$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft File: tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json) Hash identifier: /H6We7W+glukwHIyJOB1iMy014go+nMrv/TkxgPjvDM= Subject key identifier: 31:0C:23:A6:88:A0:A9:FA:0F:A0:6D:54:09:45:1F:8D:5A:8B:1B:8F Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F Certificate issuer: /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft Manifest number: 8F Signing time: Wed 09 Apr 2025 05:17:45 +0000 Manifest this update: Wed 09 Apr 2025 05:17:44 +0000 Manifest next update: Wed 16 Apr 2025 05:17:44 +0000 Files and hashes: 1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: +Lox+guwZ4G+rQi8zTK/pqKN5sPhltZmZ/DeHu3qxG8=) 2: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: LrQNetWX/kWMMJz247yWUJ25L5V6W9haJZqldtz3j0Y=) 3: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: KlwexvDGFQzb3abuiXQPF43ztld2Pg+xYp8Fr2ZD2ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73 Validity Not Before: Apr 9 05:17:44 2025 GMT Not After : Apr 16 05:17:44 2025 GMT Subject: CN=67f602f8-537e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:81:b3:30:e5:10:0d:39:96:5b:ca:92:2e: 8c:76:81:40:22:54:fb:d8:8a:36:14:a2:fe:31:93: 24:ff:ae:0c:1e:69:23:1b:84:3c:94:b4:19:64:30: 7c:59:69:a3:4e:f0:ea:cc:b7:e2:e7:fa:ae:ab:2d: 9d:b7:f6:a1:09:16:1c:c8:0c:f9:55:ad:0e:df:b4: 32:4c:13:46:8b:0e:4a:f6:36:58:f6:2a:37:8f:46: b2:8a:9a:fa:f3:fc:39:0c:39:de:ed:16:89:e5:cb: 2d:84:fe:b5:38:ae:24:4a:5b:2c:29:61:34:24:57: 61:e6:ba:4c:cf:f5:bd:c1:dc:33:c3:3b:bd:87:87: 0e:ce:55:52:39:02:ee:08:3b:df:c0:96:21:2c:a0: c7:9f:c7:9b:57:0f:cb:0b:b6:03:06:70:77:2c:73: 5e:04:5c:33:9e:e8:58:7e:5e:52:06:3b:22:d0:69: f3:77:cb:d4:38:49:96:32:37:e6:7e:18:3f:dc:62: cf:92:e4:1f:e2:35:84:52:28:11:23:a2:1d:db:7b: 2d:4e:a0:9b:4a:29:16:a3:5a:de:59:26:b4:03:b3: dc:5f:ef:74:ae:0a:72:82:f4:12:a6:88:6c:7d:56: 39:3f:12:66:bd:b3:0e:55:2f:08:5d:ac:27:bd:da: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0C:23:A6:88:A0:A9:FA:0F:A0:6D:54:09:45:1F:8D:5A:8B:1B:8F X509v3 Authority Key Identifier: keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5d:be:a7:da:29:37:2f:0d:6a:c1:ee:04:a0:91:51:df:23: b8:9a:84:f5:1d:27:6f:01:67:d9:8f:1e:74:a2:cc:b9:7c:82: 15:c9:f9:3a:d2:7e:0f:47:a4:9d:4c:c2:01:79:cc:24:bf:21: af:30:22:e9:45:3f:41:a6:e7:92:65:d5:80:4a:db:e4:38:6f: 06:f8:b3:0c:76:f5:94:4e:f3:9e:5b:c7:42:af:9c:51:de:93: db:0f:2e:5d:5a:b7:17:a5:2b:ea:68:3c:13:8f:04:4d:6f:4d: b4:86:d8:c8:94:3f:1e:75:65:02:5e:86:36:97:a8:8c:68:1a: 77:d8:d3:2d:74:9b:1b:cf:e2:ff:41:21:01:51:28:16:ab:32: 93:d3:b4:86:8e:f5:60:f0:2f:fc:3f:ba:ef:31:2d:b4:5d:62: 0c:b0:00:c2:65:28:7a:8e:25:67:ae:96:67:6d:c1:8b:12:37: 81:3d:bb:3e:d3:88:17:fa:8d:bf:0d:29:c0:0c:eb:b5:2b:e8: d3:9c:43:44:3b:ee:11:4e:de:ba:69:ca:06:6f:70:35:15:94: ff:5c:2d:1c:62:1c:eb:c4:03:80:2f:66:5d:ee:49:b8:37:f5: 0a:47:f4:f8:5b:05:f6:b1:84:c5:fa:c1:c5:ae:51:b8:2c:e0: 95:df:72:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGNzMxMTAvBgNVBAUTKEI0M0M0RTNEMzJGOTVCNTA1NUQwNEZEQzAxRjg1MTk2 MzdDODlBNkYwHhcNMjUwNDA5MDUxNzQ0WhcNMjUwNDE2MDUxNzQ0WjAYMRYwFAYD VQQDEw02N2Y2MDJmOC01MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPKBszDlEA05llvKki6MdoFAIlT72Io2FKL+MZMk/64MHmkjG4Q8lLQZZDB8 WWmjTvDqzLfi5/quqy2dt/ahCRYcyAz5Va0O37QyTBNGiw5K9jZY9io3j0ayipr6 8/w5DDne7RaJ5csthP61OK4kSlssKWE0JFdh5rpMz/W9wdwzwzu9h4cOzlVSOQLu CDvfwJYhLKDHn8ebVw/LC7YDBnB3LHNeBFwznuhYfl5SBjsi0Gnzd8vUOEmWMjfm fhg/3GLPkuQf4jWEUigRI6Id23stTqCbSikWo1reWSa0A7PcX+90rgpygvQSpohs fVY5PxJmvbMOVS8IXawnvdrz0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEMI6aI oKn6D6BtVAlFH41aixuPMB8GA1UdIwQYMBaAFLQ8Tj0y+VtQVdBP3AH4UZY3yJpv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My82REYwRTEwODNE MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcxQlYwRV9jQWZoUmxqZklt bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3REeE9QVEw1VzFCVjBFX2NBZmhSbGpmSW1tOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUY3My82REYwRTEwODNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcx QlYwRV9jQWZoUmxqZkltbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjXb6n2ik3Lw1qwe4EoJFR3yO4moT1HSdvAWfZjx50osy5fIIVyfk6 0n4PR6SdTMIBecwkvyGvMCLpRT9BpueSZdWAStvkOG8G+LMMdvWUTvOeW8dCr5xR 3pPbDy5dWrcXpSvqaDwTjwRNb020htjIlD8edWUCXoY2l6iMaBp32NMtdJsbz+L/ QSEBUSgWqzKT07SGjvVg8C/8P7rvMS20XWIMsADCZSh6jiVnrpZnbcGLEjeBPbs+ 04gX+o2/DSnADOu1K+jTnENEO+4RTt66acoGb3A1FZT/XC0cYhzrxAOAL2Zd7km4 N/UKR/T4WwX2sYTF+sHFrlG4LOCV33Is -----END CERTIFICATE-----Generated at Thu Apr 10 23:58:26 2025 by rpki-client