$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft File: 788FLZiSks6xBQkSnI3iA9SfaAQ.mft (raw, json) Hash identifier: Y0BeTOnRXhE0QiLKiiEee5BW3FK6y2YryNYn5lIip0s= Subject key identifier: 19:A9:01:77:04:D9:65:3F:B7:24:E4:46:27:10:D1:5D:52:5A:1A:68 Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 Certificate issuer: /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Certificate serial: 0D3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft Manifest number: 0D34 Signing time: Wed 16 Apr 2025 17:56:55 +0000 Manifest this update: Wed 16 Apr 2025 17:56:54 +0000 Manifest next update: Wed 23 Apr 2025 17:56:54 +0000 Files and hashes: 1: 788FLZiSks6xBQkSnI3iA9SfaAQ.crl (hash: nl2v+A9kuLHyQERpmoKF8+onETQjergoHbcpwF+/lMQ=) 2: 1004D41ED21D11E992825429C4F9AE02.roa (hash: VSbvOJwGGe/ohiP+L17bAesxp9bgmYgwB4Rs+JtW0oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 17:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3387 (0xd3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB9C0, serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Validity Not Before: Apr 16 17:56:54 2025 GMT Not After : Apr 23 17:56:54 2025 GMT Subject: CN=67ffef66-30ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1f:db:32:3f:52:c5:db:39:02:87:f8:5e:c2: d7:af:c7:79:8a:72:b5:c6:37:01:67:12:9c:be:19: e9:69:da:d4:40:ca:a7:ed:63:ff:52:a2:49:41:c1: 8d:60:72:6b:f1:46:47:34:ed:36:64:2e:8f:eb:08: 59:1a:ad:00:e8:fb:5c:fb:a0:7c:e2:9b:64:f5:fd: 16:b3:3f:56:62:26:1d:10:6f:5b:70:1e:fa:d3:7d: d0:1d:b4:7f:ff:b6:e7:30:da:d3:8a:ca:cf:2d:32: a8:43:0f:ae:e0:0c:5e:58:a5:63:21:7c:dd:33:02: 62:c4:18:db:bb:69:96:40:5c:43:5e:52:a1:fe:3f: 6a:20:12:97:48:8c:f0:a9:b1:f7:ad:7a:3b:e5:e3: 30:c0:d8:07:2b:61:d2:a5:8e:96:34:4d:4e:c4:e3: 13:d2:82:7c:17:c9:e0:9c:b8:b5:41:2a:a4:41:be: 70:c0:a1:57:24:63:01:d8:7f:94:07:7b:2e:a6:04: ce:b7:9d:05:30:a2:ee:c0:0c:f0:67:46:42:3c:d5: 64:d7:55:c4:27:92:38:7f:98:ac:83:15:11:52:2f: ea:85:9a:9e:2f:a2:76:59:02:f7:83:30:7f:89:ae: 43:fe:6f:3e:8f:ad:4e:e3:dd:11:d5:b6:31:0e:95: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A9:01:77:04:D9:65:3F:B7:24:E4:46:27:10:D1:5D:52:5A:1A:68 X509v3 Authority Key Identifier: keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:7a:6d:ec:2c:ef:8b:b0:3b:ec:50:79:cf:05:92:f1:ef:ca: 45:29:07:42:3b:07:ae:05:c1:7c:f7:64:d1:a5:9e:47:4a:bd: 1a:4f:14:00:dc:3c:9d:8b:b0:6f:f4:16:1a:94:38:3b:55:03: 3b:81:f1:68:f1:6e:c0:ca:af:a1:9e:2b:8a:8d:f3:18:eb:7f: bb:5e:dd:7a:7b:ab:b1:ce:a5:00:c0:a1:dc:ec:ac:7b:c3:d3: c9:3b:d9:db:70:f6:ce:43:e4:78:ad:2d:69:05:ad:ec:63:84: e6:fa:b5:3b:9a:2c:95:5d:ab:d9:50:2f:5b:df:9a:19:16:9c: 52:24:ea:e3:71:46:40:70:29:01:45:33:9c:55:21:da:2f:b7: 1a:fb:18:89:bc:0a:75:b4:5a:5e:15:ef:c1:00:b1:f1:73:ae: 74:97:0b:a1:cb:23:c5:1f:22:1a:69:f9:77:45:cc:e5:ff:55: f9:07:74:f6:0d:54:95:8c:28:cc:f1:24:e0:ac:da:c9:d4:d1: bb:dd:ec:5e:55:f6:71:9c:25:ac:e2:a9:ab:19:5f:a2:1a:05: c7:24:9c:01:f3:2a:a3:09:7b:4d:4a:ca:24:de:48:a3:6a:ff: ad:50:ce:9d:ce:eb:66:1c:b5:9f:8b:de:8a:9f:29:68:80:e7: 8d:76:0b:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5QzAxMTAvBgNVBAUTKEVGQ0YwNTJEOTg5MjkyQ0VCMTA1MDkxMjlDOERFMjAz RDQ5RjY4MDQwHhcNMjUwNDE2MTc1NjU0WhcNMjUwNDIzMTc1NjU0WjAYMRYwFAYD VQQDEw02N2ZmZWY2Ni0zMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5B/bMj9Sxds5Aof4XsLXr8d5inK1xjcBZxKcvhnpadrUQMqn7WP/UqJJQcGN YHJr8UZHNO02ZC6P6whZGq0A6Ptc+6B84ptk9f0Wsz9WYiYdEG9bcB76033QHbR/ /7bnMNrTisrPLTKoQw+u4AxeWKVjIXzdMwJixBjbu2mWQFxDXlKh/j9qIBKXSIzw qbH3rXo75eMwwNgHK2HSpY6WNE1OxOMT0oJ8F8ngnLi1QSqkQb5wwKFXJGMB2H+U B3supgTOt50FMKLuwAzwZ0ZCPNVk11XEJ5I4f5isgxURUi/qhZqeL6J2WQL3gzB/ ia5D/m8+j61O490R1bYxDpX0AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmpAXcE 2WU/tyTkRicQ0V1SWhpoMB8GA1UdIwQYMBaAFO/PBS2YkpLOsQUJEpyN4gPUn2gE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjlDMC9EMzY0RjBDQ0Qy MUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tzNnhCUWtTbkkzaUE5U2Zh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OEZMWmlTa3M2eEJRa1NuSTNpQTlTZmFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjlDMC9EMzY0RjBDQ0QyMUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tz NnhCUWtTbkkzaUE5U2ZhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkem3sLO+LsDvsUHnPBZLx78pFKQdCOweuBcF892TRpZ5HSr0aTxQA 3Dydi7Bv9BYalDg7VQM7gfFo8W7Ayq+hniuKjfMY63+7Xt16e6uxzqUAwKHc7Kx7 w9PJO9nbcPbOQ+R4rS1pBa3sY4Tm+rU7miyVXavZUC9b35oZFpxSJOrjcUZAcCkB RTOcVSHaL7ca+xiJvAp1tFpeFe/BALHxc650lwuhyyPFHyIaafl3Rczl/1X5B3T2 DVSVjCjM8STgrNrJ1NG73exeVfZxnCWs4qmrGV+iGgXHJJwB8yqjCXtNSsok3kij av+tUM6dzutmHLWfi96KnylogOeNdgtu -----END CERTIFICATE-----Generated at Thu Apr 17 10:40:58 2025 by rpki-client