$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: nCuSuXv8R45UdE1vNR11IqmcggqBn+VCy82R4HsZOyI= Subject key identifier: FB:A9:9B:DA:DF:C2:87:B8:87:1F:B4:64:73:8D:20:23:E8:0B:0F:1C Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0B82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0B7C Signing time: Sun 06 Apr 2025 18:50:26 +0000 Manifest this update: Sun 06 Apr 2025 18:50:26 +0000 Manifest next update: Sun 13 Apr 2025 18:50:26 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: 6DNVL3Wsb2GdloOg0ZD4Z+BJR1qngZ6pvaTL3/8bMuw=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: ukt0pxqY8ok4zBKJR2dRuTwyGN5+UeLkjnvL96GEj4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2946 (0xb82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956 Validity Not Before: Apr 6 18:50:26 2025 GMT Not After : Apr 13 18:50:26 2025 GMT Subject: CN=67f2ccf2-66c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:29:d7:8a:5e:35:98:c9:dc:ac:a7:07:5e: f2:92:00:00:a5:c9:57:e1:1b:7e:67:f2:17:64:d2: 39:64:19:cd:fd:d1:8c:46:0b:d3:f4:08:dc:5b:ee: 32:df:47:4f:49:30:0f:85:19:d8:df:f4:de:97:d3: c5:07:ad:ae:92:fa:43:e6:6b:c4:e9:30:89:f1:3f: 47:65:7c:bf:a6:68:5f:8b:56:5c:85:49:2d:b6:b0: 74:aa:91:ad:5b:53:d0:d8:6d:71:a6:d8:1a:d3:86: ab:7b:39:79:d3:a5:67:c5:41:a8:82:0e:65:77:79: fd:56:54:4e:91:97:6b:67:d4:ea:11:4c:ae:9e:66: d4:7e:05:52:3d:b5:c9:59:40:ad:a3:06:ed:9c:fa: ac:ea:7f:e0:8c:b9:a9:4c:ae:4d:53:41:bc:a3:77: 74:e7:75:46:43:35:1f:f2:ae:ab:c9:34:63:25:8b: 32:6c:fb:b2:79:e3:24:43:53:52:e3:72:55:f4:1e: 4f:e1:ba:06:31:3e:21:fd:a0:e3:e5:05:f6:7e:17: 6a:99:c2:a1:c0:ee:0b:80:2d:f2:a0:d8:64:9f:3c: 6f:bc:29:22:65:d2:a0:b8:cb:9e:02:9b:d0:d6:56: 31:ef:94:ac:f6:11:7e:ea:99:30:34:06:63:12:8c: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A9:9B:DA:DF:C2:87:B8:87:1F:B4:64:73:8D:20:23:E8:0B:0F:1C X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f5:53:ab:a5:5d:27:21:d4:9f:c5:cc:91:5c:f3:86:ef:69: b1:06:91:9d:c6:da:90:b1:c2:b7:34:92:35:70:52:02:5c:c9: c1:90:b2:6f:22:33:f5:3e:0a:97:04:0c:26:b5:95:70:20:db: 67:bf:e1:0b:46:71:4a:85:84:82:93:5b:c4:9b:ec:a6:16:30: 99:01:ba:9b:3e:33:5d:70:d7:9f:5b:80:1a:75:ab:66:f0:6a: a9:5e:9c:c2:be:69:b9:68:cc:3b:00:e5:28:08:78:69:19:69: 09:3d:ce:75:c4:2a:21:a3:40:c2:8b:13:2c:c7:6b:2f:05:4e: 97:98:23:58:a2:ec:36:2e:ac:1f:7d:7f:57:b0:7e:e8:1c:01: 03:95:42:18:01:60:02:7a:39:fb:6c:60:9e:ca:1b:1c:41:e8: a0:fa:b5:38:40:53:de:4f:c5:bc:da:ec:01:27:8c:bb:e8:70: 72:5a:f0:28:e8:49:65:5c:89:2e:bb:f4:3c:96:31:b2:2b:48: 8a:02:cb:c8:c5:96:c6:3a:f5:b7:4d:64:dc:5d:7c:75:cb:97: c2:1b:cb:9d:2c:59:cf:e4:51:77:e0:b3:ea:79:2a:a9:c6:26: 29:b6:1d:9b:df:fc:17:4a:c7:c4:bd:52:80:30:01:8d:b9:1b: 92:a8:6f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjUwNDA2MTg1MDI2WhcNMjUwNDEzMTg1MDI2WjAYMRYwFAYD VQQDEw02N2YyY2NmMi02NmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2Ip14peNZjJ3KynB17ykgAApclX4Rt+Z/IXZNI5ZBnN/dGMRgvT9AjcW+4y 30dPSTAPhRnY3/Tel9PFB62ukvpD5mvE6TCJ8T9HZXy/pmhfi1ZchUkttrB0qpGt W1PQ2G1xptga04arezl506VnxUGogg5ld3n9VlROkZdrZ9TqEUyunmbUfgVSPbXJ WUCtowbtnPqs6n/gjLmpTK5NU0G8o3d053VGQzUf8q6ryTRjJYsybPuyeeMkQ1NS 43JV9B5P4boGMT4h/aDj5QX2fhdqmcKhwO4LgC3yoNhknzxvvCkiZdKguMueApvQ 1lYx75Ss9hF+6pkwNAZjEowauwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPupm9rf woe4hx+0ZHONICPoCw8cMB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/9VOrpV0nIdSfxcyRXPOG72mxBpGdxtqQscK3NJI1cFICXMnBkLJv IjP1PgqXBAwmtZVwINtnv+ELRnFKhYSCk1vEm+ymFjCZAbqbPjNdcNefW4Aadatm 8GqpXpzCvmm5aMw7AOUoCHhpGWkJPc51xCoho0DCixMsx2svBU6XmCNYouw2Lqwf fX9XsH7oHAEDlUIYAWACejn7bGCeyhscQeig+rU4QFPeT8W82uwBJ4y76HByWvAo 6EllXIkuu/Q8ljGyK0iKAsvIxZbGOvW3TWTcXXx1y5fCG8udLFnP5FF34LPqeSqp xiYpth2b3/wXSsfEvVKAMAGNuRuSqG8l -----END CERTIFICATE-----Generated at Mon Apr 7 04:13:05 2025 by rpki-client