$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft File: R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json) Hash identifier: yyQN4LZLrKIy2rrR34/c3QJnPG1z6m3TxurKfPOR8Vs= Subject key identifier: EB:0A:6E:A3:30:22:83:9E:30:CD:95:58:BA:03:A6:EF:F5:51:61:0B Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 Certificate issuer: /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft Manifest number: 56 Signing time: Sat 05 Apr 2025 06:29:26 +0000 Manifest this update: Sat 05 Apr 2025 06:29:26 +0000 Manifest next update: Sat 12 Apr 2025 06:29:26 +0000 Files and hashes: 1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: 97yV1Jq77nGRBxG5Cn1p6RFMJAvzB5tFSvChfB9I/m0=) 2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: uOl4+NzZB6fPlXrYszF0PeNPfsE4Pp9BL5TML7ATF7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2 Validity Not Before: Apr 5 06:29:26 2025 GMT Not After : Apr 12 06:29:26 2025 GMT Subject: CN=67f0cdc6-d728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:1b:32:c3:8d:3d:8c:f5:78:19:62:59:5f: a9:e6:58:5c:09:6c:63:26:64:99:69:ff:6b:70:db: e1:56:cd:3a:d7:05:b2:85:39:b4:0a:8e:37:00:85: ad:04:04:1b:4f:89:3b:34:01:cc:c9:03:bd:12:a6: 58:76:cd:03:25:21:f7:7f:12:cb:78:70:2f:cb:34: 68:63:d1:11:f0:67:2d:14:27:c2:47:61:d6:13:e7: d2:02:ba:fb:e9:d0:5e:6c:29:d2:04:ac:5f:b2:ee: e0:99:40:2f:4e:18:17:2f:f0:df:cc:a2:64:c2:33: ba:aa:bb:2a:c5:54:c6:6d:03:fb:8a:85:46:83:6f: 7a:94:86:e0:fb:d9:63:81:40:c9:6e:0d:b7:03:e6: 6b:1f:02:2d:96:7a:82:17:d4:11:45:68:5d:8a:e8: 83:96:29:c8:da:c6:2f:31:be:f6:87:36:05:ad:b6: 17:01:b9:be:5f:5c:ed:d4:4e:34:05:4a:72:10:3d: 7f:52:8a:3d:f8:87:e0:47:5b:c9:c0:54:a0:51:ba: 96:25:c2:1d:4e:97:ad:b1:25:20:32:37:2e:bd:7d: b6:25:75:e2:1f:d8:ab:14:24:ac:6e:ea:a3:96:1b: 56:9a:bb:31:fb:75:f3:bd:41:38:c5:9e:59:76:3a: b2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0A:6E:A3:30:22:83:9E:30:CD:95:58:BA:03:A6:EF:F5:51:61:0B X509v3 Authority Key Identifier: keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:aa:32:ea:72:53:30:b6:f9:55:f4:ae:19:ee:a2:47:e8:1e: 96:b7:ee:eb:af:c4:eb:2e:7d:53:d3:8a:76:cb:f3:f2:f9:27: 51:9c:e3:f7:93:c3:d6:ff:19:da:92:09:fc:92:d0:7e:f5:2d: ad:02:bb:b8:3f:1f:98:83:e3:02:98:bd:42:c1:bc:77:3b:66: 9a:24:65:37:d8:eb:2b:7e:b0:e9:a5:87:ec:60:6d:61:d8:68: e0:2f:66:0a:64:64:1f:c0:ae:9f:7f:58:8d:b3:d9:ab:4d:ab: 39:e3:fd:d0:f5:13:8f:98:d6:41:ba:7a:d6:ba:70:ac:eb:a1: 14:8b:54:08:e3:1e:d1:cc:d5:ec:fc:a5:e7:fd:ba:32:9b:e4: ca:b7:f1:c2:d2:0f:e9:33:a7:32:99:5b:bf:f0:e3:7e:ad:23: 8f:21:1a:50:59:4e:1a:39:39:5f:6d:e2:77:df:db:56:38:8b: 10:cf:e5:dc:4a:3e:f4:11:53:c8:1f:f5:17:58:fa:2d:d2:94: 24:76:88:dd:b6:4d:2c:19:85:a5:5f:0b:0c:0d:46:78:ed:6b: ca:59:5d:11:e6:80:0c:c2:76:4a:be:e2:ac:ef:de:22:65:c8: ca:59:dd:7f:50:a8:43:76:0f:3c:5a:ed:48:2c:f7:bd:30:70: f3:3b:d2:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjdFMjExMC8GA1UEBRMoNDc4QjQ5MEU5MzlERERERjIxQUNBQzc4Q0I5MzE5OEE3 QjgxNDQ4NTAeFw0yNTA0MDUwNjI5MjZaFw0yNTA0MTIwNjI5MjZaMBgxFjAUBgNV BAMTDTY3ZjBjZGM2LWQ3MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSFRsyw409jPV4GWJZX6nmWFwJbGMmZJlp/2tw2+FWzTrXBbKFObQKjjcAha0E BBtPiTs0AczJA70Splh2zQMlIfd/Est4cC/LNGhj0RHwZy0UJ8JHYdYT59ICuvvp 0F5sKdIErF+y7uCZQC9OGBcv8N/MomTCM7qquyrFVMZtA/uKhUaDb3qUhuD72WOB QMluDbcD5msfAi2WeoIX1BFFaF2K6IOWKcjaxi8xvvaHNgWtthcBub5fXO3UTjQF SnIQPX9Sij34h+BHW8nAVKBRupYlwh1Ol62xJSAyNy69fbYldeIf2KsUJKxu6qOW G1aauzH7dfO9QTjFnll2OrK7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6wpuozAi g54wzZVYugOm7/VRYQswHwYDVR0jBBgwFoAUR4tJDpOd3d8hrKx4y5MZinuBRIUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyN0UyLzc4M0RGQkM0OTM1 MDExRUZCQUNFMDA0Q0M0RjlBRTAyL1I0dEpEcE9kM2Q4aHJLeDR5NU1aaW51QlJJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjR0SkRwT2QzZDhockt4NHk1TVppbnVCUklVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy N0UyLzc4M0RGQkM0OTM1MDExRUZCQUNFMDA0Q0M0RjlBRTAyL1I0dEpEcE9kM2Q4 aHJLeDR5NU1aaW51QlJJVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADCqMupyUzC2+VX0rhnuokfoHpa37uuvxOsufVPTinbL8/L5J1Gc4/eT w9b/GdqSCfyS0H71La0Cu7g/H5iD4wKYvULBvHc7ZpokZTfY6yt+sOmlh+xgbWHY aOAvZgpkZB/Arp9/WI2z2atNqznj/dD1E4+Y1kG6eta6cKzroRSLVAjjHtHM1ez8 pef9ujKb5Mq38cLSD+kzpzKZW7/w436tI48hGlBZTho5OV9t4nff21Y4ixDP5dxK PvQRU8gf9RdY+i3SlCR2iN22TSwZhaVfCwwNRnjta8pZXRHmgAzCdkq+4qzv3iJl yMpZ3X9QqEN2Dzxa7Ugs970wcPM70g0= -----END CERTIFICATE-----Generated at Sun Apr 6 10:08:36 2025 by rpki-client