$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft File: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft (raw, json) Hash identifier: bk1sEVUNsQX+WYtXpELNFwSHGenv2x9mK7QaFPno10E= Subject key identifier: AD:0F:04:9D:D3:C3:58:30:9A:1B:B3:3C:F4:97:33:06:2E:35:78:98 Authority key identifier: 46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 Certificate issuer: /CN=A9188F45/serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft Manifest number: E5 Signing time: Thu 03 Apr 2025 04:41:18 +0000 Manifest this update: Thu 03 Apr 2025 04:41:17 +0000 Manifest next update: Thu 10 Apr 2025 04:41:17 +0000 Files and hashes: 1: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl (hash: sg9TUWXOA+x9jUVY8FBroxl4+SPPuuvlI89b6F6Erl4=) 2: 8A574D9AB8AB11EEA866EB27C4F9AE02.roa (hash: B74l8KAcZzTJjTG0Mnc+WUicHwzuFyRpUWB92X31DmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F45 Validity Not Before: Apr 3 04:41:17 2025 GMT Not After : Apr 10 04:41:17 2025 GMT Subject: CN=67ee116e-64d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:e8:4c:3c:1a:8f:e0:8b:89:cd:2e:e8:08: 39:0d:b0:57:49:67:64:7a:6c:9d:00:5b:e8:11:32: 25:56:00:5b:e0:8d:88:cc:1f:59:78:e9:1d:97:49: c9:af:57:56:c3:e0:25:c2:8b:08:4f:b3:7c:61:d0: 9c:04:e0:c3:d6:35:76:72:6a:bd:11:41:07:b1:2c: 50:ab:c8:81:83:d4:72:0d:3c:11:ac:9d:3c:f6:06: 2c:f6:5b:a2:f6:aa:13:6e:bf:4e:60:d2:45:5f:fa: 1e:fc:46:6f:20:7b:ec:ee:5b:f7:2f:1c:ba:f1:74: d2:d2:33:19:31:39:2d:1b:fc:cd:dc:e7:dd:f1:c5: 41:67:fb:26:1a:31:bb:d4:79:3d:d8:72:8c:a6:e3: 99:2b:c4:57:e3:38:97:e7:57:8c:d2:fa:dc:f3:44: f5:b9:b3:45:0c:cb:1c:a8:f7:ce:00:ac:8e:5e:9a: cf:32:a7:d7:4d:b6:1f:db:ad:ee:fd:a3:ad:ca:26: 14:82:55:1a:7b:cb:96:70:dd:bd:cb:72:35:57:df: cc:b2:4a:ce:32:56:91:38:7c:09:b7:01:96:5a:ad: f5:55:66:c8:2b:78:ba:78:1b:e5:be:0d:d9:b6:a4: 25:7a:6f:5a:8e:a2:dc:57:07:87:6b:1a:3f:ae:e3: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0F:04:9D:D3:C3:58:30:9A:1B:B3:3C:F4:97:33:06:2E:35:78:98 X509v3 Authority Key Identifier: keyid:46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:14:65:db:23:d1:ec:f3:f4:17:ea:5c:73:03:dc:b5:4b:a5: 99:57:b5:6d:54:8e:6a:91:9d:e1:90:cb:b8:49:6f:ba:17:f3: 05:e7:4f:63:4e:c2:6c:c6:55:25:74:b7:22:70:86:7a:cc:bc: da:75:0c:e9:49:24:03:02:5a:4a:d4:31:b2:aa:a1:9f:24:8c: 02:5a:7b:11:c4:5c:6b:7b:6b:a1:05:85:41:11:f8:44:ad:6c: ee:23:6f:00:c6:72:3e:11:a4:f7:5b:22:f4:94:7d:9e:b5:07: cc:c2:60:79:d6:a1:b5:0c:8e:d1:61:44:1c:2c:ac:45:63:fa: 1d:6b:b5:8b:b0:e4:2a:8d:e2:7c:00:a5:5e:45:61:92:7a:14: c2:c6:fd:cc:d9:b3:92:03:af:f2:a0:16:9b:14:9d:b7:94:e2: 2e:de:33:40:43:33:38:1c:91:95:2e:e8:86:7d:76:24:da:3b: c0:ea:03:b4:ae:d1:e0:20:98:f2:55:c7:43:1e:48:f0:2d:1e: a1:61:dc:4a:8b:b4:f5:7d:5f:be:d3:0d:e2:39:fb:63:1e:6e: 89:d5:fc:0b:ab:7d:55:68:ff:ab:5c:95:14:5f:26:f4:50:0b: 21:62:5e:b6:82:34:16:5c:19:0c:62:ba:49:57:88:02:7c:e0: 31:3d:52:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNDUxMTAvBgNVBAUTKDQ2RUYwNEJGMTE5OEJFMEUyQTMxM0FBN0FEMEFCMEZD N0UwODFDNDUwHhcNMjUwNDAzMDQ0MTE3WhcNMjUwNDEwMDQ0MTE3WjAYMRYwFAYD VQQDEw02N2VlMTE2ZS02NGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocfoTDwaj+CLic0u6Ag5DbBXSWdkemydAFvoETIlVgBb4I2IzB9ZeOkdl0nJ r1dWw+AlwosIT7N8YdCcBODD1jV2cmq9EUEHsSxQq8iBg9RyDTwRrJ089gYs9lui 9qoTbr9OYNJFX/oe/EZvIHvs7lv3Lxy68XTS0jMZMTktG/zN3Ofd8cVBZ/smGjG7 1Hk92HKMpuOZK8RX4ziX51eM0vrc80T1ubNFDMscqPfOAKyOXprPMqfXTbYf263u /aOtyiYUglUae8uWcN29y3I1V9/MskrOMlaROHwJtwGWWq31VWbIK3i6eBvlvg3Z tqQlem9ajqLcVweHaxo/ruNpYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0PBJ3T w1gwmhuzPPSXMwYuNXiYMB8GA1UdIwQYMBaAFEbvBL8RmL4OKjE6p60KsPx+CBxF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY0NS9GRDk5NjUxNEI4 QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZnNHFNVHFuclFxd19INElI RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1OEV2eEdZdmc0cU1UcW5yUXF3X0g0SUhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY0NS9GRDk5NjUxNEI4QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZn NHFNVHFuclFxd19INElIRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6FGXbI9Hs8/QX6lxzA9y1S6WZV7VtVI5qkZ3hkMu4SW+6F/MF509j TsJsxlUldLcicIZ6zLzadQzpSSQDAlpK1DGyqqGfJIwCWnsRxFxre2uhBYVBEfhE rWzuI28AxnI+EaT3WyL0lH2etQfMwmB51qG1DI7RYUQcLKxFY/oda7WLsOQqjeJ8 AKVeRWGSehTCxv3M2bOSA6/yoBabFJ23lOIu3jNAQzM4HJGVLuiGfXYk2jvA6gO0 rtHgIJjyVcdDHkjwLR6hYdxKi7T1fV++0w3iOftjHm6J1fwLq31VaP+rXJUUXyb0 UAshYl62gjQWXBkMYrpJV4gCfOAxPVIB -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:59 2025 by rpki-client