$ rpki-client -vvf rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft File: InkscMmJR76K9PSj51Wu3nlZ0ng.mft (raw, json) Hash identifier: GY4jELFTtfqJpbJLkrnWdEqIX6RG32kmkxuMs3b/diU= Subject key identifier: 4F:F2:A6:1B:28:C2:4C:8F:6B:92:85:25:44:03:69:6F:7C:B1:B9:8F Authority key identifier: 22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78 Certificate issuer: /CN=A9166708/serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278 Certificate serial: 0F95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft Manifest number: 0F8E Signing time: Fri 04 Apr 2025 17:38:50 +0000 Manifest this update: Fri 04 Apr 2025 17:38:49 +0000 Manifest next update: Fri 11 Apr 2025 17:38:49 +0000 Files and hashes: 1: InkscMmJR76K9PSj51Wu3nlZ0ng.crl (hash: g/xv5f7i5bUkjDgVL7uafXmECoqQJ8hSIzf/5sUz9JU=) 2: C3417AA6593611E98E4C8C44C4F9AE02.roa (hash: ad8PcZtJmJ5GZCdh7kUo1sT5x0A8F5SEGBdl18QkFxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3989 (0xf95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166708 Validity Not Before: Apr 4 17:38:49 2025 GMT Not After : Apr 11 17:38:49 2025 GMT Subject: CN=67f01929-41df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:13:02:2e:f2:e7:23:41:40:67:74:ab:32: 55:25:b6:45:7f:87:9c:cf:c4:6d:6d:fd:13:d6:ce: 61:40:40:73:f1:48:61:b0:ca:fd:ec:32:df:a1:f2: 80:84:49:1d:e6:19:f5:f2:10:28:96:66:51:89:1b: 1a:83:07:32:cd:31:01:13:87:e1:d9:3e:48:2d:6d: f5:a3:94:87:ad:03:88:38:be:53:d6:da:90:98:4f: 51:8d:97:84:d3:b4:4b:75:81:9b:03:12:93:a5:00: 4c:1d:1d:30:ee:b3:b7:02:af:fb:c2:ff:b0:69:93: 1c:4f:10:d9:e8:73:e1:10:dd:c1:e3:55:5f:41:73: 46:01:0f:45:27:b1:33:e5:f6:ba:fd:0c:a0:20:a8: 0a:d6:4b:4e:b6:b4:2f:f4:9b:b0:b4:f5:eb:4e:9a: 22:d1:f3:88:cd:d6:a6:dc:03:b3:08:8b:40:53:f5: 5c:c3:17:3b:73:54:e0:f1:f4:55:0b:b1:7e:fd:1d: 18:7a:d3:2a:c8:fc:a5:19:4a:7b:be:03:59:59:ef: 4f:49:42:18:c8:95:a2:a4:75:35:66:83:99:ed:d1: 03:e4:d7:4c:bf:80:dc:7c:35:12:9d:6f:68:96:f2: 2f:03:f8:bb:9b:1f:5f:68:49:cb:75:58:0d:61:5f: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F2:A6:1B:28:C2:4C:8F:6B:92:85:25:44:03:69:6F:7C:B1:B9:8F X509v3 Authority Key Identifier: keyid:22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:55:7b:62:69:5d:a9:2b:35:3d:a4:be:9f:be:03:24:a2:81: c3:86:a0:ef:01:dc:7a:bc:78:bc:f7:55:28:1d:5a:36:f7:be: cf:eb:9e:32:bb:30:a7:88:9a:12:a8:12:ad:3a:50:81:b2:98: db:51:4e:b4:94:08:3b:cd:98:aa:7d:50:96:97:38:33:9b:09: 44:8e:78:69:4e:e3:42:b7:ad:46:ae:d5:de:4f:3a:ff:55:e5: fc:26:fd:1c:f2:c7:b9:9a:77:46:dc:c9:af:65:e0:1a:0e:9f: 5b:4e:75:28:7d:80:2c:a9:6c:1c:99:f3:bb:d5:e8:c2:78:83: f9:f9:d2:7b:de:a7:12:7f:3f:0f:e4:d2:e3:85:3b:43:3b:d6: 6f:f4:69:dd:9d:1e:97:bf:da:78:fc:52:de:87:f1:7e:11:b2: 90:1a:28:0a:86:26:b5:a2:81:cf:6c:cd:43:f7:30:49:fa:c8: 6c:3c:0e:ff:8e:81:81:0c:d6:a8:1a:cd:75:95:cd:19:16:bd: aa:bb:49:50:60:6c:5e:21:47:16:e6:f9:67:2b:ff:2b:90:37: 06:4e:5c:3b:61:c2:77:b4:94:81:8a:7a:b6:1b:eb:94:2e:ef: ff:0c:01:53:f2:54:fa:72:3d:88:9c:63:0c:05:3b:95:14:a4: 0b:54:a9:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY3MDgxMTAvBgNVBAUTKDIyNzkyQzcwQzk4OTQ3QkU4QUY0RjRBM0U3NTVBRURF Nzk1OUQyNzgwHhcNMjUwNDA0MTczODQ5WhcNMjUwNDExMTczODQ5WjAYMRYwFAYD VQQDEw02N2YwMTkyOS00MWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl40TAi7y5yNBQGd0qzJVJbZFf4ecz8Rtbf0T1s5hQEBz8UhhsMr97DLfofKA hEkd5hn18hAolmZRiRsagwcyzTEBE4fh2T5ILW31o5SHrQOIOL5T1tqQmE9RjZeE 07RLdYGbAxKTpQBMHR0w7rO3Aq/7wv+waZMcTxDZ6HPhEN3B41VfQXNGAQ9FJ7Ez 5fa6/QygIKgK1ktOtrQv9JuwtPXrTpoi0fOIzdam3AOzCItAU/Vcwxc7c1Tg8fRV C7F+/R0YetMqyPylGUp7vgNZWe9PSUIYyJWipHU1ZoOZ7dED5NdMv4DcfDUSnW9o lvIvA/i7mx9faEnLdVgNYV8VVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/yphso wkyPa5KFJUQDaW98sbmPMB8GA1UdIwQYMBaAFCJ5LHDJiUe+ivT0o+dVrt55WdJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjcwOC9GQTUyNkI1MDU5 MzUxMUU5OEI1NEJDNDNDNEY5QUUwMi9JbmtzY01tSlI3Nks5UFNqNTFXdTNubFow bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lua3NjTW1KUjc2SzlQU2o1MVd1M25sWjBuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjcwOC9GQTUyNkI1MDU5MzUxMUU5OEI1NEJDNDNDNEY5QUUwMi9JbmtzY01tSlI3 Nks5UFNqNTFXdTNubFowbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNVXtiaV2pKzU9pL6fvgMkooHDhqDvAdx6vHi891UoHVo2977P654y uzCniJoSqBKtOlCBspjbUU60lAg7zZiqfVCWlzgzmwlEjnhpTuNCt61GrtXeTzr/ VeX8Jv0c8se5mndG3MmvZeAaDp9bTnUofYAsqWwcmfO71ejCeIP5+dJ73qcSfz8P 5NLjhTtDO9Zv9GndnR6Xv9p4/FLeh/F+EbKQGigKhia1ooHPbM1D9zBJ+shsPA7/ joGBDNaoGs11lc0ZFr2qu0lQYGxeIUcW5vlnK/8rkDcGTlw7YcJ3tJSBinq2G+uU Lu//DAFT8lT6cj2InGMMBTuVFKQLVKkb -----END CERTIFICATE-----Generated at Sun Apr 6 00:33:53 2025 by rpki-client