$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json) Hash identifier: BQwFyi+swzD4gJqzXbhdH6TGr2zdAWXjWaBRky+eEdc= Subject key identifier: 83:8B:A5:3C:B8:98:9E:3C:21:79:A6:69:74:66:47:DD:AB:9F:41:9F Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft Manifest number: 9F Signing time: Thu 17 Apr 2025 05:06:14 +0000 Manifest this update: Thu 17 Apr 2025 05:06:13 +0000 Manifest next update: Thu 24 Apr 2025 05:06:13 +0000 Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: yIWXpiow8+l9Z/ibgwTnlXw5mBXBd11mG1bxhvcmbI4=) 2: D4F9C46CDCA511EF9BCCFC59C4F9AE02.roa (hash: OuazFSoXGYM6zJItNa4jp1IfJllzFolsgf+lOTd60NE=) 3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: YFXHXJDviBoPayGDb4OGE7GmrzEy24l7DcHuFpblUcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 05:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Validity Not Before: Apr 17 05:06:13 2025 GMT Not After : Apr 24 05:06:13 2025 GMT Subject: CN=68008c45-4aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:c5:bc:bd:3b:5d:4a:89:24:fb:6b:8f:57: 1f:44:84:96:ee:ab:88:9b:23:27:f4:4d:49:af:2b: 14:aa:72:44:47:64:a9:af:85:3c:2d:09:5a:51:ab: 15:7d:fd:ef:0b:fa:66:1a:49:cd:25:ee:99:f9:05: 8a:cb:15:3e:11:54:72:26:8a:98:80:9f:3f:29:dd: 69:a5:d6:58:44:46:49:07:cd:2f:be:ba:4b:73:06: 8f:08:c0:58:1f:d1:0d:73:54:ee:26:06:df:33:7d: 26:1c:c0:fb:fe:be:96:c0:4e:b6:56:f7:c7:b9:b0: 12:11:5f:ef:88:b6:88:fd:e5:c4:19:1a:19:82:57: f4:96:4e:fc:45:25:78:09:13:54:79:ec:3b:20:e8: 35:b5:35:b1:dd:33:dc:51:87:d7:31:e3:d9:a2:26: 95:44:94:39:56:41:58:e7:80:3e:b1:7b:b9:5e:2a: 5e:3b:a4:75:2b:82:9d:30:f5:f5:a2:6d:50:2b:e1: 32:57:e3:a9:c8:16:04:49:a9:b0:e1:0a:aa:df:f5: 88:68:0c:98:ad:e2:2b:1e:79:16:e0:2e:a3:3e:9d: 4d:a8:40:9f:25:31:e9:66:ee:03:5b:e2:81:48:4c: 5f:ab:68:e8:89:9e:fb:aa:23:72:80:b7:95:fa:14: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8B:A5:3C:B8:98:9E:3C:21:79:A6:69:74:66:47:DD:AB:9F:41:9F X509v3 Authority Key Identifier: keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2f:06:e9:a3:a5:c3:53:09:dc:78:1e:44:24:17:f7:d6:14: 8f:32:4f:87:2b:fb:b4:bd:a1:31:58:37:2c:44:db:ad:a2:1c: d2:42:fe:7f:33:95:00:f1:cd:29:cd:81:32:11:9a:ca:ea:f8: 8d:1d:bd:cc:00:9c:c4:39:8a:92:05:fc:53:19:54:fd:99:84: 90:60:a1:19:68:ee:a6:95:80:a6:a4:6c:27:90:a4:1d:ab:eb: 27:81:3e:b1:9d:97:90:01:0c:97:d4:61:9f:5b:20:30:31:53: b8:ea:5d:f8:c8:f2:61:35:5f:22:91:d1:37:53:bb:fe:bd:f9: bc:39:e5:74:01:16:df:3b:aa:a2:8e:9d:05:4d:6b:85:8c:16: 6a:12:21:7c:3c:83:85:b5:ef:0d:2f:a3:45:8c:06:16:d3:86: 1a:4b:ce:7f:fa:7a:fe:c9:08:c5:81:2b:88:cf:8a:2d:ce:34: 1a:e9:60:87:db:46:11:a8:80:d7:a0:2c:ff:1f:5d:a8:36:26: a8:cc:d9:fc:06:3e:c5:83:76:1d:08:10:4d:1f:48:2b:83:46: 3c:98:a0:3e:c0:ea:f0:24:af:63:b2:0c:c6:ed:c1:da:3f:bf: a9:83:4e:3b:7f:67:08:00:13:3b:ab:37:4e:4d:f2:8d:4f:13: 61:18:95:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEZFQUJBRDkyMzVBRUYxNzAyM0NEQ0ZCMTYxOTAyNkYz Q0VEQjJDN0YwHhcNMjUwNDE3MDUwNjEzWhcNMjUwNDI0MDUwNjEzWjAYMRYwFAYD VQQDEw02ODAwOGM0NS00YWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE3FvL07XUqJJPtrj1cfRISW7quImyMn9E1JrysUqnJER2Spr4U8LQlaUasV ff3vC/pmGknNJe6Z+QWKyxU+EVRyJoqYgJ8/Kd1ppdZYREZJB80vvrpLcwaPCMBY H9ENc1TuJgbfM30mHMD7/r6WwE62VvfHubASEV/viLaI/eXEGRoZglf0lk78RSV4 CRNUeew7IOg1tTWx3TPcUYfXMePZoiaVRJQ5VkFY54A+sXu5XipeO6R1K4KdMPX1 om1QK+EyV+OpyBYESamw4Qqq3/WIaAyYreIrHnkW4C6jPp1NqECfJTHpZu4DW+KB SExfq2joiZ77qiNygLeV+hTSFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOLpTy4 mJ48IXmmaXRmR92rn0GfMB8GA1UdIwQYMBaAFP6rrZI1rvFwI83PsWGQJvPO2yx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy85N0RGN0ExMjMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThYQWp6Yy14WVpBbTg4N2JM SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThY QWp6Yy14WVpBbTg4N2JMSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7Lwbpo6XDUwnceB5EJBf31hSPMk+HK/u0vaExWDcsRNutohzSQv5/ M5UA8c0pzYEyEZrK6viNHb3MAJzEOYqSBfxTGVT9mYSQYKEZaO6mlYCmpGwnkKQd q+sngT6xnZeQAQyX1GGfWyAwMVO46l34yPJhNV8ikdE3U7v+vfm8OeV0ARbfO6qi jp0FTWuFjBZqEiF8PIOFte8NL6NFjAYW04YaS85/+nr+yQjFgSuIz4otzjQa6WCH 20YRqIDXoCz/H12oNiaozNn8Bj7Fg3YdCBBNH0grg0Y8mKA+wOrwJK9jsgzG7cHa P7+pg047f2cIABM7qzdOTfKNTxNhGJVg -----END CERTIFICATE-----Generated at Sat Apr 19 05:54:33 2025 by rpki-client