$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft File: mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json) Hash identifier: XMPfthB+uQaGz/0NfpGC5c8O7mWev4iTZnq4wiSEtFQ= Subject key identifier: 84:21:8E:CF:DA:F1:E8:19:40:BF:DA:93:51:77:F3:2D:B6:0C:45:B4 Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Certificate serial: 03B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft Manifest number: 03B1 Signing time: Thu 03 Apr 2025 00:42:43 +0000 Manifest this update: Thu 03 Apr 2025 00:42:43 +0000 Manifest next update: Thu 10 Apr 2025 00:42:43 +0000 Files and hashes: 1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: 9CQSOONGHhcm78eBQJlSrKG16Q5LTcKAIk9vcogxMZU=) 2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 951 (0x3b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919290F Validity Not Before: Apr 3 00:42:43 2025 GMT Not After : Apr 10 00:42:43 2025 GMT Subject: CN=67edd983-dca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c4:d0:be:da:91:35:48:40:2a:84:fa:6e:c0: 69:e2:dd:96:ac:b4:80:21:aa:8a:de:fa:e3:30:8b: 7c:d3:66:31:f5:9d:b0:97:0c:41:dd:5d:15:4d:73: b0:6c:78:d6:2c:72:ce:16:72:ea:da:7c:b1:9f:d6: 5a:9f:64:ea:a4:19:95:57:33:72:92:96:ee:e6:89: 21:93:b1:52:67:e2:62:c0:41:10:f6:d2:0d:e3:fe: 76:4f:bb:e0:8d:f7:05:74:6c:9e:0f:8a:f7:51:62: 40:bf:b9:73:20:8e:9c:ca:4b:8d:a4:65:63:f4:ef: 40:da:00:94:c6:f6:31:88:6b:ab:57:56:42:b4:eb: 27:02:e8:43:cb:83:c6:4b:a4:bb:bf:50:ac:55:c5: 54:7f:6d:00:d7:6a:91:ea:5c:c0:4c:31:96:bd:96: 48:50:9b:62:10:91:22:a0:05:9a:38:f0:19:a6:94: ee:6e:3d:97:0d:e8:d1:f3:cf:0e:d4:be:f4:47:cc: bf:b7:ac:6d:8b:ea:eb:90:9a:e1:f0:f0:ce:65:bd: e2:b0:7e:ae:8f:23:68:23:ac:50:7a:29:e5:1b:8f: 27:96:db:63:57:45:a0:4d:38:03:23:0c:4d:de:4d: 72:31:fd:0b:13:72:27:64:79:95:a6:83:93:48:d4: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:21:8E:CF:DA:F1:E8:19:40:BF:DA:93:51:77:F3:2D:B6:0C:45:B4 X509v3 Authority Key Identifier: keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8c:85:08:49:35:60:91:c4:e3:19:55:da:12:b2:79:1c:a7: ba:35:9a:7d:c4:76:33:22:dd:73:fa:e0:f0:e8:af:3e:d4:9d: ec:f3:3e:a4:23:68:9d:14:34:59:95:7f:8e:d9:7a:10:39:f7: 20:0d:48:14:28:1f:d6:3d:47:86:d8:e9:6f:ea:a8:40:2c:f5: 47:f0:cf:88:d1:85:e8:2f:08:1a:eb:7f:8b:d5:84:c2:d5:fb: 96:ed:9b:a1:3e:d7:4e:e0:37:21:30:8f:d4:3d:df:30:85:1d: 61:30:e5:ef:a4:48:76:e3:a2:2e:28:10:af:b1:4b:a1:6e:da: ee:cb:e6:70:07:ff:c1:de:79:67:dc:21:d5:fc:9b:e5:42:42: 16:a0:c2:d1:11:ac:ca:01:fe:33:f6:97:e4:13:cf:98:8a:32: 4e:73:db:15:51:6d:e3:f6:4d:88:c7:b3:0d:e5:bf:bf:19:a6: bd:95:c3:fc:67:3b:89:92:d0:4d:9f:31:68:44:4a:d8:7a:17: 83:96:27:bf:7d:c2:5d:07:e2:f0:db:57:d2:10:73:2c:54:aa: ee:d9:b2:5e:12:c4:f4:51:b9:db:08:58:15:86:9d:74:f2:30: 90:7a:cb:7c:53:3a:76:fc:80:3e:65:ee:29:ec:cc:41:98:63: 29:61:f4:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1 NkU3NUM1NDMwHhcNMjUwNDAzMDA0MjQzWhcNMjUwNDEwMDA0MjQzWjAYMRYwFAYD VQQDEw02N2VkZDk4My1kY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MTQvtqRNUhAKoT6bsBp4t2WrLSAIaqK3vrjMIt802Yx9Z2wlwxB3V0VTXOw bHjWLHLOFnLq2nyxn9Zan2TqpBmVVzNykpbu5okhk7FSZ+JiwEEQ9tIN4/52T7vg jfcFdGyeD4r3UWJAv7lzII6cykuNpGVj9O9A2gCUxvYxiGurV1ZCtOsnAuhDy4PG S6S7v1CsVcVUf20A12qR6lzATDGWvZZIUJtiEJEioAWaOPAZppTubj2XDejR888O 1L70R8y/t6xti+rrkJrh8PDOZb3isH6ujyNoI6xQeinlG48nlttjV0WgTTgDIwxN 3k1yMf0LE3InZHmVpoOTSNSFCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQhjs/a 8egZQL/ak1F38y22DEW0MB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3 REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOjIUISTVgkcTjGVXaErJ5HKe6NZp9xHYzIt1z+uDw6K8+1J3s8z6k I2idFDRZlX+O2XoQOfcgDUgUKB/WPUeG2Olv6qhALPVH8M+I0YXoLwga63+L1YTC 1fuW7ZuhPtdO4DchMI/UPd8whR1hMOXvpEh246IuKBCvsUuhbtruy+ZwB//B3nln 3CHV/JvlQkIWoMLREazKAf4z9pfkE8+YijJOc9sVUW3j9k2Ix7MN5b+/Gaa9lcP8 ZzuJktBNnzFoRErYeheDlie/fcJdB+Lw21fSEHMsVKru2bJeEsT0UbnbCFgVhp10 8jCQest8Uzp2/IA+Ze4p7MxBmGMpYfS1 -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:49 2025 by rpki-client