$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft File: SLmUWYf2drRs7T3hKEmoo49AaLU.mft (raw, json) Hash identifier: a/zdxavcq2Vmb9FEUTq4GS55keSi+hn8LcyxjWHTXCA= Subject key identifier: BE:63:F0:0B:C9:BA:34:CF:8D:62:A8:6E:86:DD:2A:BC:90:6E:C9:DD Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 Certificate issuer: /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft Manifest number: 07C6 Signing time: Fri 18 Apr 2025 21:13:38 +0000 Manifest this update: Fri 18 Apr 2025 21:13:38 +0000 Manifest next update: Fri 25 Apr 2025 21:13:38 +0000 Files and hashes: 1: SLmUWYf2drRs7T3hKEmoo49AaLU.crl (hash: yzE5nRdEg0RAaQpwyhD3EZZfeHwVDgFV5OXDLCAkasw=) 2: 37A46070F6F211EA922F482BC4F9AE02.roa (hash: ulbSY28XJFQuMyMRnX4bdktKm/xcu3tL1ZMG0ew7F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 21:13:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BAB, serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5 Validity Not Before: Apr 18 21:13:38 2025 GMT Not After : Apr 25 21:13:38 2025 GMT Subject: CN=6802c082-7a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:bc:74:6c:7f:8a:4e:46:0a:f6:e9:51:57: 5e:d1:de:2b:26:ca:a5:24:0b:69:2f:ea:7a:92:33: 0c:76:8c:80:33:54:84:e8:30:d9:9b:f5:14:36:b7: 0b:66:9d:2a:e9:af:0f:50:2a:d6:8a:58:21:91:72: f9:fb:a9:5f:e3:50:0a:a1:cd:f3:9f:cd:ff:77:f2: 19:f0:17:d3:10:35:7f:2f:97:d0:29:98:dc:f5:3f: 0e:d7:3f:cb:b8:18:3b:3c:08:c5:d7:1e:34:83:19: 52:25:62:38:28:da:fe:04:63:c3:62:02:98:70:f4: c0:dd:c9:e8:6a:65:e4:31:67:ed:60:ea:2d:1c:f7: 3a:01:93:73:54:1e:8b:02:ae:84:0c:fe:6d:8d:d8: ae:ca:23:36:ee:ed:a4:da:1b:87:09:89:e3:09:0b: ad:66:a1:be:88:54:ee:89:75:3f:32:9f:ed:84:c5: 8b:99:9a:ce:f3:6f:fd:ae:e3:f8:32:bb:3a:ed:11: cd:28:1e:c0:1c:f5:1f:94:f5:70:73:2d:ac:dc:bd: 82:7c:dc:41:58:aa:59:b5:42:05:67:a9:f7:7e:92: 98:51:f6:0e:2f:e5:b3:5f:64:bc:80:f8:d8:15:00: 4f:f5:3d:e8:dc:a9:5a:6c:bb:9c:53:21:f9:c8:e3: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:63:F0:0B:C9:BA:34:CF:8D:62:A8:6E:86:DD:2A:BC:90:6E:C9:DD X509v3 Authority Key Identifier: keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:90:07:44:f2:e7:2a:fe:d3:42:76:1f:aa:85:2e:8d:00:ca: 7e:85:c0:7f:35:ce:37:39:9e:01:30:20:fb:d4:3f:e2:6e:ab: a4:ea:d0:85:67:c3:2b:94:74:9e:d6:59:82:aa:a4:20:5c:31: 19:51:1a:1a:3b:53:49:a9:83:ff:03:d0:07:0d:3d:dd:6f:de: d6:44:84:7f:1b:88:24:42:5b:f5:f4:d2:a8:c3:e9:14:6c:82: 76:6e:70:6b:6d:1c:19:8e:c1:06:f4:94:d3:b4:8f:c8:9e:1c: c2:fe:ad:d3:be:25:73:b5:86:26:23:bd:ce:e9:ad:43:eb:55: 25:6f:97:b9:82:7a:d0:dd:09:de:ca:e5:be:f2:f9:01:36:16: 46:ab:0b:14:a3:46:86:18:b8:3e:b2:cf:90:a9:df:a1:a6:72: 1c:cd:54:9d:4b:e4:b9:43:89:a6:83:f7:c8:0e:1b:07:fc:52: 83:87:1c:85:3d:4e:99:e1:e0:34:ff:c0:60:f3:c1:38:1b:13: e9:61:9c:7a:40:b0:b9:23:d3:2e:d6:a3:f5:ed:06:d9:69:21: 08:16:e4:82:72:68:3c:91:93:fb:1d:0b:41:52:ed:fa:3c:cc: 4b:e6:ea:da:49:fa:45:fb:cc:ce:f6:50:a5:37:24:87:3e:7f: 52:91:61:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCQUIxMTAvBgNVBAUTKDQ4Qjk5NDU5ODdGNjc2QjQ2Q0VEM0RFMTI4NDlBOEEz OEY0MDY4QjUwHhcNMjUwNDE4MjExMzM4WhcNMjUwNDI1MjExMzM4WjAYMRYwFAYD VQQDEw02ODAyYzA4Mi03YTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Qa8dGx/ik5GCvbpUVde0d4rJsqlJAtpL+p6kjMMdoyAM1SE6DDZm/UUNrcL Zp0q6a8PUCrWilghkXL5+6lf41AKoc3zn83/d/IZ8BfTEDV/L5fQKZjc9T8O1z/L uBg7PAjF1x40gxlSJWI4KNr+BGPDYgKYcPTA3cnoamXkMWftYOotHPc6AZNzVB6L Aq6EDP5tjdiuyiM27u2k2huHCYnjCQutZqG+iFTuiXU/Mp/thMWLmZrO82/9ruP4 Mrs67RHNKB7AHPUflPVwcy2s3L2CfNxBWKpZtUIFZ6n3fpKYUfYOL+WzX2S8gPjY FQBP9T3o3KlabLucUyH5yOOKOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5j8AvJ ujTPjWKobobdKryQbsndMB8GA1UdIwQYMBaAFEi5lFmH9na0bO094ShJqKOPQGi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUJBQi8wQjk3NjAxQUY2 NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRyUnM3VDNoS0Vtb280OUFh TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMbVVXWWYyZHJSczdUM2hLRW1vbzQ5QWFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUJBQi8wQjk3NjAxQUY2NjQxMUVBOTFDRDJBNTNDNEY5QUUwMi9TTG1VV1lmMmRy UnM3VDNoS0Vtb280OUFhTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDqkAdE8ucq/tNCdh+qhS6NAMp+hcB/Nc43OZ4BMCD71D/ibquk6tCF Z8MrlHSe1lmCqqQgXDEZURoaO1NJqYP/A9AHDT3db97WRIR/G4gkQlv19NKow+kU bIJ2bnBrbRwZjsEG9JTTtI/InhzC/q3TviVztYYmI73O6a1D61Ulb5e5gnrQ3Qne yuW+8vkBNhZGqwsUo0aGGLg+ss+Qqd+hpnIczVSdS+S5Q4mmg/fIDhsH/FKDhxyF PU6Z4eA0/8Bg88E4GxPpYZx6QLC5I9Mu1qP17QbZaSEIFuSCcmg8kZP7HQtBUu36 PMxL5uraSfpF+8zO9lClNySHPn9SkWFP -----END CERTIFICATE-----Generated at Sat Apr 19 07:19:45 2025 by rpki-client