$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: FFZrZk7aL00bGp9vgT5d/unOJMrjqfoftK34GH7L6Uo= Subject key identifier: 08:1A:C5:D3:A5:43:30:C9:5A:7B:AC:F7:D8:32:46:B7:11:EE:8F:F7 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 0479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 0471 Signing time: Sat 10 May 2025 23:41:49 +0000 Manifest this update: Sat 10 May 2025 23:41:49 +0000 Manifest next update: Sat 17 May 2025 23:41:49 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: raMlp6tVuvgzon6BsuJY+XxbbWHjz4E27TwVk1z9e9s=) 2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: oit1Hcurqov7MCqWlGsRBKXsNTM2JCAP78/GFOI7Xmc=) 3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: 4z+897eYmawfXH/tzTqewnh8oQ4d+YXJLaFQ5gY8Qbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1145 (0x479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: May 10 23:41:49 2025 GMT Not After : May 17 23:41:49 2025 GMT Subject: CN=681fe43d-96ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:13:b5:bb:c3:3a:ee:d0:f5:6b:ea:94:d1: 37:8d:f2:ea:cd:a1:6d:10:a1:92:f0:70:cf:b7:26: fe:ac:61:40:78:29:49:07:a8:4d:62:fb:78:35:8b: 08:c0:26:b4:34:b8:6d:62:5f:2f:45:f2:79:2d:62: ba:af:bd:85:1a:19:d8:6a:9b:86:68:cf:71:bc:e8: 98:4d:4a:63:a5:f7:05:a0:1f:2e:12:ce:a3:96:0b: 10:73:fc:08:64:b0:b1:d8:4a:4a:4e:10:da:54:44: e8:58:d2:2c:a2:6c:2a:2d:71:30:77:c7:9b:eb:8c: 4c:8b:40:04:d5:6e:18:e6:0d:43:d9:ee:8e:b0:55: a0:69:de:0d:b7:ed:80:70:6b:f1:66:79:fc:bc:df: 61:8e:ec:f9:1d:3d:97:8e:fb:94:6f:b4:74:2e:dc: d2:6f:6e:80:b2:42:91:d7:c6:be:de:b6:4b:63:e5: c6:3a:02:f6:68:81:2d:49:f1:ec:ee:88:53:76:20: f5:5e:e2:ad:5c:30:95:1c:91:d9:3d:db:06:55:7b: e1:ea:65:66:dd:7c:17:1b:43:96:b0:ea:41:d0:81: 51:f5:66:79:bb:43:09:82:15:10:f1:ea:19:6b:9e: ab:bb:bb:ef:9c:7c:3d:a5:a1:5d:aa:0b:c2:88:92: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1A:C5:D3:A5:43:30:C9:5A:7B:AC:F7:D8:32:46:B7:11:EE:8F:F7 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ac:52:bd:d7:79:51:94:b8:07:f9:f4:c3:d0:05:7a:d8:a7: a4:09:01:3a:6b:f8:19:6e:2f:e9:33:49:b6:52:89:18:e0:cf: 9e:f0:eb:08:53:27:6f:ae:73:00:4a:de:3a:88:54:02:e4:66: a5:13:44:8e:f4:1d:5f:0c:a8:15:63:ec:e1:45:8e:db:7e:c3: b6:cb:4d:00:64:36:12:07:f5:97:26:fe:50:32:d2:af:50:c2: 8b:d7:8b:c3:a8:29:d3:0f:63:33:da:06:cf:96:64:10:52:99: a5:09:90:05:35:68:22:a7:b7:f2:c7:f7:5a:20:11:b3:70:f2: 39:8c:0b:d6:65:04:0e:1d:f7:de:af:d5:b3:de:8c:8d:47:53: 50:46:c5:e2:57:1d:39:a7:c8:d3:7a:3c:8e:a5:e4:77:50:44: 6a:f3:b0:d8:3f:bf:a5:06:16:6f:93:c3:52:88:85:90:6d:4d: 97:04:44:81:13:fd:03:bb:1b:5d:ca:bd:76:28:63:8b:85:7e: 56:52:e8:0c:5c:30:c9:7d:ee:ec:dc:c5:6b:a5:d9:86:a8:c2: 9a:e2:c3:c8:19:63:74:8d:05:14:8e:da:01:a9:86:0c:ce:55: 82:ce:2c:88:01:9f:34:0e:7d:15:c5:0d:11:8a:95:52:02:50: d6:68:25:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUwNTEwMjM0MTQ5WhcNMjUwNTE3MjM0MTQ5WjAYMRYwFAYD VQQDEw02ODFmZTQzZC05NmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEUTtbvDOu7Q9WvqlNE3jfLqzaFtEKGS8HDPtyb+rGFAeClJB6hNYvt4NYsI wCa0NLhtYl8vRfJ5LWK6r72FGhnYapuGaM9xvOiYTUpjpfcFoB8uEs6jlgsQc/wI ZLCx2EpKThDaVEToWNIsomwqLXEwd8eb64xMi0AE1W4Y5g1D2e6OsFWgad4Nt+2A cGvxZnn8vN9hjuz5HT2XjvuUb7R0LtzSb26AskKR18a+3rZLY+XGOgL2aIEtSfHs 7ohTdiD1XuKtXDCVHJHZPdsGVXvh6mVm3XwXG0OWsOpB0IFR9WZ5u0MJghUQ8eoZ a56ru7vvnHw9paFdqgvCiJLaSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgaxdOl QzDJWnus99gyRrcR7o/3MB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHrFK913lRlLgH+fTD0AV62KekCQE6a/gZbi/pM0m2UokY4M+e8OsI UydvrnMASt46iFQC5GalE0SO9B1fDKgVY+zhRY7bfsO2y00AZDYSB/WXJv5QMtKv UMKL14vDqCnTD2Mz2gbPlmQQUpmlCZAFNWgip7fyx/daIBGzcPI5jAvWZQQOHffe r9Wz3oyNR1NQRsXiVx05p8jTejyOpeR3UERq87DYP7+lBhZvk8NSiIWQbU2XBESB E/0Duxtdyr12KGOLhX5WUugMXDDJfe7s3MVrpdmGqMKa4sPIGWN0jQUUjtoBqYYM zlWCziyIAZ80Dn0VxQ0RipVSAlDWaCUq -----END CERTIFICATE-----Generated at Mon May 12 11:43:45 2025 by rpki-client