$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: 3gJ7iFs+TKMgd9oUe6XHom1Oun8NWYzJj4pWqMtaM4A= Subject key identifier: D0:7D:E7:A0:2E:84:DC:F2:E6:D2:A3:75:3E:59:B0:60:2D:89:6C:8A Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0AB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0AA6 Signing time: Wed 02 Apr 2025 19:34:49 +0000 Manifest this update: Wed 02 Apr 2025 19:34:49 +0000 Manifest next update: Wed 09 Apr 2025 19:34:49 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: /BnjEYXUIpTSz/+GMk5uAHSrGdvr6FkJu39PQybslL4=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: yJ71VBH0x6Cizy3pLk3TQDQEwieJvCbqnha729ASJmU=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: SeaNTqd0MT2Mb0YJWYURazfx/oLk37QwRX3zpyKaSjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 19:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2742 (0xab6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E Validity Not Before: Apr 2 19:34:49 2025 GMT Not After : Apr 9 19:34:49 2025 GMT Subject: CN=67ed9159-390d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f6:05:10:fa:77:93:f6:d3:fe:0d:29:c5:37: 3c:77:52:86:6b:51:bd:14:7b:1e:5e:b2:36:25:7d: a5:19:cc:f1:ea:ca:86:83:67:1c:94:35:95:47:1e: a2:af:a7:ad:84:ac:10:7d:02:5e:e8:17:77:8a:6d: 45:33:ac:b0:7e:49:94:50:b8:de:ad:bb:28:b4:74: ed:4e:16:03:ad:85:b3:e4:10:9c:94:c3:3f:1f:7b: 71:46:0a:e9:35:3e:35:7d:a7:b0:bd:35:6b:47:1a: 60:e7:d9:a6:15:b4:8a:ab:36:f2:e1:4a:b5:1f:c2: 4d:34:6d:66:a7:94:fb:f3:b9:c0:68:89:e3:b1:30: 57:b0:75:78:c3:af:04:a3:bc:23:b6:86:80:60:07: 4e:10:0c:88:f5:bb:3f:e6:a6:b3:0e:c9:52:86:2f: 4c:9e:f8:47:4e:96:b3:1d:51:98:9a:d8:10:ad:33: 7d:78:b9:20:bb:0f:47:62:c3:e0:f0:1f:f3:fe:42: f4:ca:0a:11:a4:02:b6:8a:ac:42:7c:dc:14:50:e1: ad:78:32:fe:42:52:57:b8:a7:16:9d:e8:d9:a8:9d: a6:12:00:7c:8c:9b:60:87:0c:36:d0:ef:f0:aa:c2: a6:b5:07:3c:63:ba:51:bf:96:67:31:be:fb:07:b7: 69:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7D:E7:A0:2E:84:DC:F2:E6:D2:A3:75:3E:59:B0:60:2D:89:6C:8A X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:35:1a:55:e5:bb:c2:aa:16:90:73:17:f5:55:df:90:04:44: a9:3b:89:c1:7f:ec:d6:61:49:3a:99:72:45:5d:22:05:68:69: 5e:40:ce:ea:76:16:d0:a0:d6:8d:2c:c6:3e:13:fd:52:0c:af: fe:37:81:b4:54:ec:74:b1:77:28:75:42:18:8e:8d:33:c6:9c: af:70:1f:30:f0:64:08:e7:b0:e8:71:a2:3a:39:e5:56:b2:6d: 30:18:89:31:85:f1:03:5d:28:72:f6:ea:81:97:ac:11:9c:49: 64:d2:53:08:a2:9e:71:ce:e0:66:ef:7e:33:4b:44:1e:96:c4: 31:47:1e:5b:1b:e4:e9:bf:74:da:1b:b5:d5:a7:ef:7c:12:b6: 8a:d2:29:34:44:9c:86:5e:24:46:39:fe:ce:b7:53:c9:7d:ca: 30:02:dd:62:63:d0:28:c9:45:49:07:cc:8d:eb:08:91:18:44: 74:b5:ab:e0:dd:d8:2b:3a:01:97:23:67:df:e6:cd:99:f6:45: 73:ed:e5:09:87:81:78:db:e2:b0:bf:6e:b2:54:35:f2:0d:06: f5:90:86:2f:b5:5d:33:be:33:9f:0e:b2:39:2c:91:88:32:44: c1:3e:b3:01:62:04:f1:6e:7d:00:d6:b9:49:94:47:86:db:5a: 6d:1b:43:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjUwNDAyMTkzNDQ5WhcNMjUwNDA5MTkzNDQ5WjAYMRYwFAYD VQQDEw02N2VkOTE1OS0zOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fYFEPp3k/bT/g0pxTc8d1KGa1G9FHseXrI2JX2lGczx6sqGg2cclDWVRx6i r6ethKwQfQJe6Bd3im1FM6ywfkmUULjerbsotHTtThYDrYWz5BCclMM/H3txRgrp NT41faewvTVrRxpg59mmFbSKqzby4Uq1H8JNNG1mp5T787nAaInjsTBXsHV4w68E o7wjtoaAYAdOEAyI9bs/5qazDslShi9MnvhHTpazHVGYmtgQrTN9eLkguw9HYsPg 8B/z/kL0ygoRpAK2iqxCfNwUUOGteDL+QlJXuKcWnejZqJ2mEgB8jJtghww20O/w qsKmtQc8Y7pRv5ZnMb77B7dp/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNB956Au hNzy5tKjdT5ZsGAtiWyKMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNNRpV5bvCqhaQcxf1Vd+QBESpO4nBf+zWYUk6mXJFXSIFaGleQM7q dhbQoNaNLMY+E/1SDK/+N4G0VOx0sXcodUIYjo0zxpyvcB8w8GQI57DocaI6OeVW sm0wGIkxhfEDXShy9uqBl6wRnElk0lMIop5xzuBm734zS0QelsQxRx5bG+Tpv3Ta G7XVp+98EraK0ik0RJyGXiRGOf7Ot1PJfcowAt1iY9AoyUVJB8yN6wiRGER0tavg 3dgrOgGXI2ff5s2Z9kVz7eUJh4F42+Kwv26yVDXyDQb1kIYvtV0zvjOfDrI5LJGI MkTBPrMBYgTxbn0A1rlJlEeG21ptG0Nx -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:01 2025 by rpki-client