$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: /TP63Kp/3/8jx1qC/geEhx1HuyJ7LZMe0tlXcXnlnik= Subject key identifier: D4:9E:A6:9D:E7:5A:8B:19:DD:7C:2D:06:48:17:D0:2C:E1:36:EB:1E Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 11A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 118A Signing time: Thu 24 Apr 2025 17:14:11 +0000 Manifest this update: Thu 24 Apr 2025 17:14:10 +0000 Manifest next update: Thu 01 May 2025 17:14:10 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: nLHZ96i/ICDhozIb2DOUONWCwSe7Tawi1QylfIxRcjw=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4516 (0x11a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Apr 24 17:14:10 2025 GMT Not After : May 1 17:14:10 2025 GMT Subject: CN=680a7163-52ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:98:e7:66:3b:35:6f:ab:1a:71:f3:23:a4: b8:04:04:f1:25:ad:3b:70:f2:ad:c8:1c:8c:0c:b8: ab:7c:bf:49:c1:15:27:93:26:b6:c4:2a:ea:81:ec: 0e:17:26:5e:e4:ac:54:ad:0b:62:89:b6:1a:22:93: 70:28:85:8c:9d:84:8d:4a:25:aa:1e:c7:85:bc:6f: 6e:63:f4:9d:2f:08:64:54:4b:41:26:58:7e:ea:60: 05:71:22:7e:03:5a:29:97:80:b2:d6:ea:04:6b:e6: e1:c0:d4:54:1a:52:71:ab:ca:82:f2:f5:e4:36:c1: 60:53:6d:f4:08:32:08:0d:52:69:8d:36:50:9c:3f: 16:71:61:85:b4:d4:82:52:92:17:57:92:15:9c:b9: df:3f:2e:f6:dd:cd:e5:9f:c6:00:81:1e:5b:76:22: 73:f4:9b:9b:40:9a:f3:ba:a8:8c:6b:17:2a:70:d6: e3:33:b1:7c:d2:a2:80:be:2c:64:c6:50:fd:6d:ff: ed:a5:43:de:46:8e:34:d4:7b:cd:46:c7:25:5c:d9: af:88:52:5d:10:30:af:13:a4:96:59:50:b5:20:89: e6:91:71:92:cc:3d:bf:58:ad:12:b5:50:c4:27:6d: 9b:c7:e9:d0:9c:02:fc:8a:3c:7f:d6:1b:4c:fd:61: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9E:A6:9D:E7:5A:8B:19:DD:7C:2D:06:48:17:D0:2C:E1:36:EB:1E X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:00:8b:05:eb:83:86:01:fc:36:82:51:e5:cf:9a:7f:1e:2d: 1c:5f:13:e7:7c:d8:e7:ba:e5:71:af:82:f4:1a:b4:87:47:16: e0:93:a4:f4:3d:6b:f4:d5:1e:36:f8:c5:f9:d3:c4:fa:c6:a4: c1:60:71:e6:52:3e:f1:86:94:0d:52:e3:f4:3b:03:51:5b:e8: e6:bd:27:6b:48:43:2e:af:4b:3e:ab:e8:bd:20:85:1b:e3:5c: c2:47:19:0b:91:cd:f4:9f:49:c0:76:6c:f2:81:45:66:de:b1: 95:08:86:08:91:7c:2e:86:d9:47:8a:84:5f:fe:1b:24:6f:1e: 1f:75:de:6e:5f:66:2e:98:49:45:3b:88:73:7f:3e:25:c0:e7: 65:1a:e6:47:27:d9:cf:41:04:3a:16:d1:95:24:77:e1:8b:31: 99:ce:40:bb:6d:96:c5:7e:b8:da:a4:ad:07:33:41:af:27:d1: f7:72:08:b4:f5:c6:64:34:75:24:b9:10:d3:30:d2:e7:c9:e6: 88:2d:58:a5:87:cb:20:04:c6:49:25:ee:ab:63:c8:e0:2c:19: 12:48:4e:7c:4a:d9:03:de:68:47:ef:04:2e:40:49:b8:ff:3a: 6d:23:47:f3:2e:45:6f:57:1f:17:08:00:88:2b:04:f6:2e:77: 42:e2:74:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUwNDI0MTcxNDEwWhcNMjUwNTAxMTcxNDEwWjAYMRYwFAYD VQQDEw02ODBhNzE2My01MmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RqY52Y7NW+rGnHzI6S4BATxJa07cPKtyByMDLirfL9JwRUnkya2xCrqgewO FyZe5KxUrQtiibYaIpNwKIWMnYSNSiWqHseFvG9uY/SdLwhkVEtBJlh+6mAFcSJ+ A1opl4Cy1uoEa+bhwNRUGlJxq8qC8vXkNsFgU230CDIIDVJpjTZQnD8WcWGFtNSC UpIXV5IVnLnfPy723c3ln8YAgR5bdiJz9JubQJrzuqiMaxcqcNbjM7F80qKAvixk xlD9bf/tpUPeRo401HvNRsclXNmviFJdEDCvE6SWWVC1IInmkXGSzD2/WK0StVDE J22bx+nQnAL8ijx/1htM/WEvGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSepp3n WosZ3XwtBkgX0CzhNuseMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADAIsF64OGAfw2glHlz5p/Hi0cXxPnfNjnuuVxr4L0GrSHRxbgk6T0 PWv01R42+MX508T6xqTBYHHmUj7xhpQNUuP0OwNRW+jmvSdrSEMur0s+q+i9IIUb 41zCRxkLkc30n0nAdmzygUVm3rGVCIYIkXwuhtlHioRf/hskbx4fdd5uX2YumElF O4hzfz4lwOdlGuZHJ9nPQQQ6FtGVJHfhizGZzkC7bZbFfrjapK0HM0GvJ9H3cgi0 9cZkNHUkuRDTMNLnyeaILVilh8sgBMZJJe6rY8jgLBkSSE58StkD3mhH7wQuQEm4 /zptI0fzLkVvVx8XCACIKwT2LndC4nTF -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:36 2025 by rpki-client