$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: zzOwpziNIf24CtGz990vjMEUUEWng68Qzpgb7gGqzPs= Subject key identifier: 3F:32:FB:EE:D5:73:FA:12:BD:74:62:26:37:8C:A0:3D:08:01:02:A1 Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1B3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1B2E Signing time: Thu 24 Apr 2025 16:17:51 +0000 Manifest this update: Thu 24 Apr 2025 16:17:51 +0000 Manifest next update: Thu 01 May 2025 16:17:51 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: FNr9MHwX7RyAln1gRUH/lEpuBWkBSXbP7L3AE4brEjk=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: ZmGMH4g7cGfub9A5Ucup2yr3pAIXwRpZ1v4yX9SvAOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6971 (0x1b3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: Apr 24 16:17:51 2025 GMT Not After : May 1 16:17:51 2025 GMT Subject: CN=680a642f-4931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b2:38:3e:19:57:ce:44:7a:0c:00:2a:2a:7a: f9:10:54:0d:aa:2d:be:5b:9e:ce:fe:0a:4a:a1:13: 47:a0:7f:d7:82:28:ae:cd:56:2c:64:3e:e9:41:66: ec:80:37:04:78:ab:6b:e0:52:1c:10:60:27:b6:b5: c6:6f:8a:cd:ab:a0:59:f9:9e:95:68:73:8c:f8:0f: c7:7c:c7:27:05:af:4f:6b:2e:5a:17:18:98:a5:18: 00:8d:16:85:23:ed:41:ff:6b:68:47:c5:ac:f5:44: 77:f7:eb:26:32:7c:42:df:56:44:7e:27:00:c7:10: a2:13:70:20:8c:e0:16:21:47:28:c1:0b:4e:2c:0e: 91:ee:4f:66:e1:26:66:49:e3:20:ca:e9:e6:39:5b: 78:ec:21:12:cc:33:ad:54:ae:d8:fc:54:0b:6a:4a: e5:c8:56:fb:26:1a:ed:d2:d7:f8:5c:df:69:d8:e3: 3d:f3:2e:d6:d2:f4:39:5e:d7:d7:78:dc:32:d6:b0: 6c:77:60:4f:a8:99:b3:b9:0d:70:57:fc:ff:4a:e0: b1:78:c2:01:c3:c2:a3:36:c9:7a:08:bd:05:1a:6d: ac:db:bc:f6:1c:2b:be:05:80:9e:aa:8e:47:3d:eb: f0:9b:55:3f:d0:15:1f:19:d6:03:1e:f5:8f:0e:b2: e7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:32:FB:EE:D5:73:FA:12:BD:74:62:26:37:8C:A0:3D:08:01:02:A1 X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:eb:c6:5a:e3:e9:c4:5c:25:47:9e:e9:c9:e3:a4:59:15:e4: fb:7e:6a:7c:80:00:21:d7:ca:51:7a:c4:19:ed:41:0c:53:07: c7:e6:85:30:be:6b:40:88:71:2f:c8:73:73:cb:3a:5e:ac:b1: fb:23:8e:cf:7c:4e:7b:bf:ea:2e:b3:02:d0:aa:56:ab:a0:2e: 14:e8:82:8d:f6:30:6c:aa:77:ee:12:61:bb:66:73:2e:e2:87: 7f:53:b3:f5:b2:42:36:95:df:06:b7:72:5a:f1:70:0e:3d:63: ee:74:e8:05:35:e2:06:14:a3:7a:52:09:7f:75:08:1e:70:ce: 61:1a:d8:91:47:b6:3a:cd:29:3b:04:66:d9:14:b3:83:de:01: b3:fd:5b:62:78:eb:82:5b:49:f5:bb:69:fd:88:5d:e6:ab:72: be:27:bb:c2:e4:40:1e:da:71:b2:98:ea:9a:31:37:e1:c5:83: f4:c1:73:a4:d8:e1:32:e2:4a:3f:41:2d:68:6b:b4:01:f7:df: 09:87:93:55:ca:ba:4a:65:c3:49:05:38:1f:e4:bf:02:8c:2c: 06:4c:cf:a4:b6:43:e5:37:c6:87:d6:0c:8f:cf:74:8d:c1:d4: e8:9a:f2:14:c6:e3:be:4e:e4:9b:a0:3a:5b:2f:29:70:cf:c5: 15:a6:2e:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjUwNDI0MTYxNzUxWhcNMjUwNTAxMTYxNzUxWjAYMRYwFAYD VQQDEw02ODBhNjQyZi00OTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8rI4PhlXzkR6DAAqKnr5EFQNqi2+W57O/gpKoRNHoH/XgiiuzVYsZD7pQWbs gDcEeKtr4FIcEGAntrXGb4rNq6BZ+Z6VaHOM+A/HfMcnBa9Pay5aFxiYpRgAjRaF I+1B/2toR8Ws9UR39+smMnxC31ZEficAxxCiE3AgjOAWIUcowQtOLA6R7k9m4SZm SeMgyunmOVt47CESzDOtVK7Y/FQLakrlyFb7Jhrt0tf4XN9p2OM98y7W0vQ5XtfX eNwy1rBsd2BPqJmzuQ1wV/z/SuCxeMIBw8KjNsl6CL0FGm2s27z2HCu+BYCeqo5H Pevwm1U/0BUfGdYDHvWPDrLnkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8y++7V c/oSvXRiJjeMoD0IAQKhMB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/68Za4+nEXCVHnunJ46RZFeT7fmp8gAAh18pResQZ7UEMUwfH5oUw vmtAiHEvyHNzyzperLH7I47PfE57v+ouswLQqlaroC4U6IKN9jBsqnfuEmG7ZnMu 4od/U7P1skI2ld8Gt3Ja8XAOPWPudOgFNeIGFKN6Ugl/dQgecM5hGtiRR7Y6zSk7 BGbZFLOD3gGz/VtieOuCW0n1u2n9iF3mq3K+J7vC5EAe2nGymOqaMTfhxYP0wXOk 2OEy4ko/QS1oa7QB998Jh5NVyrpKZcNJBTgf5L8CjCwGTM+ktkPlN8aH1gyPz3SN wdTomvIUxuO+TuSboDpbLylwz8UVpi63 -----END CERTIFICATE-----Generated at Sat Apr 26 04:57:08 2025 by rpki-client