$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: +hZyvroQULNawVgdPjOo9WHd7menfjY9FcqVROsHLes= Subject key identifier: 7D:E7:5D:6B:FA:C8:BD:73:BC:26:4D:F4:2B:E8:A0:76:09:DF:72:F2 Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0DFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0DF7 Signing time: Sun 06 Apr 2025 17:43:30 +0000 Manifest this update: Sun 06 Apr 2025 17:43:29 +0000 Manifest next update: Sun 13 Apr 2025 17:43:29 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: nQNK1ayvizm1FboKHcnEMeimsDR0SV8hGwQQp+wAapE=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: 041/+q2U6C3NS+0FvYUDZgs9ujhQmOXumHp5fUehTOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3583 (0xdff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71 Validity Not Before: Apr 6 17:43:29 2025 GMT Not After : Apr 13 17:43:29 2025 GMT Subject: CN=67f2bd41-3c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:77:9d:e8:33:84:8d:52:d4:78:c5:a4:4c: 8a:2b:97:93:45:95:48:b5:04:d2:97:94:56:76:b6: 8a:3b:34:c0:9d:07:ac:c3:ba:74:f9:29:fe:40:2f: 57:51:81:27:d6:0f:dd:ea:16:f1:89:8c:70:73:2f: d0:75:98:67:1b:8e:12:07:fe:68:a0:75:9d:3d:f1: 95:4c:20:39:da:32:1c:0e:87:39:cc:da:22:d3:c4: 19:16:3f:38:b6:6a:00:60:2c:5c:6f:ac:6e:1f:21: 77:ea:e2:a5:c0:3a:07:87:c4:f2:5e:bf:88:38:e6: bf:da:1b:c1:e5:ea:71:46:23:e6:21:d8:08:ca:8e: 76:5a:16:3a:39:8e:7b:c2:28:b8:22:d7:b6:6f:70: c6:a5:5a:ac:1c:7a:b9:b6:6e:d8:28:13:3d:76:53: 4d:00:3d:2f:4c:9f:06:39:a5:3e:90:3f:35:25:14: a6:86:2c:c4:24:69:15:24:6a:90:a0:09:f0:90:5f: 8a:01:ab:27:db:3d:b7:82:f0:c6:e5:6c:1f:6b:f8: 53:d5:24:b5:3e:9e:5d:eb:05:09:14:cf:7f:a0:82: 11:f5:cd:9c:c9:fb:97:fe:e2:07:a4:a0:04:42:20: 99:57:de:e7:64:91:ea:8a:83:d3:64:42:77:6b:2b: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E7:5D:6B:FA:C8:BD:73:BC:26:4D:F4:2B:E8:A0:76:09:DF:72:F2 X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:67:cf:05:73:be:c4:5c:7b:62:b6:0b:e4:7d:7b:51:f7:04: 01:1e:07:81:ec:d5:9e:bc:6b:c2:60:57:45:a5:0b:fe:ba:d6: b0:11:16:3d:b1:29:da:cf:25:0f:20:a4:51:d0:6f:9b:d5:1e: 22:b7:e6:7c:5c:ea:87:25:49:fd:2c:1e:ac:e0:c5:9f:0f:57: 69:02:d0:f6:ff:c1:fc:6e:7a:b5:cb:4a:d0:e6:9c:03:ae:60: 5c:46:85:4d:98:83:db:6d:1e:c1:0d:a2:1c:9f:e9:a2:f1:1f: 99:1a:a0:0e:1d:81:8c:c6:0a:a5:79:b3:43:2e:ce:57:5a:84: ab:e2:01:5e:47:6b:e4:2a:4d:0f:19:b1:29:4c:40:97:49:1a: 99:c4:8b:cd:d2:84:34:a1:3c:5d:f2:f3:da:c4:1f:b2:f4:95: 7c:1d:32:93:e6:dc:18:c8:03:14:1f:35:e9:9d:8c:04:ba:4e: 35:52:97:a0:9f:a6:40:49:92:ad:12:5d:5d:2f:d2:86:df:50: de:9b:00:20:4f:0b:3c:43:45:e1:8a:2a:b8:ad:fd:44:1b:1a: 10:d3:3a:3b:48:23:ad:a0:d4:2d:d4:b4:96:14:53:8b:60:60: 9f:41:d2:68:77:ab:f6:6b:d0:cd:7b:22:0b:0c:d6:8e:53:37: cb:5c:66:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUwNDA2MTc0MzI5WhcNMjUwNDEzMTc0MzI5WjAYMRYwFAYD VQQDEw02N2YyYmQ0MS0zYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEJ3negzhI1S1HjFpEyKK5eTRZVItQTSl5RWdraKOzTAnQesw7p0+Sn+QC9X UYEn1g/d6hbxiYxwcy/QdZhnG44SB/5ooHWdPfGVTCA52jIcDoc5zNoi08QZFj84 tmoAYCxcb6xuHyF36uKlwDoHh8TyXr+IOOa/2hvB5epxRiPmIdgIyo52WhY6OY57 wii4Ite2b3DGpVqsHHq5tm7YKBM9dlNNAD0vTJ8GOaU+kD81JRSmhizEJGkVJGqQ oAnwkF+KAasn2z23gvDG5Wwfa/hT1SS1Pp5d6wUJFM9/oIIR9c2cyfuX/uIHpKAE QiCZV97nZJHqioPTZEJ3ayvXSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3nXWv6 yL1zvCZN9CvooHYJ33LyMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiZ88Fc77EXHtitgvkfXtR9wQBHgeB7NWevGvCYFdFpQv+utawERY9 sSnazyUPIKRR0G+b1R4it+Z8XOqHJUn9LB6s4MWfD1dpAtD2/8H8bnq1y0rQ5pwD rmBcRoVNmIPbbR7BDaIcn+mi8R+ZGqAOHYGMxgqlebNDLs5XWoSr4gFeR2vkKk0P GbEpTECXSRqZxIvN0oQ0oTxd8vPaxB+y9JV8HTKT5twYyAMUHzXpnYwEuk41Upeg n6ZASZKtEl1dL9KG31DemwAgTws8Q0Xhiiq4rf1EGxoQ0zo7SCOtoNQt1LSWFFOL YGCfQdJod6v2a9DNeyILDNaOUzfLXGb/ -----END CERTIFICATE-----Generated at Sun Apr 6 21:09:21 2025 by rpki-client