$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft File: ELQL29GDlBfXrRIzKwvm-fxugQU.mft (raw, json) Hash identifier: XkLuwKhdZQkO9Xb6oeM6wXuzYXoD6y6TO3HobIx48Lk= Subject key identifier: 54:9D:DB:E7:A6:A3:10:84:A3:25:35:04:44:C5:9D:B1:71:04:0C:94 Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05 Certificate issuer: /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105 Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft Manifest number: 03CE Signing time: Thu 17 Apr 2025 00:15:27 +0000 Manifest this update: Thu 17 Apr 2025 00:15:26 +0000 Manifest next update: Thu 24 Apr 2025 00:15:26 +0000 Files and hashes: 1: ELQL29GDlBfXrRIzKwvm-fxugQU.crl (hash: 2k+MnY8F8O1E7XN0eCDq8TuQcyJLwJ/arZYNm+umhjM=) 2: 05A179C2B02E11ECA990305CC4F9AE02.roa (hash: yxgOM7Alp9+Etb0L7ZdDdvPfWsF/rS6M3JXXFnzbA5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 00:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914189D, serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105 Validity Not Before: Apr 17 00:15:26 2025 GMT Not After : Apr 24 00:15:26 2025 GMT Subject: CN=6800481e-ade8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c9:64:91:b6:e6:65:43:13:73:7d:b9:44:74: 75:16:97:bc:11:ba:f2:78:fc:6f:cd:98:59:02:99: 38:c5:f9:17:e0:78:2c:12:18:43:99:d9:bb:42:85: e3:82:9e:f6:c8:c1:a9:13:02:ca:69:dc:5a:1f:93: fe:99:84:5b:4a:7e:62:5a:28:8c:0b:38:c6:28:f3: 70:73:81:a0:85:c3:8b:f7:9b:b2:0f:5a:0c:5e:c0: 83:d9:b6:26:0c:e1:7d:da:af:20:a6:51:c9:5b:1e: 90:fd:d8:4b:59:56:1e:ca:da:1d:44:eb:bc:10:56: 85:58:0c:d4:22:f1:ce:9e:d9:d9:1d:c8:56:7e:b4: f6:3b:3a:df:bc:c1:41:49:af:0f:3f:22:08:54:f0: 27:eb:d7:a3:4e:98:15:93:35:94:1d:4e:6b:82:a5: 70:7a:a8:6a:dc:3b:0c:30:58:2e:c6:87:45:e4:0d: 54:dd:2e:9c:27:85:b1:4f:5f:9f:14:03:af:6a:7c: f2:9d:71:04:98:9c:ba:2f:f5:ad:2f:07:c0:b9:6b: 72:35:ec:2f:1a:e0:6c:93:8a:e9:4a:2c:71:6d:46: 6f:b1:af:fc:89:ea:97:43:05:ac:f9:6a:dc:f6:4c: e9:4d:82:26:91:b6:77:59:7d:c4:b0:61:f7:a7:0d: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9D:DB:E7:A6:A3:10:84:A3:25:35:04:44:C5:9D:B1:71:04:0C:94 X509v3 Authority Key Identifier: keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:32:7e:88:5b:05:6b:be:35:08:c5:3a:fd:71:99:4f:bb:b3: 19:52:a1:26:a2:03:d4:33:3d:1b:f8:5f:4d:f5:c1:64:e0:ab: ac:14:e9:21:c0:70:42:d5:77:11:27:18:ab:50:d5:f5:4a:87: 7d:1b:67:78:14:83:f8:db:03:1a:78:dd:1e:1e:72:65:c3:ac: e3:06:0f:a9:ef:58:90:f7:ae:f1:b7:dd:15:45:fc:e5:73:9c: ff:cd:df:fe:28:92:83:8a:58:02:e3:9b:43:fa:6d:2a:85:cd: d2:0b:96:26:ce:59:db:20:87:14:cc:5a:b4:1c:94:65:07:6f: 02:76:d5:62:e5:80:f1:0b:9d:ab:a7:42:19:21:f3:56:df:c5: 00:37:b3:af:26:ad:43:8f:60:0a:ed:05:52:a2:e7:3f:e8:96: 22:7c:78:46:97:c3:d2:6d:15:ac:c1:ea:35:50:16:0c:bc:61: 86:bf:50:4f:6c:35:29:2f:1d:e6:43:28:98:16:b1:bf:63:cd: 1a:ca:88:34:37:4e:5d:00:68:80:de:37:e4:3b:a5:37:95:bb: fd:35:cc:d2:7b:ed:68:93:70:28:4e:b7:75:e9:cd:e0:70:e0: 6f:6f:c8:d7:1a:d6:29:34:80:d0:9a:d4:a5:c9:8b:8f:cc:a3: 9f:17:09:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE4OUQxMTAvBgNVBAUTKDEwQjQwQkRCRDE4Mzk0MTdEN0FEMTIzMzJCMEJFNkY5 RkM2RTgxMDUwHhcNMjUwNDE3MDAxNTI2WhcNMjUwNDI0MDAxNTI2WjAYMRYwFAYD VQQDEw02ODAwNDgxZS1hZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMlkkbbmZUMTc325RHR1Fpe8EbryePxvzZhZApk4xfkX4HgsEhhDmdm7QoXj gp72yMGpEwLKadxaH5P+mYRbSn5iWiiMCzjGKPNwc4GghcOL95uyD1oMXsCD2bYm DOF92q8gplHJWx6Q/dhLWVYeytodROu8EFaFWAzUIvHOntnZHchWfrT2OzrfvMFB Sa8PPyIIVPAn69ejTpgVkzWUHU5rgqVweqhq3DsMMFguxodF5A1U3S6cJ4WxT1+f FAOvanzynXEEmJy6L/WtLwfAuWtyNewvGuBsk4rpSixxbUZvsa/8ieqXQwWs+Wrc 9kzpTYImkbZ3WX3EsGH3pw3kBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSd2+em oxCEoyU1BETFnbFxBAyUMB8GA1UdIwQYMBaAFBC0C9vRg5QX160SMysL5vn8boEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTg5RC9GNDRGNTZFMjgx QzcxMUVDOTk1MjMyNERDNEY5QUUwMi9FTFFMMjlHRGxCZlhyUkl6S3d2bS1meHVn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VMUUwyOUdEbEJmWHJSSXpLd3ZtLWZ4dWdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTg5RC9GNDRGNTZFMjgxQzcxMUVDOTk1MjMyNERDNEY5QUUwMi9FTFFMMjlHRGxC ZlhyUkl6S3d2bS1meHVnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfMn6IWwVrvjUIxTr9cZlPu7MZUqEmogPUMz0b+F9N9cFk4KusFOkh wHBC1XcRJxirUNX1Sod9G2d4FIP42wMaeN0eHnJlw6zjBg+p71iQ967xt90VRfzl c5z/zd/+KJKDilgC45tD+m0qhc3SC5YmzlnbIIcUzFq0HJRlB28CdtVi5YDxC52r p0IZIfNW38UAN7OvJq1Dj2AK7QVSouc/6JYifHhGl8PSbRWsweo1UBYMvGGGv1BP bDUpLx3mQyiYFrG/Y80ayog0N05dAGiA3jfkO6U3lbv9NczSe+1ok3AoTrd16c3g cOBvb8jXGtYpNIDQmtSlyYuPzKOfFwl4 -----END CERTIFICATE-----Generated at Sat Apr 19 00:53:53 2025 by rpki-client