$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: hKU7xSvCel7yEMU2Xpmr5ud4bI2ZTK3hq7CcuDk+5kM= Subject key identifier: 2F:AB:63:6F:6A:2C:65:4D:C8:6F:7D:33:EB:42:35:5E:C9:14:AE:CD Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 041C Signing time: Sat 29 Mar 2025 00:39:11 +0000 Manifest this update: Sat 29 Mar 2025 00:39:11 +0000 Manifest next update: Sat 05 Apr 2025 00:39:11 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: c4YuhvseUP0taDGY3NHiznQ95wRxX6nrQJG+oFu1fwo=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: FClvPvzoTDmX/ZzIigyjz+g4sikyQbqSLF5/K9p2wok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9 Validity Not Before: Mar 29 00:39:11 2025 GMT Not After : Apr 5 00:39:11 2025 GMT Subject: CN=67e7412f-19a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b6:ed:9f:6c:a1:29:75:1f:83:d0:79:87:5d: 21:82:b5:a1:28:04:6f:a8:96:d2:44:de:cc:cd:dd: 7d:08:3d:d4:e2:d3:ce:f2:3e:04:51:d4:cf:de:c3: 26:8b:c7:9b:33:5b:07:85:06:7b:ed:ef:29:ec:ca: 21:a2:fe:8e:29:28:d1:3e:77:1e:1c:97:ca:01:59: 6f:85:a0:57:76:0a:4b:18:32:b7:b1:50:26:48:9e: 7e:73:3d:20:20:c9:28:ea:95:57:86:e1:36:7b:db: cd:56:c4:33:94:f4:e0:ce:a1:42:67:21:32:49:9b: 45:76:44:55:f8:e3:d8:d7:2c:09:83:e0:78:71:b0: 93:37:21:e8:04:c6:8e:98:02:20:ba:e1:52:20:0a: 46:93:88:41:47:ad:c6:3d:ea:88:66:9c:2e:13:32: 8c:40:99:c8:cb:8e:47:80:c2:e0:5c:9c:e7:3e:28: 69:b2:bd:a4:20:89:b6:c4:fb:93:4b:83:7f:3e:99: f1:9e:cc:f5:3c:ab:57:96:77:c7:49:ee:1b:d2:59: 3a:19:de:78:14:a0:29:c3:d1:e7:4c:d3:73:ff:50: ae:5a:6b:f0:08:c9:42:04:f4:c5:ca:99:fa:9f:e4: 00:de:c2:37:aa:ae:d6:b6:15:64:3d:af:cd:f8:0d: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AB:63:6F:6A:2C:65:4D:C8:6F:7D:33:EB:42:35:5E:C9:14:AE:CD X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:29:59:82:79:7c:7c:f8:06:3e:25:74:5d:55:bb:bd:d8:f7: c5:7d:ea:b9:76:98:f1:7e:6a:f7:ea:d7:d4:af:05:f2:14:fc: 25:c2:3c:61:ec:68:9f:05:68:15:29:92:e7:ef:97:32:f4:41: c6:66:c7:af:85:c0:04:2a:21:b0:12:18:94:22:3a:d4:10:3f: 2f:22:f6:ac:aa:98:56:5c:78:e8:e7:2c:c9:0b:39:3c:d5:b4: 24:e8:f5:67:0f:04:6d:12:74:8a:71:0d:0c:bb:79:16:f7:c5: 6e:cb:20:e7:c4:91:7e:55:f6:0f:1c:e7:a6:43:f6:69:68:71: 0c:a4:23:07:d5:7d:4d:76:5c:c7:bc:19:07:fe:e0:a4:70:ab: 6b:3f:bf:61:d5:ad:6a:9e:4b:57:99:d7:53:5c:6a:6e:b9:62: ba:95:24:2b:3b:2a:06:e8:76:53:f3:7f:47:bb:56:ee:08:09: c6:64:67:f9:7d:4b:27:8b:82:2b:da:89:dc:ff:c4:d3:b1:1a: aa:4e:b7:f8:7c:f6:b7:a5:06:75:6f:aa:bf:8d:f7:64:a7:c3: a2:ca:49:1b:84:27:8f:58:4f:c6:63:aa:19:34:8b:db:6e:47: cf:de:a5:e7:39:46:57:67:35:3e:8c:db:65:6f:90:be:87:2f: 2b:c4:6c:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjUwMzI5MDAzOTExWhcNMjUwNDA1MDAzOTExWjAYMRYwFAYD VQQDEw02N2U3NDEyZi0xOWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rbtn2yhKXUfg9B5h10hgrWhKARvqJbSRN7Mzd19CD3U4tPO8j4EUdTP3sMm i8ebM1sHhQZ77e8p7Mohov6OKSjRPnceHJfKAVlvhaBXdgpLGDK3sVAmSJ5+cz0g IMko6pVXhuE2e9vNVsQzlPTgzqFCZyEySZtFdkRV+OPY1ywJg+B4cbCTNyHoBMaO mAIguuFSIApGk4hBR63GPeqIZpwuEzKMQJnIy45HgMLgXJznPihpsr2kIIm2xPuT S4N/Ppnxnsz1PKtXlnfHSe4b0lk6Gd54FKApw9HnTNNz/1CuWmvwCMlCBPTFypn6 n+QA3sI3qq7WthVkPa/N+A31CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+rY29q LGVNyG99M+tCNV7JFK7NMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQKVmCeXx8+AY+JXRdVbu92PfFfeq5dpjxfmr36tfUrwXyFPwlwjxh 7GifBWgVKZLn75cy9EHGZsevhcAEKiGwEhiUIjrUED8vIvasqphWXHjo5yzJCzk8 1bQk6PVnDwRtEnSKcQ0Mu3kW98VuyyDnxJF+VfYPHOemQ/ZpaHEMpCMH1X1NdlzH vBkH/uCkcKtrP79h1a1qnktXmddTXGpuuWK6lSQrOyoG6HZT839Hu1buCAnGZGf5 fUsni4Ir2onc/8TTsRqqTrf4fPa3pQZ1b6q/jfdkp8OiykkbhCePWE/GY6oZNIvb bkfP3qXnOUZXZzU+jNtlb5C+hy8rxGzm -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:56 2025 by rpki-client