$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft File: 9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json) Hash identifier: f0mgDPfJqmoKXb5vQUmmt09DsSbauHQ6siE1QLtMqdQ= Subject key identifier: 9C:0F:44:3F:82:A5:42:85:77:9E:78:3E:4E:15:51:87:A6:51:2F:81 Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA Certificate issuer: /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Certificate serial: 044A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft Manifest number: 0444 Signing time: Sat 05 Apr 2025 00:21:04 +0000 Manifest this update: Sat 05 Apr 2025 00:21:03 +0000 Manifest next update: Sat 12 Apr 2025 00:21:03 +0000 Files and hashes: 1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: PWEHOc+6cHGeIn4t+qmOE2/tnuGw49Qp3WclOs87vIs=) 2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: OH+ilqdv9s3kTRrQEcIweA5ha/9ZRdWs4Wko3puaZH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1098 (0x44a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D16D Validity Not Before: Apr 5 00:21:03 2025 GMT Not After : Apr 12 00:21:03 2025 GMT Subject: CN=67f0776f-0c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:f6:f0:f5:09:f9:d9:4a:ec:71:4f:07:8d: 6b:12:91:d2:96:58:24:69:32:98:b4:61:52:4b:85: d9:72:8b:46:55:2c:23:a7:db:7b:e1:65:fc:87:0a: 50:62:e6:5f:94:92:c3:79:b2:99:bf:ff:b6:0f:1d: fc:3d:2f:0a:03:ac:e9:ca:34:5e:8e:26:85:e9:d2: 7b:01:7d:c6:02:f5:3c:90:ef:84:fe:4c:38:f0:b1: 7d:a9:ea:01:ee:3b:a0:8a:ea:db:89:65:19:6f:fa: 9b:7e:19:68:68:bb:6b:bc:97:bd:47:19:2a:b2:17: 18:fe:83:89:9b:0c:5b:d8:bb:7f:ab:fa:e5:e4:48: 9d:7d:78:a3:b0:34:29:79:26:ce:1a:62:f5:33:8e: 94:1d:15:29:ca:dc:e3:9e:72:47:34:6e:36:42:38: 0b:5f:98:00:d4:42:6e:f5:8b:2d:1f:1a:76:57:14: cf:78:6f:5a:05:7b:e4:ca:6e:8a:18:d8:9e:3a:c4: 5c:35:78:1c:c9:ee:49:41:7a:5c:6f:7a:7c:2f:10: 4e:1f:b9:fd:83:2f:fc:a2:ee:f4:da:78:e6:c9:b1: 40:ba:11:7b:10:28:2d:ed:b0:0a:99:f0:1c:e1:8d: cb:70:93:6d:4d:62:fd:4c:f7:1d:28:0b:4e:11:4f: 6c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0F:44:3F:82:A5:42:85:77:9E:78:3E:4E:15:51:87:A6:51:2F:81 X509v3 Authority Key Identifier: keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:a3:b4:f3:12:09:44:da:f3:63:8c:5f:88:26:ff:4b:81:9a: f7:eb:26:ab:d3:06:8c:ea:55:09:99:f9:d2:a6:86:af:31:03: 70:b7:59:53:f7:bb:bb:25:18:cd:1a:e9:d8:71:ce:bf:86:ae: 28:f9:a0:a1:06:da:24:41:1a:fa:98:af:63:51:23:10:e6:d5: 90:32:bf:86:a1:54:e1:ad:e4:cf:d7:e8:4a:23:b8:42:19:91: 7f:43:09:ea:ad:df:ce:79:ce:6f:13:02:83:5d:d0:e4:3a:9b: 71:e3:11:cf:3f:2b:b7:af:70:8e:28:02:a3:f4:30:ba:74:ff: e8:86:c4:49:49:b6:34:62:57:df:94:0b:aa:e0:75:6f:f7:96: a6:41:f1:36:96:6f:40:a2:a9:a2:c9:dd:c3:60:92:0d:22:91: 39:48:34:ff:60:2e:6d:8f:c4:8c:28:d2:b6:5a:51:b3:bb:98: 2a:3b:81:2e:a7:02:e2:1b:c8:56:d0:f2:6b:0f:23:63:dc:a3: b4:b9:4f:63:7b:7b:5b:51:2d:54:37:60:c9:67:f2:d5:46:43: 86:04:5f:05:38:b6:04:23:e9:e2:55:0c:76:1b:3a:46:f1:cc: d3:b4:61:7d:ee:12:7f:fe:51:a4:b9:e0:94:61:55:8d:13:b0: db:f1:17:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxNkQxMTAvBgNVBAUTKEY1QzFFNzFGQkIxQTQxRDc5ODBCRTI1OEQ5N0M0ODcz OUFBRjgyQ0EwHhcNMjUwNDA1MDAyMTAzWhcNMjUwNDEyMDAyMTAzWjAYMRYwFAYD VQQDEw02N2YwNzc2Zi0wYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJX28PUJ+dlK7HFPB41rEpHSllgkaTKYtGFSS4XZcotGVSwjp9t74WX8hwpQ YuZflJLDebKZv/+2Dx38PS8KA6zpyjRejiaF6dJ7AX3GAvU8kO+E/kw48LF9qeoB 7jugiurbiWUZb/qbfhloaLtrvJe9RxkqshcY/oOJmwxb2Lt/q/rl5EidfXijsDQp eSbOGmL1M46UHRUpytzjnnJHNG42QjgLX5gA1EJu9YstHxp2VxTPeG9aBXvkym6K GNieOsRcNXgcye5JQXpcb3p8LxBOH7n9gy/8ou702njmybFAuhF7ECgt7bAKmfAc 4Y3LcJNtTWL9TPcdKAtOEU9sCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwPRD+C pUKFd554Pk4VUYemUS+BMB8GA1UdIwQYMBaAFPXB5x+7GkHXmAviWNl8SHOar4LK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDE2RC9GMDQyMDdBNDRG MDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFkZVlDLUpZMlh4SWM1cXZn c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljSG5IN3NhUWRlWUMtSlkyWHhJYzVxdmdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDE2RC9GMDQyMDdBNDRGMDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFk ZVlDLUpZMlh4SWM1cXZnc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBho7TzEglE2vNjjF+IJv9LgZr36yar0waM6lUJmfnSpoavMQNwt1lT 97u7JRjNGunYcc6/hq4o+aChBtokQRr6mK9jUSMQ5tWQMr+GoVThreTP1+hKI7hC GZF/Qwnqrd/Oec5vEwKDXdDkOptx4xHPPyu3r3COKAKj9DC6dP/ohsRJSbY0Ylff lAuq4HVv95amQfE2lm9Aoqmiyd3DYJINIpE5SDT/YC5tj8SMKNK2WlGzu5gqO4Eu pwLiG8hW0PJrDyNj3KO0uU9je3tbUS1UN2DJZ/LVRkOGBF8FOLYEI+niVQx2GzpG 8czTtGF97hJ//lGkueCUYVWNE7Db8RdK -----END CERTIFICATE-----Generated at Sat Apr 5 16:23:35 2025 by rpki-client