$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json) Hash identifier: 5KXqpDEys3Kd3CAF7ghAOywm309hcHrt4bbX7kjrfaw= Subject key identifier: 9B:79:ED:03:D8:72:64:F3:13:81:12:C7:1C:C8:E7:EB:7C:31:95:FE Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 251B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft Manifest number: 2507 Signing time: Thu 08 May 2025 15:49:21 +0000 Manifest this update: Thu 08 May 2025 15:49:20 +0000 Manifest next update: Thu 15 May 2025 15:49:20 +0000 Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: QyEYdjCO+O4diG4e1sYr4Qf0O3KvTSbxk1ggzg2WJjs=) 2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: cn19kmgTI5pykmKU6ztYW1fuk/UgkkZVZQRR4mCHAg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9499 (0x251b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: May 8 15:49:20 2025 GMT Not After : May 15 15:49:20 2025 GMT Subject: CN=681cd280-9ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fc:d8:50:56:23:4c:86:30:6c:35:07:54:33: 27:50:9c:8e:1a:13:66:56:17:7f:26:6f:34:b6:93: 58:76:ba:f1:f8:ca:42:1a:f9:02:2a:52:b9:47:e0: 58:19:b1:30:78:77:6c:dd:00:da:6c:c9:42:61:25: f6:c7:5b:01:08:1e:49:b1:0b:e0:34:27:38:89:90: c9:bd:fb:ad:bc:f2:71:30:41:78:19:3d:6e:ac:dc: 21:ed:18:1d:2e:f7:28:46:05:cf:9d:74:6d:4d:d9: 55:0b:1b:cc:bf:33:60:a3:11:82:37:a7:a1:93:8a: 2f:f8:26:8c:cc:c6:e6:2d:9a:e4:27:98:e2:a2:69: 72:14:7b:0c:b8:ab:67:98:11:b4:4d:78:9b:39:ed: 67:ba:73:99:fb:65:7e:43:ff:c5:20:c5:1e:8d:a4: c3:ae:89:ac:b5:7c:d8:fa:77:d4:32:6d:8d:a1:be: 6e:fa:8b:ae:47:45:80:99:09:25:4e:de:a9:63:2f: 62:80:83:5e:8c:13:92:d0:e4:1b:cf:3b:fc:1e:9e: e4:a3:4a:85:b8:65:83:9a:8a:1b:11:3d:1b:e0:1e: db:3f:aa:fc:c8:35:36:5f:d1:2e:4a:1a:96:e6:1c: 04:6e:0b:73:ca:ff:49:cd:8e:c1:f0:2b:0c:9a:48: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:79:ED:03:D8:72:64:F3:13:81:12:C7:1C:C8:E7:EB:7C:31:95:FE X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:f2:05:a1:44:57:39:fd:1c:1c:34:7d:10:d9:68:9c:16:76: 62:61:11:d8:3a:18:bd:df:42:e3:c9:67:d8:ab:1b:a1:26:f8: eb:0c:3d:50:d7:7a:78:43:1f:80:23:a3:8d:e2:3f:4c:59:95: c3:ce:62:68:8b:9e:98:96:12:be:b8:15:c2:44:ae:cc:e8:25: 75:cf:e7:d8:46:c9:ca:ab:61:b8:bd:e6:a2:b6:13:b2:8c:09: 25:8e:0a:bc:70:b6:04:f0:f6:c5:bb:98:44:d2:c2:8e:75:25: f6:7a:db:90:a2:45:f4:f7:f7:15:96:8c:2a:99:bf:67:27:49: 7e:3a:91:e2:a4:d9:d5:05:ab:d3:4f:6f:b6:8d:5d:6b:c2:90: bd:94:ee:70:0c:8d:34:a3:eb:35:c3:49:5a:01:7a:e0:f2:72: e4:11:73:01:00:5e:34:be:aa:9b:1b:36:d0:4a:91:61:5e:f7: 02:89:a7:3b:c2:4f:8c:13:e8:a5:75:e8:1d:b7:6d:10:81:6d: c1:e4:9d:b2:71:6c:79:70:6d:5f:d9:ac:1d:8c:4c:f4:ff:1e: 8a:90:f4:96:c4:d1:89:17:4b:cb:79:21:b4:9f:fe:49:8d:a1: fd:4f:85:2a:42:de:40:67:06:c1:74:f1:cf:c0:4d:d8:40:a5: 19:4f:9b:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjUwNTA4MTU0OTIwWhcNMjUwNTE1MTU0OTIwWjAYMRYwFAYD VQQDEw02ODFjZDI4MC05ZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PzYUFYjTIYwbDUHVDMnUJyOGhNmVhd/Jm80tpNYdrrx+MpCGvkCKlK5R+BY GbEweHds3QDabMlCYSX2x1sBCB5JsQvgNCc4iZDJvfutvPJxMEF4GT1urNwh7Rgd LvcoRgXPnXRtTdlVCxvMvzNgoxGCN6ehk4ov+CaMzMbmLZrkJ5jiomlyFHsMuKtn mBG0TXibOe1nunOZ+2V+Q//FIMUejaTDromstXzY+nfUMm2Nob5u+ouuR0WAmQkl Tt6pYy9igINejBOS0OQbzzv8Hp7ko0qFuGWDmoobET0b4B7bP6r8yDU2X9EuShqW 5hwEbgtzyv9JzY7B8CsMmkhTmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJt57QPY cmTzE4ESxxzI5+t8MZX+MB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC98gWhRFc5/RwcNH0Q2WicFnZiYRHYOhi930LjyWfYqxuhJvjrDD1Q 13p4Qx+AI6ON4j9MWZXDzmJoi56YlhK+uBXCRK7M6CV1z+fYRsnKq2G4veaithOy jAkljgq8cLYE8PbFu5hE0sKOdSX2etuQokX09/cVlowqmb9nJ0l+OpHipNnVBavT T2+2jV1rwpC9lO5wDI00o+s1w0laAXrg8nLkEXMBAF40vqqbGzbQSpFhXvcCiac7 wk+ME+ildegdt20QgW3B5J2ycWx5cG1f2awdjEz0/x6KkPSWxNGJF0vLeSG0n/5J jaH9T4UqQt5AZwbBdPHPwE3YQKUZT5u3 -----END CERTIFICATE-----Generated at Fri May 9 23:49:54 2025 by rpki-client