$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: rrWOXavfL+GJhybNTtijU1UBx2ypGgcjSvxoFmcS35A= Subject key identifier: 4B:89:1C:8E:FF:00:61:DE:B7:3F:6C:E9:56:DF:EE:73:C7:05:34:B4 Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 0314 Signing time: Mon 05 May 2025 00:48:04 +0000 Manifest this update: Mon 05 May 2025 00:48:04 +0000 Manifest next update: Mon 12 May 2025 00:48:04 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: KRYd4Eg/rNhefEa4OlblFF2Zh+zfRYX/VslZquk3KL4=) 2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: 2IeO54Cp6b06u4xrChfhugqf5OR3NU+qoLsUiOOPr8M=) 3: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: f/9vGnn2JXmJ21/jrMMvJ7DpIN0BPneJ38/5WfHmbrI=) 4: B1CE8816650411EEBE8D4512C4F9AE02.roa (hash: xl/v3HFE5XZWMUy9IIOzuRvTobJH6hv4JoT6vWaFF1Q=) 5: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: i3ADmyA4WgLpGdAmHRBQc8Kk5ppJaulRCigFr15Uv0k=) 6: 9389FFE8650411EE80570A12C4F9AE02.roa (hash: IhHnqIJSUKHQvAUemNA8DV1wdnkLH6BV1/tBV7gGepE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: May 5 00:48:04 2025 GMT Not After : May 12 00:48:04 2025 GMT Subject: CN=68180ac4-0418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:8e:59:98:18:dd:ac:71:00:d1:28:9a:d9: db:0b:a9:b7:70:57:79:5e:9c:d4:5a:fa:05:8d:17: 1b:6f:66:3c:78:5b:06:49:0e:fb:93:be:45:24:be: 4a:85:56:6c:f0:f1:f9:46:c6:03:73:ab:5d:a5:05: 0d:fa:af:d2:0d:ec:fb:b2:18:60:f2:ce:b4:8a:95: b9:fc:cd:b1:51:56:15:a7:fd:0a:06:ed:9f:f4:72: 1f:7d:b9:ad:9c:be:94:bc:0d:8f:9c:02:7d:6d:d3: 3c:7c:8f:4a:bb:7c:40:44:53:4a:c3:87:82:b3:55: 6b:fa:0a:56:ea:cf:6f:0a:e1:1e:bd:0d:0c:9a:df: 62:1b:14:18:50:ec:c6:d6:02:a7:11:db:31:a7:11: e3:71:58:36:c3:ad:73:95:54:bd:5b:d6:34:14:3c: 2f:62:5e:1b:b7:1c:86:87:94:90:d5:59:95:fd:26: a0:ae:da:e9:0c:2e:31:65:d3:b3:57:5c:14:2e:cf: eb:e1:63:54:20:70:03:d4:78:60:89:41:5d:e3:91: b9:62:6a:11:00:25:a3:c2:c1:50:7f:9f:ff:2e:eb: 3e:12:c7:51:0e:68:dd:ba:cb:b8:92:33:c2:8f:74: 58:d8:87:ae:23:9b:94:fd:90:a1:62:57:e0:ba:d9: 76:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:89:1C:8E:FF:00:61:DE:B7:3F:6C:E9:56:DF:EE:73:C7:05:34:B4 X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:cf:33:0b:e9:e7:f1:f3:62:d2:a0:c1:93:32:1f:bf:42:ef: 72:3d:97:a2:79:75:a9:d1:0d:29:d4:c6:53:b7:9f:c6:b7:cb: 86:2a:24:e7:39:a5:7b:13:72:81:9f:73:ed:8b:f4:ee:58:8f: 7a:1f:a0:f6:e4:4c:34:e4:fe:11:93:9b:d5:7e:55:9e:af:ba: 86:11:82:f3:06:77:cd:73:1b:c1:86:21:06:2d:33:b1:b2:31: 70:ef:5d:7b:d2:f6:8b:45:5b:d6:e5:44:b7:7d:65:3f:ba:8c: 24:ea:18:05:ca:db:de:9d:de:86:56:4e:5f:45:5e:82:8a:f7: 78:2d:01:ff:06:cc:02:9b:92:e3:c6:58:23:47:03:bf:68:fd: 0b:d6:52:a2:4e:4d:b0:08:c2:85:8d:8f:f3:a0:a4:92:0e:14: e6:b6:06:3a:c3:75:54:99:ed:09:b2:2e:71:6a:9e:22:33:cf: 30:eb:c4:8b:17:81:ea:aa:82:0d:45:5f:8f:ad:00:c7:cf:27: 6a:b8:42:96:9e:d0:da:90:d7:7e:9a:a6:e6:ff:aa:5c:39:56: 83:7a:61:32:77:de:c1:c3:7e:35:58:c4:d0:15:21:2a:ac:56: 0a:b9:89:09:bf:c1:da:7b:0f:27:33:68:a0:95:5e:f7:71:01: a4:d5:2c:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjUwNTA1MDA0ODA0WhcNMjUwNTEyMDA0ODA0WjAYMRYwFAYD VQQDEw02ODE4MGFjNC0wNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4eOWZgY3axxANEomtnbC6m3cFd5XpzUWvoFjRcbb2Y8eFsGSQ77k75FJL5K hVZs8PH5RsYDc6tdpQUN+q/SDez7shhg8s60ipW5/M2xUVYVp/0KBu2f9HIffbmt nL6UvA2PnAJ9bdM8fI9Ku3xARFNKw4eCs1Vr+gpW6s9vCuEevQ0Mmt9iGxQYUOzG 1gKnEdsxpxHjcVg2w61zlVS9W9Y0FDwvYl4btxyGh5SQ1VmV/SagrtrpDC4xZdOz V1wULs/r4WNUIHAD1HhgiUFd45G5YmoRACWjwsFQf5//Lus+EsdRDmjdusu4kjPC j3RY2IeuI5uU/ZChYlfgutl2KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuJHI7/ AGHetz9s6Vbf7nPHBTS0MB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0zzML6efx82LSoMGTMh+/Qu9yPZeieXWp0Q0p1MZTt5/Gt8uGKiTn OaV7E3KBn3Pti/TuWI96H6D25Ew05P4Rk5vVflWer7qGEYLzBnfNcxvBhiEGLTOx sjFw71170vaLRVvW5US3fWU/uowk6hgFytvend6GVk5fRV6Civd4LQH/BswCm5Lj xlgjRwO/aP0L1lKiTk2wCMKFjY/zoKSSDhTmtgY6w3VUme0Jsi5xap4iM88w68SL F4HqqoINRV+PrQDHzydquEKWntDakNd+mqbm/6pcOVaDemEyd97Bw341WMTQFSEq rFYKuYkJv8Haew8nM2iglV73cQGk1Sw0 -----END CERTIFICATE-----Generated at Mon May 5 03:26:42 2025 by rpki-client