$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft File: RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft (raw, json) Hash identifier: B1Aim0Xw3ygnLB8oQsmMwAt5crdlg6AJ2hJrdgURAyc= Subject key identifier: CC:F0:2D:EA:0D:3B:87:D5:8D:1D:49:B0:6B:64:F7:65:30:FF:0D:61 Authority key identifier: 47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17 Certificate issuer: /CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft Manifest number: F4 Signing time: Sat 03 May 2025 04:38:57 +0000 Manifest this update: Sat 03 May 2025 04:38:57 +0000 Manifest next update: Sat 10 May 2025 04:38:57 +0000 Files and hashes: 1: RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl (hash: uXcT29J0SGivdEPnf655gkaE4wcfLTxfhTxUOHHOmsQ=) 2: 939790AAB9BD11EEA19BE74DC4F9AE02.roa (hash: usgNeDoGlzZoBDkMS+oNirA/1DpfH4pmT68FwmH4UH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 04:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DD04, serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17 Validity Not Before: May 3 04:38:57 2025 GMT Not After : May 10 04:38:57 2025 GMT Subject: CN=68159de1-0b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:b1:86:5d:6b:73:43:d8:b3:24:8c:4c:4f: 47:45:ab:56:00:79:e5:72:36:f4:21:6a:d6:cb:e5: 13:ef:7a:02:1e:38:38:98:df:85:64:7d:c9:f4:09: 57:c8:0c:c7:50:d4:77:24:b6:6b:c9:5c:c6:52:1c: 93:af:a6:45:c0:c3:23:2b:f7:07:8d:25:1f:63:d4: 4e:7a:2e:81:fe:59:36:94:f0:ee:e7:8d:0d:9c:af: 6f:3e:7c:40:ff:03:0e:93:42:6a:9a:a7:5f:4a:a6: 07:2c:97:36:87:ad:5b:ac:0f:14:2b:58:11:30:86: 81:85:e0:47:52:5c:7f:ea:22:93:d9:53:4b:a9:ba: bc:37:45:08:bd:c8:88:c9:75:71:68:ef:de:37:1e: c3:98:e2:ca:18:9a:e3:e7:dd:f2:da:0b:77:92:b6: e1:83:97:d5:33:7d:54:95:bf:fa:3a:c7:b4:26:c8: 69:e7:63:d9:eb:20:e5:69:22:d0:6d:f2:09:be:12: 17:ad:64:35:9d:de:c7:ed:77:b5:f2:67:af:2f:7a: d1:32:a5:a8:dc:c8:ba:bd:2a:5a:32:97:b0:b3:fa: 3d:75:8f:a0:d0:71:44:70:bf:e5:59:a3:b5:05:25: 48:f7:9e:97:7f:12:01:5e:d9:95:f9:0c:a7:a4:b8: 22:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F0:2D:EA:0D:3B:87:D5:8D:1D:49:B0:6B:64:F7:65:30:FF:0D:61 X509v3 Authority Key Identifier: keyid:47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a7:b1:e4:0f:13:80:45:16:c8:43:8e:3f:e4:fa:88:66:db: 43:c7:5d:20:48:d0:2f:03:30:39:37:77:42:c8:fd:b6:5c:bd: 17:d2:c7:45:72:f3:6f:43:56:82:21:a9:b0:75:5d:95:64:63: 17:47:ca:91:0b:fc:77:a9:4c:f7:ef:cb:f4:76:a2:df:cc:d4: 91:f4:a2:ae:44:49:e0:f9:0a:87:9f:90:ae:8b:02:a0:de:06: a8:43:36:1b:a5:7a:44:7d:19:49:10:af:88:80:04:06:85:ac: 73:8c:15:30:12:27:43:14:69:90:3b:2b:da:99:84:c5:b8:61: e8:21:7e:37:7e:7e:38:88:6a:0b:52:9c:f8:4e:d8:9c:b5:ea: d8:7d:fb:22:d7:72:00:1b:d4:17:69:d9:74:1e:c2:e1:7a:31: bb:b7:2b:45:9f:b3:be:4b:55:93:40:cf:be:0e:50:fe:55:ee: fa:2f:08:89:9e:ed:97:7d:c3:5a:b9:5a:df:ca:85:f6:44:8a: 42:1f:64:b4:a3:34:d0:da:e6:65:48:e3:fd:07:a0:f9:99:b2: 1a:fd:1f:c3:11:18:72:b5:49:8b:62:ec:e0:e1:63:43:27:f1: 55:29:8a:3c:e9:7a:11:31:4d:7e:7b:06:3f:e8:27:b1:11:cb: dc:4d:c8:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUREMDQxMTAvBgNVBAUTKDQ3MzQ2NDg0NzE1OUJCMTUyRkJGRTFEQkI1QTFCMDE1 NDY4MjJGMTcwHhcNMjUwNTAzMDQzODU3WhcNMjUwNTEwMDQzODU3WjAYMRYwFAYD VQQDEw02ODE1OWRlMS0wYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0Gxhl1rc0PYsySMTE9HRatWAHnlcjb0IWrWy+UT73oCHjg4mN+FZH3J9AlX yAzHUNR3JLZryVzGUhyTr6ZFwMMjK/cHjSUfY9ROei6B/lk2lPDu540NnK9vPnxA /wMOk0JqmqdfSqYHLJc2h61brA8UK1gRMIaBheBHUlx/6iKT2VNLqbq8N0UIvciI yXVxaO/eNx7DmOLKGJrj593y2gt3krbhg5fVM31Ulb/6Ose0Jshp52PZ6yDlaSLQ bfIJvhIXrWQ1nd7H7Xe18mevL3rRMqWo3Mi6vSpaMpews/o9dY+g0HFEcL/lWaO1 BSVI956XfxIBXtmV+QynpLgi8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzwLeoN O4fVjR1JsGtk92Uw/w1hMB8GA1UdIwQYMBaAFEc0ZIRxWbsVL7/h27WhsBVGgi8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREQwNC9DM0Q1RkRDNkI5 QkIxMUVFQUEzMjI5NUVDNEY5QUUwMi9SelJraEhGWnV4VXZ2LUhidGFHd0ZVYUNM eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6UmtoSEZadXhVdnYtSGJ0YUd3RlVhQ0x4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REQwNC9DM0Q1RkRDNkI5QkIxMUVFQUEzMjI5NUVDNEY5QUUwMi9SelJraEhGWnV4 VXZ2LUhidGFHd0ZVYUNMeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAop7HkDxOARRbIQ44/5PqIZttDx10gSNAvAzA5N3dCyP22XL0X0sdF cvNvQ1aCIamwdV2VZGMXR8qRC/x3qUz378v0dqLfzNSR9KKuREng+QqHn5CuiwKg 3gaoQzYbpXpEfRlJEK+IgAQGhaxzjBUwEidDFGmQOyvamYTFuGHoIX43fn44iGoL Upz4TticterYffsi13IAG9QXadl0HsLhejG7tytFn7O+S1WTQM++DlD+Ve76LwiJ nu2XfcNauVrfyoX2RIpCH2S0ozTQ2uZlSOP9B6D5mbIa/R/DERhytUmLYuzg4WND J/FVKYo86XoRMU1+ewY/6CexEcvcTcg8 -----END CERTIFICATE-----Generated at Mon May 5 02:57:20 2025 by rpki-client