$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: uvvP5rHs+0wuDxS6UTRnY4E3//jQeNEs8tVohTpypv0= Subject key identifier: ED:7D:5F:E7:00:CA:9E:74:2B:25:9A:40:D6:0E:CF:40:4D:D0:A9:98 Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 0796 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 0790 Signing time: Mon 14 Apr 2025 21:03:58 +0000 Manifest this update: Mon 14 Apr 2025 21:03:57 +0000 Manifest next update: Mon 21 Apr 2025 21:03:57 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: KEb/0OpytD8glPeMLMGVwBUhvA+1A4wPKUNo+TKNmWI=) 2: 5ABF5FB0026911EBB480261FC4F9AE02.roa (hash: f+tqP307alHmtL4Nv8/Sj5RxK8BZomyv0PqPMhlVuTE=) 3: 83B284AEB54F11EF8F5EE86FC4F9AE02.roa (hash: DfjAP4F+b7VdurvxdjrAlhP/yG1ojER19VQC4yTE15s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 21:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1942 (0x796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: Apr 14 21:03:57 2025 GMT Not After : Apr 21 21:03:57 2025 GMT Subject: CN=67fd783e-211a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:48:ad:f6:a1:dd:c8:3f:8d:bb:41:95:0f:2e: b5:8e:11:fa:93:bd:78:31:9c:db:4c:9d:77:ca:62: bc:90:52:4c:79:09:87:a6:cc:c0:6a:4a:c2:68:f4: 5b:b9:6d:7f:79:f5:81:64:91:85:0c:a9:ac:a1:ab: 7e:0c:01:73:50:0c:f0:72:93:74:5b:f8:4a:a4:17: d2:74:2a:f4:b1:6c:40:bb:b6:81:22:0a:a9:d6:d6: 9e:0d:03:bf:8e:51:57:1a:5b:a4:1d:26:32:99:15: db:11:d1:e4:5c:48:19:bc:39:b3:12:77:04:f4:27: ec:c0:47:ba:8a:6c:73:d0:86:a3:5b:2d:db:e9:d5: 10:05:40:91:af:87:ff:86:a9:40:cf:5c:5e:e6:e7: 2e:6e:75:9b:e0:f6:05:f7:c1:45:c8:04:51:9f:a1: 26:9e:e8:4d:3a:84:5e:7c:56:d2:03:f6:df:e1:38: cf:30:16:2c:d1:e9:80:2e:df:cf:54:4f:4f:be:b0: ed:0a:93:81:8a:a8:5a:48:43:39:aa:7a:a9:ea:3a: 5b:7f:53:30:99:6b:0d:b1:60:5f:6f:c6:ff:25:40: 68:d9:19:9a:5e:08:72:48:b8:ea:b6:0d:5a:2f:88: c4:2b:f7:e3:d6:61:b1:74:6d:bc:7d:2e:c9:03:ac: 7b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7D:5F:E7:00:CA:9E:74:2B:25:9A:40:D6:0E:CF:40:4D:D0:A9:98 X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:bb:1e:df:23:e3:55:d2:63:74:75:d2:60:32:65:cd:b6:88: cb:48:a2:1c:24:af:6a:d7:63:a5:f1:35:73:c4:19:05:1a:08: 9c:f7:1d:53:16:c7:db:b3:de:dc:66:ea:92:d7:92:80:05:ca: 94:13:8e:32:6d:1c:a1:39:06:7b:5c:96:f5:c4:26:1a:54:47: c4:b1:3a:ba:53:d3:2e:8f:1a:05:07:aa:aa:63:06:e2:d1:14: f3:59:1b:8b:c6:5b:9b:42:13:26:ed:ff:d4:7d:e1:2b:7b:e6: c6:fa:86:5c:c4:1d:ea:87:e0:5a:d6:30:de:f4:66:30:17:1d: ee:84:81:80:f3:f6:20:7a:5d:03:8a:3b:8c:f2:b3:a6:47:69: 08:c4:ab:de:4f:24:a5:a9:da:fe:29:71:5b:38:28:c2:ec:4e: 3e:0e:9f:21:81:4b:1e:77:93:3a:48:2e:b2:b5:57:e9:4f:14: f3:82:44:0a:f6:01:a3:c3:7c:3c:22:bb:e2:fa:7a:91:d8:8f: 4c:eb:d9:78:d1:71:f5:15:9a:6b:b8:7d:b9:b1:3b:81:80:e8: 0b:d1:da:36:7a:c8:e8:6e:ec:bf:f7:ff:ea:f4:ec:db:7f:d3: 55:9c:bc:3f:b7:e5:43:c9:b5:bb:70:74:31:f0:af:6f:92:6a: 36:d7:ca:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjUwNDE0MjEwMzU3WhcNMjUwNDIxMjEwMzU3WjAYMRYwFAYD VQQDEw02N2ZkNzgzZS0yMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kit9qHdyD+Nu0GVDy61jhH6k714MZzbTJ13ymK8kFJMeQmHpszAakrCaPRb uW1/efWBZJGFDKmsoat+DAFzUAzwcpN0W/hKpBfSdCr0sWxAu7aBIgqp1taeDQO/ jlFXGlukHSYymRXbEdHkXEgZvDmzEncE9CfswEe6imxz0IajWy3b6dUQBUCRr4f/ hqlAz1xe5ucubnWb4PYF98FFyARRn6EmnuhNOoRefFbSA/bf4TjPMBYs0emALt/P VE9PvrDtCpOBiqhaSEM5qnqp6jpbf1MwmWsNsWBfb8b/JUBo2RmaXghySLjqtg1a L4jEK/fj1mGxdG28fS7JA6x7VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO19X+cA yp50KyWaQNYOz0BN0KmYMB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeux7fI+NV0mN0ddJgMmXNtojLSKIcJK9q12Ol8TVzxBkFGgic9x1T Fsfbs97cZuqS15KABcqUE44ybRyhOQZ7XJb1xCYaVEfEsTq6U9MujxoFB6qqYwbi 0RTzWRuLxlubQhMm7f/UfeEre+bG+oZcxB3qh+Ba1jDe9GYwFx3uhIGA8/Ygel0D ijuM8rOmR2kIxKveTySlqdr+KXFbOCjC7E4+Dp8hgUsed5M6SC6ytVfpTxTzgkQK 9gGjw3w8Irvi+nqR2I9M69l40XH1FZpruH25sTuBgOgL0do2esjobuy/9//q9Ozb f9NVnLw/t+VDybW7cHQx8K9vkmo218pd -----END CERTIFICATE-----Generated at Tue Apr 15 19:04:21 2025 by rpki-client