$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft File: Df2AHulmIu0X31XXqqZMce_5t70.mft (raw, json) Hash identifier: PS0VdHslzV1Sjq2C4v2sjaF+dxA+rtRV3sN4TCbZuuY= Subject key identifier: 7E:A8:C4:FA:C8:99:CE:1C:CA:F2:0A:BB:7C:47:E5:1C:49:FE:7C:83 Authority key identifier: 0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD Certificate issuer: /CN=A91F4E89/serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD Certificate serial: 0B72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft Manifest number: 0B6C Signing time: Thu 24 Apr 2025 18:58:43 +0000 Manifest this update: Thu 24 Apr 2025 18:58:43 +0000 Manifest next update: Thu 01 May 2025 18:58:43 +0000 Files and hashes: 1: Df2AHulmIu0X31XXqqZMce_5t70.crl (hash: IYuvpPk3QgF3XCs8aBAiA//Rmx8mmrwXqAapZjPpNy0=) 2: 72F52C962AF511EA8C989441C4F9AE02.roa (hash: VUxxRKza4YtkY3CW36/yWhqdjkRvkusFphcVpxC9+Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2930 (0xb72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4E89, serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD Validity Not Before: Apr 24 18:58:43 2025 GMT Not After : May 1 18:58:43 2025 GMT Subject: CN=680a89e3-62b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:58:28:f5:58:6a:2f:3a:16:54:a6:f0:f6: 3c:fe:cf:40:cc:ef:bf:38:9f:5f:67:8e:24:21:00: af:e8:31:96:e6:29:f5:3c:20:06:34:28:3b:b4:bb: 05:29:65:e1:6f:9c:eb:78:bc:07:8f:62:fa:36:4e: 84:98:02:0a:44:2f:ee:d0:b0:bb:6f:fd:7d:64:6d: 7a:2e:3f:2b:89:f6:27:66:9a:b0:c5:e6:ef:05:f5: 7d:22:7f:8b:12:29:b0:80:d5:1f:91:1d:70:30:33: 64:6f:64:b8:68:56:68:c3:a6:b5:64:18:03:80:b6: c8:7c:e3:87:11:ce:ab:6c:fc:43:2f:fc:c4:ae:5c: a7:ed:ef:ff:71:e4:67:74:6a:24:f1:73:30:9c:fd: d1:e8:24:01:58:81:df:17:79:e8:ad:40:57:21:b4: 93:a7:14:b6:48:0a:d2:88:7b:f0:f1:20:42:82:3f: 55:7a:d5:13:6a:ba:0b:8a:ab:30:79:a8:93:59:0d: f6:a6:69:d0:25:0f:21:af:9b:2a:0d:ed:8a:e5:1e: 4c:e4:74:55:ea:65:d9:62:75:b9:75:59:9a:d4:79: ce:2a:d8:15:0d:3b:2a:71:b0:d7:ea:0c:3d:a7:d7: f4:bf:f5:8f:83:ec:15:15:33:de:fd:ed:5a:50:6a: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A8:C4:FA:C8:99:CE:1C:CA:F2:0A:BB:7C:47:E5:1C:49:FE:7C:83 X509v3 Authority Key Identifier: keyid:0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:25:07:38:00:69:58:2c:55:b1:fa:88:c7:f2:0f:69:f0:bb: b5:fc:63:f4:25:41:ac:21:ad:b6:7f:ef:1d:86:51:72:f3:eb: 86:cf:9a:4e:89:57:49:71:81:d2:4e:7a:3a:22:ea:7d:97:6c: 31:94:5d:53:b8:ff:9b:82:73:a2:5b:e8:eb:18:12:fb:b6:d9: 77:9f:2b:28:62:07:6f:b1:b0:44:86:d7:2c:b6:71:d7:04:3c: 45:24:4a:9b:56:e9:cf:90:d1:45:2f:bb:32:6c:7a:15:bf:ca: b6:00:b6:61:53:43:0c:47:fb:cc:5c:80:ca:25:12:6e:19:b0: e2:24:a4:f0:12:80:25:6b:9f:9e:4c:2d:59:f6:7d:11:03:8e: 5f:d0:0f:54:73:e9:14:e8:23:f1:4d:45:cb:15:70:bb:fd:aa: 57:72:b2:02:26:32:5e:e8:a3:3f:eb:f1:c8:92:48:12:34:8d: 54:a1:89:c4:16:62:d3:55:f2:3b:46:d5:b8:bb:71:6c:48:76: 46:b5:17:6e:24:25:93:3e:b0:15:a9:cd:d7:a8:37:39:ba:62: 5a:da:a6:ad:0c:19:44:fd:ac:75:a6:51:66:2a:16:7b:ea:33: 87:ea:04:c8:da:93:04:cc:47:fe:3f:aa:a9:22:1f:48:ae:6f: a3:90:c1:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFODkxMTAvBgNVBAUTKDBERkQ4MDFFRTk2NjIyRUQxN0RGNTVEN0FBQTY0Qzcx RUZGOUI3QkQwHhcNMjUwNDI0MTg1ODQzWhcNMjUwNTAxMTg1ODQzWjAYMRYwFAYD VQQDEw02ODBhODllMy02MmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTJYKPVYai86FlSm8PY8/s9AzO+/OJ9fZ44kIQCv6DGW5in1PCAGNCg7tLsF KWXhb5zreLwHj2L6Nk6EmAIKRC/u0LC7b/19ZG16Lj8rifYnZpqwxebvBfV9In+L EimwgNUfkR1wMDNkb2S4aFZow6a1ZBgDgLbIfOOHEc6rbPxDL/zErlyn7e//ceRn dGok8XMwnP3R6CQBWIHfF3norUBXIbSTpxS2SArSiHvw8SBCgj9VetUTaroLiqsw eaiTWQ32pmnQJQ8hr5sqDe2K5R5M5HRV6mXZYnW5dVma1HnOKtgVDTsqcbDX6gw9 p9f0v/WPg+wVFTPe/e1aUGqitwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6oxPrI mc4cyvIKu3xH5RxJ/nyDMB8GA1UdIwQYMBaAFA39gB7pZiLtF99V16qmTHHv+be9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEU4OS9DNTMzRDcyNDJB RjQxMUVBQTQ4RjE1NDFDNEY5QUUwMi9EZjJBSHVsbUl1MFgzMVhYcXFaTWNlXzV0 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmMkFIdWxtSXUwWDMxWFhxcVpNY2VfNXQ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEU4OS9DNTMzRDcyNDJBRjQxMUVBQTQ4RjE1NDFDNEY5QUUwMi9EZjJBSHVsbUl1 MFgzMVhYcXFaTWNlXzV0NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9JQc4AGlYLFWx+ojH8g9p8Lu1/GP0JUGsIa22f+8dhlFy8+uGz5pO iVdJcYHSTno6Iup9l2wxlF1TuP+bgnOiW+jrGBL7ttl3nysoYgdvsbBEhtcstnHX BDxFJEqbVunPkNFFL7sybHoVv8q2ALZhU0MMR/vMXIDKJRJuGbDiJKTwEoAla5+e TC1Z9n0RA45f0A9Uc+kU6CPxTUXLFXC7/apXcrICJjJe6KM/6/HIkkgSNI1UoYnE FmLTVfI7RtW4u3FsSHZGtRduJCWTPrAVqc3XqDc5umJa2qatDBlE/ax1plFmKhZ7 6jOH6gTI2pMEzEf+P6qpIh9Irm+jkMER -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:02 2025 by rpki-client