$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json) Hash identifier: GiXGDcWAkXcCZb4QfEw6hC92SKKB+BzpvNbOsuU/oEQ= Subject key identifier: 80:EC:45:96:27:1D:A6:99:58:69:14:2E:8F:06:CB:4D:06:01:55:BC Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft Manifest number: 03D4 Signing time: Sat 19 Apr 2025 01:24:20 +0000 Manifest this update: Sat 19 Apr 2025 01:24:20 +0000 Manifest next update: Sat 26 Apr 2025 01:24:20 +0000 Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: Zi1K2O5qCnz9xa1CFRf+qMrHMA+TGfEnm1JXyUzmVKY=) 2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: 1zvSdpAHw0fs7lwNzlneLRJlvrtEo2uuRtlcQwqc+2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 01:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6, serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Validity Not Before: Apr 19 01:24:20 2025 GMT Not After : Apr 26 01:24:20 2025 GMT Subject: CN=6802fb44-a0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:24:e1:0b:38:56:2e:d8:d9:c4:d4:78:d8: 72:98:88:73:20:ad:20:02:f3:e2:20:8e:93:65:76: 44:1d:05:c6:9a:83:3e:2c:de:ec:53:0a:19:cc:15: 05:74:87:0a:b9:66:04:14:97:69:4e:92:fc:89:1a: 35:4b:4c:6d:ff:c8:92:4f:89:39:28:d8:a7:4a:58: b3:f5:12:66:4b:87:d5:cd:6d:a9:1c:6b:40:c1:1d: 7b:9a:c6:61:f9:ee:3e:cd:f9:eb:5e:88:3a:33:96: 54:3c:51:6c:47:52:da:e6:1e:18:9e:42:f7:91:ce: 46:19:28:25:ab:a2:b6:2e:26:2a:1d:af:18:92:f9: 96:48:58:1c:64:0c:a0:41:33:3a:c0:05:2c:df:69: 2d:e0:6d:13:dd:5e:32:2a:53:1d:b1:17:f0:79:c9: cc:07:6c:40:22:26:92:37:bf:4d:c8:1a:82:4c:84: a3:db:26:ee:49:99:49:cd:a6:f9:8b:e7:16:77:93: 5a:5c:8d:70:73:e8:0a:5d:6e:7c:41:29:56:d8:13: fa:25:b1:af:b7:0f:a5:68:8d:2c:7b:41:2c:f5:96: 2b:61:ca:92:3c:08:22:19:0f:53:fd:6f:7b:d3:9f: bd:ac:0f:9d:05:a8:64:bc:ba:b0:03:60:31:d8:4e: ad:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EC:45:96:27:1D:A6:99:58:69:14:2E:8F:06:CB:4D:06:01:55:BC X509v3 Authority Key Identifier: keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:c8:54:22:80:18:4e:b4:a4:3e:5f:2a:6a:b7:7d:a5:81:37: f1:3f:f3:09:61:31:0a:4b:90:08:1d:cb:64:8d:bc:e9:e2:19: 92:ae:33:6a:a4:fd:51:c3:2d:a1:33:ad:aa:70:74:98:02:ad: 74:e3:b1:17:2d:ce:3c:d0:6b:50:1a:9f:61:26:e8:05:f8:67: 64:3b:aa:d1:62:22:a9:5b:c1:6a:b1:95:36:cd:13:38:83:d4: 6e:e2:c0:1d:ba:dc:e3:b9:c3:a4:76:b1:63:28:65:01:c4:00: 0d:02:2c:2a:a5:6b:b3:f2:e9:06:cb:54:dc:bd:27:cf:80:1e: 87:d6:d1:1e:48:39:0d:e5:8c:aa:ce:67:06:ed:37:6e:c0:e4: 0a:a1:20:a7:1e:60:16:ae:b1:58:21:db:f5:23:83:38:8d:40: 89:33:81:cb:0d:5c:4c:c2:f5:aa:b0:1a:c9:8c:12:25:d5:70: 71:aa:3f:92:66:9d:5d:f4:db:d4:66:8b:66:f4:cb:7c:ba:39: dc:78:f1:c3:24:4d:83:0f:a3:f4:c2:df:9e:20:1f:8c:5e:d3: b7:cd:4c:35:e5:f4:2c:2d:d2:a6:38:c3:a7:6e:7c:e5:84:ba: db:f6:e8:3a:c1:f6:7e:c7:08:34:cc:d4:9f:6c:f0:2c:20:a0: cb:5f:9e:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEM3OEQxRTU5NTkxQkUwQzc1MjREMzZCREY4NUM4QUM2 RUExOTBGOEUwHhcNMjUwNDE5MDEyNDIwWhcNMjUwNDI2MDEyNDIwWjAYMRYwFAYD VQQDEw02ODAyZmI0NC1hMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyUk4Qs4Vi7Y2cTUeNhymIhzIK0gAvPiII6TZXZEHQXGmoM+LN7sUwoZzBUF dIcKuWYEFJdpTpL8iRo1S0xt/8iST4k5KNinSliz9RJmS4fVzW2pHGtAwR17msZh +e4+zfnrXog6M5ZUPFFsR1La5h4YnkL3kc5GGSglq6K2LiYqHa8YkvmWSFgcZAyg QTM6wAUs32kt4G0T3V4yKlMdsRfwecnMB2xAIiaSN79NyBqCTISj2ybuSZlJzab5 i+cWd5NaXI1wc+gKXW58QSlW2BP6JbGvtw+laI0se0Es9ZYrYcqSPAgiGQ9T/W97 05+9rA+dBahkvLqwA2Ax2E6tawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDsRZYn HaaZWGkULo8Gy00GAVW8MB8GA1UdIwQYMBaAFMeNHllZG+DHUk02vfhcisbqGQ+O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRNZFNUVGE5LUZ5S3h1b1pE NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRN ZFNUVGE5LUZ5S3h1b1pENDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRyFQigBhOtKQ+Xypqt32lgTfxP/MJYTEKS5AIHctkjbzp4hmSrjNq pP1Rwy2hM62qcHSYAq1047EXLc480GtQGp9hJugF+GdkO6rRYiKpW8FqsZU2zRM4 g9Ru4sAdutzjucOkdrFjKGUBxAANAiwqpWuz8ukGy1TcvSfPgB6H1tEeSDkN5Yyq zmcG7TduwOQKoSCnHmAWrrFYIdv1I4M4jUCJM4HLDVxMwvWqsBrJjBIl1XBxqj+S Zp1d9NvUZotm9Mt8ujncePHDJE2DD6P0wt+eIB+MXtO3zUw15fQsLdKmOMOnbnzl hLrb9ug6wfZ+xwg0zNSfbPAsIKDLX57v -----END CERTIFICATE-----Generated at Sat Apr 19 07:43:02 2025 by rpki-client