$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json) Hash identifier: tZcipq3Ib7Z0PgZ1ZPgcIEnXpJoBC/bUlP6gFF3dauY= Subject key identifier: 69:98:04:82:E0:17:66:B8:A5:56:7C:9B:21:7E:A6:E5:98:A7:6D:B3 Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 08FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft Manifest number: 08EA Signing time: Fri 04 Apr 2025 20:34:27 +0000 Manifest this update: Fri 04 Apr 2025 20:34:27 +0000 Manifest next update: Fri 11 Apr 2025 20:34:27 +0000 Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: QvBTDhk3cQz1nsamg0so/pic1r584ZoW3gZzL/ua6kQ=) 2: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: g6ZF73udqOvaMk79CC0xL6laKl1ilnMa4mhmtzges9Y=) 3: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: GgE2GgTXjnlE63xFP6LVosemjRTE0pIIUFRg3E+lupM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2302 (0x8fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685 Validity Not Before: Apr 4 20:34:27 2025 GMT Not After : Apr 11 20:34:27 2025 GMT Subject: CN=67f04253-5fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3a:86:7c:cf:13:87:a4:08:5a:be:25:22:92: 5f:94:11:9a:18:33:3d:01:95:e2:a0:b3:bb:fb:eb: 65:c0:75:3e:d6:6a:8e:ab:88:ef:39:4b:b3:9a:da: 4f:97:93:34:68:ca:0b:42:16:30:d5:2f:a2:6d:0d: 75:84:26:88:de:3f:e8:25:0d:da:e9:f0:95:31:fb: 79:5c:91:8a:f9:e3:6b:d4:c4:2f:c9:5f:38:b3:5e: 5e:e1:1b:4e:d1:03:8a:fb:98:23:97:78:89:81:86: 16:81:9e:bc:ab:7f:f6:25:35:88:32:f2:52:f6:81: e4:bd:4c:32:5b:05:0b:65:c1:cb:86:cb:57:71:48: b5:30:8f:24:ce:e8:c1:1a:68:c6:3d:bc:4f:ad:26: c1:a1:4d:34:1b:4e:90:0b:54:30:f4:15:62:c0:a2: 80:38:5b:c0:17:0a:36:42:56:76:9b:db:c3:1c:03: 7b:77:9f:de:c4:6f:77:73:2b:20:2c:17:a5:b3:72: 9a:26:8a:91:17:51:00:ab:8a:d1:89:2e:86:95:fe: 41:09:79:94:ff:13:33:48:1f:e0:d9:50:3d:6b:79: 50:76:74:bf:61:14:e7:a8:36:53:55:e2:07:d1:cb: 00:26:3d:0f:4e:85:3d:a9:3e:df:18:aa:53:56:ef: 1e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:98:04:82:E0:17:66:B8:A5:56:7C:9B:21:7E:A6:E5:98:A7:6D:B3 X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:9a:b3:1d:8f:c1:e3:e1:82:d9:43:f8:12:af:f2:04:68:04: 93:88:93:61:e5:3b:a8:88:19:57:00:c9:29:64:76:02:18:a9: f1:b0:87:22:2a:60:09:04:47:a0:e6:d2:0e:76:96:86:aa:b3: 97:95:18:32:6c:7a:9f:e4:c0:a7:de:66:f0:7d:e0:c1:52:a1: a5:c8:f4:a2:3c:8f:e2:41:f1:96:1e:9c:d8:cf:77:1a:12:1a: cd:cd:65:ff:f3:0d:75:09:d4:10:e7:86:a8:ad:a0:24:82:2b: 7a:e4:8d:34:de:34:21:d8:ca:ca:8f:36:5e:fd:6f:cc:dd:b5: e3:7f:91:83:b6:59:64:4d:9b:6f:b6:a5:53:2c:68:82:99:39: eb:db:26:7d:e3:76:48:dc:36:98:17:66:87:09:df:a2:4c:f1: 84:c5:8d:2a:95:cd:31:9c:95:3b:d2:a7:b0:f8:25:27:c6:15: c5:dd:18:41:b4:16:88:9c:e6:92:ee:9e:d6:94:1a:87:3f:a4: 9b:8b:24:a7:8e:bd:bd:36:90:c7:ed:9f:37:e8:4e:05:91:c3: eb:da:10:e0:8d:56:f9:61:8d:8d:d9:d4:b1:ce:4a:ad:40:5c: a7:6a:1b:33:3c:cb:91:ed:dd:ed:9d:d2:f5:82:aa:f4:56:1d: 9b:c5:e6:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjUwNDA0MjAzNDI3WhcNMjUwNDExMjAzNDI3WjAYMRYwFAYD VQQDEw02N2YwNDI1My01ZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjqGfM8Th6QIWr4lIpJflBGaGDM9AZXioLO7++tlwHU+1mqOq4jvOUuzmtpP l5M0aMoLQhYw1S+ibQ11hCaI3j/oJQ3a6fCVMft5XJGK+eNr1MQvyV84s15e4RtO 0QOK+5gjl3iJgYYWgZ68q3/2JTWIMvJS9oHkvUwyWwULZcHLhstXcUi1MI8kzujB GmjGPbxPrSbBoU00G06QC1Qw9BViwKKAOFvAFwo2QlZ2m9vDHAN7d5/exG93cysg LBels3KaJoqRF1EAq4rRiS6Glf5BCXmU/xMzSB/g2VA9a3lQdnS/YRTnqDZTVeIH 0csAJj0PToU9qT7fGKpTVu8eMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmYBILg F2a4pVZ8myF+puWYp22zMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWmrMdj8Hj4YLZQ/gSr/IEaASTiJNh5TuoiBlXAMkpZHYCGKnxsIci KmAJBEeg5tIOdpaGqrOXlRgybHqf5MCn3mbwfeDBUqGlyPSiPI/iQfGWHpzYz3ca EhrNzWX/8w11CdQQ54aoraAkgit65I003jQh2MrKjzZe/W/M3bXjf5GDtllkTZtv tqVTLGiCmTnr2yZ943ZI3DaYF2aHCd+iTPGExY0qlc0xnJU70qew+CUnxhXF3RhB tBaInOaS7p7WlBqHP6SbiySnjr29NpDH7Z836E4FkcPr2hDgjVb5YY2N2dSxzkqt QFynahszPMuR7d3tndL1gqr0Vh2bxeYN -----END CERTIFICATE-----Generated at Sun Apr 6 15:27:34 2025 by rpki-client