$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json) Hash identifier: rWaSpeibl4DCU5avziUuzVdshlCXOFBGTqRwBg5zHtE= Subject key identifier: FD:92:CF:3E:8A:AE:B6:AB:F5:76:E5:6E:7C:8B:E8:3B:84:D6:9D:5E Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft Manifest number: 013B Signing time: Mon 07 Apr 2025 03:18:53 +0000 Manifest this update: Mon 07 Apr 2025 03:18:52 +0000 Manifest next update: Mon 14 Apr 2025 03:18:52 +0000 Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: aUISqpp0j5zcS1SgheX9ddygPezZaKmwN1uBacWdmAw=) 2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: NO+YNugcxTXyb9dCZOOdJ51ziCc/jYCa92qXpmRaYW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 03:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194004 Validity Not Before: Apr 7 03:18:52 2025 GMT Not After : Apr 14 03:18:52 2025 GMT Subject: CN=67f3441d-1f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:49:bc:be:48:32:f0:4a:d0:14:8b:bc:05:dd: ee:99:51:6d:b3:c2:16:0b:ed:55:99:00:09:05:41: 18:9b:f0:5e:86:27:26:bd:70:f7:7d:cb:de:23:37: b9:14:18:ce:6a:64:56:04:23:07:17:80:2a:4d:63: 2c:70:d8:3a:bb:03:1e:de:b2:68:0d:c2:e9:91:4c: b7:58:45:5c:05:68:26:05:d3:81:82:3c:20:01:eb: 59:d1:13:a6:c4:ee:d4:fe:28:78:97:d3:a9:d6:c2: 1d:c1:05:58:b8:5f:1a:8d:f5:bf:67:b7:15:a5:22: b7:9b:dc:c7:f5:11:30:21:36:72:5f:c1:44:39:06: 3d:cb:5b:60:88:86:16:e1:aa:c5:d2:b6:0d:6d:bf: e1:e3:ab:21:ad:c3:4e:43:19:ef:d4:08:55:50:c8: 14:38:a3:9a:e7:6f:f8:e7:7b:49:3c:c2:ae:22:82: 8a:90:f3:94:ba:dc:1e:1a:3d:c1:c5:b8:b6:6f:29: 49:39:99:c9:cd:10:08:96:73:71:08:1f:6e:69:58: 00:3e:b1:37:fe:b6:c4:6c:66:2d:b3:b4:a1:bc:5f: 71:7c:21:fa:bd:5a:71:ac:31:e0:0f:e7:6c:7a:5d: 04:de:1b:42:f3:50:e3:b6:93:52:e7:e6:a7:cc:23: 36:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:92:CF:3E:8A:AE:B6:AB:F5:76:E5:6E:7C:8B:E8:3B:84:D6:9D:5E X509v3 Authority Key Identifier: keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a9:0c:dc:45:96:bf:c5:1c:6f:1a:7d:01:5e:30:69:ed:bf: 80:38:d5:b9:22:1b:61:a1:97:13:65:a1:7d:5e:81:e3:96:a4: 8c:89:86:10:66:2c:57:81:20:fc:6d:65:04:55:7e:13:4b:7a: b7:2e:dc:6f:d4:29:f4:7f:04:fe:ed:6a:15:39:c3:5f:04:b8: e3:bc:62:6a:99:ef:11:bc:98:d7:f4:f5:3c:38:3c:c2:c8:57: f5:e7:eb:b2:48:42:70:f4:b1:1f:0b:2c:16:ce:ac:bc:98:73: 1f:89:e0:b4:6d:dc:b5:b3:f0:3c:a0:79:06:9c:1d:f3:cb:eb: 23:5b:a8:7e:2b:28:50:62:5a:54:6c:47:5c:1c:a8:32:b1:a8: 3e:1c:59:af:95:7a:78:d7:5a:b5:c3:bb:16:50:c0:9e:3d:fa: 96:3a:16:9b:ec:a0:ae:0b:f6:dc:30:20:82:ad:07:8f:37:d8: 5e:8d:a2:86:99:4e:48:24:7e:55:0f:89:c3:a2:5f:c8:99:d8: 15:27:39:65:ff:15:72:d4:90:2a:75:c0:39:ad:cb:63:2d:59: f2:55:61:37:d7:bb:8b:74:54:5f:79:ad:3f:f8:e3:a1:39:0f: cc:b6:23:09:71:a4:40:98:e8:9d:79:0a:ad:81:ca:35:ff:44: 1e:b5:94:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMDQxMTAvBgNVBAUTKDdGN0Q4NTY1QkIwNDE4M0MzQUYxQ0NEMjIzRTlDNDYx MUYxNTA4MDYwHhcNMjUwNDA3MDMxODUyWhcNMjUwNDE0MDMxODUyWjAYMRYwFAYD VQQDEw02N2YzNDQxZC0xZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10m8vkgy8ErQFIu8Bd3umVFts8IWC+1VmQAJBUEYm/BehicmvXD3fcveIze5 FBjOamRWBCMHF4AqTWMscNg6uwMe3rJoDcLpkUy3WEVcBWgmBdOBgjwgAetZ0ROm xO7U/ih4l9Op1sIdwQVYuF8ajfW/Z7cVpSK3m9zH9REwITZyX8FEOQY9y1tgiIYW 4arF0rYNbb/h46shrcNOQxnv1AhVUMgUOKOa52/453tJPMKuIoKKkPOUutweGj3B xbi2bylJOZnJzRAIlnNxCB9uaVgAPrE3/rbEbGYts7ShvF9xfCH6vVpxrDHgD+ds el0E3htC81DjtpNS5+anzCM2AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2Szz6K rrar9XblbnyL6DuE1p1eMB8GA1UdIwQYMBaAFH99hWW7BBg8OvHM0iPpxGEfFQgG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwNC8wNDk1NDZDRTMw MkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdEdzY4Y3pTSS1uRVlSOFZD QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMkZaYnNFR0R3NjhjelNJLW5FWVI4VkNBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwNC8wNDk1NDZDRTMwMkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdE dzY4Y3pTSS1uRVlSOFZDQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqqQzcRZa/xRxvGn0BXjBp7b+AONW5IhthoZcTZaF9XoHjlqSMiYYQ ZixXgSD8bWUEVX4TS3q3Ltxv1Cn0fwT+7WoVOcNfBLjjvGJqme8RvJjX9PU8ODzC yFf15+uySEJw9LEfCywWzqy8mHMfieC0bdy1s/A8oHkGnB3zy+sjW6h+KyhQYlpU bEdcHKgysag+HFmvlXp411q1w7sWUMCePfqWOhab7KCuC/bcMCCCrQePN9hejaKG mU5IJH5VD4nDol/ImdgVJzll/xVy1JAqdcA5rctjLVnyVWE317uLdFRfea0/+OOh OQ/MtiMJcaRAmOideQqtgco1/0QetZSL -----END CERTIFICATE-----Generated at Mon Apr 7 13:26:49 2025 by rpki-client