$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft File: 82dKiQfpsa6O4m-c88mcR_dUk0w.mft (raw, json) Hash identifier: ttHqBIYLi75IrhLBleHCZuETej6lxLnq5IsXwboHjCQ= Subject key identifier: 52:0A:33:B5:19:C0:93:7F:8C:00:8F:0B:7C:E9:69:B5:C4:71:F7:E1 Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C Certificate issuer: /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft Manifest number: 0384 Signing time: Thu 03 Apr 2025 00:52:33 +0000 Manifest this update: Thu 03 Apr 2025 00:52:33 +0000 Manifest next update: Thu 10 Apr 2025 00:52:33 +0000 Files and hashes: 1: 82dKiQfpsa6O4m-c88mcR_dUk0w.crl (hash: ehDYKR4UvHYf5fjaL8Uff/ekd/xByhduebuigbz09wE=) 2: F47320C4E04111EE8F798E3DC4F9AE02.roa (hash: H6qqfecqAn+EsQvXqSr4TLQYZBf7MKRLbZVO0YcFkbs=) 3: 5C27D4DCB0DB11EC87206C69C4F9AE02.roa (hash: xITr09tsVeB3OxC/g+xRbXoBvfspUFpsR1Ly8NZTn5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91910A8 Validity Not Before: Apr 3 00:52:33 2025 GMT Not After : Apr 10 00:52:33 2025 GMT Subject: CN=67eddbd1-5068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:9d:da:cc:53:e0:34:8b:cd:71:ec:1a:5c: 33:3f:42:b7:b8:f0:c9:52:15:f1:df:b2:59:9b:cc: 1e:49:54:14:55:50:65:e0:f5:2c:d4:50:f4:06:53: a3:54:e6:26:13:e6:39:8f:44:49:10:98:9f:77:2a: bc:26:b3:a0:e0:26:34:81:01:57:12:ed:50:bd:bd: 83:40:ad:90:b8:1d:bb:7d:04:36:b9:48:27:38:98: ed:08:1a:69:49:cb:36:ff:3a:36:a3:3c:27:9b:33: 63:44:b6:7a:49:3d:f7:dc:0f:17:d8:11:8e:79:17: 19:88:d4:89:0a:d0:e9:23:85:fd:52:f0:33:92:66: 27:14:64:50:e2:9c:77:5a:fe:d7:0c:11:b8:fc:16: f9:93:6e:54:fa:8d:55:1b:31:a8:f9:64:c7:1c:dd: d3:d3:2f:e9:e2:bb:1d:bd:df:59:51:47:b2:7a:18: f8:06:7b:4e:b8:84:57:36:8f:a8:82:5b:55:2d:67: c4:96:4e:f8:c4:57:c3:77:cf:7c:b1:94:11:13:0b: a1:5e:0c:21:18:89:af:89:7e:04:f1:17:e0:a6:81: 79:a9:13:60:58:49:36:e6:51:da:99:74:bd:ba:0a: 8e:4c:5a:03:42:ba:71:38:38:1e:c4:15:46:77:e2: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0A:33:B5:19:C0:93:7F:8C:00:8F:0B:7C:E9:69:B5:C4:71:F7:E1 X509v3 Authority Key Identifier: keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b8:7b:fa:db:63:f6:e2:5f:89:40:03:c2:90:fe:ac:a1:e4: 97:7d:67:37:25:aa:32:4c:7c:66:d7:55:bb:09:dc:ac:11:7c: 6c:30:23:d7:01:88:bf:0d:17:04:f2:bc:ce:ab:1b:20:20:6a: 78:4d:8f:af:24:54:e1:b6:37:55:51:08:68:78:e1:d4:66:d6: 26:e7:bd:26:fc:6e:63:d6:62:45:c8:5b:23:1d:b9:1d:5d:b9: 4d:e0:b4:36:87:02:23:88:3d:f0:d4:d0:3c:68:52:1a:99:a7: e8:d9:f7:e0:2f:f5:31:60:e2:3b:3e:ca:c2:9f:9d:dd:9c:3d: 73:57:74:4d:d9:71:ce:d4:d1:06:72:69:8c:f2:5a:a1:6f:41: c8:44:9c:17:e0:75:e6:46:ef:91:4e:f5:84:82:f4:3e:12:7a: 7b:44:fc:62:f4:b3:ab:7f:c9:b7:3d:ff:8b:98:8d:cc:e3:51: 08:c7:75:23:85:19:16:d8:2f:e2:8c:03:bd:1e:7f:0c:f4:e2: 22:1f:05:20:c3:4b:46:d7:ba:82:06:65:50:b0:e2:66:83:a3: dc:52:af:75:82:d9:fa:df:28:e9:d3:72:9e:34:85:12:13:34: c7:16:f7:ae:ca:33:06:9a:c0:8e:b1:b3:c3:dd:bb:86:fe:a9: 6d:d1:e6:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwQTgxMTAvBgNVBAUTKEYzNjc0QTg5MDdFOUIxQUU4RUUyNkY5Q0YzQzk5QzQ3 Rjc1NDkzNEMwHhcNMjUwNDAzMDA1MjMzWhcNMjUwNDEwMDA1MjMzWjAYMRYwFAYD VQQDEw02N2VkZGJkMS01MDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHmd2sxT4DSLzXHsGlwzP0K3uPDJUhXx37JZm8weSVQUVVBl4PUs1FD0BlOj VOYmE+Y5j0RJEJifdyq8JrOg4CY0gQFXEu1Qvb2DQK2QuB27fQQ2uUgnOJjtCBpp Scs2/zo2ozwnmzNjRLZ6ST333A8X2BGOeRcZiNSJCtDpI4X9UvAzkmYnFGRQ4px3 Wv7XDBG4/Bb5k25U+o1VGzGo+WTHHN3T0y/p4rsdvd9ZUUeyehj4BntOuIRXNo+o gltVLWfElk74xFfDd898sZQREwuhXgwhGImviX4E8RfgpoF5qRNgWEk25lHamXS9 ugqOTFoDQrpxODgexBVGd+J+MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIKM7UZ wJN/jACPC3zpabXEcffhMB8GA1UdIwQYMBaAFPNnSokH6bGujuJvnPPJnEf3VJNM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTBBOC83QjIwMDczRTlD NEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNhNk80bS1jODhtY1JfZFVr MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgyZEtpUWZwc2E2TzRtLWM4OG1jUl9kVWswdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTBBOC83QjIwMDczRTlDNEUxMUVDQjE3NDhCNjhDNEY5QUUwMi84MmRLaVFmcHNh Nk80bS1jODhtY1JfZFVrMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9uHv622P24l+JQAPCkP6soeSXfWc3JaoyTHxm11W7CdysEXxsMCPX AYi/DRcE8rzOqxsgIGp4TY+vJFThtjdVUQhoeOHUZtYm570m/G5j1mJFyFsjHbkd XblN4LQ2hwIjiD3w1NA8aFIamafo2ffgL/UxYOI7PsrCn53dnD1zV3RN2XHO1NEG cmmM8lqhb0HIRJwX4HXmRu+RTvWEgvQ+Enp7RPxi9LOrf8m3Pf+LmI3M41EIx3Uj hRkW2C/ijAO9Hn8M9OIiHwUgw0tG17qCBmVQsOJmg6PcUq91gtn63yjp03KeNIUS EzTHFveuyjMGmsCOsbPD3buG/qlt0eZr -----END CERTIFICATE-----Generated at Fri Apr 4 21:33:51 2025 by rpki-client