$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft File: AZcEvn5KzguhIRSzKOsCBxHvTq8.mft (raw, json) Hash identifier: S3exjEvchzEcluQgTs8fjq/a9g3DI2o123a3kKvnqvU= Subject key identifier: C3:D9:13:55:6D:84:3D:2E:BE:E1:18:7C:01:99:CF:34:97:F7:EF:EE Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF Certificate issuer: /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft Manifest number: 01D0 Signing time: Thu 03 Apr 2025 02:14:02 +0000 Manifest this update: Thu 03 Apr 2025 02:14:01 +0000 Manifest next update: Thu 10 Apr 2025 02:14:01 +0000 Files and hashes: 1: AZcEvn5KzguhIRSzKOsCBxHvTq8.crl (hash: YzzeFX5tFevS3natVcuN9R7TeKMa6rls5XCHL4Ag/wo=) 2: 85AEBA76504C11ED829F7D24C4F9AE02.roa (hash: MijbaBFOBmjVn0NZXYmQ25vm+DrZhkqNokVzBodlkOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91728E2 Validity Not Before: Apr 3 02:14:01 2025 GMT Not After : Apr 10 02:14:01 2025 GMT Subject: CN=67edeee9-a7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:41:06:ca:6f:4d:56:47:ac:9d:91:3d:a1: fb:e1:ae:60:dd:70:ed:a6:ac:d1:c9:61:57:18:41: cc:fa:65:a2:57:6c:fb:56:1f:a2:30:be:08:88:3d: 85:c1:a9:f1:73:0e:fa:e2:25:3d:c5:57:e8:3f:c2: c4:7d:a9:60:89:36:10:43:6c:8a:b9:1a:a2:a8:a1: 1d:37:f6:3d:22:e3:3a:b2:af:dc:30:6d:8d:99:37: 9f:3b:48:bd:4d:60:02:78:78:83:92:ea:c4:5c:a0: c0:86:7d:75:73:f9:3a:dc:6f:9a:9c:75:31:33:15: af:55:37:0c:3e:ad:1f:4c:35:71:12:7d:20:46:d6: 7d:3b:9a:09:b2:e1:ed:9f:e7:4b:4d:b2:82:40:71: b8:d8:23:b5:06:a7:3d:5d:88:34:6a:bf:8c:b0:57: 40:de:25:4c:95:d4:2d:5f:2a:3c:c7:ea:54:cf:de: 5d:e6:82:d8:2c:12:2a:ad:e1:c6:c8:1d:96:a2:5f: 8f:bb:a8:89:e2:ec:95:c2:f2:71:4e:05:2d:43:21: ba:70:fa:f1:9e:c4:2c:58:c2:43:a3:0b:81:58:60: e8:d9:eb:b2:fc:2d:70:78:09:1a:6b:71:1f:5b:84: 98:f1:2b:f0:d1:57:15:d5:40:a3:1d:1c:5e:ed:fe: ff:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D9:13:55:6D:84:3D:2E:BE:E1:18:7C:01:99:CF:34:97:F7:EF:EE X509v3 Authority Key Identifier: keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:7d:75:22:23:86:e3:71:ff:a4:c8:7d:e5:e0:48:7e:e4:c0: a6:f5:44:68:57:92:46:e7:97:0f:31:bc:b6:12:82:e8:61:a5: 83:f2:9b:9e:17:af:df:ad:a1:9f:58:5d:d1:2a:c6:d3:1d:75: 02:8f:79:cd:66:39:97:e7:d7:68:32:99:c4:e7:c2:0b:b5:e8: 3c:ff:92:ce:6f:a4:93:ec:e4:8e:79:3e:62:c2:48:fd:28:93: 38:6f:88:85:0d:3b:37:ee:91:c7:22:51:03:6e:06:e3:50:9c: bb:b3:3c:b1:ce:8d:b8:33:82:96:b9:54:af:0b:b5:b1:c5:94: 2f:e6:5c:22:1c:2b:22:04:f5:e1:85:22:2d:7b:38:87:d4:2f: 1e:1d:7c:78:c0:c6:5d:81:bb:44:a6:5d:2b:ec:e9:2c:a9:d1: 56:d6:36:b6:a3:fc:a0:aa:26:e0:89:9f:b5:a0:61:e8:04:7f: b1:0b:93:d2:04:1f:b8:47:0c:b4:c4:f2:ed:56:8a:b5:2b:0b: df:6a:2c:fb:b4:86:44:dd:9e:88:95:be:07:14:22:48:05:f4: 91:fb:3e:a2:87:77:64:11:3b:40:e5:bd:3f:56:4c:2e:ab:88: 3d:03:d0:dd:63:a3:14:15:86:fd:af:b2:99:fe:57:7f:91:b7: 43:d5:4d:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4RTIxMTAvBgNVBAUTKDAxOTcwNEJFN0U0QUNFMEJBMTIxMTRCMzI4RUIwMjA3 MTFFRjRFQUYwHhcNMjUwNDAzMDIxNDAxWhcNMjUwNDEwMDIxNDAxWjAYMRYwFAYD VQQDEw02N2VkZWVlOS1hN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDJBBspvTVZHrJ2RPaH74a5g3XDtpqzRyWFXGEHM+mWiV2z7Vh+iML4IiD2F wanxcw764iU9xVfoP8LEfalgiTYQQ2yKuRqiqKEdN/Y9IuM6sq/cMG2NmTefO0i9 TWACeHiDkurEXKDAhn11c/k63G+anHUxMxWvVTcMPq0fTDVxEn0gRtZ9O5oJsuHt n+dLTbKCQHG42CO1Bqc9XYg0ar+MsFdA3iVMldQtXyo8x+pUz95d5oLYLBIqreHG yB2Wol+Pu6iJ4uyVwvJxTgUtQyG6cPrxnsQsWMJDowuBWGDo2euy/C1weAkaa3Ef W4SY8Svw0VcV1UCjHRxe7f7/NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPZE1Vt hD0uvuEYfAGZzzSX9+/uMB8GA1UdIwQYMBaAFAGXBL5+Ss4LoSEUsyjrAgcR706v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjhFMi85NzAxM0E0RTUw NDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41S3pndWhJUlN6S09zQ0J4SHZU cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FaY0V2bjVLemd1aElSU3pLT3NDQnhIdlRxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjhFMi85NzAxM0E0RTUwNDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41S3pn dWhJUlN6S09zQ0J4SHZUcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmfXUiI4bjcf+kyH3l4Eh+5MCm9URoV5JG55cPMby2EoLoYaWD8pue F6/fraGfWF3RKsbTHXUCj3nNZjmX59doMpnE58ILteg8/5LOb6ST7OSOeT5iwkj9 KJM4b4iFDTs37pHHIlEDbgbjUJy7szyxzo24M4KWuVSvC7WxxZQv5lwiHCsiBPXh hSIteziH1C8eHXx4wMZdgbtEpl0r7OksqdFW1ja2o/ygqibgiZ+1oGHoBH+xC5PS BB+4Rwy0xPLtVoq1Kwvfaiz7tIZE3Z6Ilb4HFCJIBfSR+z6ih3dkETtA5b0/Vkwu q4g9A9DdY6MUFYb9r7KZ/ld/kbdD1U2p -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:03 2025 by rpki-client