$ rpki-client -vvf rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft File: sYTDX2rtv7hd2kET8nUuDInKOpA.mft (raw, json) Hash identifier: A2hHzGoCIWJQl6H1LTqL6TYhOvd7mSgvBKZuRSsIHGE= Subject key identifier: 72:58:5D:46:09:E6:9D:45:1A:AB:E4:06:53:99:AD:65:09:84:FC:E2 Authority key identifier: B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90 Certificate issuer: /CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90 Certificate serial: 0ADE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft Manifest number: 0AD7 Signing time: Thu 24 Apr 2025 19:19:47 +0000 Manifest this update: Thu 24 Apr 2025 19:19:46 +0000 Manifest next update: Thu 01 May 2025 19:19:46 +0000 Files and hashes: 1: sYTDX2rtv7hd2kET8nUuDInKOpA.crl (hash: c5Kr7hPWmv19Hhg9iIxH423C1INynJ2cu55Hjazt7k4=) 2: F9D16F1CC7D811EDB42DFF20C4F9AE02.roa (hash: CtRLKn6Ho9BgRI41OP+GfRuStv7HD0JEHEC66mznFgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2782 (0xade) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F88F4, serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90 Validity Not Before: Apr 24 19:19:46 2025 GMT Not After : May 1 19:19:46 2025 GMT Subject: CN=680a8ed2-99c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c7:33:52:42:58:3e:37:50:1f:19:0a:64:bd: b9:df:f0:0c:4a:2a:f6:a3:d3:38:7f:b1:46:25:18: 2f:f9:26:ab:16:b8:dc:ba:98:95:49:77:9c:09:4a: ee:9a:53:41:01:87:fd:2c:d8:d4:fb:ae:c8:5e:1c: b0:19:dc:81:6c:27:00:99:3a:13:61:e5:d1:a1:b9: 70:b2:76:72:3b:39:8c:7c:c2:fa:ec:41:42:77:ed: 53:38:1f:d3:ec:c3:9e:5c:ba:18:df:ad:fc:af:00: 4f:20:d1:f9:bc:94:c3:d8:4c:1b:5f:69:fc:c4:2f: d0:cb:0d:7f:9c:cc:f0:5c:6a:58:42:b6:d5:68:08: 27:16:a9:32:c8:77:8b:24:48:d1:ed:09:21:f5:6f: 54:4e:20:d5:7e:33:7c:db:f2:69:f2:14:5c:5a:f8: 2d:6b:89:af:72:87:3e:3a:fc:ad:d1:90:cb:60:a5: 31:bd:a6:d2:ef:84:a3:79:61:da:66:74:f4:06:e1: 15:06:77:2e:0d:46:61:1f:40:f1:81:f4:61:af:f2: 35:23:62:60:d2:80:07:60:79:0b:e0:da:05:c6:86: 17:e2:6f:20:86:bc:72:05:b4:25:f5:b0:80:0d:ce: 78:9c:4a:73:1c:99:d8:7b:ea:d1:36:56:2e:33:18: 15:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:58:5D:46:09:E6:9D:45:1A:AB:E4:06:53:99:AD:65:09:84:FC:E2 X509v3 Authority Key Identifier: keyid:B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:90:2c:07:b1:51:bd:a1:42:47:ec:ae:29:83:6a:46:9d:dc: 5e:7c:7b:df:c4:93:f2:ef:f3:e4:22:da:9c:0d:bb:a1:96:41: 8e:c8:0a:a8:b0:26:51:23:fb:87:af:4a:f3:e2:78:17:d3:f2: 17:08:c0:17:e3:a1:09:13:73:5b:26:c2:e7:da:66:66:29:56: 85:42:d1:4b:48:74:38:d6:d2:8b:0d:57:9c:0a:69:b9:3c:39: d1:bf:6c:fa:3b:77:1a:85:64:18:77:37:10:fb:22:d3:76:22: 5e:86:24:2d:0a:a9:50:ca:13:d1:f5:99:5f:4b:c5:12:ad:0b: 52:bf:7d:b6:ca:ed:22:b0:bc:c2:a6:b0:52:a6:67:ed:6a:84: 71:20:fd:7f:b7:54:3a:c1:f7:c2:e8:c8:af:40:2f:bc:f8:d8: af:a3:34:c3:71:30:30:09:7f:fb:c5:6f:96:12:13:ba:6d:b0: ff:7c:6b:3d:cb:7d:86:64:0e:72:c9:c5:cd:18:0e:ef:a4:52: 6f:0a:ef:0b:f9:76:2e:1e:16:b7:80:d2:c9:6c:a0:3d:0d:84: 2b:23:58:8b:e2:5a:6c:08:67:aa:ea:3a:18:2b:ce:ae:35:aa: b4:ca:4e:9c:d7:55:79:6a:a2:68:8b:af:9b:c1:08:77:ce:65: 24:87:23:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg4RjQxMTAvBgNVBAUTKEIxODRDMzVGNkFFREJGQjg1RERBNDExM0YyNzUyRTBD ODlDQTNBOTAwHhcNMjUwNDI0MTkxOTQ2WhcNMjUwNTAxMTkxOTQ2WjAYMRYwFAYD VQQDEw02ODBhOGVkMi05OWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MczUkJYPjdQHxkKZL253/AMSir2o9M4f7FGJRgv+SarFrjcupiVSXecCUru mlNBAYf9LNjU+67IXhywGdyBbCcAmToTYeXRoblwsnZyOzmMfML67EFCd+1TOB/T 7MOeXLoY3638rwBPINH5vJTD2EwbX2n8xC/Qyw1/nMzwXGpYQrbVaAgnFqkyyHeL JEjR7Qkh9W9UTiDVfjN82/Jp8hRcWvgta4mvcoc+Ovyt0ZDLYKUxvabS74SjeWHa ZnT0BuEVBncuDUZhH0DxgfRhr/I1I2Jg0oAHYHkL4NoFxoYX4m8ghrxyBbQl9bCA Dc54nEpzHJnYe+rRNlYuMxgV/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJYXUYJ 5p1FGqvkBlOZrWUJhPziMB8GA1UdIwQYMBaAFLGEw19q7b+4XdpBE/J1LgyJyjqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODhGNC8wN0FFNzdDQzQ4 Q0MxMUVBQUVGNTAxNTFDNEY5QUUwMi9zWVREWDJydHY3aGQya0VUOG5VdURJbktP cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZVERYMnJ0djdoZDJrRVQ4blV1REluS09wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODhGNC8wN0FFNzdDQzQ4Q0MxMUVBQUVGNTAxNTFDNEY5QUUwMi9zWVREWDJydHY3 aGQya0VUOG5VdURJbktPcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9kCwHsVG9oUJH7K4pg2pGndxefHvfxJPy7/PkItqcDbuhlkGOyAqo sCZRI/uHr0rz4ngX0/IXCMAX46EJE3NbJsLn2mZmKVaFQtFLSHQ41tKLDVecCmm5 PDnRv2z6O3cahWQYdzcQ+yLTdiJehiQtCqlQyhPR9ZlfS8USrQtSv322yu0isLzC prBSpmftaoRxIP1/t1Q6wffC6MivQC+8+NivozTDcTAwCX/7xW+WEhO6bbD/fGs9 y32GZA5yycXNGA7vpFJvCu8L+XYuHha3gNLJbKA9DYQrI1iL4lpsCGeq6joYK86u Naq0yk6c11V5aqJoi6+bwQh3zmUkhyP4 -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:44 2025 by rpki-client