$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: zyFaHPtnpYfjjFfa6CpiAwiMiMb9MCu1ulCX5fgscH0= Subject key identifier: 7B:40:89:71:05:64:C2:9C:F1:36:E1:6C:E7:01:80:94:9F:23:8F:90 Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 0156 Signing time: Fri 11 Apr 2025 03:23:49 +0000 Manifest this update: Fri 11 Apr 2025 03:23:48 +0000 Manifest next update: Fri 18 Apr 2025 03:23:48 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: yu5RgAWwQ1dbbPRN648ZeYKbtHw1x4t172bFQzRnBKI=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /g02epL+NyCJaEeLF1U/HHteqWgxtq7I5NLpXCZSdQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 03:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: Apr 11 03:23:48 2025 GMT Not After : Apr 18 03:23:48 2025 GMT Subject: CN=67f88b44-3b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:ce:de:10:29:a8:bd:ea:dd:72:31:08:13: aa:ff:1c:ba:2e:19:7a:63:c3:4b:c8:38:12:7e:62: be:f4:1e:41:20:23:1b:4d:ec:76:ce:dc:41:2f:53: 25:d4:5e:24:dd:11:05:b6:c5:32:aa:07:a0:cf:58: 57:fe:d9:f8:7f:30:81:be:3c:e1:ac:57:63:a9:a7: 03:87:c4:a6:39:e3:4f:21:8d:35:62:89:ab:cf:26: 26:f6:7b:62:5f:e2:9d:11:3c:e5:54:fa:04:59:c7: 09:06:7f:0d:ce:49:88:bc:23:db:c1:1a:d5:c9:e6: 58:ca:c7:b4:55:5f:90:fe:9a:38:a3:5d:32:43:9f: 8b:53:9f:e0:50:48:35:5b:8f:2b:1e:a6:c6:8b:95: cb:74:00:ed:c8:c5:d8:f7:54:5b:a1:36:4c:6e:cc: 36:cd:1d:e2:64:5d:c4:d8:33:55:9f:7d:ab:38:e0: c4:3f:00:ee:8a:02:29:c8:58:bb:8a:7d:40:48:63: 70:dd:4b:08:42:0b:00:0f:81:5b:26:dc:44:cd:83: f2:45:84:8f:ca:7b:de:45:85:7c:f9:14:79:f8:24: c9:e9:89:1d:e8:c1:2f:5d:af:ca:7f:17:f3:bb:ae: f5:59:9c:4e:9b:dd:c8:df:69:f3:2e:94:b9:ec:db: 13:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:40:89:71:05:64:C2:9C:F1:36:E1:6C:E7:01:80:94:9F:23:8F:90 X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d6:c3:86:d1:60:3c:37:05:bf:23:ea:4b:38:2b:65:71:09: 84:49:de:ab:1a:c4:da:2d:39:d4:4d:e9:fe:f5:0e:ba:01:ed: 61:20:b4:b5:f0:40:73:a7:60:77:4b:5e:2a:22:fa:2a:8f:64: 1e:41:79:84:21:df:bc:08:a4:b5:91:b7:46:c0:15:9a:61:03: 83:71:82:3a:b7:70:d0:28:ea:d4:69:67:0a:57:9d:31:03:84: 96:5b:6a:29:49:fb:0f:33:7b:92:75:af:67:52:66:71:68:fc: fd:48:88:9f:a5:d2:57:b0:64:bf:56:43:da:42:19:3c:8e:a4: 05:d5:42:34:8a:cf:62:1b:c4:db:b8:57:cd:3c:d4:e0:19:08: 3d:02:f8:79:0c:f6:f3:36:c2:d4:19:be:a2:a4:fe:b9:5f:66: f2:d2:cb:bd:7b:48:10:ac:31:0a:a6:9d:cf:25:98:d3:03:52: 1c:ba:bf:f4:dd:21:48:79:91:4b:85:ff:34:d2:fe:05:5c:49: c8:75:64:81:89:c4:cf:17:30:1c:b3:5b:97:60:33:f6:56:30: 38:de:26:fc:49:b7:41:df:a6:2d:3b:51:47:68:93:2f:c7:e3: e6:0a:41:52:06:b2:c0:14:20:f4:64:80:70:30:88:aa:46:03: c1:1d:e1:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjUwNDExMDMyMzQ4WhcNMjUwNDE4MDMyMzQ4WjAYMRYwFAYD VQQDEw02N2Y4OGI0NC0zYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrHO3hApqL3q3XIxCBOq/xy6Lhl6Y8NLyDgSfmK+9B5BICMbTex2ztxBL1Ml 1F4k3REFtsUyqgegz1hX/tn4fzCBvjzhrFdjqacDh8SmOeNPIY01YomrzyYm9nti X+KdETzlVPoEWccJBn8NzkmIvCPbwRrVyeZYyse0VV+Q/po4o10yQ5+LU5/gUEg1 W48rHqbGi5XLdADtyMXY91RboTZMbsw2zR3iZF3E2DNVn32rOODEPwDuigIpyFi7 in1ASGNw3UsIQgsAD4FbJtxEzYPyRYSPynveRYV8+RR5+CTJ6Ykd6MEvXa/Kfxfz u671WZxOm93I32nzLpS57NsTBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtAiXEF ZMKc8TbhbOcBgJSfI4+QMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb1sOG0WA8NwW/I+pLOCtlcQmESd6rGsTaLTnUTen+9Q66Ae1hILS1 8EBzp2B3S14qIvoqj2QeQXmEId+8CKS1kbdGwBWaYQODcYI6t3DQKOrUaWcKV50x A4SWW2opSfsPM3uSda9nUmZxaPz9SIifpdJXsGS/VkPaQhk8jqQF1UI0is9iG8Tb uFfNPNTgGQg9Avh5DPbzNsLUGb6ipP65X2by0su9e0gQrDEKpp3PJZjTA1Icur/0 3SFIeZFLhf800v4FXEnIdWSBicTPFzAcs1uXYDP2VjA43ib8SbdB36YtO1FHaJMv x+PmCkFSBrLAFCD0ZIBwMIiqRgPBHeFk -----END CERTIFICATE-----Generated at Sat Apr 12 17:45:28 2025 by rpki-client