$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: RJ2RtsZxWbw++8lqrg1Wk97pgk8qzko6aP1qEXlMin8= Subject key identifier: FF:00:EA:FD:27:73:8D:8A:D9:46:C5:94:20:E9:42:81:E3:90:1D:F4 Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: D5 Signing time: Fri 25 Apr 2025 05:04:52 +0000 Manifest this update: Fri 25 Apr 2025 05:04:52 +0000 Manifest next update: Fri 02 May 2025 05:04:52 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: 7N9tdgbZn5gAPFebWGkiUXLJvMB2MAXEg6f4l6bjG+A=) 2: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=) 3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=) 4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: Apr 25 05:04:52 2025 GMT Not After : May 2 05:04:52 2025 GMT Subject: CN=680b17f4-fb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:7c:b2:43:37:7a:47:5c:c1:85:4f:1c:6a: 26:c2:50:ab:29:50:b8:68:81:0a:d5:2f:f2:da:3f: 1c:88:c4:7b:55:a7:f4:6d:bf:cc:1a:23:c9:43:3f: d0:c6:66:ed:41:85:d5:9f:9e:47:8f:d2:5c:1f:94: 67:21:64:a6:65:b1:d2:da:99:6c:44:fc:f0:d3:18: 2d:05:0a:0a:c7:d6:9a:a2:30:a1:57:59:7d:68:23: 9d:2a:2e:bb:68:29:4a:d3:df:1a:81:81:ee:95:70: ec:8b:ce:75:50:2d:9c:31:9b:14:75:00:30:f5:18: f2:fc:4f:11:56:3a:60:d2:e8:06:13:16:a6:4e:ef: 40:c8:81:23:30:4b:a3:d8:bb:1f:4d:9d:e4:6b:2c: 5c:5b:45:90:31:c5:24:1f:3d:43:1d:3c:eb:dc:50: b4:37:0c:74:85:bf:7d:c1:ff:06:f7:d5:ed:e0:1a: 4a:b7:f0:39:89:f2:02:4b:4d:8e:b5:ca:a1:07:ca: 72:11:63:b4:61:0d:82:24:62:0f:88:9e:95:86:60: 98:50:e3:57:73:de:fc:df:42:79:af:8b:78:5e:64: 2b:41:28:08:c1:52:74:cd:6c:73:2d:6a:b5:67:f5: da:cb:ac:77:66:38:fa:88:e6:45:c4:d7:71:41:9c: f0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:00:EA:FD:27:73:8D:8A:D9:46:C5:94:20:E9:42:81:E3:90:1D:F4 X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:63:7a:0c:ef:d1:fd:62:af:68:91:5e:f4:59:c0:e2:ea:d4: d1:ec:2c:b9:49:4f:4a:e5:49:8a:fc:3b:0b:69:ea:71:9c:47: 4f:47:09:7e:65:be:8c:fe:b5:86:77:a9:08:b8:03:ae:fb:72: d5:11:ad:04:af:cc:1d:a9:95:0c:2a:d8:07:bf:bf:bb:21:a2: a1:18:39:45:0c:00:1a:f8:dd:ca:a9:66:9e:10:3b:f3:5f:1b: 60:a5:aa:2b:aa:e6:16:12:3e:c8:26:1d:48:e4:4c:08:a4:68: 33:dd:7b:78:3d:2c:29:f9:0d:25:6e:ee:66:74:57:db:7a:61: ab:14:21:fd:80:bd:4c:6b:ce:88:aa:25:99:20:d7:f0:90:69: a1:33:86:a0:4b:b5:70:4a:75:23:d9:73:67:5f:99:5d:9f:84: f2:d6:29:ab:ae:08:89:7b:6d:8b:6e:d5:6c:1c:fd:a1:ba:f9: 5f:67:8f:4c:55:de:09:7c:c5:39:5f:84:fa:39:b2:c1:f7:e2: bf:53:05:f0:26:b3:72:ec:db:1e:53:e7:b8:98:e7:c0:b8:6c: 5a:39:cf:ac:33:eb:f5:10:0e:3c:dd:c3:bd:fe:83:4c:e6:58: 31:8d:aa:bd:15:18:f2:3e:b6:f4:c1:e2:3e:bb:c0:b6:b4:44: e7:11:4a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjUwNDI1MDUwNDUyWhcNMjUwNTAyMDUwNDUyWjAYMRYwFAYD VQQDEw02ODBiMTdmNC1mYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjF8skM3ekdcwYVPHGomwlCrKVC4aIEK1S/y2j8ciMR7Vaf0bb/MGiPJQz/Q xmbtQYXVn55Hj9JcH5RnIWSmZbHS2plsRPzw0xgtBQoKx9aaojChV1l9aCOdKi67 aClK098agYHulXDsi851UC2cMZsUdQAw9Rjy/E8RVjpg0ugGExamTu9AyIEjMEuj 2LsfTZ3kayxcW0WQMcUkHz1DHTzr3FC0Nwx0hb99wf8G99Xt4BpKt/A5ifICS02O tcqhB8pyEWO0YQ2CJGIPiJ6VhmCYUONXc97830J5r4t4XmQrQSgIwVJ0zWxzLWq1 Z/Xay6x3Zjj6iOZFxNdxQZzwkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8A6v0n c42K2UbFlCDpQoHjkB30MB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcY3oM79H9Yq9okV70WcDi6tTR7Cy5SU9K5UmK/DsLaepxnEdPRwl+ Zb6M/rWGd6kIuAOu+3LVEa0Er8wdqZUMKtgHv7+7IaKhGDlFDAAa+N3KqWaeEDvz XxtgpaorquYWEj7IJh1I5EwIpGgz3Xt4PSwp+Q0lbu5mdFfbemGrFCH9gL1Ma86I qiWZINfwkGmhM4agS7VwSnUj2XNnX5ldn4Ty1imrrgiJe22LbtVsHP2huvlfZ49M Vd4JfMU5X4T6ObLB9+K/UwXwJrNy7NseU+e4mOfAuGxaOc+sM+v1EA483cO9/oNM 5lgxjaq9FRjyPrb0weI+u8C2tETnEUo0 -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:38 2025 by rpki-client