$ rpki-client -vvf rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft File: v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft (raw, json) Hash identifier: A6jQNvjZxg2hFbG4gqo09NorP4+GKjVeQxWtsirLubQ= Subject key identifier: 15:53:BC:F9:50:A4:D6:F6:3B:C4:31:C2:10:E5:CE:00:39:2C:C2:CF Authority key identifier: BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF Certificate issuer: /CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Certificate serial: 34D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft Manifest number: 34A3 Signing time: Sat 12 Apr 2025 14:15:54 +0000 Manifest this update: Sat 12 Apr 2025 14:15:53 +0000 Manifest next update: Sat 19 Apr 2025 14:15:53 +0000 Files and hashes: 1: v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl (hash: 3mpdF52VwqPqiuE15ldnMhotmYVP68aPxgPOLLZpqq8=) 2: 13773D180C8111EB9BD25070C4F9AE02.roa (hash: EcHgJTBJZVSZcmyoGTsJf6lDzdXZarLLw4Yz9Tt75wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 14:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13526 (0x34d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91401C4, serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Validity Not Before: Apr 12 14:15:53 2025 GMT Not After : Apr 19 14:15:53 2025 GMT Subject: CN=67fa7599-60a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:84:82:45:68:96:da:e9:70:e6:bb:1f:a3: a6:54:cb:16:50:19:5d:25:05:c0:b8:a8:56:2e:d7: ac:01:34:d6:f3:9e:03:52:87:82:05:4b:80:9b:52: 37:a0:b2:8d:8c:59:a0:45:bb:8c:fa:61:bf:ed:c4: 21:25:7d:20:86:5c:63:3a:c6:79:40:ed:89:ef:74: 0a:5d:1c:fc:67:29:cf:5b:9c:57:9a:b8:2a:b0:cf: c0:5f:fd:59:ce:6b:20:79:b0:5a:24:14:7d:cd:10: bc:b0:5d:f0:ba:f1:04:6c:05:db:42:cc:64:00:37: b4:41:01:bb:1f:85:8f:96:5d:0f:d6:ab:e8:b8:7b: c6:2a:79:89:70:b2:c9:ba:f6:20:c4:b8:0e:0e:1d: 6e:30:84:34:bb:b5:43:86:a1:74:10:80:b9:4c:1b: 21:a1:f4:b4:a7:a8:91:ed:c6:97:38:3a:56:15:cc: e4:09:d7:65:42:5a:68:c9:f0:a1:04:7a:db:ef:bf: d0:8a:82:4c:db:99:08:07:70:4b:ad:9c:aa:91:94: f9:ec:56:6a:07:26:90:14:f5:af:fd:c8:91:0b:3e: 68:c0:d0:05:a8:27:17:60:8a:bb:be:d1:d7:6a:3f: 91:6b:cf:99:9d:86:cf:7f:41:7d:39:3c:f3:e6:c6: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:53:BC:F9:50:A4:D6:F6:3B:C4:31:C2:10:E5:CE:00:39:2C:C2:CF X509v3 Authority Key Identifier: keyid:BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:39:4b:8a:19:86:7e:9d:66:2d:28:27:26:58:f6:fd:f4:9b: 87:b1:25:79:bb:63:bd:ec:fd:01:18:6e:c8:54:c7:1d:1a:9a: 39:48:7a:08:98:0d:ea:a3:e5:d2:32:b2:a6:79:4d:7e:2b:47: 4a:a3:15:3a:07:fb:12:2b:28:e1:0f:96:1d:99:9a:2a:5c:c6: 9d:15:b0:0f:6b:c7:f5:ea:f0:ca:78:3c:25:b2:97:38:14:ac: 53:7d:11:63:2b:9f:fc:fe:cc:69:d5:ff:69:c6:9c:55:55:76: 49:9b:77:07:b4:c8:b9:8f:62:36:85:01:88:b0:60:ca:6a:a1: c7:46:1d:ee:0d:ef:ea:f9:05:1c:29:4b:58:05:78:3f:c0:fb: ca:6b:9a:fc:6f:3c:2f:ef:04:c4:88:23:41:6b:39:50:dc:ec: 35:d7:80:bd:aa:fe:8d:a6:e4:dd:73:0d:b2:f8:70:79:ef:5b: 34:fb:c8:00:3d:30:a9:cb:9c:77:94:2b:31:67:b3:18:a2:f0: b4:8d:da:ac:72:22:98:51:47:f9:de:1e:94:8d:02:0b:c6:4d: d6:f8:94:9a:fc:b4:b4:56:0a:94:0c:5a:fa:8d:e9:5a:5a:db: 23:49:1d:7d:e9:72:50:ae:77:d2:16:a9:6e:51:67:e2:b4:06: 76:16:e5:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAxQzQxMTAvBgNVBAUTKEJGN0JDQUYxOTA5QzEwQkNGRUEwRDhFN0Q0NUQ4MjU0 RjI2OUM2QkYwHhcNMjUwNDEyMTQxNTUzWhcNMjUwNDE5MTQxNTUzWjAYMRYwFAYD VQQDEw02N2ZhNzU5OS02MGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBuEgkVoltrpcOa7H6OmVMsWUBldJQXAuKhWLtesATTW854DUoeCBUuAm1I3 oLKNjFmgRbuM+mG/7cQhJX0ghlxjOsZ5QO2J73QKXRz8ZynPW5xXmrgqsM/AX/1Z zmsgebBaJBR9zRC8sF3wuvEEbAXbQsxkADe0QQG7H4WPll0P1qvouHvGKnmJcLLJ uvYgxLgODh1uMIQ0u7VDhqF0EIC5TBshofS0p6iR7caXODpWFczkCddlQlpoyfCh BHrb77/QioJM25kIB3BLrZyqkZT57FZqByaQFPWv/ciRCz5owNAFqCcXYIq7vtHX aj+Ra8+ZnYbPf0F9OTzz5sb+7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVTvPlQ pNb2O8QxwhDlzgA5LMLPMB8GA1UdIwQYMBaAFL97yvGQnBC8/qDY59RdglTyaca/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDFDNC8yQjJCM0M5RTFE NjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VMei1vTmpuMUYyQ1ZQSnB4 cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Yzdks4WkNjRUx6LW9Oam4xRjJDVlBKcHhyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDFDNC8yQjJCM0M5RTFENjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VM ei1vTmpuMUYyQ1ZQSnB4cjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjOUuKGYZ+nWYtKCcmWPb99JuHsSV5u2O97P0BGG7IVMcdGpo5SHoI mA3qo+XSMrKmeU1+K0dKoxU6B/sSKyjhD5YdmZoqXMadFbAPa8f16vDKeDwlspc4 FKxTfRFjK5/8/sxp1f9pxpxVVXZJm3cHtMi5j2I2hQGIsGDKaqHHRh3uDe/q+QUc KUtYBXg/wPvKa5r8bzwv7wTEiCNBazlQ3Ow114C9qv6NpuTdcw2y+HB571s0+8gA PTCpy5x3lCsxZ7MYovC0jdqsciKYUUf53h6UjQILxk3W+JSa/LS0VgqUDFr6jela WtsjSR196XJQrnfSFqluUWfitAZ2FuV+ -----END CERTIFICATE-----Generated at Sun Apr 13 01:24:37 2025 by rpki-client