$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft File: e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft (raw, json) Hash identifier: AZBw/A4PMUoBYptYxPJNLdkONy6QIjkXVnm0b4llABU= Subject key identifier: A6:E3:4E:0E:C4:62:A0:49:29:D5:BD:36:F5:AD:5D:2A:3D:8B:1C:E1 Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5 Certificate issuer: /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5 Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft Manifest number: 061E Signing time: Sun 06 Apr 2025 22:23:54 +0000 Manifest this update: Sun 06 Apr 2025 22:23:54 +0000 Manifest next update: Sun 13 Apr 2025 22:23:54 +0000 Files and hashes: 1: e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl (hash: Ba8SqBelU4ChmwAsNQEB9dyzjZzusZtrzvxFtS9bIyU=) 2: BC56EB8EA21811ED94424B59C4F9AE02.roa (hash: Soa0nTU2rA3J23+wJd6LU+z2VdnIjv2Qmra/e4mNti0=) 3: 3520A4C0DDA711EBA436967CC4F9AE02.roa (hash: LHhvzFN8jei3TpgCNYUV3r6ZavWd7Cg3TVQ8AX0DXvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 22:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EF2 Validity Not Before: Apr 6 22:23:54 2025 GMT Not After : Apr 13 22:23:54 2025 GMT Subject: CN=67f2fefa-98f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:bd:27:40:cc:58:7e:0d:a8:1d:a8:6d:37: 2c:40:bf:f6:c1:91:01:79:74:c4:12:9c:69:61:db: 37:cd:df:c7:e8:df:e8:80:e3:68:62:b2:0d:a1:e4: be:57:65:78:10:b7:7d:c9:44:8d:b3:e7:40:29:41: 4e:d1:86:20:dc:80:e7:af:da:76:bf:5c:0d:80:f9: 82:48:27:12:2c:90:f3:ed:8b:4a:ed:be:58:ab:8e: e1:df:34:c9:ff:3c:b3:a6:e1:4f:56:06:ff:68:05: e2:e1:62:d0:6e:31:8b:64:24:c0:2e:86:40:6d:90: e2:ee:32:15:c7:0d:c2:98:8a:2c:9d:c9:59:e9:a1: b6:08:80:52:f9:5e:f5:66:87:1b:fe:66:49:30:85: dc:34:9a:eb:66:4c:c9:c4:b0:39:e2:5e:5f:ee:b3: d3:21:de:3d:ce:7b:e0:2d:af:62:13:98:f9:4e:a4: e9:b4:5f:24:d5:42:d4:37:c8:82:0f:c3:1e:10:23: 62:0f:53:37:cb:71:6d:db:c7:b5:d7:27:55:3d:ef: ca:76:1d:21:33:a7:71:4c:d8:b8:66:0f:98:a2:04: a7:22:a2:c9:91:13:19:02:c1:31:66:91:28:7a:8c: 2e:4a:59:e1:8c:d4:d4:27:ec:1c:e1:6b:81:12:c1: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E3:4E:0E:C4:62:A0:49:29:D5:BD:36:F5:AD:5D:2A:3D:8B:1C:E1 X509v3 Authority Key Identifier: keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:a3:0d:bc:75:f7:44:36:0d:9b:c4:ad:da:36:31:02:d4:3c: b3:73:9b:49:3c:23:89:2c:6d:1f:c0:9a:69:27:ed:65:67:06: 37:a9:61:e6:a4:0b:1f:41:8a:b9:a7:49:44:99:a1:54:59:1e: 96:17:2e:aa:94:34:1d:65:93:48:11:3f:9b:23:36:5e:51:47: 09:d7:c6:9e:7b:fd:8e:5f:84:9c:e0:a0:53:f9:95:9b:27:7f: ee:60:f3:70:a2:09:94:67:5f:ea:b9:59:bb:26:60:b9:e3:f5: f1:3c:61:9d:3f:14:34:54:89:57:66:3c:e6:f1:20:b7:db:56: 91:49:77:b5:e7:a2:08:c5:3a:7c:92:db:2d:3b:11:05:34:b8: 83:a6:ed:8c:bd:6a:d1:93:0e:39:24:63:65:41:87:06:2a:84: ff:3d:84:14:96:55:0d:af:f8:74:06:2f:1c:ba:0c:58:93:2f: 70:f2:9a:dc:6a:60:8f:a5:4e:23:c3:df:40:72:a3:0f:fe:c3: e7:9e:7a:09:58:60:a0:56:8c:23:40:10:8f:03:28:6c:97:39: 92:bc:cb:32:65:a8:47:ed:54:6d:32:02:ad:06:bf:ba:d7:70: df:36:3a:27:67:12:01:91:c7:08:24:4d:67:c9:58:3b:64:de: 0d:fd:bc:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFRjIxMTAvBgNVBAUTKDdCRjE4MENFQUM0NzZEQkQxODM5MjkxMEZBMjJEQUEx RUY1QkE2RDUwHhcNMjUwNDA2MjIyMzU0WhcNMjUwNDEzMjIyMzU0WjAYMRYwFAYD VQQDEw02N2YyZmVmYS05OGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEC9J0DMWH4NqB2obTcsQL/2wZEBeXTEEpxpYds3zd/H6N/ogONoYrINoeS+ V2V4ELd9yUSNs+dAKUFO0YYg3IDnr9p2v1wNgPmCSCcSLJDz7YtK7b5Yq47h3zTJ /zyzpuFPVgb/aAXi4WLQbjGLZCTALoZAbZDi7jIVxw3CmIosnclZ6aG2CIBS+V71 Zocb/mZJMIXcNJrrZkzJxLA54l5f7rPTId49znvgLa9iE5j5TqTptF8k1ULUN8iC D8MeECNiD1M3y3Ft28e11ydVPe/Kdh0hM6dxTNi4Zg+YogSnIqLJkRMZAsExZpEo eowuSlnhjNTUJ+wc4WuBEsFCgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbjTg7E YqBJKdW9NvWtXSo9ixzhMB8GA1UdIwQYMBaAFHvxgM6sR229GDkpEPoi2qHvW6bV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVGMi9EQTQ3RTU2MDk0 NDgxMUVCQTVBRTM2MDlDNEY5QUUwMi9lX0dBenF4SGJiMFlPU2tRLWlMYW9lOWJw dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VfR0F6cXhIYmIwWU9Ta1EtaUxhb2U5YnB0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVGMi9EQTQ3RTU2MDk0NDgxMUVCQTVBRTM2MDlDNEY5QUUwMi9lX0dBenF4SGJi MFlPU2tRLWlMYW9lOWJwdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEow28dfdENg2bxK3aNjEC1Dyzc5tJPCOJLG0fwJppJ+1lZwY3qWHm pAsfQYq5p0lEmaFUWR6WFy6qlDQdZZNIET+bIzZeUUcJ18aee/2OX4Sc4KBT+ZWb J3/uYPNwogmUZ1/quVm7JmC54/XxPGGdPxQ0VIlXZjzm8SC321aRSXe156IIxTp8 ktstOxEFNLiDpu2MvWrRkw45JGNlQYcGKoT/PYQUllUNr/h0Bi8cugxYky9w8prc amCPpU4jw99AcqMP/sPnnnoJWGCgVowjQBCPAyhslzmSvMsyZahH7VRtMgKtBr+6 13DfNjonZxIBkccIJE1nyVg7ZN4N/bya -----END CERTIFICATE-----Generated at Tue Apr 8 15:24:29 2025 by rpki-client