$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json) Hash identifier: ytB4zMIR3qBa3ErjRyCpR1vdPZUE6eVcJr3knCUTeas= Subject key identifier: 14:89:2B:DA:76:39:25:1E:5E:F9:21:2D:92:3C:B1:BD:43:67:D0:3B Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 34D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft Manifest number: 34AB Signing time: Fri 04 Apr 2025 15:01:13 +0000 Manifest this update: Fri 04 Apr 2025 15:01:13 +0000 Manifest next update: Fri 11 Apr 2025 15:01:13 +0000 Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: 3G6l628mp33b5Cs+9c/TSTbMx97rP1trpP4U3MdBcZI=) 2: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: GhXAuDsottF/BTuRuS6OoHwQzw9kjGM2I7psy27j7Nk=) 3: 931C5524175011EB8585CA60C4F9AE02.roa (hash: MDoU/JuIBzWyeNV1mWU+1cfbqy0SljZrseShx5ONDms=) 4: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: D7Yw1fFSNsmhzYYizrIWcgke3vd7oTvuVsShL3GgxW8=) 5: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: oHHg7bVGlcuVHigapoywJfWF7AaNUZbxOeF71G2cdao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13528 (0x34d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA Validity Not Before: Apr 4 15:01:13 2025 GMT Not After : Apr 11 15:01:13 2025 GMT Subject: CN=67eff439-8eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:97:ea:cb:64:41:c8:59:5d:b8:29:8a:60: 40:3e:bc:3c:21:56:8c:49:d5:e7:2e:6c:f6:ce:4a: 53:a4:39:d0:f2:ee:ce:af:83:c6:7d:e0:af:6c:d9: 1b:ee:e9:74:a2:86:51:15:3e:5a:3c:06:54:d0:b6: e8:a2:2e:3d:8e:e9:96:e4:74:69:d3:86:5c:31:16: 9a:33:8e:7d:7f:12:36:3e:bf:d7:08:76:9d:97:15: 26:e7:55:c3:14:75:71:09:46:ec:5f:39:d4:52:cc: a2:2f:2a:a2:c6:d2:db:9f:12:31:6f:53:73:45:1a: a2:42:71:7d:8e:e6:77:c8:21:d2:84:da:62:45:ee: b3:ed:15:c7:b4:75:f0:29:b3:2f:7c:20:6c:2d:df: 1f:b4:4c:c0:cd:ab:89:69:84:b7:cb:2f:dc:51:15: 09:e1:d2:1c:b2:bf:85:8e:89:42:71:62:48:43:a2: b2:31:c2:b3:85:d6:44:39:30:93:bb:b9:0f:b3:11: 65:ac:ce:a3:77:ec:b1:2e:2e:26:af:60:ec:d8:07: 57:49:19:68:81:a8:79:a9:ee:31:23:e8:08:09:32: cb:5f:14:07:e9:f4:01:bb:bd:a6:62:dc:71:bd:11: 4a:b3:56:e4:83:c4:76:a4:23:e4:3c:34:38:7d:6f: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:89:2B:DA:76:39:25:1E:5E:F9:21:2D:92:3C:B1:BD:43:67:D0:3B X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3a:28:60:cb:34:76:b6:aa:a6:6e:2f:23:41:af:9a:21:b9: e8:94:6e:c8:eb:12:71:71:37:00:b9:b8:36:3c:23:fd:8d:51: 4f:93:fd:08:83:60:d0:08:44:1a:28:f2:2c:ec:82:27:de:33: be:15:0b:a4:46:d6:60:7c:55:80:1d:d2:24:bf:7d:fc:f3:2d: 43:a8:f5:7f:5e:40:b5:52:79:b1:2e:f1:85:42:2d:db:74:ea: c1:69:96:38:8f:5d:e2:e1:65:a1:d6:74:b1:eb:6a:e9:56:80: 27:63:7c:3c:82:75:dc:67:65:da:3f:75:e9:8a:82:93:a6:80: 44:bb:a7:91:b1:76:2e:66:7a:b2:10:dd:b9:db:d6:e1:c1:d6: 18:2a:98:ca:e4:b4:a7:bd:94:26:ae:4c:be:1b:36:6c:b4:46: 98:e2:7b:9a:bb:6e:dd:d5:10:c4:36:e5:05:6a:d0:e5:f5:ea: 3b:c2:e1:b5:61:6d:76:6f:5d:6c:cd:ca:7a:53:67:16:18:a3: f2:1f:93:eb:2d:ca:79:1c:3a:05:ad:30:a4:e7:f4:58:4c:4b: 15:ae:27:13:5f:72:c5:d5:46:67:b2:14:5f:e1:66:a8:b3:21: f6:63:82:1c:43:c6:32:14:5b:0c:3b:25:fd:63:cf:97:b8:65: 55:15:36:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjUwNDA0MTUwMTEzWhcNMjUwNDExMTUwMTEzWjAYMRYwFAYD VQQDEw02N2VmZjQzOS04ZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+WX6stkQchZXbgpimBAPrw8IVaMSdXnLmz2zkpTpDnQ8u7Or4PGfeCvbNkb 7ul0ooZRFT5aPAZU0Lbooi49jumW5HRp04ZcMRaaM459fxI2Pr/XCHadlxUm51XD FHVxCUbsXznUUsyiLyqixtLbnxIxb1NzRRqiQnF9juZ3yCHShNpiRe6z7RXHtHXw KbMvfCBsLd8ftEzAzauJaYS3yy/cURUJ4dIcsr+FjolCcWJIQ6KyMcKzhdZEOTCT u7kPsxFlrM6jd+yxLi4mr2Ds2AdXSRlogah5qe4xI+gICTLLXxQH6fQBu72mYtxx vRFKs1bkg8R2pCPkPDQ4fW/uTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSJK9p2 OSUeXvkhLZI8sb1DZ9A7MB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkRCQS8wNzc4NTFBNDFEOUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3ph RVZtMW5zMWVPWlBwZ21WUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoOihgyzR2tqqmbi8jQa+aIbnolG7I6xJxcTcAubg2PCP9jVFPk/0I g2DQCEQaKPIs7IIn3jO+FQukRtZgfFWAHdIkv3388y1DqPV/XkC1UnmxLvGFQi3b dOrBaZY4j13i4WWh1nSx62rpVoAnY3w8gnXcZ2XaP3XpioKTpoBEu6eRsXYuZnqy EN2529bhwdYYKpjK5LSnvZQmrky+GzZstEaY4nuau27d1RDENuUFatDl9eo7wuG1 YW12b11szcp6U2cWGKPyH5PrLcp5HDoFrTCk5/RYTEsVricTX3LF1UZnshRf4Wao syH2Y4IcQ8YyFFsMOyX9Y8+XuGVVFTZm -----END CERTIFICATE-----Generated at Sat Apr 5 11:34:01 2025 by rpki-client