$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft File: c0CQ78N5g_0XW-AvSUlmiiFDciE.mft (raw, json) Hash identifier: 9Hg+OEfsKKGR1V4O2wLM5WWR1jiWlo8eq897iLZMpyE= Subject key identifier: AD:5C:7D:FB:AD:1D:60:9C:BB:4C:50:BC:95:09:1B:0D:AC:D5:49:EA Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221 Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft Manifest number: 0492 Signing time: Thu 03 Apr 2025 00:01:06 +0000 Manifest this update: Thu 03 Apr 2025 00:01:06 +0000 Manifest next update: Thu 10 Apr 2025 00:01:06 +0000 Files and hashes: 1: c0CQ78N5g_0XW-AvSUlmiiFDciE.crl (hash: uBzIgMxCoCuclzKLGC4xWW+ayRpRTJdr/imHm+LlWAA=) 2: 2110795ED38E11EDADA86381C4F9AE02.roa (hash: 3scFbI2eqJmRXNfrH/g1NhiMJkdzFzRzL2hCN9j3R/w=) 3: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (hash: Jk80jeO05hd8HdpNBJKbydf23WQjdBY/wJrAaPYnYxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D025A Validity Not Before: Apr 3 00:01:06 2025 GMT Not After : Apr 10 00:01:06 2025 GMT Subject: CN=67edcfc2-17ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a2:e8:a1:c4:f9:d3:2d:5b:bf:ee:6d:ea:ff: ff:c0:98:e9:b8:bc:b5:47:6b:75:a4:6a:10:40:44: 59:da:21:bf:2b:7c:ff:e6:92:1c:98:a5:98:ba:ba: 73:a1:79:95:e6:54:15:80:80:98:9c:ee:1d:f8:24: ee:62:71:c4:bd:cf:31:62:d7:ca:43:45:6b:ca:97: c5:10:a4:0a:84:6e:7c:3d:35:b3:d0:73:ad:45:74: 70:45:3c:1f:a1:09:5f:f0:65:08:28:71:b9:e2:bf: fc:06:86:38:11:b8:44:b1:2e:95:c4:f7:97:6c:9c: c5:1e:66:26:40:96:d3:3d:e5:77:8a:ca:c1:66:80: 19:01:1d:b6:11:b4:38:5d:33:6f:42:cc:3f:a6:36: a6:f0:74:6a:01:97:12:11:65:3c:2f:ab:06:b1:44: 19:5d:46:fc:6b:13:43:d4:3e:50:25:e4:b6:14:25: dc:03:d7:08:9f:ee:40:96:5e:d2:ab:e8:55:87:cf: 7c:fb:eb:c2:4e:8f:a4:58:40:ce:ab:07:c0:e2:f2: a8:de:4f:fb:b8:18:61:7f:ba:1d:b0:1c:88:1a:e1: 81:38:16:12:05:44:68:10:45:c5:62:43:f5:2b:75: 67:02:83:55:aa:76:70:06:f8:1e:7b:33:a8:6b:2c: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5C:7D:FB:AD:1D:60:9C:BB:4C:50:BC:95:09:1B:0D:AC:D5:49:EA X509v3 Authority Key Identifier: keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:b3:24:05:23:cd:ae:79:de:3e:d0:32:e9:9a:6e:64:4d:6d: db:39:53:24:a8:8c:8a:9e:30:d7:cf:60:af:55:5f:04:d4:cf: 33:4d:ca:85:61:6a:3a:be:10:5c:2b:13:30:37:02:1a:cc:88: 7a:71:23:4b:12:fb:ab:e3:68:fc:2a:16:a5:18:af:ba:41:96: 00:fb:4d:bc:e7:5d:43:e5:7c:86:bd:56:c2:5e:69:87:28:78: 1c:20:e1:a1:c3:ac:80:18:08:78:7b:41:a0:aa:23:cc:bd:d0: 9a:74:9e:88:46:7f:87:cf:ad:81:3f:27:18:09:d5:41:e7:45: 47:95:2a:d2:3d:0f:01:cc:2b:f9:e1:ef:48:6c:3e:a1:0d:93: db:89:28:16:71:2b:31:c4:e8:b2:24:65:16:e8:a4:7b:6e:59: 51:3f:47:2a:d7:dc:46:5c:b1:5b:d9:3c:12:08:85:e4:8b:7f: 78:3a:45:c0:ec:ed:51:ec:7d:f0:31:ae:76:c1:08:65:c9:f5: e6:bc:1c:65:cd:7f:39:3b:28:3f:42:75:79:bd:0c:63:43:19: a9:b8:f5:0e:1e:28:71:a4:ef:e2:fc:97:f1:4f:06:a6:49:85: bc:e0:1a:74:b6:8c:37:7c:ec:0e:bc:93:7f:50:a2:80:c8:f9: a1:60:d5:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB MjE0MzcyMjEwHhcNMjUwNDAzMDAwMTA2WhcNMjUwNDEwMDAwMTA2WjAYMRYwFAYD VQQDEw02N2VkY2ZjMi0xN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aLoocT50y1bv+5t6v//wJjpuLy1R2t1pGoQQERZ2iG/K3z/5pIcmKWYurpz oXmV5lQVgICYnO4d+CTuYnHEvc8xYtfKQ0VrypfFEKQKhG58PTWz0HOtRXRwRTwf oQlf8GUIKHG54r/8BoY4EbhEsS6VxPeXbJzFHmYmQJbTPeV3isrBZoAZAR22EbQ4 XTNvQsw/pjam8HRqAZcSEWU8L6sGsUQZXUb8axND1D5QJeS2FCXcA9cIn+5All7S q+hVh898++vCTo+kWEDOqwfA4vKo3k/7uBhhf7odsByIGuGBOBYSBURoEEXFYkP1 K3VnAoNVqnZwBvgeezOoayyiRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1cffut HWCcu0xQvJUJGw2s1UnqMB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDI1QS9ENUVGMUE5MDMwQUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdf MFhXLUF2U1VsbWlpRkRjaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCsyQFI82ued4+0DLpmm5kTW3bOVMkqIyKnjDXz2CvVV8E1M8zTcqF YWo6vhBcKxMwNwIazIh6cSNLEvur42j8KhalGK+6QZYA+028511D5XyGvVbCXmmH KHgcIOGhw6yAGAh4e0GgqiPMvdCadJ6IRn+Hz62BPycYCdVB50VHlSrSPQ8BzCv5 4e9IbD6hDZPbiSgWcSsxxOiyJGUW6KR7bllRP0cq19xGXLFb2TwSCIXki394OkXA 7O1R7H3wMa52wQhlyfXmvBxlzX85Oyg/QnV5vQxjQxmpuPUOHihxpO/i/JfxTwam SYW84Bp0tow3fOwOvJN/UKKAyPmhYNUh -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:09 2025 by rpki-client