$ rpki-client -vvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft File: q47HWiojWU9vKtMnsOa7wLCrm-4.mft (raw, json) Hash identifier: w/0J4lRBLayOAUycR53GFLdQbRBcYyWwIu5/ym6EPdw= Subject key identifier: 7E:C2:73:F7:8E:5A:A7:2B:B6:20:95:3F:5E:80:46:25:6B:A0:CC:9A Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Certificate serial: 0DC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft Manifest number: 0DB6 Signing time: Thu 24 Apr 2025 17:53:36 +0000 Manifest this update: Thu 24 Apr 2025 17:53:35 +0000 Manifest next update: Thu 01 May 2025 17:53:35 +0000 Files and hashes: 1: q47HWiojWU9vKtMnsOa7wLCrm-4.crl (hash: e83RhqJPi2+IJQrmp8517+uxR4LZLwxtuddZSP510nQ=) 2: E3ACB710B9B211E9A9A37254C4F9AE02.roa (hash: Jg5gZD0YmKb91aw5MXsxMT3mckkXVt61eCbJBF82oak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3520 (0xdc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F783D, serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Validity Not Before: Apr 24 17:53:35 2025 GMT Not After : May 1 17:53:35 2025 GMT Subject: CN=680a7a9f-f0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:c8:cf:f4:61:74:0f:51:d8:3f:c0:04:85: cb:6d:87:be:e3:35:90:66:38:2b:ff:c0:5b:a0:9d: b4:44:4c:b3:24:64:89:ec:ec:2b:a0:c4:78:d2:1c: 5d:36:04:85:ab:9c:1e:a4:ff:7c:12:68:c3:85:e5: e7:50:eb:fb:d5:41:cc:51:d3:cb:a0:c4:7e:b6:84: 56:51:1f:0a:92:c7:28:e8:f0:e1:15:aa:2b:86:0f: 68:98:f0:45:d1:a7:ea:74:92:9e:4e:0c:df:7e:ec: e5:d2:a3:6f:aa:af:ae:ac:ae:21:a4:2d:2a:6c:99: 4c:f0:d5:83:c1:18:90:e0:26:c0:70:1f:c2:60:22: cc:39:76:8c:b8:41:0b:a6:c2:3a:24:bd:71:99:eb: 3a:fe:e1:d8:37:6a:5d:c9:f3:ad:83:df:28:a7:4b: ca:41:8c:85:df:1a:34:80:b4:fe:b0:26:4d:99:cd: 05:7f:7a:65:2b:fc:8a:73:5c:0e:3e:fc:73:2b:a8: e7:d0:fa:93:e2:e7:53:68:db:bd:5b:f3:1e:09:53: 4a:48:7d:4e:70:c4:24:b6:e5:72:a0:9b:26:3c:7d: 30:93:e6:fa:ac:83:61:a0:e9:da:12:dd:04:63:3f: 28:fd:c1:fb:5c:cf:4a:8b:af:34:b2:ba:94:4f:18: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C2:73:F7:8E:5A:A7:2B:B6:20:95:3F:5E:80:46:25:6B:A0:CC:9A X509v3 Authority Key Identifier: keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:7e:3d:6e:3e:da:36:af:3c:b2:b5:28:b0:df:ea:10:6d:40: 36:4e:2b:dc:e5:36:3a:fc:f0:d2:ba:a6:55:01:d5:69:7a:04: 9b:7f:99:a6:8a:ce:3b:a5:1e:f2:9f:2b:65:ef:50:ac:90:5c: 9b:7c:84:de:54:f0:0e:0b:50:33:26:91:78:34:a8:d7:12:bc: 2b:e3:0b:71:da:78:bd:53:d5:7e:eb:88:29:1a:91:fe:7e:de: c7:78:41:57:b5:f2:11:fe:3f:3e:85:da:a3:b8:fd:e3:7b:66: 9a:7d:ab:e7:c0:2e:f5:ef:ed:91:20:ec:a9:79:c7:54:61:59: f1:e4:9e:1d:d0:83:1f:64:29:08:52:6e:e1:0f:b0:14:fb:42: 51:99:31:48:91:8d:ff:12:a4:e3:d5:62:80:54:8e:14:af:db: 70:a8:5f:ed:2a:99:c3:62:64:6a:4c:78:e3:c6:45:8b:80:d3: 1a:14:90:f9:5c:d4:69:cb:e0:26:6e:43:49:1c:2f:54:c7:2f: 60:c1:59:a4:35:bd:55:bb:c8:02:df:bf:b9:8e:a8:82:72:fe: 2c:09:8a:2c:81:86:2f:23:30:cf:8e:ad:62:7b:0d:73:0d:48: 8b:fd:54:bd:31:e4:7d:da:eb:a2:8b:26:8d:c4:f1:e9:d4:d2: db:ab:21:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc4M0QxMTAvBgNVBAUTKEFCOEVDNzVBMkEyMzU5NEY2RjJBRDMyN0IwRTZCQkMw QjBBQjlCRUUwHhcNMjUwNDI0MTc1MzM1WhcNMjUwNTAxMTc1MzM1WjAYMRYwFAYD VQQDEw02ODBhN2E5Zi1mMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYvIz/RhdA9R2D/ABIXLbYe+4zWQZjgr/8BboJ20REyzJGSJ7OwroMR40hxd NgSFq5wepP98EmjDheXnUOv71UHMUdPLoMR+toRWUR8Kksco6PDhFaorhg9omPBF 0afqdJKeTgzffuzl0qNvqq+urK4hpC0qbJlM8NWDwRiQ4CbAcB/CYCLMOXaMuEEL psI6JL1xmes6/uHYN2pdyfOtg98op0vKQYyF3xo0gLT+sCZNmc0Ff3plK/yKc1wO PvxzK6jn0PqT4udTaNu9W/MeCVNKSH1OcMQktuVyoJsmPH0wk+b6rINhoOnaEt0E Yz8o/cH7XM9Ki680srqUTxiPPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7Cc/eO WqcrtiCVP16ARiVroMyaMB8GA1UdIwQYMBaAFKuOx1oqI1lPbyrTJ7Dmu8Cwq5vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzgzRC8zMURGMURFRUI5 QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldVOXZLdE1uc09hN3dMQ3Jt LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E0N0hXaW9qV1U5dkt0TW5zT2E3d0xDcm0tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzgzRC8zMURGMURFRUI5QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldV OXZLdE1uc09hN3dMQ3JtLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnfj1uPto2rzyytSiw3+oQbUA2Tivc5TY6/PDSuqZVAdVpegSbf5mm is47pR7ynytl71CskFybfITeVPAOC1AzJpF4NKjXErwr4wtx2ni9U9V+64gpGpH+ ft7HeEFXtfIR/j8+hdqjuP3je2aafavnwC717+2RIOypecdUYVnx5J4d0IMfZCkI Um7hD7AU+0JRmTFIkY3/EqTj1WKAVI4Ur9twqF/tKpnDYmRqTHjjxkWLgNMaFJD5 XNRpy+AmbkNJHC9Uxy9gwVmkNb1Vu8gC37+5jqiCcv4sCYosgYYvIzDPjq1iew1z DUiL/VS9MeR92uuiiyaNxPHp1NLbqyF0 -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:10 2025 by rpki-client