$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json) Hash identifier: QF2yuNtW4ouchTckcP8tUUjTEZ8M3roEhIEclaBPmSs= Subject key identifier: 0B:C7:6A:8C:CA:FD:03:6E:36:F4:7F:D9:75:E1:DF:C7:82:24:DB:B3 Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 092A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft Manifest number: 0921 Signing time: Fri 04 Apr 2025 20:28:18 +0000 Manifest this update: Fri 04 Apr 2025 20:28:18 +0000 Manifest next update: Fri 11 Apr 2025 20:28:18 +0000 Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: PK5V6OBPvVP0MAoshA2sxfX5QOGHTHkeU+Co1A9LNEQ=) 2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 4zTT34lM7O6gFPRhXB1r+qunYynBSeEm8n99il9hQxc=) 3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: 1guI2gXzSQT5STi81CKAucU8Uim1y9wn0ld7tOI9/tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2346 (0x92a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185 Validity Not Before: Apr 4 20:28:18 2025 GMT Not After : Apr 11 20:28:18 2025 GMT Subject: CN=67f040e2-9677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:66:69:dd:b7:a6:b3:2d:05:cf:9a:a5:ee:e2: 89:65:ee:46:ed:a9:88:f4:44:a6:f5:72:24:3f:12: 9d:c9:62:99:9a:14:bf:d4:59:78:58:00:7b:e4:41: 84:7e:e1:a9:71:df:be:d6:26:c8:48:4f:f6:69:74: 52:7d:19:8a:97:65:82:f0:19:cc:dd:16:aa:54:dd: 7a:13:d7:23:2f:b0:da:90:9f:cf:be:f4:06:00:5f: e1:3b:47:14:ce:fe:b0:a8:7c:53:5f:0d:cd:bc:fa: 3d:4e:43:99:11:f1:81:4c:31:b6:90:3c:31:57:5a: ae:04:f5:1f:d2:f4:91:c2:39:c0:ce:db:15:5f:89: 9c:ac:1e:73:39:1b:ec:8d:07:ba:8a:3e:11:f0:d2: a5:52:85:24:4a:45:15:e5:0c:54:42:3a:75:d0:5c: 42:3d:43:0c:8d:08:f0:98:8c:a0:2b:9e:02:e0:7a: 3e:56:c2:85:bb:74:9a:63:be:f4:c7:9c:57:2d:f9: 1b:6c:7f:be:55:8a:e9:02:96:5f:39:fa:a6:70:3c: 0a:8b:c5:a2:88:95:46:80:64:65:86:96:18:8d:e2: 82:dc:5c:c5:bc:68:62:a3:6f:04:1d:4e:d2:f8:b6: d6:b3:58:83:aa:4d:22:59:20:01:f9:d0:3f:26:07: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C7:6A:8C:CA:FD:03:6E:36:F4:7F:D9:75:E1:DF:C7:82:24:DB:B3 X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:49:8b:62:cd:3d:ba:91:ee:2e:f8:32:67:69:6b:43:89:ba: b3:54:36:a2:84:ea:2c:c8:fb:08:b1:c9:16:33:c4:01:4a:b5: f5:4f:27:a0:4a:a8:5d:3e:77:5b:92:52:59:f8:c5:91:b6:ec: b5:f7:32:3e:8a:ba:3a:5e:71:ac:33:d6:28:31:99:93:f0:9f: 0e:10:5e:39:7c:d5:b7:6e:be:9b:c3:86:5d:65:10:cf:c6:9e: 9a:5b:db:c8:91:0e:ce:13:9b:6b:20:b9:b0:fd:39:6a:6f:ac: d3:89:5c:82:e0:84:85:b2:0f:85:fc:de:ef:d3:9f:e1:87:68: a2:63:14:71:73:31:33:41:db:00:33:d8:a8:c5:ae:a6:68:97: 7c:bc:b0:15:88:cc:a7:c8:4d:79:62:a1:35:e1:e3:29:c6:e2: 6b:5d:66:e6:b2:de:b9:6a:67:52:4e:1e:fd:9d:da:a5:1b:64: 25:94:91:a2:9d:94:f1:62:a0:39:3c:61:e4:b8:10:76:aa:fb: 51:35:b7:32:11:fa:0b:c4:62:b7:f6:85:ad:c5:b9:c4:e3:e9: 81:58:21:cc:37:bf:0e:82:63:08:a9:1a:0b:ff:86:18:eb:18: 80:4b:c4:b5:9a:e6:c7:5d:9c:7e:8a:3e:41:a7:b9:39:97:62: 45:db:46:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjUwNDA0MjAyODE4WhcNMjUwNDExMjAyODE4WjAYMRYwFAYD VQQDEw02N2YwNDBlMi05Njc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWZp3bemsy0Fz5ql7uKJZe5G7amI9ESm9XIkPxKdyWKZmhS/1Fl4WAB75EGE fuGpcd++1ibISE/2aXRSfRmKl2WC8BnM3RaqVN16E9cjL7DakJ/PvvQGAF/hO0cU zv6wqHxTXw3NvPo9TkOZEfGBTDG2kDwxV1quBPUf0vSRwjnAztsVX4mcrB5zORvs jQe6ij4R8NKlUoUkSkUV5QxUQjp10FxCPUMMjQjwmIygK54C4Ho+VsKFu3SaY770 x5xXLfkbbH++VYrpApZfOfqmcDwKi8WiiJVGgGRlhpYYjeKC3FzFvGhio28EHU7S +LbWs1iDqk0iWSAB+dA/JgfHuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvHaozK /QNuNvR/2XXh38eCJNuzMB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF b0RFdjY0YWEzTHZNVHU1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANSYtizT26ke4u+DJnaWtDibqzVDaihOosyPsIsckWM8QBSrX1Tyeg SqhdPndbklJZ+MWRtuy19zI+iro6XnGsM9YoMZmT8J8OEF45fNW3br6bw4ZdZRDP xp6aW9vIkQ7OE5trILmw/Tlqb6zTiVyC4ISFsg+F/N7v05/hh2iiYxRxczEzQdsA M9ioxa6maJd8vLAViMynyE15YqE14eMpxuJrXWbmst65amdSTh79ndqlG2QllJGi nZTxYqA5PGHkuBB2qvtRNbcyEfoLxGK39oWtxbnE4+mBWCHMN78OgmMIqRoL/4YY 6xiAS8S1mubHXZx+ij5Bp7k5l2JF20bK -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:36 2025 by rpki-client