$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: 4A1ZFh5cOEpfwJ5uXcoeOGVsCB3O5o/LRH7I5CTDiNQ= Subject key identifier: 71:7D:C1:A7:D0:2F:9B:D2:11:6F:69:16:04:7A:3D:05:B2:DF:37:1F Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 0145 Signing time: Sat 05 Apr 2025 03:39:39 +0000 Manifest this update: Sat 05 Apr 2025 03:39:39 +0000 Manifest next update: Sat 12 Apr 2025 03:39:39 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: EUjcsKGuc5IWJyTuRf0MtakDUOA6lQd45WDzoQPN6aI=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: HsjfDSOih06ECrmd3NlukL0cYpkEm4olWRK90K810ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627 Validity Not Before: Apr 5 03:39:39 2025 GMT Not After : Apr 12 03:39:39 2025 GMT Subject: CN=67f0a5fb-99be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f9:f6:6a:0b:5d:a6:0b:85:d7:55:cd:b1:c3: 74:9e:79:92:c1:f7:5a:68:0a:d0:c6:6a:58:66:db: 41:cd:a8:3c:a2:d4:3f:3b:30:28:5b:a1:5e:d6:1f: 8f:65:fa:6c:ad:4d:61:f9:1e:c2:5e:08:c0:bd:5e: 2b:0a:a3:04:46:73:f9:c5:05:6e:19:b4:3b:50:b1: ad:2e:55:44:0f:5b:75:90:71:66:d1:4b:30:ca:d5: 74:2d:a8:67:e6:aa:cc:7b:5f:ec:90:cb:92:06:6a: 84:01:55:c2:f1:8b:c7:6c:3a:89:80:b2:73:3a:a2: 23:3e:b7:64:bf:90:f3:13:1d:ff:a0:e4:ad:89:66: 89:02:d5:24:c2:fe:f4:54:18:7e:7c:72:e7:59:17: c2:63:5e:de:b9:65:7c:43:af:4b:7f:b6:fe:11:35: fc:79:0a:23:0d:02:30:3e:d5:f6:ff:65:93:9e:2f: 70:99:7c:8a:cc:fb:1c:09:96:9d:0b:85:00:28:22: 97:f7:13:c9:2c:32:71:53:1e:83:8f:e9:05:85:7b: d0:9f:ec:5f:15:b7:0b:a3:d7:12:48:01:63:2c:71: fb:68:09:70:15:5d:61:d8:c1:e7:a6:25:10:51:f7: 71:a7:9f:51:3b:58:6e:16:95:e4:39:d4:dd:8f:a9: 2b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7D:C1:A7:D0:2F:9B:D2:11:6F:69:16:04:7A:3D:05:B2:DF:37:1F X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:76:3a:fa:ae:dc:79:09:ef:4e:7e:ce:e9:c6:cf:1b:af:19: 12:ba:29:60:26:5a:5b:93:86:bc:1e:fd:ad:7a:75:f9:2a:ca: 6b:92:0e:d7:ee:79:c2:46:ec:59:b7:05:75:0b:e5:2f:46:a4: a6:d5:34:25:b0:1c:0b:19:6f:23:7c:5c:0b:00:f9:a1:67:a4: 5f:50:94:22:4f:84:66:d7:ff:b2:13:6e:7e:dd:05:a4:5f:33: 7c:db:99:c9:76:d0:76:68:05:d4:7b:14:fb:27:f4:f8:b3:66: 6f:02:68:ce:31:e7:0e:38:0f:44:1e:23:f3:be:e5:8b:0b:20: 08:ae:44:69:6b:e0:c7:a7:e3:74:e3:0a:31:ac:89:aa:14:23: 14:85:ba:d8:22:c5:d2:05:76:0f:86:15:21:72:dd:c8:6b:e0: 68:7d:57:b8:4a:e6:b2:5a:5b:ac:7a:19:c1:24:f3:b5:4b:1d: 16:2c:17:99:87:b8:80:9b:51:7e:13:00:fe:22:48:e9:73:0c: bf:38:15:d0:1c:28:fc:73:b0:05:31:7d:3e:1f:69:13:6f:9a: b2:4e:0f:a3:34:a0:db:d9:91:e3:73:63:da:7e:32:f3:10:f5: 20:9e:d9:79:2c:bd:a8:e7:2d:eb:9a:60:21:8f:a2:45:5f:85: 14:cd:c8:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUwNDA1MDMzOTM5WhcNMjUwNDEyMDMzOTM5WjAYMRYwFAYD VQQDEw02N2YwYTVmYi05OWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkvn2agtdpguF11XNscN0nnmSwfdaaArQxmpYZttBzag8otQ/OzAoW6Fe1h+P ZfpsrU1h+R7CXgjAvV4rCqMERnP5xQVuGbQ7ULGtLlVED1t1kHFm0UswytV0Lahn 5qrMe1/skMuSBmqEAVXC8YvHbDqJgLJzOqIjPrdkv5DzEx3/oOStiWaJAtUkwv70 VBh+fHLnWRfCY17euWV8Q69Lf7b+ETX8eQojDQIwPtX2/2WTni9wmXyKzPscCZad C4UAKCKX9xPJLDJxUx6Dj+kFhXvQn+xfFbcLo9cSSAFjLHH7aAlwFV1h2MHnpiUQ Ufdxp59RO1huFpXkOdTdj6krbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF9wafQ L5vSEW9pFgR6PQWy3zcfMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBodjr6rtx5Ce9Ofs7pxs8brxkSuilgJlpbk4a8Hv2tenX5Ksprkg7X 7nnCRuxZtwV1C+UvRqSm1TQlsBwLGW8jfFwLAPmhZ6RfUJQiT4Rm1/+yE25+3QWk XzN825nJdtB2aAXUexT7J/T4s2ZvAmjOMecOOA9EHiPzvuWLCyAIrkRpa+DHp+N0 4woxrImqFCMUhbrYIsXSBXYPhhUhct3Ia+BofVe4SuayWlusehnBJPO1Sx0WLBeZ h7iAm1F+EwD+Ikjpcwy/OBXQHCj8c7AFMX0+H2kTb5qyTg+jNKDb2ZHjc2PafjLz EPUgntl5LL2o5y3rmmAhj6JFX4UUzcgq -----END CERTIFICATE-----Generated at Mon Apr 7 01:24:46 2025 by rpki-client