$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: adEXpeJdWGGUgEEKlvBn8WWTqQNk6SQzNj8rOoCdy6o= Subject key identifier: 79:1E:32:2F:88:FA:02:7D:D7:BC:D1:FE:6F:C9:B2:68:2E:03:1B:54 Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0C57 Signing time: Sun 04 May 2025 18:10:25 +0000 Manifest this update: Sun 04 May 2025 18:10:25 +0000 Manifest next update: Sun 11 May 2025 18:10:25 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: H8aZGCDhdJSeLM8ZQKBewVs5Skw/vURuNJpOAef8mX4=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: mvYo+h5Nn35EgX86xIvICgq41pXxREG1bc5pyoPj450=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: May 4 18:10:25 2025 GMT Not After : May 11 18:10:25 2025 GMT Subject: CN=6817ad91-da5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:fb:b9:f0:b5:54:3d:95:ec:7a:c0:21:07: fd:09:4d:9f:88:c5:0c:bf:98:49:0d:45:64:97:96: 4a:69:93:fb:de:05:ea:a0:9a:d8:12:09:db:0a:f5: 06:b7:20:e8:44:37:41:89:cc:5a:29:b1:dc:6e:72: 85:80:9d:e4:63:af:dd:f1:80:ce:13:e4:45:5d:99: 1c:b9:8c:a3:62:03:96:11:2a:49:a4:0a:96:0f:a0: ca:3b:6d:eb:ad:8c:b2:20:20:ed:36:89:77:5a:b1: 7a:a0:e6:41:d6:47:06:ad:7f:6b:b6:00:f0:86:e4: 3e:5b:99:d3:46:f3:06:12:c9:66:d3:f1:44:3e:26: 3e:62:3d:b9:4d:45:35:00:ff:3e:2b:c7:de:0e:26: 2c:53:94:f8:a2:20:42:01:d9:0a:ef:3a:e6:13:ed: 46:05:6c:36:0f:dc:09:ba:03:04:64:35:90:cc:9c: cc:70:77:83:db:64:66:f1:b3:7b:b6:3f:62:c5:83: 5c:93:f1:68:8c:c6:fa:9d:a5:3d:15:ff:37:d3:82: 9a:80:1f:52:89:84:ae:ee:4e:d3:65:5d:06:50:13: 32:b9:57:3f:0b:f1:a9:ce:75:49:fa:a8:d6:4e:74: a6:23:b1:53:46:31:40:00:e1:0c:65:6f:cd:96:72: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1E:32:2F:88:FA:02:7D:D7:BC:D1:FE:6F:C9:B2:68:2E:03:1B:54 X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:09:7d:be:d3:07:8d:d4:cd:08:73:25:53:37:7e:2a:72:22: d1:87:0c:2e:87:e6:41:da:3d:f2:97:6a:b7:7d:91:d9:a0:c1: d4:f6:e8:73:d0:f4:62:83:e2:2b:81:e4:39:b7:ae:ae:75:ea: 2e:eb:30:bb:e4:47:0a:b4:29:74:3f:c0:68:e1:90:01:45:06: 48:fa:20:c1:8b:8d:87:16:ed:a6:c8:52:e7:f6:3d:ff:45:ad: de:a8:3e:50:5f:1e:32:37:37:e4:e4:41:65:55:92:5a:2a:c5: 9d:f6:67:5d:3e:45:63:a0:69:97:64:ea:85:a3:be:03:fc:6a: 08:51:be:ed:d4:77:4b:ff:f7:38:c7:14:ca:80:b3:76:f2:7b: 01:d2:e9:67:27:c8:12:96:cc:f9:6e:f3:08:4f:e3:0d:b4:6d: fe:55:ff:4e:ee:05:b1:ed:52:9c:b1:ae:8d:24:2e:d5:fb:8d: ff:56:41:16:47:a7:66:6f:af:95:e1:41:19:d2:e2:d7:ab:e4: d4:8d:7a:3d:b5:f5:4e:03:d2:c6:7e:e4:f7:eb:40:e1:06:ac: 84:40:99:30:36:fc:7c:32:39:48:7b:98:4a:80:e2:af:9b:bd: 3d:e0:09:1f:04:50:4a:c6:a9:15:02:6f:ea:42:b2:07:b7:d2: 1d:14:7b:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjUwNTA0MTgxMDI1WhcNMjUwNTExMTgxMDI1WjAYMRYwFAYD VQQDEw02ODE3YWQ5MS1kYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwn7ufC1VD2V7HrAIQf9CU2fiMUMv5hJDUVkl5ZKaZP73gXqoJrYEgnbCvUG tyDoRDdBicxaKbHcbnKFgJ3kY6/d8YDOE+RFXZkcuYyjYgOWESpJpAqWD6DKO23r rYyyICDtNol3WrF6oOZB1kcGrX9rtgDwhuQ+W5nTRvMGEslm0/FEPiY+Yj25TUU1 AP8+K8feDiYsU5T4oiBCAdkK7zrmE+1GBWw2D9wJugMEZDWQzJzMcHeD22Rm8bN7 tj9ixYNck/FojMb6naU9Ff8304KagB9SiYSu7k7TZV0GUBMyuVc/C/GpznVJ+qjW TnSmI7FTRjFAAOEMZW/NlnIhlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkeMi+I +gJ917zR/m/JsmguAxtUMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqCX2+0weN1M0IcyVTN34qciLRhwwuh+ZB2j3yl2q3fZHZoMHU9uhz 0PRig+IrgeQ5t66udeou6zC75EcKtCl0P8Bo4ZABRQZI+iDBi42HFu2myFLn9j3/ Ra3eqD5QXx4yNzfk5EFlVZJaKsWd9mddPkVjoGmXZOqFo74D/GoIUb7t1HdL//c4 xxTKgLN28nsB0ulnJ8gSlsz5bvMIT+MNtG3+Vf9O7gWx7VKcsa6NJC7V+43/VkEW R6dmb6+V4UEZ0uLXq+TUjXo9tfVOA9LGfuT360DhBqyEQJkwNvx8MjlIe5hKgOKv m7094AkfBFBKxqkVAm/qQrIHt9IdFHsf -----END CERTIFICATE-----Generated at Mon May 5 14:57:13 2025 by rpki-client