyp/tI NkfH66BOw31P+oufZfGqosmlC5xaTnrgbmrVDE9ERjL6a00OYvojIhDRnoqHjNoj g/oqHFeHK91KaUtHzGBcoipARoPhuK/UYVGfNdM/IyG9bTs7ZqWKifTbJGlt6011 1gVXw9qWj5V9+7ht+ndAYlH59QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeGtxFC MPob8CA3Ef2/eWB3UuV9MB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw TURiUnh5M1V3S2ZDcE9LYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaETHB2GkGEr4CRDYOxXvWvDTu2dUnWBUGCy/q7pM3USqLhKVgErOa wXTCQQeVuANX9QB4zQHt3I3KvClmiiXhYWgz90x7CV/OoWRRQOG8ezVH43Usw2wG o85AomrtM9fqCyCNDQ70LvB4cOiRsMYV1yeNQouZmLqb9U6oi9GfOmKJdR1YrNJg Ts9IbvR+k9wJiylcUPiB4agpp79wNnN2caTSer5RuoCsFdY7R4Ta/cldKEiwYeU9 mcMJQcZnNUwZ3CM9zZoYlK9ortMVfVfrS7y4ODf70YVSmurmlzwFOsntganOrY9v FL+sUwNXZJHJGCUAWWFOhEw2jLtWobU8 -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:38 2025 by rpki-client