$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: zhB9gXa2QLT0Bolo21tUDtiEsS1r7pfauRe6fUA2/RY= Subject key identifier: 6F:1A:5B:92:8D:71:28:35:82:6C:B2:D4:02:70:70:C4:0A:D0:C8:8D Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 0974 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 0968 Signing time: Fri 04 Apr 2025 20:20:15 +0000 Manifest this update: Fri 04 Apr 2025 20:20:15 +0000 Manifest next update: Fri 11 Apr 2025 20:20:15 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: LtB7s7xdw2XyR+tOcVxSRGXmP472gH+aWLH/XFQ34Kg=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: wJNkPrAZnAwunRdATcEif4I0/3DklspHznNyGIiQ8LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2420 (0x974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C Validity Not Before: Apr 4 20:20:15 2025 GMT Not After : Apr 11 20:20:15 2025 GMT Subject: CN=67f03eff-40a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:81:d3:ad:dc:df:95:5a:2c:44:a8:5f:28: de:b0:50:3c:10:5e:2e:47:43:4c:d0:73:50:9a:e1: 45:ed:b0:98:f1:68:b0:dc:62:a3:e8:cd:58:06:20: 16:3d:39:b1:77:8f:32:5d:79:83:d3:aa:be:02:08: f1:38:f7:a4:a6:05:41:5d:74:83:ff:db:bf:0f:55: 0c:a5:c9:fb:c4:f7:c7:d1:f6:97:4f:d4:ff:2b:0a: f6:5d:fa:70:7b:66:09:38:25:38:d1:07:2c:74:5b: 22:b3:0b:75:95:cd:81:9b:ce:95:a1:ab:44:51:72: 55:33:e2:ed:66:bb:2b:8a:96:13:62:c8:9e:40:8a: 4e:c1:93:57:79:d0:10:c7:42:87:88:11:b0:18:0e: 65:1b:1a:43:ce:44:94:4b:c8:cd:0e:6d:e7:a5:f9: a6:37:0d:7e:50:31:8f:c3:19:74:3c:15:97:80:9f: e3:0e:3c:88:bf:03:25:6c:05:99:f3:45:ff:92:e2: f4:72:2d:c6:8a:4b:84:56:b5:16:1a:7d:8a:c8:5f: 67:5d:c4:30:4a:a5:ed:7a:7e:82:85:20:b7:17:37: ab:24:03:a2:b2:bf:22:7d:e7:1e:d9:34:ab:56:0a: d3:c5:f3:2b:90:60:87:3c:c5:45:2f:e6:25:6b:c8: 54:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1A:5B:92:8D:71:28:35:82:6C:B2:D4:02:70:70:C4:0A:D0:C8:8D X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b1:cc:b3:36:e3:98:5e:bf:44:5b:27:81:75:b6:bf:e5:01: d4:89:98:02:e4:d0:bb:92:2a:24:c2:39:4f:0e:c8:22:ae:fd: 2d:57:27:e4:02:97:7b:4c:30:8c:b4:61:a0:95:c3:d6:12:cb: 2b:14:2a:34:c5:a6:f9:c8:20:02:c6:c3:89:dc:dd:5b:9a:b1: d1:4d:21:c5:ac:ea:e6:eb:1e:f2:99:bf:10:84:06:d7:ed:02: bb:49:3e:07:94:5e:40:56:71:f5:92:d7:c1:65:16:cb:ac:95: bf:27:6a:ab:b6:4c:b8:cd:3f:fb:a0:88:23:bb:43:f5:b3:6e: c5:0b:15:79:48:6f:4c:f5:b8:30:ac:39:22:d3:fc:4c:71:ac: 5b:8c:43:a1:3b:2c:d7:d4:26:95:e6:3c:98:57:2f:4c:ba:88: cb:f0:ed:b7:54:ab:3b:88:59:cb:f7:5b:19:4c:09:4d:14:6e: 69:39:b8:b7:a0:f1:a1:9e:bd:3c:47:e6:73:e5:65:03:5a:e3: fd:df:b6:97:26:46:56:ae:cc:94:5a:ad:1c:ea:98:ea:55:c2: 02:21:3c:1b:33:93:d1:b1:fb:23:57:52:72:8c:b2:27:97:87: 4d:d6:ce:e6:2d:28:cb:75:5d:e0:12:1e:a7:10:7d:e4:9d:d2: 64:82:d7:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjUwNDA0MjAyMDE1WhcNMjUwNDExMjAyMDE1WjAYMRYwFAYD VQQDEw02N2YwM2VmZi00MGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vyB063c35VaLESoXyjesFA8EF4uR0NM0HNQmuFF7bCY8Wiw3GKj6M1YBiAW PTmxd48yXXmD06q+AgjxOPekpgVBXXSD/9u/D1UMpcn7xPfH0faXT9T/Kwr2Xfpw e2YJOCU40QcsdFsiswt1lc2Bm86VoatEUXJVM+LtZrsripYTYsieQIpOwZNXedAQ x0KHiBGwGA5lGxpDzkSUS8jNDm3npfmmNw1+UDGPwxl0PBWXgJ/jDjyIvwMlbAWZ 80X/kuL0ci3GikuEVrUWGn2KyF9nXcQwSqXten6ChSC3FzerJAOisr8ifece2TSr VgrTxfMrkGCHPMVFL+Yla8hUcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8aW5KN cSg1gmyy1AJwcMQK0MiNMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbscyzNuOYXr9EWyeBdba/5QHUiZgC5NC7kiokwjlPDsgirv0tVyfk Apd7TDCMtGGglcPWEssrFCo0xab5yCACxsOJ3N1bmrHRTSHFrOrm6x7ymb8QhAbX 7QK7ST4HlF5AVnH1ktfBZRbLrJW/J2qrtky4zT/7oIgju0P1s27FCxV5SG9M9bgw rDki0/xMcaxbjEOhOyzX1CaV5jyYVy9MuojL8O23VKs7iFnL91sZTAlNFG5pObi3 oPGhnr08R+Zz5WUDWuP937aXJkZWrsyUWq0c6pjqVcICITwbM5PRsfsjV1JyjLIn l4dN1s7mLSjLdV3gEh6nEH3kndJkgtdG -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:07 2025 by rpki-client