$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json) Hash identifier: Zlaxw9E7Yzfpkm6njJIOikRgV8mQ8fg8ryDvvEOlk+s= Subject key identifier: 32:F1:9A:A4:F1:B9:BC:51:F4:E8:AB:51:95:9B:70:0F:7A:2B:D4:4A Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0E21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft Manifest number: 0E19 Signing time: Sun 06 Apr 2025 17:41:33 +0000 Manifest this update: Sun 06 Apr 2025 17:41:33 +0000 Manifest next update: Sun 13 Apr 2025 17:41:33 +0000 Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: vCypa3rdylWvq+qxnZO8crCZxxta3pROoJeiYflP9Ng=) 2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: PT85jOUkAj1X0WXEwRPCdUqy+wM3om5TOq/+D9IWTpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 17:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3617 (0xe21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880 Validity Not Before: Apr 6 17:41:33 2025 GMT Not After : Apr 13 17:41:33 2025 GMT Subject: CN=67f2bccd-3e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:ab:13:1f:e4:3e:89:7b:ac:24:41:38:56: 10:25:78:95:51:3b:fc:8a:49:73:96:2e:f4:df:d1: c4:e3:34:a3:47:c1:f5:59:9a:94:b3:f0:d1:f6:8c: 9a:1e:47:07:e0:61:d3:86:0f:5c:ce:23:dd:57:2c: 4e:cc:d0:21:89:9c:ed:9b:e4:38:b9:9b:76:b3:4e: f8:f2:d8:ae:cb:a4:7f:62:e7:87:f0:dc:55:9d:33: 7c:c6:e0:34:90:e4:4a:45:44:f5:ea:18:ac:53:47: 38:ff:6f:e9:cf:4e:25:e4:38:02:09:0b:ea:eb:fe: 26:56:5d:da:53:ac:b0:35:96:3d:f8:6b:be:db:78: 93:22:95:d8:cd:ac:91:54:38:d9:8a:6d:f5:65:57: e6:32:ed:05:3b:bc:15:57:a4:02:b2:6d:58:9e:b0: 0c:17:16:f6:96:83:5a:cf:76:ad:69:02:d7:79:7d: 3c:9e:07:86:58:3f:81:c5:86:fa:7b:9b:b5:b0:ba: 65:ba:07:5c:46:67:fe:19:ad:a3:9e:dc:bd:54:08: 41:77:c8:c7:1c:15:d5:10:98:60:eb:6a:28:25:4c: cd:d6:73:fd:0d:d7:fe:77:0f:09:50:8c:48:07:c8: 1a:e2:be:c1:44:49:5b:c3:03:e5:bb:4b:67:07:ed: 55:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F1:9A:A4:F1:B9:BC:51:F4:E8:AB:51:95:9B:70:0F:7A:2B:D4:4A X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:6d:5a:b3:fa:27:f7:d8:03:31:ea:f0:24:df:90:70:5a:b2: 1b:46:45:a4:47:8a:e2:91:5f:a9:6f:d5:0a:a5:31:24:32:48: af:4e:b0:ec:b1:88:7a:61:0b:b7:b2:4b:91:c7:6e:7a:c8:a7: 37:9a:e6:dd:49:29:6a:40:b2:ea:d9:cb:80:cb:a4:6f:29:bf: f6:e7:a4:ba:74:70:e3:67:06:b5:2b:21:fd:c0:be:c9:55:b1: 35:bb:62:b2:85:dd:c3:db:46:95:32:1d:1b:10:be:3c:2c:6b: 98:84:7f:f2:e1:48:12:53:77:c9:92:23:95:be:9a:a0:5b:cc: 6d:25:8a:10:2f:85:21:be:f4:1c:66:d9:bb:77:26:cc:45:8b: c1:7e:14:46:cc:62:7f:b5:5f:f9:f8:5b:93:7b:0d:a5:53:9f: 95:02:8e:0d:00:bc:85:c3:47:f9:fe:0f:99:99:c6:b7:c3:90: ee:2a:1b:6a:ad:28:d2:44:17:5a:34:62:c6:f5:9e:e6:a5:c2: 2c:64:a4:33:0e:8a:1d:0e:57:fb:7c:3f:ff:eb:60:d5:1e:3f: 0a:d3:0d:80:9b:33:3c:b1:72:6f:f1:22:2b:20:a1:60:41:8d: 20:d4:4b:81:47:7d:05:60:4f:94:eb:23:e5:91:57:82:fd:c1: 87:35:72:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjUwNDA2MTc0MTMzWhcNMjUwNDEzMTc0MTMzWjAYMRYwFAYD VQQDEw02N2YyYmNjZC0zZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCOrEx/kPol7rCRBOFYQJXiVUTv8iklzli7039HE4zSjR8H1WZqUs/DR9oya HkcH4GHThg9cziPdVyxOzNAhiZztm+Q4uZt2s0748tiuy6R/YueH8NxVnTN8xuA0 kORKRUT16hisU0c4/2/pz04l5DgCCQvq6/4mVl3aU6ywNZY9+Gu+23iTIpXYzayR VDjZim31ZVfmMu0FO7wVV6QCsm1YnrAMFxb2loNaz3ataQLXeX08ngeGWD+BxYb6 e5u1sLplugdcRmf+Ga2jnty9VAhBd8jHHBXVEJhg62ooJUzN1nP9Ddf+dw8JUIxI B8ga4r7BRElbwwPlu0tnB+1VgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLxmqTx ubxR9OirUZWbcA96K9RKMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl OExONURRNTVZZWlIVW9HWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8bVqz+if32AMx6vAk35BwWrIbRkWkR4rikV+pb9UKpTEkMkivTrDs sYh6YQu3skuRx256yKc3mubdSSlqQLLq2cuAy6RvKb/256S6dHDjZwa1KyH9wL7J VbE1u2Kyhd3D20aVMh0bEL48LGuYhH/y4UgSU3fJkiOVvpqgW8xtJYoQL4UhvvQc Ztm7dybMRYvBfhRGzGJ/tV/5+FuTew2lU5+VAo4NALyFw0f5/g+Zmca3w5DuKhtq rSjSRBdaNGLG9Z7mpcIsZKQzDoodDlf7fD//62DVHj8K0w2AmzM8sXJv8SIrIKFg QY0g1EuBR30FYE+U6yPlkVeC/cGHNXL0 -----END CERTIFICATE-----Generated at Mon Apr 7 09:01:42 2025 by rpki-client