$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json) Hash identifier: 1ayh+YtFjbAVq6cV7Y5oCGge69F2a/ypLtf8NlFGTT0= Subject key identifier: 5D:25:F4:94:1B:C5:6D:D0:53:D1:62:DB:F4:A5:80:17:E2:8C:65:4E Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1C51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft Manifest number: 1C36 Signing time: Fri 04 Apr 2025 16:15:23 +0000 Manifest this update: Fri 04 Apr 2025 16:15:22 +0000 Manifest next update: Fri 11 Apr 2025 16:15:22 +0000 Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: pUzQshmlCx+tN+QkYOC9pjjnMfLIXpnMofDkuBkuvrE=) 2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: KpfW5v22QQ8knW5hcfiQgbsPMLlFz8zLOAmQh0gN2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7249 (0x1c51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519 Validity Not Before: Apr 4 16:15:22 2025 GMT Not After : Apr 11 16:15:22 2025 GMT Subject: CN=67f0059b-66a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3e:4b:b6:87:84:8d:11:3d:97:ce:d3:ef:9b: 53:06:35:29:d0:16:fe:40:2f:06:c8:ab:4c:bb:db: 55:7c:ce:ac:21:f6:f1:9d:22:04:3e:2f:94:79:d4: f1:bf:8b:3d:f8:70:fc:6b:0a:87:4c:d5:b0:c9:ac: 83:a4:70:fa:8b:0c:5b:97:40:5b:dc:35:af:9b:de: 26:a6:6c:b2:97:bd:0b:b2:00:1c:85:34:cc:82:52: 55:6d:63:c1:c2:82:0a:d9:ef:74:bc:f4:7b:41:49: 5b:a9:e4:94:73:2b:13:57:4d:32:7a:f7:cf:41:f7: 2c:95:36:1d:d8:5a:94:b4:55:98:58:82:10:18:50: 18:91:e2:a9:43:4e:5d:ed:05:ca:e7:cf:42:75:ac: c0:a2:3e:62:8b:b9:49:fa:23:7f:4d:59:7e:43:ce: 5f:67:c0:31:d4:5e:f5:1b:1d:31:16:0e:20:10:7e: 07:a0:4c:32:f9:66:8f:f6:02:9b:dd:9b:d9:1e:3c: ed:a3:f4:4f:e6:c4:2d:9e:53:39:26:f5:c3:ce:ce: da:62:1c:6d:4f:e3:94:ef:64:f0:b8:e6:7c:3c:5e: 54:31:d3:61:ba:53:b8:7d:87:d6:00:6f:fa:de:dd: d1:b0:92:d9:7a:4d:4c:02:b5:62:8d:c5:9f:d6:8a: 5c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:25:F4:94:1B:C5:6D:D0:53:D1:62:DB:F4:A5:80:17:E2:8C:65:4E X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:2b:c7:2d:d3:24:02:57:b2:21:ef:ef:68:63:26:4e:5c:98: b2:0a:75:1c:53:94:02:82:0a:bb:07:ec:f8:7f:c3:74:0e:be: d5:3a:cd:53:bf:9b:dc:20:c1:fa:47:b3:80:f9:10:bb:df:9b: dc:b5:5a:3d:98:07:60:c3:6f:a9:c9:ad:a2:29:fa:d3:50:ab: c6:2d:27:93:e1:48:0b:2c:11:48:3d:78:93:3f:df:80:59:a8: bd:2f:fa:b3:fa:4a:00:b1:23:3a:5b:06:9a:bd:23:0a:ab:78: a1:51:36:5b:18:2f:6a:e2:75:86:f1:f5:c3:41:7b:57:35:12: 05:d4:24:b6:d3:5e:b1:5e:8b:7d:45:fe:a9:5c:d1:63:09:7e: d3:a2:24:27:90:2d:c7:03:44:ff:7e:78:c7:3f:13:a4:6b:46: 26:47:6e:df:1d:4f:c7:d2:eb:53:75:84:cf:d2:80:fa:70:ce: 73:23:00:2d:4f:d0:d4:71:69:f7:ce:b5:c8:13:39:c7:a5:5b: 2a:74:a7:b2:2a:2f:41:0d:2a:13:03:02:88:f4:11:ac:01:d0: 1c:70:39:ba:ad:27:ff:82:94:41:9f:de:d4:db:7e:8a:3a:e3: 46:fc:a3:aa:90:73:21:c8:86:bc:7c:0b:90:b9:9c:94:86:4e: c8:f7:78:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjUwNDA0MTYxNTIyWhcNMjUwNDExMTYxNTIyWjAYMRYwFAYD VQQDEw02N2YwMDU5Yi02NmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlD5LtoeEjRE9l87T75tTBjUp0Bb+QC8GyKtMu9tVfM6sIfbxnSIEPi+UedTx v4s9+HD8awqHTNWwyayDpHD6iwxbl0Bb3DWvm94mpmyyl70LsgAchTTMglJVbWPB woIK2e90vPR7QUlbqeSUcysTV00yevfPQfcslTYd2FqUtFWYWIIQGFAYkeKpQ05d 7QXK589CdazAoj5ii7lJ+iN/TVl+Q85fZ8Ax1F71Gx0xFg4gEH4HoEwy+WaP9gKb 3ZvZHjzto/RP5sQtnlM5JvXDzs7aYhxtT+OU72TwuOZ8PF5UMdNhulO4fYfWAG/6 3t3RsJLZek1MArVijcWf1opcUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0l9JQb xW3QU9Fi2/SlgBfijGVOMB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTK8ct0yQCV7Ih7+9oYyZOXJiyCnUcU5QCggq7B+z4f8N0Dr7VOs1T v5vcIMH6R7OA+RC735vctVo9mAdgw2+pya2iKfrTUKvGLSeT4UgLLBFIPXiTP9+A Wai9L/qz+koAsSM6WwaavSMKq3ihUTZbGC9q4nWG8fXDQXtXNRIF1CS2016xXot9 Rf6pXNFjCX7ToiQnkC3HA0T/fnjHPxOka0YmR27fHU/H0utTdYTP0oD6cM5zIwAt T9DUcWn3zrXIEznHpVsqdKeyKi9BDSoTAwKI9BGsAdAccDm6rSf/gpRBn97U236K OuNG/KOqkHMhyIa8fAuQuZyUhk7I93gP -----END CERTIFICATE-----Generated at Sat Apr 5 22:15:13 2025 by rpki-client