$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft File: s1py5W8JAsfhuNgSxdg2VBHdox0.mft (raw, json) Hash identifier: P8PRbpIGcDueyBG9b+MhkQ4igayOvmjaADkU6WC1+dM= Subject key identifier: 0D:4D:78:4E:A6:3D:21:F8:10:2E:6A:B8:69:3B:EE:19:3B:52:65:9E Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D Certificate issuer: /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D Certificate serial: 14B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft Manifest number: 14AB Signing time: Fri 18 Apr 2025 16:58:12 +0000 Manifest this update: Fri 18 Apr 2025 16:58:11 +0000 Manifest next update: Fri 25 Apr 2025 16:58:11 +0000 Files and hashes: 1: s1py5W8JAsfhuNgSxdg2VBHdox0.crl (hash: MBwCaN63GN15sKWod35VDHPqX22C1+CLIX1ecqtOpkM=) 2: 4674A74E5DB211E8A30DF983C4F9AE02.roa (hash: Kpm1VRvUmk2GXeAxfKW1BgX1xl9xSgMJHiJXTqUoDIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 16:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5300 (0x14b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150B91, serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D Validity Not Before: Apr 18 16:58:11 2025 GMT Not After : Apr 25 16:58:11 2025 GMT Subject: CN=680284a3-c237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3d:d2:34:ad:01:b4:4f:26:cc:82:28:9b:48: db:0d:77:c2:f7:5f:15:6c:8f:66:a4:b8:9c:64:2b: 57:07:0b:2f:76:13:3d:3f:48:39:4c:a6:a3:fb:c1: 3b:c9:44:9e:ee:29:65:4b:e2:51:bf:24:7e:79:bd: f9:59:9b:d0:bc:32:35:b0:eb:6e:12:10:ea:c0:4d: 11:0b:dc:5d:74:16:c3:95:0d:9a:dd:82:4d:60:b0: 74:19:35:2b:00:87:f8:a6:fd:4f:21:44:e5:ef:e4: cc:c3:85:8f:ef:4d:33:0e:08:13:14:d2:d7:bf:37: be:58:dc:1c:f5:a8:2e:c0:7c:30:01:c3:6c:02:1d: 16:6c:a7:1a:2b:31:b1:26:6b:21:da:7c:9f:b8:5a: e1:16:8c:36:f7:37:86:b6:29:ed:20:f4:f0:0d:4e: 71:bb:02:94:06:6d:e0:ab:22:37:c0:d3:47:fb:40: 49:9d:50:b6:9e:db:2d:73:5a:a4:77:8a:e5:3f:53: a7:c1:db:05:89:df:bb:58:ba:ab:03:d6:ce:bf:b4: 2d:7e:0d:ac:c2:56:c4:74:40:e6:74:88:c9:1b:25: 35:2c:78:fd:52:f2:6f:af:cb:fe:e5:75:c7:19:cc: 63:b4:ee:dd:46:fe:bc:c8:ce:86:b0:90:3f:35:95: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4D:78:4E:A6:3D:21:F8:10:2E:6A:B8:69:3B:EE:19:3B:52:65:9E X509v3 Authority Key Identifier: keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:37:bd:57:11:ee:44:b6:57:dd:f3:d8:36:d3:95:2c:f2:b6: 85:49:de:2c:c1:43:1f:47:87:1a:83:21:e8:a1:52:c2:a9:5d: 61:63:68:64:90:44:17:7a:29:a6:1c:09:9f:ab:92:05:dd:76: 72:26:ce:29:e5:e4:11:97:93:bc:c4:e7:02:2e:22:3a:fe:81: 78:c1:3a:a1:44:57:85:4f:61:22:df:e7:9b:2b:8a:11:33:00: 3a:c8:5b:54:32:1e:e7:c7:a8:25:c7:44:38:2f:d7:f8:8d:1b: e3:30:9f:7c:fa:37:18:03:aa:81:ee:75:a9:90:53:0d:34:d8: e4:b7:ef:97:1c:c9:35:19:d3:f9:a3:51:b5:b4:e8:bf:7b:3a: 87:a2:9a:8e:56:b7:90:99:09:a9:99:40:86:2a:b7:c3:07:81: f2:11:a0:a9:22:92:52:b2:d5:ba:5c:22:ad:0b:16:e7:eb:a1: f4:85:24:61:69:d3:2d:e6:0f:00:ca:aa:6a:23:ed:70:c6:34: df:6f:a6:8d:eb:bb:8c:59:88:48:58:4f:d8:b7:76:61:85:98: 42:af:59:f5:00:ca:73:a6:36:67:5c:ee:fe:62:1a:0d:8a:32: 6a:9e:09:db:e0:35:fb:b1:f1:84:d8:f4:ab:cb:aa:a4:f7:16: 3a:8b:a0:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBCOTExMTAvBgNVBAUTKEIzNUE3MkU1NkYwOTAyQzdFMUI4RDgxMkM1RDgzNjU0 MTFEREEzMUQwHhcNMjUwNDE4MTY1ODExWhcNMjUwNDI1MTY1ODExWjAYMRYwFAYD VQQDEw02ODAyODRhMy1jMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlD3SNK0BtE8mzIIom0jbDXfC918VbI9mpLicZCtXBwsvdhM9P0g5TKaj+8E7 yUSe7illS+JRvyR+eb35WZvQvDI1sOtuEhDqwE0RC9xddBbDlQ2a3YJNYLB0GTUr AIf4pv1PIUTl7+TMw4WP700zDggTFNLXvze+WNwc9aguwHwwAcNsAh0WbKcaKzGx Jmsh2nyfuFrhFow29zeGtintIPTwDU5xuwKUBm3gqyI3wNNH+0BJnVC2ntstc1qk d4rlP1OnwdsFid+7WLqrA9bOv7Qtfg2swlbEdEDmdIjJGyU1LHj9UvJvr8v+5XXH GcxjtO7dRv68yM6GsJA/NZUmXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1NeE6m PSH4EC5quGk77hk7UmWeMB8GA1UdIwQYMBaAFLNacuVvCQLH4bjYEsXYNlQR3aMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEI5MS83NjMwNEE3ODVB OTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFzZmh1TmdTeGRnMlZCSGRv eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MxcHk1VzhKQXNmaHVOZ1N4ZGcyVkJIZG94MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEI5MS83NjMwNEE3ODVBOTMxMUU4QjdDMjE2MUZDNEY5QUUwMi9zMXB5NVc4SkFz Zmh1TmdTeGRnMlZCSGRveDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZN71XEe5Etlfd89g205Us8raFSd4swUMfR4cagyHooVLCqV1hY2hk kEQXeimmHAmfq5IF3XZyJs4p5eQRl5O8xOcCLiI6/oF4wTqhRFeFT2Ei3+ebK4oR MwA6yFtUMh7nx6glx0Q4L9f4jRvjMJ98+jcYA6qB7nWpkFMNNNjkt++XHMk1GdP5 o1G1tOi/ezqHopqOVreQmQmpmUCGKrfDB4HyEaCpIpJSstW6XCKtCxbn66H0hSRh adMt5g8AyqpqI+1wxjTfb6aN67uMWYhIWE/Yt3ZhhZhCr1n1AMpzpjZnXO7+YhoN ijJqngnb4DX7sfGE2PSry6qk9xY6i6CV -----END CERTIFICATE-----Generated at Sat Apr 19 08:22:11 2025 by rpki-client