$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft File: IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json) Hash identifier: LvWfI7lHMAPIO15BTmrIVAOyXpAx++I8B5b+dzdtGRc= Subject key identifier: D2:B1:6B:B6:9C:DC:A5:4D:79:9D:D2:95:EF:D5:F6:4E:07:9C:E3:6E Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Certificate serial: 030A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft Manifest number: 0303 Signing time: Tue 13 May 2025 01:03:21 +0000 Manifest this update: Tue 13 May 2025 01:03:20 +0000 Manifest next update: Tue 20 May 2025 01:03:20 +0000 Files and hashes: 1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: t50voRySwTfCMuELXz79o3FZCS4Lnr9Af2zsUElf6J4=) 2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: du3inK9qkjwR/A2n6vO6SMQjDynHJ0y0PAziJifzAng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778 (0x30a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Validity Not Before: May 13 01:03:20 2025 GMT Not After : May 20 01:03:20 2025 GMT Subject: CN=68229a59-fcf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:50:a3:be:c0:6a:b1:83:e3:11:47:f0:dc:0d: 12:9c:f4:21:a3:b9:d8:f6:2a:c3:60:02:84:50:ce: e4:cd:57:6f:cb:d6:68:9d:74:be:e4:ce:83:af:69: f4:49:14:34:4b:6b:24:f7:8a:d1:cd:a0:0e:f4:14: 8d:b7:ce:b8:b4:76:fe:d3:38:b1:f6:6c:32:55:9b: e4:48:44:77:e2:6d:32:ed:d9:3b:d9:e4:63:86:d5: 90:47:68:b2:9c:59:62:3d:a5:26:78:80:11:fc:d0: f0:2d:92:44:b5:4a:6d:7b:7e:d7:ec:0c:c1:d3:ca: 11:96:9b:c9:35:8c:ae:90:34:12:42:20:14:d6:a0: 4a:78:80:ca:11:78:53:dd:f0:78:33:4a:5e:41:71: 1a:dd:51:a1:20:b1:dd:a8:27:a4:be:1f:a4:ab:f8: 76:9a:98:cf:55:79:70:0f:ff:12:4f:dd:55:f7:f9: c0:6d:34:17:66:06:da:fa:fc:51:39:9b:bc:d0:d5: 48:5c:71:c5:e6:74:1a:3d:26:6c:0d:ce:2c:d9:6d: 8d:98:75:c8:2a:99:84:81:67:35:ee:ea:6c:34:49: ba:7e:1a:51:3a:55:be:5d:b5:04:1d:22:b4:9d:d3: c7:0c:fc:86:06:7d:10:d8:cf:ef:4a:9f:04:3d:45: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B1:6B:B6:9C:DC:A5:4D:79:9D:D2:95:EF:D5:F6:4E:07:9C:E3:6E X509v3 Authority Key Identifier: keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bc:2d:64:49:6c:4e:7b:9b:03:1e:87:4b:f8:21:ce:2a:10: 32:6f:63:75:b1:d9:2a:19:c3:7d:1c:cc:be:69:17:60:af:cd: 2c:e9:b1:81:5f:b4:a5:80:8e:86:79:cb:be:29:ad:df:d9:0e: f0:d4:19:ce:52:a4:d6:84:96:43:d6:1a:f2:66:a5:64:79:a0: a0:39:9a:dd:80:3e:f4:7c:23:5e:1c:1b:87:c6:be:dd:88:0e: 81:13:05:11:aa:1e:f8:f0:57:b1:6b:8f:ed:f8:c3:8c:10:ea: 25:cf:c9:e2:bd:22:79:b9:06:98:9e:01:d5:fe:31:70:8e:9a: 58:dd:c5:79:9c:1d:33:dc:40:b1:39:5c:6c:af:00:ff:15:9f: 33:18:61:5b:52:71:5b:5b:71:ac:ce:8b:69:c4:27:c0:80:4f: 9c:e3:c3:88:ec:ab:0c:c6:15:4f:d2:2f:cf:f4:f5:6d:b8:8d: 51:47:fe:51:8e:34:04:0b:e2:f5:28:40:e7:87:d3:20:31:8e: ae:07:e1:72:da:5f:5c:92:f4:5f:2b:ad:d1:e2:2f:cf:64:33: cf:c2:ce:de:41:02:9c:51:23:d0:41:d4:14:64:5c:89:f9:77: b8:75:f1:5a:9b:a7:e7:d5:17:00:20:05:8b:bd:a0:08:8a:68: b3:4e:49:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG RjFEQjY2NzUwHhcNMjUwNTEzMDEwMzIwWhcNMjUwNTIwMDEwMzIwWjAYMRYwFAYD VQQDEw02ODIyOWE1OS1mY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslCjvsBqsYPjEUfw3A0SnPQho7nY9irDYAKEUM7kzVdvy9ZonXS+5M6Dr2n0 SRQ0S2sk94rRzaAO9BSNt864tHb+0zix9mwyVZvkSER34m0y7dk72eRjhtWQR2iy nFliPaUmeIAR/NDwLZJEtUpte37X7AzB08oRlpvJNYyukDQSQiAU1qBKeIDKEXhT 3fB4M0peQXEa3VGhILHdqCekvh+kq/h2mpjPVXlwD/8ST91V9/nAbTQXZgba+vxR OZu80NVIXHHF5nQaPSZsDc4s2W2NmHXIKpmEgWc17upsNEm6fhpROlW+XbUEHSK0 ndPHDPyGBn0Q2M/vSp8EPUWYawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKxa7ac 3KVNeZ3Sle/V9k4HnONuMB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0 RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI1NC83MjczNzVCNEQ0RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBL VVJLODJNdnhlcGpfSGJablUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/vC1kSWxOe5sDHodL+CHOKhAyb2N1sdkqGcN9HMy+aRdgr80s6bGB X7SlgI6Gecu+Ka3f2Q7w1BnOUqTWhJZD1hryZqVkeaCgOZrdgD70fCNeHBuHxr7d iA6BEwURqh748Fexa4/t+MOMEOolz8nivSJ5uQaYngHV/jFwjppY3cV5nB0z3ECx OVxsrwD/FZ8zGGFbUnFbW3GszotpxCfAgE+c48OI7KsMxhVP0i/P9PVtuI1RR/5R jjQEC+L1KEDnh9MgMY6uB+Fy2l9ckvRfK63R4i/PZDPPws7eQQKcUSPQQdQUZFyJ +Xe4dfFam6fn1RcAIAWLvaAIimizTkl2 -----END CERTIFICATE-----Generated at Tue May 13 04:46:32 2025 by rpki-client