$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: FmOFMFJtHV9Wl7qC8F2i63I6RGfBloH2oV2zG42hwTg= Subject key identifier: 53:33:48:3F:E2:62:20:3C:4D:A9:5C:76:7E:0A:BB:FF:33:09:17:0E Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0DEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0DD4 Signing time: Fri 04 Apr 2025 18:00:58 +0000 Manifest this update: Fri 04 Apr 2025 18:00:58 +0000 Manifest next update: Fri 11 Apr 2025 18:00:58 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: 70eh5RemyPezEAAUeGYwJYGlbX9ubyD3Rz2Yvo24IzI=) 2: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: 9N5REIY+2HrtITjoJdJhm20sPzs6LfTpozJyTEhJPKI=) 3: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 0xCnVozQZWjgc3AYs562bOg5LeDIgNinyp8El/uXPPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3563 (0xdeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4 Validity Not Before: Apr 4 18:00:58 2025 GMT Not After : Apr 11 18:00:58 2025 GMT Subject: CN=67f01e5a-a798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:4c:d3:6a:f4:99:26:79:5e:2d:5c:48:25: 98:56:35:18:ae:f1:37:9f:a4:62:24:10:23:41:d0: 03:21:81:ff:8e:ac:07:93:67:69:b1:6d:2d:b5:ed: e7:7c:85:0b:4b:3e:22:70:3a:51:ff:41:5a:35:e6: 47:77:98:50:00:74:bc:c6:2e:1f:6c:98:df:f4:76: 3a:50:6c:c2:ad:e9:31:98:50:b9:81:b4:2d:18:76: 46:a7:01:b9:19:b3:19:b4:80:03:02:44:f4:78:0f: 98:01:44:f0:53:6c:0a:34:c8:ab:fb:98:5b:12:b8: e6:02:37:e6:ef:d2:84:3b:6b:2b:9f:64:3f:14:cc: 70:5c:bf:a6:c0:52:f0:98:7f:ed:5f:37:08:5c:bb: 9f:9b:9f:3b:a1:a8:b9:d3:f5:91:2a:2f:18:c3:bb: e4:ed:50:c7:4c:78:ea:5d:26:2f:7f:92:fd:34:10: 7c:8d:7e:1f:61:15:b4:20:71:56:90:9c:d9:97:ec: d8:27:64:bd:4b:6a:e1:03:ea:cc:fa:97:15:8c:b7: 1c:68:4d:e4:ea:e3:5d:46:5b:36:d1:b1:89:47:c0: 72:e5:c1:c5:ce:36:bf:88:d0:68:a6:9d:4b:87:e1: 96:56:15:37:52:05:46:f7:98:de:ea:fb:39:e0:9a: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:33:48:3F:E2:62:20:3C:4D:A9:5C:76:7E:0A:BB:FF:33:09:17:0E X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:94:1c:c2:28:a3:87:99:fa:c7:1c:5e:8c:bb:d9:d3:e5:9b: b4:9e:42:8e:6a:0a:42:e0:1f:b3:46:57:cf:2f:8d:90:50:0b: 40:06:09:a1:fc:62:cf:bf:0d:ae:f8:0f:1c:9d:68:d3:79:9f: f0:85:52:59:c3:8f:a8:a3:fc:89:fb:dc:64:ee:e9:e6:9f:f7: b3:ac:32:a3:05:ed:ba:aa:5e:6b:2a:8c:3b:9c:65:97:ca:cb: 49:ad:7e:8b:b3:bf:31:c1:e2:57:97:50:c7:ae:1a:87:fe:5e: e8:b4:6a:ba:04:45:dd:cd:d6:38:f5:53:51:28:63:98:e9:a5: 11:9e:8e:d5:a3:d0:86:f4:47:e3:ea:dd:a9:2f:48:f6:76:5b: 72:08:96:2a:30:41:17:2c:1e:32:c6:31:5a:04:dc:2a:3f:3e: 67:d8:87:39:82:bb:cb:e8:ce:38:b5:00:88:2c:60:9a:29:94: 14:90:ba:35:ff:bf:5c:8c:a2:2b:be:1b:74:b3:a7:9f:36:a1: 5f:07:8c:19:5d:82:8a:15:cb:93:9b:89:58:83:d2:28:b9:50: 06:46:01:99:e9:97:e1:0f:12:a5:14:b4:64:06:12:91:85:22: 04:8f:8a:ef:ac:a1:b9:c9:ff:e3:48:81:84:8a:ae:6a:a5:a9: 1d:93:78:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjUwNDA0MTgwMDU4WhcNMjUwNDExMTgwMDU4WjAYMRYwFAYD VQQDEw02N2YwMWU1YS1hNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEVM02r0mSZ5Xi1cSCWYVjUYrvE3n6RiJBAjQdADIYH/jqwHk2dpsW0tte3n fIULSz4icDpR/0FaNeZHd5hQAHS8xi4fbJjf9HY6UGzCrekxmFC5gbQtGHZGpwG5 GbMZtIADAkT0eA+YAUTwU2wKNMir+5hbErjmAjfm79KEO2srn2Q/FMxwXL+mwFLw mH/tXzcIXLufm587oai50/WRKi8Yw7vk7VDHTHjqXSYvf5L9NBB8jX4fYRW0IHFW kJzZl+zYJ2S9S2rhA+rM+pcVjLccaE3k6uNdRls20bGJR8By5cHFzja/iNBopp1L h+GWVhU3UgVG95je6vs54JrGOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMzSD/i YiA8Talcdn4Ku/8zCRcOMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmlBzCKKOHmfrHHF6Mu9nT5Zu0nkKOagpC4B+zRlfPL42QUAtABgmh /GLPvw2u+A8cnWjTeZ/whVJZw4+oo/yJ+9xk7unmn/ezrDKjBe26ql5rKow7nGWX ystJrX6Ls78xweJXl1DHrhqH/l7otGq6BEXdzdY49VNRKGOY6aURno7Vo9CG9Efj 6t2pL0j2dltyCJYqMEEXLB4yxjFaBNwqPz5n2Ic5grvL6M44tQCILGCaKZQUkLo1 /79cjKIrvht0s6efNqFfB4wZXYKKFcuTm4lYg9IouVAGRgGZ6ZfhDxKlFLRkBhKR hSIEj4rvrKG5yf/jSIGEiq5qpakdk3gJ -----END CERTIFICATE-----Generated at Sat Apr 5 09:52:42 2025 by rpki-client