$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: //wEz17YgUXotRUSv0p0lnGL4XjfIsGVi5u3l1BPIfw= Subject key identifier: 66:08:8C:9C:93:29:09:AA:99:D9:AB:6D:6A:1A:F2:63:A2:A3:3C:21 Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 0418 Signing time: Fri 25 Apr 2025 00:12:53 +0000 Manifest this update: Fri 25 Apr 2025 00:12:52 +0000 Manifest next update: Fri 02 May 2025 00:12:52 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: ErqOm+Lc4oHREc1N+RCpLZlPPPGIQvKuIERDQ5zKbec=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: IyhV9MGtQ1VyJp3y60dauCI+itu5hIIH24D+SkqtwwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: Apr 25 00:12:52 2025 GMT Not After : May 2 00:12:52 2025 GMT Subject: CN=680ad385-d849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:d7:ab:bb:7a:92:a3:72:58:df:5b:65:9f: b3:9a:b2:d6:12:62:9a:e6:13:91:ec:b5:cd:b9:e3: 30:8d:12:c3:f4:6e:ad:ab:ce:26:de:18:c5:81:25: 68:e5:d0:3a:eb:77:31:e0:a2:1c:bf:58:8f:a0:21: 9a:9b:3e:da:d4:1b:a9:b8:93:00:af:5f:fe:5f:9a: d2:96:ea:2b:54:e2:ee:88:c0:e8:8a:ce:cf:11:dd: 8b:be:bf:19:46:8b:8f:4e:f1:09:aa:79:22:9e:44: 98:cc:72:ba:68:e0:c6:ff:04:46:30:c0:18:ba:55: 49:33:1b:52:31:03:e5:72:6c:9b:1d:5e:fa:bb:88: 3a:29:b1:fd:cb:5f:1a:25:fa:5b:46:0d:8a:e7:4b: 9c:da:9e:a4:a3:7f:00:a0:77:a9:2d:75:68:f0:ec: e3:f7:b5:4e:cc:5d:65:66:6c:b4:f4:43:eb:e1:df: 85:44:34:b5:84:79:88:4b:10:5b:85:28:55:e4:1d: 8b:d4:36:36:1b:71:86:98:07:fb:4f:ac:37:ef:ad: 2e:cb:73:44:0a:01:7c:4a:86:56:9c:17:9e:d1:21: 51:18:fc:52:40:73:80:c0:e0:28:f5:5f:7f:2f:3c: 6b:df:71:27:d4:6d:4d:a0:31:16:cd:7c:f2:ba:84: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:08:8C:9C:93:29:09:AA:99:D9:AB:6D:6A:1A:F2:63:A2:A3:3C:21 X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a1:8b:c4:ce:87:13:f9:c5:12:ec:2f:00:0a:67:6e:be:a4: 4d:8e:5a:f2:ed:7d:df:a2:ca:95:ae:4d:d6:2e:8f:07:06:84: c1:63:77:3e:9f:47:02:1f:36:2e:8c:f7:3c:34:e3:d9:91:52: ed:f6:ef:89:35:2e:fd:f6:df:7d:e0:3b:58:c1:57:78:02:31: 13:d8:8c:05:d2:99:e2:ce:85:54:0b:12:69:f8:c8:7c:e1:7b: 4f:53:18:fc:ac:ae:47:71:31:dd:fc:9d:72:c3:68:10:6b:9b: 55:f9:5c:c2:c2:b8:55:3c:be:49:a8:5d:57:8f:bd:b9:8f:b3: e1:aa:33:ad:d2:d1:d0:23:38:90:18:5d:59:cc:2d:3d:18:65: 0e:50:d8:76:d4:31:97:90:2c:f8:69:f9:b5:e8:c1:4e:fd:8d: 80:9a:48:7b:1d:4e:0a:c3:36:36:66:42:1c:d6:b3:f0:16:ca: 43:1d:d9:55:79:b9:76:2a:e1:bb:03:bb:aa:d0:79:bc:5c:7e: e5:b3:26:67:7e:15:33:7e:aa:64:7f:dc:88:62:6e:bf:bd:40: 8e:8f:da:01:82:24:b7:59:17:23:a2:e8:2e:d9:c1:cc:55:6d: 28:32:df:5f:8b:7c:ef:8b:85:43:7e:ca:ca:68:ef:c2:c1:18: 63:e7:b2:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjUwNDI1MDAxMjUyWhcNMjUwNTAyMDAxMjUyWjAYMRYwFAYD VQQDEw02ODBhZDM4NS1kODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvc7Xq7t6kqNyWN9bZZ+zmrLWEmKa5hOR7LXNueMwjRLD9G6tq84m3hjFgSVo 5dA663cx4KIcv1iPoCGamz7a1BupuJMAr1/+X5rSluorVOLuiMDois7PEd2Lvr8Z RouPTvEJqnkinkSYzHK6aODG/wRGMMAYulVJMxtSMQPlcmybHV76u4g6KbH9y18a JfpbRg2K50uc2p6ko38AoHepLXVo8Ozj97VOzF1lZmy09EPr4d+FRDS1hHmISxBb hShV5B2L1DY2G3GGmAf7T6w3760uy3NECgF8SoZWnBee0SFRGPxSQHOAwOAo9V9/ Lzxr33En1G1NoDEWzXzyuoQF7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYIjJyT KQmqmdmrbWoa8mOiozwhMB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpoYvEzocT+cUS7C8ACmduvqRNjlry7X3fosqVrk3WLo8HBoTBY3c+ n0cCHzYujPc8NOPZkVLt9u+JNS799t994DtYwVd4AjET2IwF0pnizoVUCxJp+Mh8 4XtPUxj8rK5HcTHd/J1yw2gQa5tV+VzCwrhVPL5JqF1Xj725j7PhqjOt0tHQIziQ GF1ZzC09GGUOUNh21DGXkCz4afm16MFO/Y2Amkh7HU4KwzY2ZkIc1rPwFspDHdlV ebl2KuG7A7uq0Hm8XH7lsyZnfhUzfqpkf9yIYm6/vUCOj9oBgiS3WRcjougu2cHM VW0oMt9fi3zvi4VDfsrKaO/CwRhj57Ig -----END CERTIFICATE-----Generated at Sat Apr 26 03:39:38 2025 by rpki-client