$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft File: _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json) Hash identifier: ZRe8wokOUcCHoL/dyvXXo6qpRjJ7W4jPb/981hp8Xq0= Subject key identifier: 5E:23:3C:34:CB:99:7F:33:D5:F5:18:53:98:7A:15:8E:C8:18:6D:6D Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Certificate serial: 0282 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft Manifest number: 027E Signing time: Fri 25 Apr 2025 01:24:46 +0000 Manifest this update: Fri 25 Apr 2025 01:24:46 +0000 Manifest next update: Fri 02 May 2025 01:24:46 +0000 Files and hashes: 1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: vVR059kVVutqbGhx4mElKOHjrTqNUggNQpKOjP0Poyk=) 2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: O80CPOj7379bSxSD9tMHO1NK7nDoOkP7AeQy26Fb7V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 642 (0x282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Validity Not Before: Apr 25 01:24:46 2025 GMT Not After : May 2 01:24:46 2025 GMT Subject: CN=680ae45e-c2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:3f:2c:b0:e4:30:8d:f0:f4:a9:64:43:19: 60:87:18:87:da:29:5a:1e:2a:c6:68:e7:b6:39:05: 1f:a1:9f:f3:7b:5c:70:d3:87:6f:f5:f6:8c:3f:32: d4:4c:ec:cd:55:e3:e4:6a:8e:06:59:2c:c1:ef:97: f9:b7:88:dd:e6:2b:a6:e3:61:3e:76:7e:af:c3:2a: af:25:8d:cb:c8:67:be:5a:ae:1c:16:1f:d1:81:22: 48:8c:2a:83:5d:6f:23:a3:9d:5d:16:b1:92:da:ee: bf:a5:7d:df:aa:a6:6d:7b:cc:79:fa:c7:13:e9:51: 9b:cf:92:eb:86:3e:ef:83:5f:6a:2f:91:df:7b:76: 2f:c2:d4:1a:3a:29:3a:ff:c9:03:ad:44:c0:71:91: 05:21:25:1a:e0:0b:4f:bf:c8:7c:38:5f:e3:40:5e: 09:00:b8:49:da:ba:e0:ea:81:21:99:21:24:57:38: 14:0d:c4:b8:10:c3:7f:40:38:87:a6:eb:ab:eb:b5: 92:6c:ac:ee:ac:ee:30:eb:86:06:45:74:48:a9:08: b6:4f:72:83:a2:1b:28:8b:71:e5:8e:37:3d:b5:a6: 79:f2:9b:b7:3e:2b:11:0b:92:61:0c:de:3b:69:4b: dc:e1:60:28:61:8e:d5:96:45:a2:bd:83:35:22:06: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:23:3C:34:CB:99:7F:33:D5:F5:18:53:98:7A:15:8E:C8:18:6D:6D X509v3 Authority Key Identifier: keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b8:59:50:0c:28:2c:18:0a:2e:8f:15:04:5e:45:36:6a:9b: 77:89:e9:f9:d3:3d:b8:3b:22:ce:eb:87:05:04:f9:9a:3b:3a: c5:d8:09:d5:c5:44:68:59:27:2e:f7:0c:f6:d9:b0:a2:40:69: e2:7b:d6:3e:87:d4:cd:0b:f1:97:4f:72:0e:b1:b2:d6:fb:91: 53:a5:e0:63:91:01:51:57:3d:52:1c:b1:55:5b:0a:f7:41:8d: 6d:78:31:0e:5c:f1:64:cc:68:8a:76:3c:38:e3:b4:6a:30:18: a4:97:14:b3:f5:f8:cb:67:94:39:2e:92:7d:7b:d6:f0:cd:9c: c7:38:fc:f6:47:d8:3f:70:48:1b:e1:ef:8d:3a:77:f6:3f:4e: de:3e:4e:18:0d:f3:9c:a5:3a:4a:96:5d:8f:3f:7e:22:b4:ec: 2c:0d:4b:9b:c0:1b:1e:10:24:34:48:11:7e:db:df:f9:6b:d8: 9f:f1:6f:5a:a6:32:7a:51:7e:dd:6f:02:10:cf:d1:cf:da:c9: 82:75:51:01:39:48:57:16:d5:ff:2c:35:3c:d7:e9:bd:ce:0d: 3a:0b:31:f2:5b:fb:8f:29:f6:e0:47:4c:d0:79:90:17:1e:ee: 74:16:f8:bd:05:b4:ce:5b:d4:b1:e5:ef:01:bc:92:6b:4b:6f: ec:2c:25:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwOUMxMTAvBgNVBAUTKEZERDU1NzRBQTZCM0EyMzdCNDM2Njk5NTdEODUzMzk1 OTNEQzFFOUEwHhcNMjUwNDI1MDEyNDQ2WhcNMjUwNTAyMDEyNDQ2WjAYMRYwFAYD VQQDEw02ODBhZTQ1ZS1jMmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06s/LLDkMI3w9KlkQxlghxiH2ilaHirGaOe2OQUfoZ/ze1xw04dv9faMPzLU TOzNVePkao4GWSzB75f5t4jd5ium42E+dn6vwyqvJY3LyGe+Wq4cFh/RgSJIjCqD XW8jo51dFrGS2u6/pX3fqqZte8x5+scT6VGbz5Lrhj7vg19qL5Hfe3YvwtQaOik6 /8kDrUTAcZEFISUa4AtPv8h8OF/jQF4JALhJ2rrg6oEhmSEkVzgUDcS4EMN/QDiH puur67WSbKzurO4w64YGRXRIqQi2T3KDohsoi3Hljjc9taZ58pu3PisRC5JhDN47 aUvc4WAoYY7VlkWivYM1IgYhDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4jPDTL mX8z1fUYU5h6FY7IGG1tMB8GA1UdIwQYMBaAFP3VV0qms6I3tDZplX2FM5WT3B6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA5Qy8wQUE1N0M2QzA0 NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9qZTBObW1WZllVemxaUGNI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19kVlhTcWF6b2plME5tbVZmWVV6bFpQY0hwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjA5Qy8wQUE1N0M2QzA0NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9q ZTBObW1WZllVemxaUGNIcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfuFlQDCgsGAoujxUEXkU2apt3ien50z24OyLO64cFBPmaOzrF2AnV xURoWScu9wz22bCiQGnie9Y+h9TNC/GXT3IOsbLW+5FTpeBjkQFRVz1SHLFVWwr3 QY1teDEOXPFkzGiKdjw447RqMBiklxSz9fjLZ5Q5LpJ9e9bwzZzHOPz2R9g/cEgb 4e+NOnf2P07ePk4YDfOcpTpKll2PP34itOwsDUubwBseECQ0SBF+29/5a9if8W9a pjJ6UX7dbwIQz9HP2smCdVEBOUhXFtX/LDU81+m9zg06CzHyW/uPKfbgR0zQeZAX Hu50Fvi9BbTOW9Sx5e8BvJJrS2/sLCXe -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:35 2025 by rpki-client