$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json) Hash identifier: DT9wOzEKjupuhgYW6jNQlV+q8DH1s9qWUAeznBuDBus= Subject key identifier: 39:D5:C2:D2:A3:B6:51:46:A5:BB:FE:AD:96:00:51:A8:E8:94:C5:52 Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Certificate serial: 0388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft Manifest number: 0384 Signing time: Mon 05 May 2025 00:27:33 +0000 Manifest this update: Mon 05 May 2025 00:27:33 +0000 Manifest next update: Mon 12 May 2025 00:27:33 +0000 Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: a691KjKc7Soe779zqgrZx2huthnoke8GuxT1LeYlNAg=) 2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: lmHWjHWGoDos3ZD/zmSAwKznf6OVOtQspTUkVEJy1Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93E, serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Validity Not Before: May 5 00:27:33 2025 GMT Not After : May 12 00:27:33 2025 GMT Subject: CN=681805f5-fb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cc:24:8a:47:73:7e:09:de:48:30:ef:48:5e: 9f:95:bf:d5:68:1a:79:ed:56:f8:61:70:f1:b2:6d: a4:e5:c5:22:08:11:50:5a:11:07:d1:95:ff:82:48: 0a:44:a7:15:07:22:dc:49:74:e3:be:49:89:b2:1e: 7a:25:13:b7:74:39:6f:9e:3a:59:8a:97:09:52:fb: 0c:f4:ff:61:a1:00:2d:57:66:c6:41:30:50:cb:b6: 1e:5d:76:ad:20:0d:c9:27:1d:0f:27:ec:20:e5:8c: 73:9d:87:4f:71:8a:c5:03:2b:71:f4:15:4d:ff:2b: 28:4f:0b:1e:25:33:01:5c:0d:f5:69:94:77:b9:42: b2:34:43:a8:22:6a:eb:b5:ad:60:c3:70:df:5d:12: 43:75:33:af:5b:ce:02:67:2f:0f:99:2c:68:6e:c3: 0b:3c:54:a7:e1:c3:30:83:b4:51:63:4f:7f:e2:91: bf:d1:fb:20:1e:27:0a:8c:5f:9c:4c:d5:18:61:3f: 30:ab:3b:29:61:77:da:a1:fb:84:81:87:37:5c:c8: f6:f2:95:1f:00:a1:e7:2e:8d:96:3c:e1:23:81:a9: ed:a7:4a:5f:af:65:76:ec:cd:e2:9f:41:ed:a8:83: d8:27:30:46:1f:8f:d7:ac:57:81:93:59:15:46:35: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D5:C2:D2:A3:B6:51:46:A5:BB:FE:AD:96:00:51:A8:E8:94:C5:52 X509v3 Authority Key Identifier: keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:cc:ff:f9:dc:3a:15:6f:07:a2:2a:7f:ab:72:a9:58:9e:b1: 20:44:f7:5d:f9:db:96:ed:14:34:7a:7b:33:63:55:6c:bc:3b: 41:e8:8b:b6:4e:94:f5:89:8c:94:08:32:ac:c1:72:6b:2d:a3: a7:fe:47:1d:54:f7:72:6d:82:5e:36:d1:80:16:be:28:cc:dd: b0:03:f2:fd:d4:54:a1:a1:f4:25:40:8f:2d:16:b0:c7:20:2e: 0f:b5:46:11:29:19:8b:58:35:80:ce:cd:f1:0c:e7:e5:ba:33: 89:ad:11:38:b4:9a:45:4b:29:1c:31:38:b6:34:62:b7:88:c9: 3f:b1:7b:82:64:0b:26:df:d9:b8:a5:ea:3d:8f:c5:72:2c:29: 3a:b7:60:14:17:b5:26:fb:dc:66:de:26:7f:68:ff:08:f6:4b: 44:c9:ea:c7:1e:2b:63:b6:44:01:30:cc:17:2a:af:87:4b:ee: 3a:08:00:24:89:a6:68:bc:62:1e:c1:fd:b0:c5:4a:84:4e:23: 6c:b8:b8:7f:31:ac:b8:20:64:52:23:dc:f0:54:14:81:5d:6d: 10:e2:0c:4a:01:33:92:2d:e6:09:6c:d8:a7:f4:60:9c:57:19: ac:58:12:cc:0e:34:db:48:b8:5a:06:01:46:8b:d0:5b:9c:b9: 62:f9:62:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEyNjI3MkJDQjFD OTZEQkZFNUUwHhcNMjUwNTA1MDAyNzMzWhcNMjUwNTEyMDAyNzMzWjAYMRYwFAYD VQQDEw02ODE4MDVmNS1mYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5swkikdzfgneSDDvSF6flb/VaBp57Vb4YXDxsm2k5cUiCBFQWhEH0ZX/gkgK RKcVByLcSXTjvkmJsh56JRO3dDlvnjpZipcJUvsM9P9hoQAtV2bGQTBQy7YeXXat IA3JJx0PJ+wg5YxznYdPcYrFAytx9BVN/ysoTwseJTMBXA31aZR3uUKyNEOoImrr ta1gw3DfXRJDdTOvW84CZy8PmSxobsMLPFSn4cMwg7RRY09/4pG/0fsgHicKjF+c TNUYYT8wqzspYXfaofuEgYc3XMj28pUfAKHnLo2WPOEjgantp0pfr2V27M3in0Ht qIPYJzBGH4/XrFeBk1kVRjXVVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnVwtKj tlFGpbv+rZYAUajolMVSMB8GA1UdIwQYMBaAFLQpj8sthJ2NTXEqJicryxyW2/5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRS81QUU3ODUyRTlG MjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5ZMU5jU29tSnl2TEhKYmJf bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RDbVB5eTJFblkxTmNTb21KeXZMSEpiYl9sNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5Z MU5jU29tSnl2TEhKYmJfbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7zP/53DoVbweiKn+rcqlYnrEgRPdd+duW7RQ0enszY1VsvDtB6Iu2 TpT1iYyUCDKswXJrLaOn/kcdVPdybYJeNtGAFr4ozN2wA/L91FShofQlQI8tFrDH IC4PtUYRKRmLWDWAzs3xDOflujOJrRE4tJpFSykcMTi2NGK3iMk/sXuCZAsm39m4 peo9j8VyLCk6t2AUF7Um+9xm3iZ/aP8I9ktEyerHHitjtkQBMMwXKq+HS+46CAAk iaZovGIewf2wxUqETiNsuLh/May4IGRSI9zwVBSBXW0Q4gxKATOSLeYJbNin9GCc VxmsWBLMDjTbSLhaBgFGi9BbnLli+WIx -----END CERTIFICATE-----Generated at Mon May 5 07:21:39 2025 by rpki-client