$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft File: w5bB5QN9M19zQcouz4ImEwDN_pU.mft (raw, json) Hash identifier: hKeV/ci45SMShUYasUtS/4noWfHbO8cWi5JO5QbEzwc= Subject key identifier: 42:1E:78:79:C3:64:BC:77:04:09:35:ED:F6:56:A9:1E:3F:4A:D2:24 Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 Certificate issuer: /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft Manifest number: 0488 Signing time: Wed 12 Mar 2025 23:39:22 +0000 Manifest this update: Wed 12 Mar 2025 23:39:22 +0000 Manifest next update: Wed 19 Mar 2025 23:39:22 +0000 Files and hashes: 1: w5bB5QN9M19zQcouz4ImEwDN_pU.crl (hash: je/8vX/mL0FMX1mv4E2pdO13gQ6Wh5L36VRk5YZLw8k=) 2: FCF7126E310711ECBFFF5E62C4F9AE02.roa (hash: F3pgM3DGI+wP2jrjrPXa65ZGlXf9TnXpF1OSKK2H5GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 23:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC38C Validity Not Before: Mar 12 23:39:22 2025 GMT Not After : Mar 19 23:39:22 2025 GMT Subject: CN=67d21b2a-9828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:c9:d7:0a:e4:10:0b:51:36:e3:e0:85:7b: ab:f7:0d:aa:29:cb:52:fa:1a:e0:91:3a:74:8e:00: fd:58:2b:9f:13:7b:3d:e8:57:a1:d4:48:5c:d6:c7: 1f:7b:2e:66:5c:c5:af:1b:62:7c:0e:46:07:c7:6d: 82:2e:05:cb:b2:64:16:e1:30:9b:0a:a4:e8:4c:8a: 42:eb:6a:c6:f2:3e:66:db:37:ff:dc:e1:03:64:fd: 03:01:f9:2a:fd:d2:a3:ca:3a:b1:82:41:e3:86:4a: 9b:a7:e6:7f:eb:21:43:c2:47:08:61:cb:10:cb:5f: 6a:80:ed:07:cd:a5:ae:5f:94:b3:94:0e:2a:79:df: c7:9b:65:e2:6d:9c:86:ed:e8:a1:c4:95:a9:ef:75: ce:db:c4:89:25:ed:49:f8:7f:92:3d:20:aa:0a:6c: 2a:32:6d:0c:eb:2a:82:83:12:be:b2:85:0a:3a:2f: 6c:0f:9b:55:c0:2c:7d:e6:30:04:ff:36:70:3d:dc: 9c:4c:c9:44:49:98:46:f5:6b:19:b5:2a:b3:b2:68: 73:ae:ad:a7:e5:b9:68:e1:c3:4b:66:33:66:e0:84: 60:94:6d:b6:64:d6:17:e2:f7:fe:f1:be:6c:c1:d0: f5:d6:b0:ae:08:f1:db:da:7a:4d:35:eb:cb:d8:fd: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1E:78:79:C3:64:BC:77:04:09:35:ED:F6:56:A9:1E:3F:4A:D2:24 X509v3 Authority Key Identifier: keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:13:85:5c:32:d7:06:50:10:77:bc:c5:66:00:5c:48:2f:ce: 4d:af:fe:bc:0a:37:0a:ca:72:60:89:59:e2:1f:a5:ec:4c:30: 01:ec:8e:2e:70:6b:f9:1a:70:de:7c:9e:1b:75:54:43:c6:74: f4:5b:c1:fa:e5:bf:c4:62:93:a2:ae:72:96:fd:36:59:20:d4: 33:da:fc:fe:e8:cb:0a:b2:b5:70:ba:fd:78:72:2b:e5:16:49: 48:e1:28:bf:19:d7:e1:74:a8:5d:45:3e:87:a9:f6:c6:17:8c: ce:b5:64:34:f6:db:7b:7d:4d:e6:8e:a1:77:19:fa:22:f3:a9: ef:42:b1:1d:a0:98:10:e5:ba:85:f3:b0:00:65:08:da:67:45: 05:85:69:ae:8e:b6:58:45:a2:10:49:0a:52:4f:f0:cb:41:eb: 78:24:81:4d:20:06:c5:e5:2a:27:b0:24:41:21:71:fa:82:b7: 00:0c:45:94:00:40:4e:7a:bf:e2:36:4f:42:0c:86:80:4b:e4: a1:3a:9d:2e:f0:3b:05:7a:4b:10:99:7c:1c:1d:19:a3:0d:d6: bb:a2:b8:54:06:f2:ed:08:2b:7d:d5:08:8c:0c:83:cc:b7:41: 2e:0c:69:c6:71:62:bd:4c:6d:12:69:38:5b:67:4d:ee:6e:e9: 7a:3c:73:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzOEMxMTAvBgNVBAUTKEMzOTZDMUU1MDM3RDMzNUY3MzQxQ0EyRUNGODIyNjEz MDBDREZFOTUwHhcNMjUwMzEyMjMzOTIyWhcNMjUwMzE5MjMzOTIyWjAYMRYwFAYD VQQDEw02N2QyMWIyYS05ODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSPJ1wrkEAtRNuPghXur9w2qKctS+hrgkTp0jgD9WCufE3s96Feh1Ehc1scf ey5mXMWvG2J8DkYHx22CLgXLsmQW4TCbCqToTIpC62rG8j5m2zf/3OEDZP0DAfkq /dKjyjqxgkHjhkqbp+Z/6yFDwkcIYcsQy19qgO0HzaWuX5SzlA4qed/Hm2XibZyG 7eihxJWp73XO28SJJe1J+H+SPSCqCmwqMm0M6yqCgxK+soUKOi9sD5tVwCx95jAE /zZwPdycTMlESZhG9WsZtSqzsmhzrq2n5blo4cNLZjNm4IRglG22ZNYX4vf+8b5s wdD11rCuCPHb2npNNevL2P1nhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIeeHnD ZLx3BAk17fZWqR4/StIkMB8GA1UdIwQYMBaAFMOWweUDfTNfc0HKLs+CJhMAzf6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzM4Qy84NzA0OERBQTMx MDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0xOXpRY291ejRJbUV3RE5f cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1YkI1UU45TTE5elFjb3V6NEltRXdETl9wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzM4Qy84NzA0OERBQTMxMDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0x OXpRY291ejRJbUV3RE5fcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2E4VcMtcGUBB3vMVmAFxIL85Nr/68CjcKynJgiVniH6XsTDAB7I4u cGv5GnDefJ4bdVRDxnT0W8H65b/EYpOirnKW/TZZINQz2vz+6MsKsrVwuv14civl FklI4Si/GdfhdKhdRT6HqfbGF4zOtWQ09tt7fU3mjqF3Gfoi86nvQrEdoJgQ5bqF 87AAZQjaZ0UFhWmujrZYRaIQSQpST/DLQet4JIFNIAbF5SonsCRBIXH6grcADEWU AEBOer/iNk9CDIaAS+ShOp0u8DsFeksQmXwcHRmjDda7orhUBvLtCCt91QiMDIPM t0EuDGnGcWK9TG0SaThbZ03ubul6PHPm -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:55 2025 by rpki-client