$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json) Hash identifier: btBq6ckn4RBNxFRt4+n3lLWA2EKF9B3qe16pMYHs6G8= Subject key identifier: 3B:C2:F6:49:A0:4D:30:43:3A:FA:3E:22:3E:3F:86:00:4A:EC:94:60 Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft Manifest number: 0141 Signing time: Sat 29 Mar 2025 03:47:34 +0000 Manifest this update: Sat 29 Mar 2025 03:47:33 +0000 Manifest next update: Sat 05 Apr 2025 03:47:33 +0000 Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: 4/2ny4QMT6KPxpngT8hUCBSgHdCCt+mjLX4yjAcAtOs=) 2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: k+tzt38gMzmau0c2rmQWNYzVDcpA9LwBPBlXy9g9UUQ=) 3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: GPm7lgmcPBXG9N85GnRJZzvPZx2wbvxxB75DoAT8PYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC Validity Not Before: Mar 29 03:47:33 2025 GMT Not After : Apr 5 03:47:33 2025 GMT Subject: CN=67e76d55-dd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:1e:3a:40:13:22:85:0a:88:2c:28:1a:0b: 23:cc:d6:10:8f:ed:52:a1:71:e8:70:1f:87:10:fb: 1f:2e:72:df:29:f9:51:8a:43:b1:db:72:79:55:34: c0:5e:7a:e9:16:5e:35:75:bc:01:f4:2f:8b:63:59: f8:45:24:94:da:32:f9:fa:cf:f6:1d:9b:81:45:cc: 23:80:cc:6f:03:c7:9e:fc:72:c6:0d:99:34:63:18: 72:c2:a1:e7:a1:3a:03:bc:25:28:3f:5e:fd:50:b4: c0:e5:3c:22:01:f5:ad:7a:65:3f:d0:dd:c6:22:2c: e8:dd:00:4b:b5:28:2c:46:ff:00:19:6e:f5:ab:9a: 4b:fa:8c:c8:5b:37:28:78:bd:a8:57:dc:0d:7a:bd: eb:5e:c4:d2:c3:bc:8c:1a:95:24:07:0e:c0:00:1b: cf:90:16:7b:2c:57:58:06:d1:86:3e:f3:9a:8e:a5: fe:8b:64:9c:7c:d9:51:d3:49:f6:f3:8c:8a:b7:60: 83:0b:ea:6a:63:f7:16:3c:9d:bc:72:e6:81:1a:9c: aa:04:bb:e1:9c:b6:fc:ab:8e:d2:b7:84:ab:97:2a: 15:55:be:fb:e5:69:9a:ba:fe:6d:95:b8:ff:a5:fc: 56:fc:eb:f3:2c:da:c9:8e:f6:55:e8:25:a0:c3:cf: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:F6:49:A0:4D:30:43:3A:FA:3E:22:3E:3F:86:00:4A:EC:94:60 X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2c:39:81:d4:2a:8e:27:60:34:7b:68:bb:bb:99:7d:4c:c7: 24:59:f1:13:6d:20:ee:a7:a9:c3:53:95:4d:41:6c:2d:78:25: 7d:7d:b4:b2:22:8b:ad:59:99:ee:f3:f7:c2:85:a2:ac:ab:b4: c8:da:69:2c:28:5d:7d:4f:d8:b0:09:72:a0:c7:63:2e:9b:c0: 6e:fa:69:f8:af:e4:1d:ca:50:6e:dd:6f:a7:65:d0:ca:4f:d9: 86:86:53:9f:83:fb:72:89:01:a1:e0:96:9e:b3:7c:26:77:19: e9:b7:4e:2b:c6:6a:be:1b:db:fc:fd:10:10:3b:5c:1c:e4:ee: 5c:74:c0:ae:e6:02:ba:89:32:9f:5d:87:d5:76:d1:b1:db:c3: ef:66:94:96:9a:3d:92:d5:e4:5e:77:2d:4a:74:b8:9b:1d:4b: 1d:96:3c:3c:89:c6:cb:68:73:86:89:81:43:24:13:e2:66:30: 48:73:05:0a:1a:f1:2f:40:e3:a5:cc:7d:8b:b1:a6:7e:10:93: 40:32:a4:05:e1:e9:35:b6:5f:d7:6a:e4:64:7a:4d:06:3e:cf: 69:78:3d:d7:11:44:66:40:92:7d:fe:11:32:c5:2b:81:7c:ec: e0:74:9b:9f:61:32:b1:fe:c0:6c:a3:47:cc:6d:eb:a2:ab:b0: 0f:9e:ea:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjUwMzI5MDM0NzMzWhcNMjUwNDA1MDM0NzMzWjAYMRYwFAYD VQQDEw02N2U3NmQ1NS1kZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C4eOkATIoUKiCwoGgsjzNYQj+1SoXHocB+HEPsfLnLfKflRikOx23J5VTTA XnrpFl41dbwB9C+LY1n4RSSU2jL5+s/2HZuBRcwjgMxvA8ee/HLGDZk0YxhywqHn oToDvCUoP179ULTA5TwiAfWtemU/0N3GIizo3QBLtSgsRv8AGW71q5pL+ozIWzco eL2oV9wNer3rXsTSw7yMGpUkBw7AABvPkBZ7LFdYBtGGPvOajqX+i2ScfNlR00n2 84yKt2CDC+pqY/cWPJ28cuaBGpyqBLvhnLb8q47St4SrlyoVVb775Wmauv5tlbj/ pfxW/OvzLNrJjvZV6CWgw8/eSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvC9kmg TTBDOvo+Ij4/hgBK7JRgMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG VmttNTEyR21WY1A4WVBibU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKLDmB1CqOJ2A0e2i7u5l9TMckWfETbSDup6nDU5VNQWwteCV9fbSy IoutWZnu8/fChaKsq7TI2mksKF19T9iwCXKgx2Mum8Bu+mn4r+QdylBu3W+nZdDK T9mGhlOfg/tyiQGh4Jaes3wmdxnpt04rxmq+G9v8/RAQO1wc5O5cdMCu5gK6iTKf XYfVdtGx28PvZpSWmj2S1eRedy1KdLibHUsdljw8icbLaHOGiYFDJBPiZjBIcwUK GvEvQOOlzH2LsaZ+EJNAMqQF4ek1tl/XauRkek0GPs9peD3XEURmQJJ9/hEyxSuB fOzgdJufYTKx/sBso0fMbeuiq7APnupz -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:26 2025 by rpki-client