$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft File: wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft (raw, json) Hash identifier: bL8eVVZa+sqCxn7bigOiJkbdG4b2a0LduRO+RKph1dQ= Subject key identifier: A9:A7:2F:9D:53:46:3D:2D:7A:61:1B:C3:21:E6:DB:01:9E:8E:96:AA Authority key identifier: C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D Certificate issuer: /CN=A913DA3E/serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft Manifest number: 066C Signing time: Thu 10 Apr 2025 22:16:08 +0000 Manifest this update: Thu 10 Apr 2025 22:16:07 +0000 Manifest next update: Thu 17 Apr 2025 22:16:07 +0000 Files and hashes: 1: wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl (hash: +33XYmbmmggbPKCe9RBKFe/MHE9umxO7hAZ9y3TysYk=) 2: 19AB8E92734611EB816DB064C4F9AE02.roa (hash: qtAk8oTZDrgTWNBm9Xz8I2B3TKuJD5JEiZtJXgjDA28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA3E, serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Validity Not Before: Apr 10 22:16:07 2025 GMT Not After : Apr 17 22:16:07 2025 GMT Subject: CN=67f84327-a5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e7:76:1d:38:fa:eb:63:27:32:28:3d:48:43: 1a:67:77:b9:f4:69:42:82:4c:30:52:93:9a:07:da: 64:b6:bb:1c:e4:63:2a:e8:46:19:cd:e9:b9:c5:2d: ff:62:26:18:56:ef:a1:61:24:de:d3:60:42:ab:df: 34:25:d4:c4:a5:f7:6e:d9:bc:44:68:44:10:56:b8: f6:44:a8:27:8d:18:f7:f1:60:62:d0:e5:52:27:80: 3a:f2:fe:7d:70:f7:94:8d:26:90:46:8c:fa:07:93: 41:89:34:f9:91:9f:b4:fb:5b:c4:97:15:f8:63:8e: e5:71:08:34:1c:3d:9c:07:de:e2:dd:0e:28:f1:ce: ad:28:bb:00:fd:ac:42:2e:a1:5d:c2:55:c1:0b:e7: 4b:8f:63:93:8a:60:64:f5:3f:0d:f1:81:83:52:2f: f3:4c:ae:a7:cc:64:cf:5e:2c:48:5a:e6:e0:e2:80: ae:0f:47:57:20:0b:ca:e0:ed:5f:d5:85:3d:95:7c: a5:7d:b3:ad:c8:08:b8:0f:08:a9:73:71:e0:51:08: 9e:a7:9c:09:b4:17:74:73:6e:9f:3d:c8:3a:5e:92: a0:0d:f0:f3:a5:c8:23:75:6e:23:5d:5f:90:b5:cc: b2:a9:d9:05:90:9e:ca:d2:84:19:55:bb:76:81:9e: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A7:2F:9D:53:46:3D:2D:7A:61:1B:C3:21:E6:DB:01:9E:8E:96:AA X509v3 Authority Key Identifier: keyid:C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:fa:80:3f:fd:e6:d5:f1:68:cd:44:91:d4:a6:fb:ae:fa:e4: 12:15:38:a9:34:a7:af:e1:40:83:fa:6d:bb:e8:57:44:09:43: 4b:4b:f1:10:b7:73:e5:48:51:59:63:c7:d7:e4:c3:59:38:cc: 6f:24:b8:31:0b:2e:5a:0a:f6:9c:d1:59:63:05:87:70:51:cd: 37:a1:e6:76:f4:21:4d:b9:1f:6d:c8:79:32:b9:3c:4d:30:43: d2:06:83:5a:fc:a0:9d:f6:27:56:e7:28:4b:e8:d2:bc:ce:3a: 07:11:3b:ac:5d:65:fd:ee:f5:5e:43:24:39:90:e8:ad:00:a7: 27:81:33:cc:ec:18:7a:e2:c2:3c:59:f0:dc:cd:8e:f7:d1:a9: ae:a1:d8:59:55:ea:99:5f:b9:b0:34:e5:41:99:a1:0f:b5:94: 49:2d:6b:91:72:75:96:1a:c0:91:fe:89:c3:54:1f:22:21:b9: c0:b5:73:6b:45:72:8d:d6:fa:6a:7b:d2:ca:bb:56:a2:98:d3: da:7c:d3:81:bb:9d:ca:3b:23:2b:71:96:6f:d5:00:c6:c3:f2: 53:82:b3:ac:a7:31:47:26:f7:7a:9d:56:e3:d5:fa:c4:6e:fe: 21:92:e3:81:62:61:e1:38:56:44:ed:73:80:d5:bb:ca:7c:df: b6:15:66:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBM0UxMTAvBgNVBAUTKEMxM0Q4RjgyQjNEM0NFNDc0NjUzNTQwRTUzNjVDNEM5 MDg5NEMwM0QwHhcNMjUwNDEwMjIxNjA3WhcNMjUwNDE3MjIxNjA3WjAYMRYwFAYD VQQDEw02N2Y4NDMyNy1hNWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+d2HTj662MnMig9SEMaZ3e59GlCgkwwUpOaB9pktrsc5GMq6EYZzem5xS3/ YiYYVu+hYSTe02BCq980JdTEpfdu2bxEaEQQVrj2RKgnjRj38WBi0OVSJ4A68v59 cPeUjSaQRoz6B5NBiTT5kZ+0+1vElxX4Y47lcQg0HD2cB97i3Q4o8c6tKLsA/axC LqFdwlXBC+dLj2OTimBk9T8N8YGDUi/zTK6nzGTPXixIWubg4oCuD0dXIAvK4O1f 1YU9lXylfbOtyAi4Dwipc3HgUQiep5wJtBd0c26fPcg6XpKgDfDzpcgjdW4jXV+Q tcyyqdkFkJ7K0oQZVbt2gZ7v2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmnL51T Rj0temEbwyHm2wGejpaqMB8GA1UdIwQYMBaAFME9j4Kz085HRlNUDlNlxMkIlMA9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREEzRS80MjI2ODc0ODcz NDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHprZEdVMVFPVTJYRXlRaVV3 RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUMlBnclBUemtkR1UxUU9VMlhFeVFpVXdEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REEzRS80MjI2ODc0ODczNDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHpr ZEdVMVFPVTJYRXlRaVV3RDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz+oA//ebV8WjNRJHUpvuu+uQSFTipNKev4UCD+m276FdECUNLS/EQ t3PlSFFZY8fX5MNZOMxvJLgxCy5aCvac0VljBYdwUc03oeZ29CFNuR9tyHkyuTxN MEPSBoNa/KCd9idW5yhL6NK8zjoHETusXWX97vVeQyQ5kOitAKcngTPM7Bh64sI8 WfDczY730amuodhZVeqZX7mwNOVBmaEPtZRJLWuRcnWWGsCR/onDVB8iIbnAtXNr RXKN1vpqe9LKu1aimNPafNOBu53KOyMrcZZv1QDGw/JTgrOspzFHJvd6nVbj1frE bv4hkuOBYmHhOFZE7XOA1bvKfN+2FWY1 -----END CERTIFICATE-----Generated at Sat Apr 12 17:43:11 2025 by rpki-client