$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json) Hash identifier: oxHTK+hGElC4bQmk2NauQekfktE5FCm6cU0y9Gkh6lA= Subject key identifier: C3:08:C6:60:62:77:01:D4:96:D3:07:52:90:FC:EA:FA:01:F3:FD:4F Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft Manifest number: 2E Signing time: Sat 29 Mar 2025 07:05:14 +0000 Manifest this update: Sat 29 Mar 2025 07:05:13 +0000 Manifest next update: Sat 05 Apr 2025 07:05:13 +0000 Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: FEAHdEugCKi4RPBrToaEpB0Izg+Gta2dtLUsXW26M6M=) 2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: sDxPGPWuMnoYPL5SXwZzSX89Yi7Im2b2Bj3YLGK0a00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8 Validity Not Before: Mar 29 07:05:13 2025 GMT Not After : Apr 5 07:05:13 2025 GMT Subject: CN=67e79baa-65d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0c:a8:25:57:0d:8d:83:54:36:7b:c5:1f:6a: 72:78:50:38:39:90:85:91:40:86:48:2d:7d:1c:ed: 18:ae:86:e4:0a:99:b6:31:f6:99:ff:59:52:f3:6f: 0d:ab:c6:72:21:7a:c6:e1:50:15:59:f8:cf:02:22: 8e:5a:f6:99:54:40:d3:56:d7:7b:64:0b:f9:3d:56: 4e:04:1d:5b:a2:95:12:1c:02:b0:dc:92:20:3e:98: b1:c3:03:ca:36:c2:e8:3f:2d:2e:3d:8e:ff:44:79: 2c:bc:52:9c:57:68:3c:c2:e3:8b:5d:77:34:f8:c7: a5:1a:9d:01:94:0c:1e:28:0c:8a:ba:64:60:ce:03: c7:01:dd:94:9c:78:ab:32:d5:6a:12:d2:04:e0:65: 68:d8:aa:d7:46:a7:06:69:0e:45:4f:c9:11:79:f0: 8a:f2:14:c3:08:d1:13:a5:71:43:c2:69:54:32:da: 14:bd:cf:2e:18:14:25:50:e7:fa:a2:8a:00:d1:91: 76:1e:3b:cc:dc:af:27:ff:f9:42:7e:85:ac:be:2a: e6:4d:0a:96:dc:1e:c4:01:ea:e6:61:8f:f0:2a:5a: f5:d0:49:76:ef:89:3c:fa:39:62:30:cc:0c:97:aa: 1c:50:d5:a9:37:86:87:3c:d4:c0:ca:ca:43:7e:cd: c9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:08:C6:60:62:77:01:D4:96:D3:07:52:90:FC:EA:FA:01:F3:FD:4F X509v3 Authority Key Identifier: keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:91:82:fc:d7:db:a5:71:39:49:98:14:0c:e9:b1:86:b1:ff: 60:db:20:25:57:af:cb:cf:f0:60:98:fe:7a:8f:27:24:29:cc: 02:92:d5:75:ea:2b:ba:50:f6:c6:2f:7d:b3:34:cd:1e:7b:a7: 46:be:58:e9:d5:a6:fb:21:f0:2b:db:29:08:12:3e:1a:fb:34: 5a:ee:d6:f3:ee:dd:5c:6d:3d:b0:d8:24:6a:af:f8:51:60:91: 37:dc:b6:2c:aa:f2:b9:33:b2:18:71:b5:c9:ad:b0:a7:96:58: fd:ec:22:4f:1f:72:7f:d2:cd:59:eb:11:e3:04:3b:09:28:57: 2c:1f:db:05:ab:de:e8:62:a0:93:62:6a:63:99:e2:5c:b6:66: c2:42:21:6f:68:9c:b9:62:fc:0e:3e:62:fb:44:5c:f1:86:ce: a3:52:e1:75:46:0a:e3:cf:cf:a4:98:0d:4a:e0:41:41:3d:cd: e0:ee:fa:7d:c6:3f:cf:08:2f:62:0b:b9:28:6e:73:57:7a:7b: 77:11:9b:23:23:29:06:b1:5c:33:d8:44:07:50:a2:23:a8:89: 0b:f6:06:78:4e:16:e7:90:36:2c:d1:a9:10:82:7e:b5:06:1b: 9c:3e:cb:5c:e2:9e:ec:52:60:71:8e:a7:0c:6f:d3:28:39:e0: d8:2b:95:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEFCODExMC8GA1UEBRMoMzE4OEY5QjlGNUU5MEFGQjBEQjBERTY1NjVGMDJDOTBC RUVBNDhEMDAeFw0yNTAzMjkwNzA1MTNaFw0yNTA0MDUwNzA1MTNaMBgxFjAUBgNV BAMTDTY3ZTc5YmFhLTY1ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfDKglVw2Ng1Q2e8UfanJ4UDg5kIWRQIZILX0c7RiuhuQKmbYx9pn/WVLzbw2r xnIhesbhUBVZ+M8CIo5a9plUQNNW13tkC/k9Vk4EHVuilRIcArDckiA+mLHDA8o2 wug/LS49jv9EeSy8UpxXaDzC44tddzT4x6UanQGUDB4oDIq6ZGDOA8cB3ZSceKsy 1WoS0gTgZWjYqtdGpwZpDkVPyRF58IryFMMI0ROlcUPCaVQy2hS9zy4YFCVQ5/qi igDRkXYeO8zcryf/+UJ+hay+KuZNCpbcHsQB6uZhj/AqWvXQSXbviTz6OWIwzAyX qhxQ1ak3hoc81MDKykN+zcmtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwwjGYGJ3 AdSW0wdSkPzq+gHz/U8wHwYDVR0jBBgwFoAUMYj5ufXpCvsNsN5lZfAskL7qSNAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0QUI4LzNCMEE5QzY0RDFC MDExRUY4QzIwREQzMkM0RjlBRTAyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNO QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVlqNXVmWHBDdnNOc041bFpmQXNrTDdxU05BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 QUI4LzNCMEE5QzY0RDFCMDExRUY4QzIwREQzMkM0RjlBRTAyL01ZajV1ZlhwQ3Zz TnNONWxaZkFza0w3cVNOQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACuRgvzX26VxOUmYFAzpsYax/2DbICVXr8vP8GCY/nqPJyQpzAKS1XXq K7pQ9sYvfbM0zR57p0a+WOnVpvsh8CvbKQgSPhr7NFru1vPu3VxtPbDYJGqv+FFg kTfctiyq8rkzshhxtcmtsKeWWP3sIk8fcn/SzVnrEeMEOwkoVywf2wWr3uhioJNi amOZ4ly2ZsJCIW9onLli/A4+YvtEXPGGzqNS4XVGCuPPz6SYDUrgQUE9zeDu+n3G P88IL2ILuShuc1d6e3cRmyMjKQaxXDPYRAdQoiOoiQv2BnhOFueQNizRqRCCfrUG G5w+y1zinuxSYHGOpwxv0yg54NgrlRo= -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:49 2025 by rpki-client