$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft File: Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json) Hash identifier: 30xTdYkIKIC7LXUZmcvMbgVBW4CJqYeKcmAdoOYVK1U= Subject key identifier: 58:DA:43:60:50:1A:FC:DC:CE:31:8B:1E:A2:E8:F5:67:1F:50:29:D7 Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF Certificate issuer: /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft Manifest number: 0124 Signing time: Thu 17 Apr 2025 03:37:46 +0000 Manifest this update: Thu 17 Apr 2025 03:37:46 +0000 Manifest next update: Thu 24 Apr 2025 03:37:46 +0000 Files and hashes: 1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: J/z+VGH2YgYpwxhaoL+6nhgq6BRWeW1tTgP2ePOIT80=) 2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: aw8y769dbHtoKJEd8vQWlpw8CKdXEBliY+eMjR7xPWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 03:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF Validity Not Before: Apr 17 03:37:46 2025 GMT Not After : Apr 24 03:37:46 2025 GMT Subject: CN=6800778a-44a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a5:90:d6:b9:af:97:cb:69:23:e2:68:03:53: 5d:49:1b:b3:84:55:63:49:9d:3c:9b:94:34:76:ed: 68:13:64:48:11:48:bc:36:c9:8c:ae:56:10:55:21: aa:01:06:95:37:18:16:45:f5:9d:a9:dc:8b:84:34: bb:0d:35:1c:02:40:8c:ad:88:5d:40:e2:33:1f:ce: 00:ac:37:38:1c:8f:f6:0f:7b:0e:31:41:8e:03:7f: a6:36:ff:80:90:3d:78:f4:80:2a:8b:10:79:36:c8: b9:2e:c7:ee:c9:09:4f:92:4e:5a:62:15:9f:47:b3: a1:88:74:81:b2:04:23:c8:5e:81:0a:f6:53:ee:f6: 79:27:75:ea:fd:0b:40:8f:ac:86:2f:da:c1:67:0e: e6:bd:37:87:f8:95:04:a5:cd:37:45:8e:06:ab:d4: 25:b1:95:fb:e6:f6:52:25:d3:a4:e9:7c:b4:61:93: e5:4a:fa:0a:3e:33:99:bc:4d:ac:0a:d6:56:39:1e: 1e:f4:c6:28:73:5b:fa:78:c7:3e:8c:00:31:c8:75: ca:a3:2b:97:5d:5c:92:2c:5c:d2:00:c3:0e:48:2f: 45:cb:27:c7:53:ad:86:6e:25:8c:fe:72:f5:8a:62: 9d:f0:3d:35:2d:30:9a:3c:66:77:fc:32:da:61:a7: a8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DA:43:60:50:1A:FC:DC:CE:31:8B:1E:A2:E8:F5:67:1F:50:29:D7 X509v3 Authority Key Identifier: keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2c:fb:97:c3:41:ba:92:fe:fb:cd:95:e7:1e:2e:45:c7:8d: 1d:fc:96:4e:70:af:2b:77:18:90:99:27:76:6c:4c:ea:e0:b6: 24:e8:f7:09:59:72:83:a9:a9:85:83:b9:cf:92:53:85:4f:5e: 4a:da:61:3d:b6:45:57:6d:77:54:5d:cc:ee:7a:b0:c6:dd:e7: 2f:56:74:83:30:06:0d:62:f4:fa:fb:73:84:3d:3a:e0:80:e8: 91:d5:ea:3e:c3:cb:a4:6c:d0:a4:2c:6b:5d:73:15:99:8a:45: 94:50:c2:bc:6e:1a:90:2c:b0:4f:e9:7b:bb:2e:fa:d2:10:46: 31:ff:74:8a:b2:d1:5e:20:6e:91:0d:be:05:87:d9:c2:c7:d8: 65:0a:17:4f:92:0d:1a:0e:01:25:b6:1c:27:67:da:5f:55:c1: c4:7f:16:de:be:95:c7:da:3e:a5:da:99:1a:bc:3a:68:fe:20: 9b:0b:60:dd:e1:6e:fd:f5:b6:43:8c:6a:fa:f7:fd:9b:ab:36: 30:51:a7:79:38:80:dc:bd:dd:c3:7e:6a:a2:c2:01:38:5d:f8: 3f:7c:29:48:81:f8:76:92:c6:f7:de:1b:73:20:08:64:c3:32: 6b:36:d8:0f:05:72:0e:2e:fd:2a:69:ce:26:81:81:9f:8a:ec: c0:1b:30:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3QzQxMTAvBgNVBAUTKDQ5REI2MUZGMDNDNTUxNjc5NUNGNzg1MDlFQTM3QTA2 MEY0NTQ3QkYwHhcNMjUwNDE3MDMzNzQ2WhcNMjUwNDI0MDMzNzQ2WjAYMRYwFAYD VQQDEw02ODAwNzc4YS00NGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aWQ1rmvl8tpI+JoA1NdSRuzhFVjSZ08m5Q0du1oE2RIEUi8NsmMrlYQVSGq AQaVNxgWRfWdqdyLhDS7DTUcAkCMrYhdQOIzH84ArDc4HI/2D3sOMUGOA3+mNv+A kD149IAqixB5Nsi5LsfuyQlPkk5aYhWfR7OhiHSBsgQjyF6BCvZT7vZ5J3Xq/QtA j6yGL9rBZw7mvTeH+JUEpc03RY4Gq9QlsZX75vZSJdOk6Xy0YZPlSvoKPjOZvE2s CtZWOR4e9MYoc1v6eMc+jAAxyHXKoyuXXVySLFzSAMMOSC9FyyfHU62GbiWM/nL1 imKd8D01LTCaPGZ3/DLaYaeoAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjaQ2BQ GvzczjGLHqLo9WcfUCnXMB8GA1UdIwQYMBaAFEnbYf8DxVFnlc94UJ6jegYPRUe/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDdDNC81OTVCRTgyQzYz NUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVXZVZ6M2hRbnFONkJnOUZS NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDdDNC81OTVCRTgyQzYzNUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVX ZVZ6M2hRbnFONkJnOUZSNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNLPuXw0G6kv77zZXnHi5Fx40d/JZOcK8rdxiQmSd2bEzq4LYk6PcJ WXKDqamFg7nPklOFT15K2mE9tkVXbXdUXczuerDG3ecvVnSDMAYNYvT6+3OEPTrg gOiR1eo+w8ukbNCkLGtdcxWZikWUUMK8bhqQLLBP6Xu7LvrSEEYx/3SKstFeIG6R Db4Fh9nCx9hlChdPkg0aDgElthwnZ9pfVcHEfxbevpXH2j6l2pkavDpo/iCbC2Dd 4W799bZDjGr69/2bqzYwUad5OIDcvd3DfmqiwgE4Xfg/fClIgfh2ksb33htzIAhk wzJrNtgPBXIOLv0qac4mgYGfiuzAGzD9 -----END CERTIFICATE-----Generated at Sat Apr 19 01:51:23 2025 by rpki-client