$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json) Hash identifier: qlBRRSZI7K54V8YAlf5na1sdOdUDQKvbYBQqVgUTUzI= Subject key identifier: 33:F2:3D:18:33:C4:FC:8D:5A:C0:FE:EB:3E:AF:0B:B0:17:3B:B1:BA Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft Manifest number: 0128 Signing time: Wed 09 Apr 2025 03:36:29 +0000 Manifest this update: Wed 09 Apr 2025 03:36:28 +0000 Manifest next update: Wed 16 Apr 2025 03:36:28 +0000 Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: OEWIA4yF3dJ+R7d43NOWwIzI5vV2TJlP6TN3sOYFO/0=) 2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=) 3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=) 4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=) 5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=) 6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 03:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE Validity Not Before: Apr 9 03:36:28 2025 GMT Not After : Apr 16 03:36:28 2025 GMT Subject: CN=67f5eb3d-1e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:37:c1:9e:3c:ac:6b:f7:16:13:5d:a3:85:8b: ee:93:37:c0:da:5a:78:2e:aa:7a:a6:32:2f:25:6d: 6b:a4:bc:c6:ee:3f:4e:15:19:5d:36:a0:bd:cf:fd: a6:f8:fe:9d:5a:bc:0f:ce:dd:6b:ad:c3:b1:aa:74: 8e:c0:08:14:a3:cc:65:ec:6e:e2:76:b2:ae:2c:29: 03:2e:73:c1:be:1e:67:eb:f2:1e:14:4d:b8:4a:88: 2a:e0:59:66:75:33:b4:1e:bf:33:1a:2c:b4:12:1e: ca:d5:4f:7f:7d:0b:20:13:c5:58:8d:ac:fa:f1:3e: a2:a1:f1:45:b8:c2:86:12:68:ed:e5:1b:4e:2d:2b: b9:39:f8:58:3a:d0:d2:28:33:ec:ec:ed:b8:70:73: 07:ab:f5:4a:b5:b4:46:20:19:59:84:07:16:2e:99: 28:65:cc:d1:b1:bc:d6:59:d1:63:14:59:0e:5b:ba: 5f:b6:75:44:f9:fb:29:3e:19:b4:10:07:e3:d9:a4: 38:b4:6a:d4:74:25:90:c8:b8:0d:69:0f:c3:88:f1: 62:9c:7e:c0:71:99:d4:81:6c:84:76:fe:18:f8:11: b1:94:cd:e3:5c:f9:5f:c2:25:d8:d1:b8:c5:67:02: 89:ee:f9:24:33:37:51:dc:2a:a9:95:0b:01:9d:d8: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F2:3D:18:33:C4:FC:8D:5A:C0:FE:EB:3E:AF:0B:B0:17:3B:B1:BA X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:05:37:ce:95:49:af:a7:1a:3c:4f:37:14:d1:6a:68:a0:3c: 1e:2a:0c:88:fa:9a:3a:6a:12:80:ee:40:5e:21:61:e0:42:85: 7a:92:8b:fa:5d:49:1a:26:56:03:04:14:0d:a8:bf:6c:be:87: dd:2d:07:d2:3a:0a:a0:e5:39:ae:66:c6:c6:5f:7f:d4:49:83: 50:eb:64:64:e1:45:e0:b1:5a:74:65:75:8c:b3:61:5c:ed:58: 63:d4:28:5a:cc:76:b7:fb:29:10:13:1f:85:49:77:ae:fe:e5: 13:db:5c:b2:90:77:33:8c:4d:1e:6a:35:78:4f:b2:3c:5d:2a: e9:62:51:f2:a4:02:4c:b9:ce:97:ee:64:ed:2f:dc:35:11:46: 5b:7e:98:13:95:0c:1f:a7:3a:da:1a:9f:88:42:eb:89:c2:26: c1:af:b8:41:20:05:bb:10:6e:b1:3a:ac:97:36:a0:b9:97:1c: 73:66:ec:92:e2:4a:3c:c1:ab:99:3c:76:15:cb:e9:f0:6e:f0: ae:12:f8:bd:3d:47:ea:5d:f8:08:7d:01:e0:8c:e6:fd:72:98: 95:6d:6a:dd:ae:14:5e:c6:d3:c6:1c:28:17:21:07:d8:e9:6a: a3:80:86:25:c6:94:3b:2f:73:7f:81:6a:a6:2b:b6:77:52:cf: 37:fe:8b:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUwNDA5MDMzNjI4WhcNMjUwNDE2MDMzNjI4WjAYMRYwFAYD VQQDEw02N2Y1ZWIzZC0xZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDfBnjysa/cWE12jhYvukzfA2lp4Lqp6pjIvJW1rpLzG7j9OFRldNqC9z/2m +P6dWrwPzt1rrcOxqnSOwAgUo8xl7G7idrKuLCkDLnPBvh5n6/IeFE24Sogq4Flm dTO0Hr8zGiy0Eh7K1U9/fQsgE8VYjaz68T6iofFFuMKGEmjt5RtOLSu5OfhYOtDS KDPs7O24cHMHq/VKtbRGIBlZhAcWLpkoZczRsbzWWdFjFFkOW7pftnVE+fspPhm0 EAfj2aQ4tGrUdCWQyLgNaQ/DiPFinH7AcZnUgWyEdv4Y+BGxlM3jXPlfwiXY0bjF ZwKJ7vkkMzdR3CqplQsBndhd+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPyPRgz xPyNWsD+6z6vC7AXO7G6MB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJDRS85MDA5OUM0MDU3REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1 U2QyQ3lDOS16ckNWdVFLaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXBTfOlUmvpxo8TzcU0WpooDweKgyI+po6ahKA7kBeIWHgQoV6kov6 XUkaJlYDBBQNqL9svofdLQfSOgqg5TmuZsbGX3/USYNQ62Rk4UXgsVp0ZXWMs2Fc 7Vhj1ChazHa3+ykQEx+FSXeu/uUT21yykHczjE0eajV4T7I8XSrpYlHypAJMuc6X 7mTtL9w1EUZbfpgTlQwfpzraGp+IQuuJwibBr7hBIAW7EG6xOqyXNqC5lxxzZuyS 4ko8wauZPHYVy+nwbvCuEvi9PUfqXfgIfQHgjOb9cpiVbWrdrhRextPGHCgXIQfY 6WqjgIYlxpQ7L3N/gWqmK7Z3Us83/ov1 -----END CERTIFICATE-----Generated at Wed Apr 9 09:22:05 2025 by rpki-client