$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft File: M1EvnGdsMJ4181WPA7muZBm_dBU.mft (raw, json) Hash identifier: nxjWMPHyVrte/ftQQEu8mgOg3z/N4dodrfeIqF+Irgk= Subject key identifier: E6:AD:97:27:D0:B4:F1:EF:35:54:D0:AF:3E:FC:EF:84:F1:D1:B1:83 Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15 Certificate issuer: /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft Manifest number: 016A Signing time: Sat 05 Apr 2025 03:18:08 +0000 Manifest this update: Sat 05 Apr 2025 03:18:08 +0000 Manifest next update: Sat 12 Apr 2025 03:18:08 +0000 Files and hashes: 1: M1EvnGdsMJ4181WPA7muZBm_dBU.crl (hash: yckqTVmuKoYdkWHI+g1e3pZTSo/Y9zT6g4BAzib0WGw=) 2: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (hash: kgAbrMxDjdyKqEEvFfGcY8h/Xgxe3iJZ0yN268wXz80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB763 Validity Not Before: Apr 5 03:18:08 2025 GMT Not After : Apr 12 03:18:08 2025 GMT Subject: CN=67f0a0f0-62b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:ac:0b:9c:6d:56:7d:9c:f0:4c:14:60:86: 8a:e8:44:ca:9e:17:54:9e:43:e4:02:3a:f9:6b:10: 0d:fa:da:04:61:d1:52:c5:31:9a:3b:e9:40:d3:82: c9:01:8a:5a:b0:0c:65:d9:68:13:99:b0:1f:01:91: f8:3e:3c:06:64:ae:4e:60:dd:34:24:ab:63:be:3a: fe:66:06:86:1e:d0:f4:84:5c:0d:99:3f:58:7f:f1: e8:97:6a:8d:41:3c:3f:5c:c0:91:99:9b:99:fc:b0: d3:d8:51:bb:e2:2e:d8:6e:0e:a1:0b:96:db:31:23: 72:15:77:a2:8c:46:68:39:3d:85:c0:c2:ea:0c:8c: b5:e4:84:ee:f8:cd:53:37:7d:05:c8:b9:5a:63:53: 00:81:68:39:9d:a4:09:dd:9d:a8:56:7a:e3:65:b3: 7c:9e:39:b5:21:16:24:68:7c:96:60:ba:92:70:e2: b4:0c:76:5e:7a:9b:53:8e:df:66:de:dd:54:7a:09: 3d:73:18:cb:c5:d9:da:ef:d1:ab:ca:de:7f:36:8c: 33:73:b4:30:e8:28:4f:82:7d:7e:ba:19:2a:85:db: 3e:1f:81:8c:76:a0:65:8e:43:26:73:e8:33:1d:e9: 8c:af:c0:7b:d2:aa:53:97:93:47:33:a3:cc:d6:3d: 0e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AD:97:27:D0:B4:F1:EF:35:54:D0:AF:3E:FC:EF:84:F1:D1:B1:83 X509v3 Authority Key Identifier: keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:53:58:e3:42:02:71:40:c6:27:c7:63:86:13:2c:a9:c7:23: 64:b6:ab:1b:7e:ad:bd:b5:bd:08:9e:10:4c:ba:0d:6d:89:19: 8e:10:98:04:a9:88:a0:a5:4b:6e:9a:24:55:c0:b5:ae:2b:c7: 4a:9e:86:6b:aa:0e:3d:71:a6:f3:67:c5:6e:8c:a7:2e:75:cd: ac:11:5b:fc:2c:5d:8b:be:09:16:ac:3f:ad:5e:40:ce:4b:f8: 13:e5:5c:fc:3d:e1:ef:e1:dd:a6:bd:19:b9:d7:bd:8c:1a:7f: 98:e5:54:bf:cf:81:51:f9:e0:54:55:1e:1f:b7:03:39:9a:eb: 7d:b8:a6:4e:8b:17:07:81:29:11:7c:fc:0d:8f:d2:a3:52:3a: 28:f1:0c:f8:47:22:3b:01:60:8b:6f:f7:4a:48:d8:78:7f:6e: a6:4d:94:92:b0:21:46:a4:8d:03:d2:af:06:ee:38:0b:af:22: b2:e7:2f:63:80:61:ad:f2:5d:c2:a9:de:da:64:cb:67:ca:92: d2:ba:76:b2:d6:ea:87:06:e6:38:f6:6b:59:8c:f5:7d:60:02: 07:33:0e:4b:3a:13:71:4f:de:05:01:82:ef:01:ec:4e:c5:22: 03:40:ca:c5:1b:fa:92:84:f6:d2:09:fd:08:88:68:d1:8f:1f: 6a:12:b6:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjMxMTAvBgNVBAUTKDMzNTEyRjlDNjc2QzMwOUUzNUYzNTU4RjAzQjlBRTY0 MTlCRjc0MTUwHhcNMjUwNDA1MDMxODA4WhcNMjUwNDEyMDMxODA4WjAYMRYwFAYD VQQDEw02N2YwYTBmMC02MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1L+sC5xtVn2c8EwUYIaK6ETKnhdUnkPkAjr5axAN+toEYdFSxTGaO+lA04LJ AYpasAxl2WgTmbAfAZH4PjwGZK5OYN00JKtjvjr+ZgaGHtD0hFwNmT9Yf/Hol2qN QTw/XMCRmZuZ/LDT2FG74i7Ybg6hC5bbMSNyFXeijEZoOT2FwMLqDIy15ITu+M1T N30FyLlaY1MAgWg5naQJ3Z2oVnrjZbN8njm1IRYkaHyWYLqScOK0DHZeeptTjt9m 3t1Uegk9cxjLxdna79Gryt5/Nowzc7Qw6ChPgn1+uhkqhds+H4GMdqBljkMmc+gz HemMr8B70qpTl5NHM6PM1j0OiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOatlyfQ tPHvNVTQrz7874Tx0bGDMB8GA1UdIwQYMBaAFDNRL5xnbDCeNfNVjwO5rmQZv3QV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2My84RjAyMUY4OEU5 QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdkc01KNDE4MVdQQTdtdVpCbV9k QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xRXZuR2RzTUo0MTgxV1BBN211WkJtX2RCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2My84RjAyMUY4OEU5QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdkc01K NDE4MVdQQTdtdVpCbV9kQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEU1jjQgJxQMYnx2OGEyypxyNktqsbfq29tb0InhBMug1tiRmOEJgE qYigpUtumiRVwLWuK8dKnoZrqg49cabzZ8VujKcudc2sEVv8LF2LvgkWrD+tXkDO S/gT5Vz8PeHv4d2mvRm5172MGn+Y5VS/z4FR+eBUVR4ftwM5mut9uKZOixcHgSkR fPwNj9KjUjoo8Qz4RyI7AWCLb/dKSNh4f26mTZSSsCFGpI0D0q8G7jgLryKy5y9j gGGt8l3Cqd7aZMtnypLSunay1uqHBuY49mtZjPV9YAIHMw5LOhNxT94FAYLvAexO xSIDQMrFG/qShPbSCf0IiGjRjx9qErbt -----END CERTIFICATE-----Generated at Sat Apr 5 05:52:26 2025 by rpki-client