$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json) Hash identifier: /U9Vw2yvpMOTdXutiXlRU9dwRxFw2ozYZ39ef7J857o= Subject key identifier: 28:17:13:7E:3C:54:44:6A:8D:EB:AD:FB:98:B7:FF:78:16:5D:7E:E3 Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Certificate serial: 0634 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft Manifest number: 0622 Signing time: Sat 12 Apr 2025 22:28:46 +0000 Manifest this update: Sat 12 Apr 2025 22:28:45 +0000 Manifest next update: Sat 19 Apr 2025 22:28:45 +0000 Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: i29WXIjhmrOdk4U1AqesvWNLWAg+apnKqUgPRm2uHs0=) 2: 8B5C69BACD5211EBBF89483BC4F9AE02.roa (hash: hZSSJaQgFguODQcmLdfStIq0+a+g/wi2cxwKmcjF2gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 22:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1588 (0x634) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Validity Not Before: Apr 12 22:28:45 2025 GMT Not After : Apr 19 22:28:45 2025 GMT Subject: CN=67fae91e-2823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:b4:f0:e4:57:11:5d:a4:73:a5:bc:d1:81: 01:1e:93:57:d8:34:67:b2:3c:51:f8:0a:d2:00:b0: ca:9b:39:c8:ee:9d:ca:2c:78:d1:03:af:73:5c:69: 6c:47:02:d5:5e:f2:c5:eb:57:bb:f8:17:61:11:86: 84:34:ac:ad:09:46:43:d4:a0:c5:51:06:4c:27:77: 88:62:b7:c6:78:dc:16:52:aa:b5:e6:3c:91:0b:a2: 49:a0:6d:1a:d9:0c:df:6f:31:b4:00:24:56:64:71: a6:46:eb:02:a2:22:e3:15:84:64:6a:5c:b0:5a:5c: 75:fb:82:18:c1:62:b4:5a:e4:19:fc:4d:68:68:01: 5e:68:77:2b:9d:dd:d8:5f:12:44:a6:06:ae:4b:4e: e7:8c:5a:92:ee:5e:89:60:3a:41:13:a3:c2:aa:57: 7b:8b:1c:14:70:f1:05:ea:b3:78:33:f5:99:0c:48: 3b:c0:b0:2d:f4:2e:ff:45:3b:dc:9f:73:b7:e7:65: 39:b8:e8:d1:be:75:b9:a9:bb:fb:b1:3d:92:1a:c9: 3b:bf:cf:96:8e:cd:b5:7b:c8:ef:88:db:be:00:7d: b8:64:80:cb:87:9d:a4:37:9a:0e:35:17:ce:fb:1f: cd:58:c0:85:f8:4a:b6:71:37:d4:4f:a7:a5:ad:9a: 8c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:17:13:7E:3C:54:44:6A:8D:EB:AD:FB:98:B7:FF:78:16:5D:7E:E3 X509v3 Authority Key Identifier: keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:16:72:bb:b9:3a:90:9a:cd:8c:d2:0e:9e:37:2d:bc:9f:e1: 77:4d:5a:eb:d9:05:ba:17:a3:1e:99:ae:c0:16:3d:72:40:68: e6:a0:4a:f6:e2:9f:1c:ad:4b:ae:9a:22:10:ba:43:ce:d0:52: 06:ef:9c:41:b1:28:6b:fd:f3:d2:3d:e5:5e:70:16:d8:5e:dd: fb:1f:31:66:99:28:86:0d:c7:70:38:ae:8b:22:f7:7c:a3:33: 65:dd:36:7f:3a:be:c7:2c:ec:71:1a:fe:c4:80:5c:d6:6d:2e: 3a:80:1d:b9:e5:e6:43:5d:82:d0:97:38:cf:54:1c:82:d5:6a: e5:18:bd:d8:39:34:e9:39:35:6b:f0:8b:bf:01:01:37:51:a8: 20:54:e5:1a:66:fd:53:d4:76:1f:b4:57:c9:f6:9d:3d:c0:b3: 3c:ab:d3:7d:4f:87:95:be:b4:3e:ef:67:a4:dc:cb:5a:54:52: e2:9d:c4:76:19:84:63:79:72:c7:e8:9c:dc:69:9a:79:43:a4: 3b:dd:d7:9a:49:7f:6f:c8:d8:31:bb:3c:8b:96:1a:e4:7e:a7: 1d:a0:11:66:89:cf:fe:24:ae:c1:8a:8a:49:cb:d5:8b:23:1f: 7e:d1:3e:2d:d6:75:45:35:8c:32:b1:03:fa:ae:9d:7e:1a:07: 83:a4:3a:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNENEQxMTAvBgNVBAUTKERGNDNDRjMxRjExQ0Q4RTY5RjFBNUI0NTFENDNGNjhC MTQ0NzZCNDcwHhcNMjUwNDEyMjIyODQ1WhcNMjUwNDE5MjIyODQ1WjAYMRYwFAYD VQQDEw02N2ZhZTkxZS0yODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9W08ORXEV2kc6W80YEBHpNX2DRnsjxR+ArSALDKmznI7p3KLHjRA69zXGls RwLVXvLF61e7+BdhEYaENKytCUZD1KDFUQZMJ3eIYrfGeNwWUqq15jyRC6JJoG0a 2QzfbzG0ACRWZHGmRusCoiLjFYRkalywWlx1+4IYwWK0WuQZ/E1oaAFeaHcrnd3Y XxJEpgauS07njFqS7l6JYDpBE6PCqld7ixwUcPEF6rN4M/WZDEg7wLAt9C7/RTvc n3O352U5uOjRvnW5qbv7sT2SGsk7v8+Wjs21e8jviNu+AH24ZIDLh52kN5oONRfO +x/NWMCF+Eq2cTfUT6elrZqMmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgXE348 VERqjeut+5i3/3gWXX7jMB8GA1UdIwQYMBaAFN9DzzHxHNjmnxpbRR1D9osUR2tH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0Q0RC9FRDZBMTk5MjlB RTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJPYWZHbHRGSFVQMml4Ukhh MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwUFBNZkVjMk9hZkdsdEZIVVAyaXhSSGEwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0Q0RC9FRDZBMTk5MjlBRTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJP YWZHbHRGSFVQMml4UkhhMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1FnK7uTqQms2M0g6eNy28n+F3TVrr2QW6F6Mema7AFj1yQGjmoEr2 4p8crUuumiIQukPO0FIG75xBsShr/fPSPeVecBbYXt37HzFmmSiGDcdwOK6LIvd8 ozNl3TZ/Or7HLOxxGv7EgFzWbS46gB255eZDXYLQlzjPVByC1WrlGL3YOTTpOTVr 8Iu/AQE3UaggVOUaZv1T1HYftFfJ9p09wLM8q9N9T4eVvrQ+72ek3MtaVFLincR2 GYRjeXLH6JzcaZp5Q6Q73deaSX9vyNgxuzyLlhrkfqcdoBFmic/+JK7BiopJy9WL Ix9+0T4t1nVFNYwysQP6rp1+GgeDpDoS -----END CERTIFICATE-----Generated at Sun Apr 13 03:54:28 2025 by rpki-client