$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json) Hash identifier: IUf/ag+YQh/ROxSpw5ZVZDABgqdhPBMMk4I4UUjPKUQ= Subject key identifier: DE:47:8D:29:22:E4:3F:28:C3:A6:13:E9:85:6E:51:75:9A:DB:34:31 Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft Manifest number: 0547 Signing time: Wed 02 Apr 2025 23:36:38 +0000 Manifest this update: Wed 02 Apr 2025 23:36:38 +0000 Manifest next update: Wed 09 Apr 2025 23:36:38 +0000 Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: JpTgpxNGQRwWbyK+nA5DKFOqw75EkgJl+vecGFqaOf4=) 2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: XB3vXSrIjKmm7/h+1aGsOWgWiHrKFGWrKMxR+7JMgKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1 Validity Not Before: Apr 2 23:36:38 2025 GMT Not After : Apr 9 23:36:38 2025 GMT Subject: CN=67edca06-4d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:c6:56:a5:d5:96:d8:e5:d4:b0:de:9c:c5: 60:ee:54:ce:0d:fa:26:ff:ae:53:0a:d9:38:4a:57: c4:46:a4:b5:8f:3a:2e:ac:28:f4:32:57:04:e4:4f: b0:51:1b:7a:b3:a9:ad:9a:fd:2d:3f:43:38:34:33: 0a:b0:1f:c7:61:39:1a:47:df:16:fd:85:b6:5a:af: 9d:f7:d8:5e:60:53:93:0e:7f:09:25:f6:2f:7c:bc: 43:48:0c:a2:8f:56:62:34:e4:f8:b8:29:a8:49:7b: be:b3:3e:66:f6:fd:e2:49:05:12:bf:31:50:60:4a: 96:55:8d:fa:54:1a:cd:53:3a:42:80:d2:88:9c:c8: ea:5c:a7:2e:96:c8:44:54:b9:f6:f3:c6:2a:19:5b: 0c:9a:a7:f3:c4:18:21:ef:3a:98:cb:fe:d8:70:a6: 51:9e:48:78:f3:eb:87:25:95:6a:4d:a5:ba:e8:72: 12:52:a4:31:9c:b4:25:e0:19:ef:2c:bd:cf:f1:3c: 4a:e5:54:63:47:3a:12:54:6a:75:55:cc:65:89:2e: 44:f2:9c:f1:92:19:88:b3:d7:ac:13:cf:d8:f8:fd: f9:82:48:88:bd:0d:86:41:08:ca:0f:71:27:06:95: 33:db:7c:b1:bb:fe:45:b8:0c:d6:58:c4:41:c9:e4: 35:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:47:8D:29:22:E4:3F:28:C3:A6:13:E9:85:6E:51:75:9A:DB:34:31 X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d6:06:58:3a:74:55:31:fd:70:c3:fd:dd:c8:64:73:a1:e6: 63:e6:f4:ea:db:81:fa:db:9a:13:42:e5:9a:99:1d:f2:a8:35: c5:66:ea:30:d5:e4:69:87:37:17:d1:1e:09:32:5b:af:2c:85: 42:96:e0:da:33:77:6f:58:29:72:cc:94:ed:9c:bb:07:7e:c3: 5a:8b:88:6e:c7:69:b2:c2:10:a5:fc:74:19:e6:ba:b8:73:85: 86:54:8e:8f:6b:99:81:56:d3:72:44:89:30:f1:1e:ff:22:3b: 0a:8c:12:52:ad:bb:0f:a1:24:38:34:e5:ae:aa:97:56:a7:3a: c7:80:d6:b3:ae:31:a9:ca:49:c4:a3:05:3f:2c:07:86:9c:a5: 10:31:02:21:0e:8a:26:aa:d9:35:18:09:7e:7d:73:b7:2c:94: 58:73:fd:a4:eb:f3:e7:49:8c:ca:27:8c:a2:72:cd:62:b4:14: 28:87:ce:06:99:b6:d9:27:4e:68:89:9f:95:d3:f1:2c:8c:b5: 38:f3:0b:aa:7b:f5:c7:cf:ff:24:30:70:19:18:7a:e4:e1:17: 9b:d1:7e:88:6e:51:17:be:ed:f6:2b:56:35:45:35:e6:01:df: bd:21:43:5c:c6:2c:01:24:13:d6:e0:b9:e8:4a:6b:74:63:30: a1:6f:26:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjUwNDAyMjMzNjM4WhcNMjUwNDA5MjMzNjM4WjAYMRYwFAYD VQQDEw02N2VkY2EwNi00ZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvibGVqXVltjl1LDenMVg7lTODfom/65TCtk4SlfERqS1jzourCj0MlcE5E+w URt6s6mtmv0tP0M4NDMKsB/HYTkaR98W/YW2Wq+d99heYFOTDn8JJfYvfLxDSAyi j1ZiNOT4uCmoSXu+sz5m9v3iSQUSvzFQYEqWVY36VBrNUzpCgNKInMjqXKculshE VLn288YqGVsMmqfzxBgh7zqYy/7YcKZRnkh48+uHJZVqTaW66HISUqQxnLQl4Bnv LL3P8TxK5VRjRzoSVGp1VcxliS5E8pzxkhmIs9esE8/Y+P35gkiIvQ2GQQjKD3En BpUz23yxu/5FuAzWWMRByeQ1aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5HjSki 5D8ow6YT6YVuUXWa2zQxMB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl THZvVS1qV3RwYjNxVzBWdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi1gZYOnRVMf1ww/3dyGRzoeZj5vTq24H625oTQuWamR3yqDXFZuow 1eRphzcX0R4JMluvLIVCluDaM3dvWClyzJTtnLsHfsNai4hux2mywhCl/HQZ5rq4 c4WGVI6Pa5mBVtNyRIkw8R7/IjsKjBJSrbsPoSQ4NOWuqpdWpzrHgNazrjGpyknE owU/LAeGnKUQMQIhDoomqtk1GAl+fXO3LJRYc/2k6/PnSYzKJ4yics1itBQoh84G mbbZJ05oiZ+V0/EsjLU48wuqe/XHz/8kMHAZGHrk4Reb0X6IblEXvu32K1Y1RTXm Ad+9IUNcxiwBJBPW4LnoSmt0YzChbyam -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:36 2025 by rpki-client