$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: tDJcTiNz7JMxQGqDd8g2+fE0A1X3SsLh8FwBmRquyl8= Subject key identifier: 5C:DD:73:EE:99:2C:9B:6A:65:76:65:51:48:E3:80:54:FF:15:A7:4E Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: 82 Signing time: Sat 29 Mar 2025 05:57:19 +0000 Manifest this update: Sat 29 Mar 2025 05:57:18 +0000 Manifest next update: Sat 05 Apr 2025 05:57:18 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: 7ZmNV5QG9TULstxC0f9daIdPDLUzeQea1gQulUROUwc=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: fBkj6NofFyoEUMOvmhd4OBJ51jCgJadVoM56dV8qP3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF Validity Not Before: Mar 29 05:57:18 2025 GMT Not After : Apr 5 05:57:18 2025 GMT Subject: CN=67e78bbf-8641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:36:5c:30:b6:91:a1:e8:5c:50:0f:8c:05: 22:5e:a8:7c:ad:08:13:62:f0:7a:b1:46:7a:32:24: 51:d6:56:d2:6c:75:93:33:00:25:b5:ed:3c:c4:1d: 20:47:5a:ac:1b:b7:fc:64:f8:3e:d6:f5:a5:6d:f8: 48:4c:33:de:17:d5:33:a1:93:1e:d1:ad:5a:d2:c1: 38:79:aa:de:fd:fe:a6:c0:e3:4f:1b:a9:54:5e:e8: 58:2e:f3:6b:89:64:42:b7:28:36:b0:15:95:79:47: 2b:16:f8:bc:3b:37:0e:dd:01:da:59:50:97:2b:6e: 44:d7:3c:27:9e:05:a3:ee:1b:1b:ed:21:85:d7:c3: 75:4e:82:cb:55:60:11:a4:4d:f7:7a:01:04:82:75: 14:b2:a7:51:65:e9:3a:79:a3:bd:4e:a2:6d:38:17: f9:b4:e6:e3:a5:bf:3f:f7:35:e6:2a:87:1b:29:ba: 1b:b4:82:37:3a:39:f8:f9:77:23:23:ea:93:fa:7e: 60:5c:f8:1b:99:62:9b:5a:dc:53:2e:5e:94:f6:d6: f1:b9:7b:70:03:cc:20:4b:49:75:e1:42:92:23:30: 18:e7:56:76:4e:6c:57:78:8d:75:35:1a:ca:ef:4c: 0e:eb:fc:63:52:ff:81:0f:41:8c:22:f2:55:bd:d0: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DD:73:EE:99:2C:9B:6A:65:76:65:51:48:E3:80:54:FF:15:A7:4E X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:00:26:3d:4a:77:08:dd:17:99:67:80:c1:bc:7f:cc:05:1a: 03:3e:8d:40:f5:09:df:86:91:ef:04:f5:c1:52:4f:14:33:fc: da:a2:09:20:29:48:3b:02:1c:cf:a2:18:b3:b2:a0:d7:b7:24: 80:22:4e:86:84:b1:70:e6:28:2c:b5:aa:13:e2:0f:df:61:12: e7:1f:0f:5b:0a:2a:32:c7:e8:3f:8c:56:21:0c:a0:cf:cf:54: 0c:8b:45:2e:0c:53:b3:60:0c:65:29:d7:c1:04:ef:48:31:1b: c1:f3:ce:d7:ef:4c:6c:d5:4d:31:65:4e:bf:e4:bb:2d:d4:a6: 5d:f9:8b:10:84:36:40:2c:58:b1:f4:f8:d0:09:ef:bc:a1:9e: ef:d5:21:e7:5a:f1:54:e6:06:45:d2:4d:69:ad:bb:07:b6:10: 5f:73:fc:a4:f5:c7:84:f4:2e:ef:b7:87:b3:42:74:42:84:9e: 64:f4:b0:fd:d9:6d:69:b7:a5:dd:6c:e3:d7:43:97:9a:80:22: e2:4c:91:5a:b8:55:ed:bb:4e:95:d7:85:ce:3c:14:d0:b6:c2: 73:43:ac:82:d4:c8:39:bf:b5:ae:6c:5d:c7:c3:cb:32:8a:b5: 40:5d:44:06:91:ad:f9:c8:f4:9f:3e:17:8d:05:5b:ab:77:0a: b6:3b:70:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjUwMzI5MDU1NzE4WhcNMjUwNDA1MDU1NzE4WjAYMRYwFAYD VQQDEw02N2U3OGJiZi04NjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eU2XDC2kaHoXFAPjAUiXqh8rQgTYvB6sUZ6MiRR1lbSbHWTMwAlte08xB0g R1qsG7f8ZPg+1vWlbfhITDPeF9UzoZMe0a1a0sE4eare/f6mwONPG6lUXuhYLvNr iWRCtyg2sBWVeUcrFvi8OzcO3QHaWVCXK25E1zwnngWj7hsb7SGF18N1ToLLVWAR pE33egEEgnUUsqdRZek6eaO9TqJtOBf5tObjpb8/9zXmKocbKbobtII3Ojn4+Xcj I+qT+n5gXPgbmWKbWtxTLl6U9tbxuXtwA8wgS0l14UKSIzAY51Z2TmxXeI11NRrK 70wO6/xjUv+BD0GMIvJVvdBKcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzdc+6Z LJtqZXZlUUjjgFT/FadOMB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMACY9SncI3ReZZ4DBvH/MBRoDPo1A9QnfhpHvBPXBUk8UM/zaogkg KUg7AhzPohizsqDXtySAIk6GhLFw5igstaoT4g/fYRLnHw9bCioyx+g/jFYhDKDP z1QMi0UuDFOzYAxlKdfBBO9IMRvB887X70xs1U0xZU6/5Lst1KZd+YsQhDZALFix 9PjQCe+8oZ7v1SHnWvFU5gZF0k1prbsHthBfc/yk9ceE9C7vt4ezQnRChJ5k9LD9 2W1pt6XdbOPXQ5eagCLiTJFauFXtu06V14XOPBTQtsJzQ6yC1Mg5v7WubF3Hw8sy irVAXUQGka35yPSfPheNBVurdwq2O3BH -----END CERTIFICATE-----Generated at Fri Apr 4 18:31:39 2025 by rpki-client