$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft File: mAInpdd1oDTad40z-IxcwCDRw5w.mft (raw, json) Hash identifier: hSOkYFj2oU1CZDbwK7Q7pEqNf0wq62ntj9uULN3wHcY= Subject key identifier: E3:A9:18:92:6D:22:46:75:08:85:7A:1A:08:EA:17:37:FA:CF:52:71 Authority key identifier: 98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C Certificate issuer: /CN=A9148E7B/serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft Manifest number: 01C0 Signing time: Sat 19 Apr 2025 02:20:56 +0000 Manifest this update: Sat 19 Apr 2025 02:20:56 +0000 Manifest next update: Sat 26 Apr 2025 02:20:56 +0000 Files and hashes: 1: mAInpdd1oDTad40z-IxcwCDRw5w.crl (hash: Y9FAnXG4ulOdnRm8UCG4LD+je/EV1GW8t/ovAtcAK7M=) 2: 8CFF3572708F11ED88DF8322C4F9AE02.roa (hash: lONZjm0NjFEm7xQkBCGWnrkGFmjAfW8U6anBdYjJWgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E7B, serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Validity Not Before: Apr 19 02:20:56 2025 GMT Not After : Apr 26 02:20:56 2025 GMT Subject: CN=68030888-33b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:39:89:2b:57:6d:d2:67:55:ec:0d:0d:90: eb:f3:d0:7f:6f:11:6c:2c:f1:de:68:d7:e5:94:58: 15:e2:61:c4:7a:39:ab:0c:ee:37:51:7d:cd:95:8e: 3e:ee:72:6b:53:81:00:a0:ea:c3:38:21:43:b5:a9: 39:4c:32:f8:a8:24:1f:63:7b:ad:cc:33:f9:e6:2a: 69:2a:83:7a:16:55:13:ca:54:2c:fd:33:51:f2:2a: 57:0f:75:d9:77:47:58:7e:95:c3:65:55:f1:a7:a9: 60:0e:80:e5:a6:72:9a:ea:f4:69:11:c9:51:88:e7: 7d:68:d7:60:1e:2f:83:77:2d:73:fb:e1:76:6a:4d: aa:49:f6:b4:69:9f:19:9c:b9:89:bc:bc:7c:60:c9: 86:d6:07:2d:63:9e:5d:b2:da:1f:5e:07:c7:40:c5: 00:ce:79:88:33:36:30:4d:1c:e2:57:45:30:31:a6: 7f:90:7e:ad:bb:27:e6:61:3e:94:03:33:c3:a8:1b: b3:7e:a2:47:cd:1d:82:d1:1c:fc:a7:dd:c7:f3:7f: f9:b8:71:3d:6f:49:ce:a9:43:02:c1:80:c3:71:7a: 3c:d4:89:1d:f7:48:6d:ad:a6:bc:01:3f:f2:12:40: ff:83:3b:40:8f:32:42:ec:ab:8d:a9:96:f2:95:a5: de:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A9:18:92:6D:22:46:75:08:85:7A:1A:08:EA:17:37:FA:CF:52:71 X509v3 Authority Key Identifier: keyid:98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:bc:d6:e5:a6:aa:a2:b5:8e:17:1a:9b:48:3d:1f:1c:c5:b8: 36:91:b2:b5:43:54:c9:35:53:68:f3:6b:e3:88:16:2b:5d:1c: 0e:01:de:9c:6f:87:17:30:17:7b:b5:f9:52:f1:ab:55:92:b9: 08:d0:94:3f:77:fe:8c:0d:50:d6:75:0d:26:eb:ea:e8:27:09: 4f:2f:4b:1a:2e:ed:03:f5:11:e5:b7:09:84:c0:e7:78:34:80: c4:84:0a:fd:8c:e5:56:8f:d9:74:7c:15:c5:5a:68:74:64:c5: ad:bf:c8:2a:b9:c0:8f:05:75:4b:f0:9e:77:8e:21:c2:0e:b9: 6d:69:34:4e:cf:e7:d7:16:f1:e5:55:2f:3a:af:03:fd:82:aa: c1:b2:d3:2c:28:fe:b7:37:de:e9:55:9a:84:b2:48:09:2c:64: 4d:99:8a:aa:e9:23:49:95:70:94:32:44:29:3f:6d:a3:d9:5f: a2:b3:8e:4f:fe:22:71:4e:87:58:94:07:ba:a7:b7:a0:15:19: 70:35:53:7a:4d:d5:64:c1:9f:b1:31:ec:20:2d:7c:da:65:37: 33:61:0a:42:56:55:fd:ee:a6:bd:a9:66:da:0e:fd:7a:16:76: 79:03:63:1b:d5:f7:1d:14:26:1b:0f:7b:27:67:88:b8:47:e0: a1:49:7b:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFN0IxMTAvBgNVBAUTKDk4MDIyN0E1RDc3NUEwMzREQTc3OEQzM0Y4OEM1Q0Mw MjBEMUMzOUMwHhcNMjUwNDE5MDIyMDU2WhcNMjUwNDI2MDIyMDU2WjAYMRYwFAYD VQQDEw02ODAzMDg4OC0zM2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1Y5iStXbdJnVewNDZDr89B/bxFsLPHeaNfllFgV4mHEejmrDO43UX3NlY4+ 7nJrU4EAoOrDOCFDtak5TDL4qCQfY3utzDP55ippKoN6FlUTylQs/TNR8ipXD3XZ d0dYfpXDZVXxp6lgDoDlpnKa6vRpEclRiOd9aNdgHi+Ddy1z++F2ak2qSfa0aZ8Z nLmJvLx8YMmG1gctY55dstofXgfHQMUAznmIMzYwTRziV0UwMaZ/kH6tuyfmYT6U AzPDqBuzfqJHzR2C0Rz8p93H83/5uHE9b0nOqUMCwYDDcXo81Ikd90htraa8AT/y EkD/gztAjzJC7KuNqZbylaXeyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOpGJJt IkZ1CIV6GgjqFzf6z1JxMB8GA1UdIwQYMBaAFJgCJ6XXdaA02neNM/iMXMAg0cOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU3Qi80NzhGQTZENjcw OEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9EVGFkNDB6LUl4Y3dDRFJ3 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21BSW5wZGQxb0RUYWQ0MHotSXhjd0NEUnc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU3Qi80NzhGQTZENjcwOEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9E VGFkNDB6LUl4Y3dDRFJ3NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUvNblpqqitY4XGptIPR8cxbg2kbK1Q1TJNVNo82vjiBYrXRwOAd6c b4cXMBd7tflS8atVkrkI0JQ/d/6MDVDWdQ0m6+roJwlPL0saLu0D9RHltwmEwOd4 NIDEhAr9jOVWj9l0fBXFWmh0ZMWtv8gqucCPBXVL8J53jiHCDrltaTROz+fXFvHl VS86rwP9gqrBstMsKP63N97pVZqEskgJLGRNmYqq6SNJlXCUMkQpP22j2V+is45P /iJxTodYlAe6p7egFRlwNVN6TdVkwZ+xMewgLXzaZTczYQpCVlX97qa9qWbaDv16 FnZ5A2Mb1fcdFCYbD3snZ4i4R+ChSXse -----END CERTIFICATE-----Generated at Sat Apr 19 07:23:26 2025 by rpki-client