$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json) Hash identifier: epxjgqA7jUGJrkUnjEFqLzu8LBlAk1drHvAHjXjUf4Y= Subject key identifier: 62:E3:FA:E8:6F:47:15:C6:57:A9:11:9C:B1:D2:49:3F:11:8B:C1:5A Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Certificate serial: 0781 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft Manifest number: 077C Signing time: Fri 02 May 2025 21:35:09 +0000 Manifest this update: Fri 02 May 2025 21:35:09 +0000 Manifest next update: Fri 09 May 2025 21:35:09 +0000 Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: s+B3oYUMfHS48GMWVAJDDmkkWzOV71Ig5v9i/Ivcono=) 2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: EnKj89o4/2sutrwYpg7UxwXHFBOFSGJviP9dKcMIsAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 21:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Validity Not Before: May 2 21:35:09 2025 GMT Not After : May 9 21:35:09 2025 GMT Subject: CN=68153a8d-3b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cb:13:ea:da:61:bc:3a:49:d1:43:36:9f:df: 8f:e7:e5:eb:52:7e:82:5e:a9:07:e8:ca:65:e3:0e: 4c:c5:33:6d:22:e3:13:a9:8a:b9:e5:30:67:fb:d5: 7e:6f:09:77:ba:6a:70:a4:f1:c0:24:54:19:b4:df: dd:e6:6c:1c:ce:a3:11:1a:0b:c7:25:da:4d:11:20: 75:9d:4c:89:ee:c7:e5:6a:37:37:2f:3a:71:5f:16: c9:bf:f6:e6:82:5f:f4:88:6f:57:9d:81:cf:fa:35: ed:ff:be:a6:ab:78:31:eb:21:91:76:52:b3:7a:64: 49:c6:a6:20:29:44:d0:5d:c4:0e:01:a5:2f:f9:2d: 65:c5:9e:a0:77:65:73:25:d8:b2:9f:48:3e:c5:01: 49:7d:e3:e2:ec:8e:5c:cd:ae:8b:67:8c:5f:7c:62: 00:38:ca:5d:4d:b3:e0:d1:b6:73:f4:de:64:51:3f: f5:00:43:f8:59:9c:ae:b6:17:c0:9b:84:7e:15:1a: 3c:8f:d5:a0:be:ea:6a:46:ed:7c:11:8b:93:bc:92: 86:ea:54:d4:2e:72:33:10:e5:40:76:c4:86:ee:ff: 74:0f:e6:2e:14:68:5e:ff:e1:bb:12:f8:ee:81:22: a7:aa:d1:64:5e:ef:d2:1c:24:6a:dc:e1:b5:b5:8f: a9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E3:FA:E8:6F:47:15:C6:57:A9:11:9C:B1:D2:49:3F:11:8B:C1:5A X509v3 Authority Key Identifier: keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6f:a3:12:a6:1f:f2:57:8a:b5:02:2a:e3:73:b6:90:2e:aa: 39:2a:d0:8a:66:ab:dc:4d:55:49:8f:6b:5a:1e:c7:29:58:28: 4c:35:d8:f8:74:c2:1d:a2:bd:06:2f:ef:4e:4c:9d:cb:ef:7c: c0:3f:16:da:b7:c8:77:0f:46:e0:3b:7a:bb:b1:65:38:0f:16: 38:2e:88:b3:e4:90:c2:85:cb:fd:f3:71:44:66:45:0a:d4:67: 48:ea:fa:1e:1e:b1:49:d3:28:0c:18:20:9e:e0:1c:f5:ec:dd: 90:88:79:4d:19:7e:68:37:97:87:3b:bf:20:99:67:d7:cc:ad: e3:b0:9a:a9:04:17:aa:b6:6d:73:c5:33:8f:83:cf:05:c7:e3: 25:5d:a0:85:fe:ce:be:cc:a8:2f:ea:67:4f:05:d7:2d:4f:ef: 36:1a:20:23:b6:fa:99:29:c1:5b:6e:0e:65:ee:0e:a4:97:2a: 91:4d:02:55:19:c2:a1:68:6f:85:4c:b0:cc:dc:e9:ae:dd:13: 53:8a:c1:c0:54:e5:58:79:01:8c:c1:b2:5b:26:94:70:ab:af: 51:d7:8d:18:da:fe:26:f7:a8:58:f9:7d:82:76:b9:aa:6e:91: dc:f0:95:13:e6:a4:66:9e:69:0e:c0:07:e7:2c:8d:88:fb:c4: 7d:4b:95:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJFNzYxMTAvBgNVBAUTKEQ0MTM3OEVGQ0NDRENBOEU2NTM3RTk1RjI3QUEzQjM1 Mzc1ODBBRjMwHhcNMjUwNTAyMjEzNTA5WhcNMjUwNTA5MjEzNTA5WjAYMRYwFAYD VQQDEw02ODE1M2E4ZC0zYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ssT6tphvDpJ0UM2n9+P5+XrUn6CXqkH6Mpl4w5MxTNtIuMTqYq55TBn+9V+ bwl3umpwpPHAJFQZtN/d5mwczqMRGgvHJdpNESB1nUyJ7sflajc3LzpxXxbJv/bm gl/0iG9XnYHP+jXt/76mq3gx6yGRdlKzemRJxqYgKUTQXcQOAaUv+S1lxZ6gd2Vz Jdiyn0g+xQFJfePi7I5cza6LZ4xffGIAOMpdTbPg0bZz9N5kUT/1AEP4WZyuthfA m4R+FRo8j9WgvupqRu18EYuTvJKG6lTULnIzEOVAdsSG7v90D+YuFGhe/+G7Evju gSKnqtFkXu/SHCRq3OG1tY+p5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLj+uhv RxXGV6kRnLHSST8Ri8FaMB8GA1UdIwQYMBaAFNQTeO/MzcqOZTfpXyeqOzU3WArz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkU3Ni84RjNDOUU2QTBE NzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6TnlvNWxOLWxmSjZvN05UZFlD dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCTjQ3OHpOeW81bE4tbGZKNm83TlRkWUN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkU3Ni84RjNDOUU2QTBENzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6Tnlv NWxOLWxmSjZvN05UZFlDdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAab6MSph/yV4q1Airjc7aQLqo5KtCKZqvcTVVJj2taHscpWChMNdj4 dMIdor0GL+9OTJ3L73zAPxbat8h3D0bgO3q7sWU4DxY4Loiz5JDChcv983FEZkUK 1GdI6voeHrFJ0ygMGCCe4Bz17N2QiHlNGX5oN5eHO78gmWfXzK3jsJqpBBeqtm1z xTOPg88Fx+MlXaCF/s6+zKgv6mdPBdctT+82GiAjtvqZKcFbbg5l7g6klyqRTQJV GcKhaG+FTLDM3Omu3RNTisHAVOVYeQGMwbJbJpRwq69R140Y2v4m96hY+X2Cdrmq bpHc8JUT5qRmnmkOwAfnLI2I+8R9S5WP -----END CERTIFICATE-----Generated at Sun May 4 18:07:18 2025 by rpki-client