$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft File: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json) Hash identifier: MLPl1IuQaa5swxMv8GND7lNBWW2hcAPMP78bVq9CVQk= Subject key identifier: 7C:AF:96:AE:1E:A2:B9:B0:4F:E1:C9:DD:E9:10:EA:CB:B8:8C:CC:84 Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A Certificate issuer: /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A Certificate serial: 18F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft Manifest number: 18E8 Signing time: Fri 04 Apr 2025 16:31:02 +0000 Manifest this update: Fri 04 Apr 2025 16:31:00 +0000 Manifest next update: Fri 11 Apr 2025 16:31:00 +0000 Files and hashes: 1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: RZvUvWaOwXV9VNAFFqpcd6pi6mhcWKEETWXsZZfLKvw=) 2: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: B440WbdvKbjd1VY/h7WWP2ns/DY0sOenjaoST0N8qSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6386 (0x18f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1306 Validity Not Before: Apr 4 16:31:00 2025 GMT Not After : Apr 11 16:31:00 2025 GMT Subject: CN=67f00945-10bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:b4:33:67:b9:08:b7:75:27:e0:ff:c2:8c: c8:7e:c1:af:98:ae:5a:f9:87:aa:37:31:02:d0:d1: a6:a7:cd:94:a0:54:73:d1:08:3f:29:0b:63:fc:f1: 67:19:60:4e:4a:c3:9f:63:b0:b0:a7:c6:ef:79:1d: 89:ea:74:ae:43:87:c0:c6:fb:ac:7e:fc:89:fa:67: 40:3a:92:ed:8d:5d:b6:3d:e0:db:0a:e7:89:4e:0a: a0:8d:54:b4:bb:62:24:61:18:80:23:b5:b3:f7:95: 8c:28:af:24:9d:af:5e:fc:8a:e4:a9:44:36:a5:95: 0c:5e:ac:76:a8:4d:f2:31:3e:f4:b2:14:21:df:04: 1c:91:47:d0:f6:1a:1f:1a:82:bd:72:db:53:46:f1: ce:f4:e4:5b:6b:52:db:11:13:c5:e6:90:0c:e5:3d: 1e:70:54:2e:1d:45:c8:5b:40:d2:6e:04:9a:78:dd: 43:f7:71:66:50:e3:52:1d:f5:0b:45:9b:b6:7e:db: ef:6b:ea:90:36:f6:cc:13:cb:5d:be:9a:1f:9d:98: e4:a4:ba:74:ef:33:f5:34:74:94:b9:02:94:3c:d2: ff:8f:38:89:f6:c8:cd:2b:bb:8c:ce:63:dd:e3:c6: 31:12:3a:58:bd:13:56:77:d2:37:ae:41:73:5d:ef: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AF:96:AE:1E:A2:B9:B0:4F:E1:C9:DD:E9:10:EA:CB:B8:8C:CC:84 X509v3 Authority Key Identifier: keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f2:7d:69:e2:3e:4e:3d:28:49:1d:44:05:dc:f9:a7:30:ae: d4:06:6e:f5:66:71:15:88:eb:97:39:30:4b:96:ab:49:4b:c7: d3:48:bb:76:bb:c0:0f:a5:9f:11:44:90:b5:fe:83:75:aa:d4: 29:cd:03:20:02:18:68:31:dd:1a:87:61:ea:7b:f8:1a:10:0a: fd:37:10:47:ed:53:d7:b6:9e:72:81:cf:a1:a4:62:e4:34:45: 27:e9:74:0f:1c:df:6d:f0:50:d6:ee:94:bc:40:27:99:54:02: 4f:f3:be:77:7a:c6:fa:00:92:6e:99:78:da:3d:81:15:bb:7a: 44:08:d0:1b:60:a5:3b:a5:e5:0b:37:60:9e:6c:b0:2c:1d:0f: 2f:c3:11:e0:f1:44:06:90:55:40:fe:92:c4:9e:2b:3b:4e:83: 71:53:05:ec:0e:c4:ae:70:47:26:ce:54:6f:df:29:ad:98:3a: 3e:60:a3:51:8d:79:17:27:78:4c:a1:7a:4f:3c:10:1c:c1:28: 79:87:91:fb:c2:76:28:f7:57:49:2b:43:3a:05:73:54:26:60: 7e:93:ce:b1:ee:da:84:18:f4:ba:9f:30:5b:fc:d4:75:b9:44: 53:9f:43:82:ec:6e:39:ef:88:8a:e7:ba:de:46:ee:8b:ba:a9: 6f:1f:5e:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEzMDYxMTAvBgNVBAUTKEUwNEZCMkFBNjI3RDk3Qjk4OUFFQ0ZFODY5NzRFM0M1 RjMwMzEyMUEwHhcNMjUwNDA0MTYzMTAwWhcNMjUwNDExMTYzMTAwWjAYMRYwFAYD VQQDEw02N2YwMDk0NS0xMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVO0M2e5CLd1J+D/wozIfsGvmK5a+YeqNzEC0NGmp82UoFRz0Qg/KQtj/PFn GWBOSsOfY7Cwp8bveR2J6nSuQ4fAxvusfvyJ+mdAOpLtjV22PeDbCueJTgqgjVS0 u2IkYRiAI7Wz95WMKK8kna9e/IrkqUQ2pZUMXqx2qE3yMT70shQh3wQckUfQ9hof GoK9cttTRvHO9ORba1LbERPF5pAM5T0ecFQuHUXIW0DSbgSaeN1D93FmUONSHfUL RZu2ftvva+qQNvbME8tdvpofnZjkpLp07zP1NHSUuQKUPNL/jziJ9sjNK7uMzmPd 48YxEjpYvRNWd9I3rkFzXe9zSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyvlq4e ormwT+HJ3ekQ6su4jMyEMB8GA1UdIwQYMBaAFOBPsqpifZe5ia7P6Gl048XzAxIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTMwNi9GRTQ5NzQ5ODgz Q0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3bUpyc19vYVhUanhmTURF aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRFLXlxbUo5bDdtSnJzX29hWFRqeGZNREVoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTMwNi9GRTQ5NzQ5ODgzQ0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3 bUpyc19vYVhUanhmTURFaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg8n1p4j5OPShJHUQF3PmnMK7UBm71ZnEViOuXOTBLlqtJS8fTSLt2 u8APpZ8RRJC1/oN1qtQpzQMgAhhoMd0ah2Hqe/gaEAr9NxBH7VPXtp5ygc+hpGLk NEUn6XQPHN9t8FDW7pS8QCeZVAJP8753esb6AJJumXjaPYEVu3pECNAbYKU7peUL N2CebLAsHQ8vwxHg8UQGkFVA/pLEnis7ToNxUwXsDsSucEcmzlRv3ymtmDo+YKNR jXkXJ3hMoXpPPBAcwSh5h5H7wnYo91dJK0M6BXNUJmB+k86x7tqEGPS6nzBb/NR1 uURTn0OC7G4574iK57reRu6LuqlvH16j -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:55 2025 by rpki-client