$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft File: U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json) Hash identifier: I15QSLXS0BM7AWMCPbXbo8BYJ5pcL3QQdy126A7BsTs= Subject key identifier: F5:C1:09:DC:D0:10:15:75:A8:03:1D:37:0C:52:88:71:B1:E9:E0:F5 Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5 Certificate issuer: /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5 Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft Manifest number: 061B Signing time: Fri 28 Mar 2025 23:01:45 +0000 Manifest this update: Fri 28 Mar 2025 23:01:45 +0000 Manifest next update: Fri 04 Apr 2025 23:01:45 +0000 Files and hashes: 1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: cVFoJrqYy/Q4bXV4riVY5FVUy8wVmeCgn2G1azf49Q4=) 2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: ZXRE/wzu5lKhs8MxseA6/JZbA6gFP0KL6bGQMwyeb1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154340 Validity Not Before: Mar 28 23:01:45 2025 GMT Not After : Apr 4 23:01:45 2025 GMT Subject: CN=67e72a59-49de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4e:03:67:53:02:c8:06:8d:3b:7d:41:0f:a3: a1:45:ae:32:ef:0c:8c:95:b5:0c:6c:59:ae:88:bf: 4f:6e:ef:02:ef:53:76:23:54:ea:95:bc:37:5c:ef: d4:42:6c:a8:7b:1e:c2:f5:42:09:4f:44:4f:a6:ce: 4b:09:31:3a:be:03:80:6c:40:d0:69:ac:25:4f:e6: f3:c1:75:55:c4:3b:8b:a4:93:7b:e2:ca:e8:3c:6a: 23:d1:8e:e8:28:19:95:01:ba:41:f3:c8:d6:bd:f5: 79:e3:46:78:2d:f9:cf:a6:5a:e1:83:d9:49:ca:96: 11:1a:c1:86:f2:82:47:d2:8d:77:16:be:18:40:b0: d1:7a:e7:2a:bc:6f:26:8b:11:2b:90:f1:54:7d:47: 66:ec:c8:8b:cb:ae:35:f0:ff:0d:f3:01:35:0d:c9: 4b:33:9d:4a:52:b1:09:88:44:0f:50:20:1f:53:31: d5:22:0a:67:4c:5d:1b:6f:76:26:9d:6d:f6:88:dd: a3:9d:a8:e4:63:0e:e1:25:21:fa:88:89:c6:85:97: 12:db:58:22:99:dc:c5:78:ba:2a:54:e1:19:09:b5: bd:9a:7d:e5:18:e8:e2:38:89:54:0b:ff:6c:7c:73: 87:10:af:6d:1e:03:3e:ce:81:a0:91:a8:13:af:27: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C1:09:DC:D0:10:15:75:A8:03:1D:37:0C:52:88:71:B1:E9:E0:F5 X509v3 Authority Key Identifier: keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:49:c4:aa:a8:a5:a6:6c:ea:69:0e:44:a8:12:f6:e2:71:42: cd:37:30:02:8f:2c:fa:80:96:7a:9c:dc:51:cd:7d:a7:28:f7: ff:a1:df:7d:86:d7:a3:37:e1:29:dc:eb:ea:a1:01:67:d9:4f: 7b:b8:44:fd:a7:a8:c7:3a:a1:ba:ae:ae:6b:c7:a5:d3:e5:54: 86:a2:e0:13:a4:f2:90:06:dd:e9:53:b2:3e:3a:74:ab:ed:47: e1:59:5d:77:01:fb:f5:86:a3:4a:01:73:7b:30:ba:54:f9:84: 04:31:98:a7:09:7e:38:0e:4f:7b:2f:da:08:50:6d:84:fb:08: e6:a6:d2:62:45:e6:a7:f7:0f:c6:33:99:13:3e:cd:f3:e5:09: f4:13:d3:f0:27:ae:eb:66:69:0b:bb:d2:55:b2:f9:d3:76:60: 2f:36:42:bf:72:08:b3:4b:6f:47:67:9e:ed:d9:b4:30:d8:64: 4d:55:49:bb:34:84:75:a2:35:7c:1a:f7:35:a5:1e:b1:15:08: 4f:40:e5:4f:aa:5b:dc:50:da:9b:ef:80:78:95:0e:2f:14:bb: 5d:90:dc:35:bd:c2:d9:49:fb:e3:5f:ca:60:98:8c:4d:1b:2f: 6b:41:9f:92:93:12:a7:f9:f8:11:de:40:12:a1:f6:2f:ab:b6: 35:68:8d:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNDAxMTAvBgNVBAUTKDUzRjZGNzkyNTNCQ0RCOEIxRDE3MTgyQ0U0RjE5RDM5 RkQ0OTlERjUwHhcNMjUwMzI4MjMwMTQ1WhcNMjUwNDA0MjMwMTQ1WjAYMRYwFAYD VQQDEw02N2U3MmE1OS00OWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7U4DZ1MCyAaNO31BD6OhRa4y7wyMlbUMbFmuiL9Pbu8C71N2I1Tqlbw3XO/U Qmyoex7C9UIJT0RPps5LCTE6vgOAbEDQaawlT+bzwXVVxDuLpJN74sroPGoj0Y7o KBmVAbpB88jWvfV540Z4LfnPplrhg9lJypYRGsGG8oJH0o13Fr4YQLDReucqvG8m ixErkPFUfUdm7MiLy6418P8N8wE1DclLM51KUrEJiEQPUCAfUzHVIgpnTF0bb3Ym nW32iN2jnajkYw7hJSH6iInGhZcS21gimdzFeLoqVOEZCbW9mn3lGOjiOIlUC/9s fHOHEK9tHgM+zoGgkagTryet/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXBCdzQ EBV1qAMdNwxSiHGx6eD1MB8GA1UdIwQYMBaAFFP295JTvNuLHRcYLOTxnTn9SZ31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC83QzFGRDFEMjkx RTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0c2RGeGdzNVBHZE9mMUpu ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VfYjNrbE84MjRzZEZ4Z3M1UEdkT2YxSm5mVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM0MC83QzFGRDFEMjkxRTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0 c2RGeGdzNVBHZE9mMUpuZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiScSqqKWmbOppDkSoEvbicULNNzACjyz6gJZ6nNxRzX2nKPf/od99 htejN+Ep3OvqoQFn2U97uET9p6jHOqG6rq5rx6XT5VSGouATpPKQBt3pU7I+OnSr 7UfhWV13Afv1hqNKAXN7MLpU+YQEMZinCX44Dk97L9oIUG2E+wjmptJiRean9w/G M5kTPs3z5Qn0E9PwJ67rZmkLu9JVsvnTdmAvNkK/cgizS29HZ57t2bQw2GRNVUm7 NIR1ojV8Gvc1pR6xFQhPQOVPqlvcUNqb74B4lQ4vFLtdkNw1vcLZSfvjX8pgmIxN Gy9rQZ+SkxKn+fgR3kASofYvq7Y1aI0P -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:01 2025 by rpki-client