$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: g/+lyDjF0wpPchbsiR63LsXK/aIyM5fohplugI7Kph4= Subject key identifier: E7:1C:10:77:5A:CB:E9:CA:66:72:08:7C:8D:9F:76:F4:3D:BB:92:48 Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 19E8 Signing time: Thu 24 Apr 2025 17:12:12 +0000 Manifest this update: Thu 24 Apr 2025 17:12:12 +0000 Manifest next update: Thu 01 May 2025 17:12:12 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: xe3kwZY0adzcung76TqjFxmduI1MW8A5rNEuIwaiC0U=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: k9wHhpt8UiUsBAqNUER2NNEPeQj08b6887cRTKa39g0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Validity Not Before: Apr 24 17:12:12 2025 GMT Not After : May 1 17:12:12 2025 GMT Subject: CN=680a70ec-353c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:0c:49:e4:68:17:1b:a8:43:5b:f5:51:d8: d7:d5:db:f7:b4:fa:00:81:0c:24:59:98:6a:50:5c: 44:fd:66:e9:32:ac:11:33:4e:90:3d:10:21:e9:bd: 58:a1:c0:52:d2:7d:b6:6f:bf:0d:c1:22:f7:a3:eb: a7:49:09:8e:00:e7:3f:f6:f7:e1:32:3a:bd:cb:94: e4:71:d5:55:6d:13:0b:b8:11:1f:ed:90:b4:0a:ad: 7f:18:3b:54:7a:2a:b1:a8:7b:69:89:8b:1b:c0:f0: a9:43:7a:2f:4d:b9:86:95:e2:4c:02:bf:a9:3d:c6: eb:c2:27:46:b6:74:a1:31:03:83:d9:c3:74:a3:47: 30:19:37:f0:b9:49:1e:cc:15:19:38:7f:f7:78:9b: 1d:89:01:df:64:79:19:51:ce:b6:8c:36:d4:1c:3b: 69:75:4a:25:36:f9:75:4d:df:e1:36:9c:7b:83:34: 2d:74:c0:c6:a8:df:7f:b4:a2:75:c6:12:b6:a3:f6: 5f:88:5b:d8:67:2e:a9:fa:81:f5:7a:21:d4:81:ae: 01:46:be:47:07:a6:e7:83:42:e5:c0:a7:6b:23:2f: 97:fd:75:21:49:1b:28:91:ab:3c:a1:36:59:76:9a: f1:6a:c3:aa:6f:bb:75:74:4d:10:66:39:ca:81:ca: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1C:10:77:5A:CB:E9:CA:66:72:08:7C:8D:9F:76:F4:3D:BB:92:48 X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a1:6c:3c:fe:a4:0e:f8:15:b9:46:f2:de:84:5a:80:d4:a0: e8:5e:0c:19:81:eb:fe:83:f7:20:dd:97:e0:f3:65:e9:58:df: 6d:0b:3c:74:ee:91:80:9e:39:4d:f5:53:ba:44:d6:91:1f:63: cf:7d:10:4f:3e:be:bf:c1:17:90:4c:ea:43:9a:c4:4e:7a:c5: 84:26:73:45:c8:86:1e:49:04:09:65:ab:62:f2:4e:21:05:4b: 88:98:46:2f:b2:cc:74:d0:4e:79:35:a1:24:04:f1:3f:fa:91: 56:f2:61:dd:72:7c:f7:e1:cf:f8:85:5b:4d:4f:99:43:9c:8b: 8e:b3:a7:03:55:05:92:14:92:1e:25:3e:20:9c:b4:0c:84:04: 01:6d:66:f8:13:f1:20:25:34:74:fc:31:a3:2a:d8:74:60:15: 33:c6:d1:7d:29:42:13:75:0b:95:52:2e:27:7f:40:e0:11:18: e5:ef:f9:d8:ca:20:8f:34:ce:34:b6:54:16:84:69:f9:c6:a4: 1f:25:3e:7a:92:1c:e5:8a:5d:1a:95:91:ab:eb:e8:67:03:6b: d3:63:d9:12:01:b5:15:39:ba:69:4d:05:dc:d1:2d:17:b1:76: 09:17:81:82:3c:46:0a:31:c9:60:ed:cc:e4:51:72:8e:f1:ea: c2:6d:cd:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjUwNDI0MTcxMjEyWhcNMjUwNTAxMTcxMjEyWjAYMRYwFAYD VQQDEw02ODBhNzBlYy0zNTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzO4MSeRoFxuoQ1v1UdjX1dv3tPoAgQwkWZhqUFxE/WbpMqwRM06QPRAh6b1Y ocBS0n22b78NwSL3o+unSQmOAOc/9vfhMjq9y5TkcdVVbRMLuBEf7ZC0Cq1/GDtU eiqxqHtpiYsbwPCpQ3ovTbmGleJMAr+pPcbrwidGtnShMQOD2cN0o0cwGTfwuUke zBUZOH/3eJsdiQHfZHkZUc62jDbUHDtpdUolNvl1Td/hNpx7gzQtdMDGqN9/tKJ1 xhK2o/ZfiFvYZy6p+oH1eiHUga4BRr5HB6bng0LlwKdrIy+X/XUhSRsokas8oTZZ dprxasOqb7t1dE0QZjnKgcrhEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOccEHda y+nKZnIIfI2fdvQ9u5JIMB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYoWw8/qQO+BW5RvLehFqA1KDoXgwZgev+g/cg3Zfg82XpWN9tCzx0 7pGAnjlN9VO6RNaRH2PPfRBPPr6/wReQTOpDmsROesWEJnNFyIYeSQQJZati8k4h BUuImEYvssx00E55NaEkBPE/+pFW8mHdcnz34c/4hVtNT5lDnIuOs6cDVQWSFJIe JT4gnLQMhAQBbWb4E/EgJTR0/DGjKth0YBUzxtF9KUITdQuVUi4nf0DgERjl7/nY yiCPNM40tlQWhGn5xqQfJT56khzlil0alZGr6+hnA2vTY9kSAbUVObppTQXc0S0X sXYJF4GCPEYKMclg7czkUXKO8erCbc1M -----END CERTIFICATE-----Generated at Sat Apr 26 07:45:31 2025 by rpki-client