$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json) Hash identifier: cwrFmTZBSTOw4cx9Xhq6KCqCYcrLFGV223PO41EBUdQ= Subject key identifier: 3B:7C:A9:47:1C:ED:50:1F:9A:C0:C6:E4:1F:DE:97:B8:2A:8B:DA:73 Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft Manifest number: 011D Signing time: Sat 29 Mar 2025 04:09:37 +0000 Manifest this update: Sat 29 Mar 2025 04:09:37 +0000 Manifest next update: Sat 05 Apr 2025 04:09:37 +0000 Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: aPNqcIwXjrb6jK27wZmUmezvtEAKctg6iptcrp1rlZk=) 2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: Fm4uHiAUi3X+9CLHzcIf57OhsNaBKsN/1TP2wSaWGkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190EF5 Validity Not Before: Mar 29 04:09:37 2025 GMT Not After : Apr 5 04:09:37 2025 GMT Subject: CN=67e77281-e71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:c6:a3:01:d9:7f:bc:f5:51:cc:e2:eb:fb: 45:0c:a2:4f:00:d1:e0:14:f7:c5:c9:ee:49:13:ac: 4f:2a:62:51:88:14:13:66:aa:53:11:a0:57:09:b3: e2:6b:be:9d:82:b4:77:b8:a3:31:a0:bb:fe:95:da: 23:05:d0:99:01:aa:60:c5:a3:ab:dc:c0:f7:97:ae: 98:2d:30:c8:c9:9b:b8:13:4b:7f:db:e0:a9:c6:b5: 17:a0:03:2a:35:a2:7c:11:23:e9:86:43:a9:d1:42: 60:91:e3:e8:7a:ae:88:a1:e0:2d:89:63:5a:8d:80: b2:21:90:74:19:ee:ee:d1:2a:1d:ab:b2:69:09:c2: a9:20:55:7b:7c:b2:1d:20:b5:44:79:4f:85:e0:94: bc:9f:4f:3e:63:39:c2:cd:f1:7d:23:71:a8:4a:5c: a1:d1:86:01:15:9b:ff:3a:8b:55:f0:27:e9:82:75: c6:fc:12:e9:a7:4e:c2:2b:a8:3c:e5:6e:0e:31:a5: 3e:f9:be:b8:a2:3f:17:25:a6:7f:3e:49:4f:39:d0: ef:30:c4:3c:db:09:d1:7f:e3:37:d3:0e:a6:1d:a5: 62:bd:02:fc:7d:41:41:61:2f:0e:90:69:ee:28:02: 8b:6d:56:74:a5:df:72:86:2c:85:b1:b7:75:bb:4f: 0a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7C:A9:47:1C:ED:50:1F:9A:C0:C6:E4:1F:DE:97:B8:2A:8B:DA:73 X509v3 Authority Key Identifier: keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b4:01:0c:2f:17:20:a1:b0:40:40:71:37:16:21:6a:b1:e8: 8e:ba:78:4a:ea:f1:d5:77:c5:c0:23:81:55:5e:56:74:2a:c9: 10:cb:a5:f3:cc:ef:d0:1d:36:e8:6b:8b:d4:28:b0:84:e9:dc: 75:5a:c4:10:74:98:2b:6f:41:14:f7:f6:bf:7f:0c:c2:35:d1: 61:8e:3d:85:15:6d:b7:ba:d6:e5:20:ad:5c:64:8c:8b:da:89: 74:9a:c2:50:b8:e1:7f:d4:ad:fb:8a:13:91:5e:05:74:ae:d1: 66:bd:76:2a:c2:29:33:88:5a:73:a8:67:f6:20:8d:0c:dc:fe: 44:b5:d8:f9:8a:09:a1:35:93:f9:54:94:a1:77:06:57:21:d5: 8c:d1:7d:d1:66:7f:9a:b6:cd:e6:da:81:9b:33:4e:6d:08:58: 52:bc:67:0c:9e:0f:43:b6:da:20:cf:2d:40:87:d1:c2:0a:6d: d7:3d:01:1a:58:bf:58:3c:0f:88:0a:e6:ca:bd:fd:e5:34:36: 05:b1:b9:44:28:e3:cd:f8:79:a4:17:39:57:38:97:6a:d8:90: aa:ad:27:b4:59:6a:a2:11:da:14:7e:55:e1:ae:af:80:f6:b9: 48:da:a9:be:43:b2:3b:7f:f8:fe:25:a7:4a:53:83:24:08:59: c3:12:f7:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB QzZGQTM3NDgwHhcNMjUwMzI5MDQwOTM3WhcNMjUwNDA1MDQwOTM3WjAYMRYwFAYD VQQDEw02N2U3NzI4MS1lNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/fGowHZf7z1Uczi6/tFDKJPANHgFPfFye5JE6xPKmJRiBQTZqpTEaBXCbPi a76dgrR3uKMxoLv+ldojBdCZAapgxaOr3MD3l66YLTDIyZu4E0t/2+CpxrUXoAMq NaJ8ESPphkOp0UJgkePoeq6IoeAtiWNajYCyIZB0Ge7u0Sodq7JpCcKpIFV7fLId ILVEeU+F4JS8n08+YznCzfF9I3GoSlyh0YYBFZv/OotV8CfpgnXG/BLpp07CK6g8 5W4OMaU++b64oj8XJaZ/PklPOdDvMMQ82wnRf+M30w6mHaVivQL8fUFBYS8OkGnu KAKLbVZ0pd9yhiyFsbd1u08KcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDt8qUcc 7VAfmsDG5B/el7gqi9pzMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3 NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMtAEMLxcgobBAQHE3FiFqseiOunhK6vHVd8XAI4FVXlZ0KskQy6Xz zO/QHTboa4vUKLCE6dx1WsQQdJgrb0EU9/a/fwzCNdFhjj2FFW23utblIK1cZIyL 2ol0msJQuOF/1K37ihORXgV0rtFmvXYqwikziFpzqGf2II0M3P5Etdj5igmhNZP5 VJShdwZXIdWM0X3RZn+ats3m2oGbM05tCFhSvGcMng9Dttogzy1Ah9HCCm3XPQEa WL9YPA+ICubKvf3lNDYFsblEKOPN+HmkFzlXOJdq2JCqrSe0WWqiEdoUflXhrq+A 9rlI2qm+Q7I7f/j+JadKU4MkCFnDEvcM -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:47 2025 by rpki-client