$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json) Hash identifier: Z4m9KwL82Wi/P0woz+NKhGfZQwJrENsRVPIRPDBBTU4= Subject key identifier: 9C:3B:B9:78:CC:13:45:C0:1C:0F:0D:21:F2:94:62:03:FA:04:17:31 Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft Manifest number: 0793 Signing time: Wed 02 Apr 2025 21:21:57 +0000 Manifest this update: Wed 02 Apr 2025 21:21:57 +0000 Manifest next update: Wed 09 Apr 2025 21:21:57 +0000 Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: 39qCAvNbPQQi+dD2AhqOY9KXHEherlKZFi5dEr0wF2A=) 2: B0425744D7E211ECBD1D447FC4F9AE02.roa (hash: OdlMqUDNtGzAyirklP55vsYTOSuUBKJCfr9lvqlqHYg=) 3: 308C5012BE4C11ED9598AC4EC4F9AE02.roa (hash: P7lzuIcT4OJPq2KVjR4hbm4014N8PEGkbXpO5IhqpWQ=) 4: 067B1AAA70C611EF8080566DC4F9AE02.roa (hash: ap536R4mDpEQmVBUvi08sdQ4AGgP2k0XYVc0G1WQzN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9 Validity Not Before: Apr 2 21:21:57 2025 GMT Not After : Apr 9 21:21:57 2025 GMT Subject: CN=67edaa75-78cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:27:93:40:bb:31:40:41:70:7b:e1:01:00:cf: 41:9a:4d:48:31:2c:3d:13:cc:c1:bc:06:b6:02:51: ba:f8:0d:6a:2a:fe:ad:39:84:3b:5e:b7:03:c5:e3: be:d6:b8:fb:24:99:fe:7f:58:ee:c7:2e:91:c1:0c: a5:14:d8:e1:16:4a:5e:b1:0d:75:9a:64:ee:b8:f6: c6:a4:4e:6e:18:d8:eb:00:cd:87:e9:0d:fd:9b:df: 3b:b5:cd:6d:a0:4e:12:28:2f:d5:98:67:fd:d5:36: 39:fa:b4:11:38:04:18:ef:02:cc:e3:b4:8f:d5:91: 08:1c:50:6e:59:a3:cf:af:96:56:45:b8:d2:4d:93: 84:87:f6:12:d5:09:91:2d:05:28:c7:df:2a:36:c0: 60:e6:7c:40:c7:4d:ab:92:fe:60:b6:02:52:5b:b8: 8d:b5:49:f0:ee:31:ee:a5:e6:47:5f:31:b2:bf:30: 7f:03:25:e0:e7:e0:55:c7:2e:24:a1:42:24:d3:39: 2a:ce:c8:05:12:26:d7:1b:98:a2:b4:46:43:f1:d0: 2a:b5:bf:59:fd:30:a6:db:59:d2:72:9c:68:1f:c2: 75:7e:71:95:1f:45:b1:16:12:a5:15:b0:30:b5:fb: 86:6c:03:4e:0f:f9:48:a4:04:ef:7a:91:f3:1f:62: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3B:B9:78:CC:13:45:C0:1C:0F:0D:21:F2:94:62:03:FA:04:17:31 X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:2f:f3:3a:f6:29:cf:49:7f:c9:61:64:2b:d1:b5:1c:e3:87: 8b:26:bd:34:4f:b6:a4:ce:cf:ce:bc:04:85:fd:9c:24:4e:9a: f3:04:1b:6c:5e:b5:d0:58:71:f6:ec:17:eb:e8:f8:6f:5d:74: 10:38:0f:05:65:2d:04:5f:c5:12:c0:63:01:c8:d1:c4:12:49: 5c:db:79:9e:eb:62:b2:14:03:b5:3e:ed:06:b0:6f:8a:de:cb: 07:9b:1a:53:23:b6:40:e7:04:df:f6:97:b9:7b:8c:ec:54:0f: f6:bb:c7:33:4e:b9:56:9d:ac:dc:9e:8d:54:34:8a:e1:eb:9b: 7b:5f:c4:8b:1d:7d:8a:c9:b1:c6:f3:5b:c7:8e:ae:ae:3e:c3: 98:00:4a:ed:c5:2f:7b:75:01:c8:cd:df:ef:cf:51:9a:9e:83: 49:1f:bd:d9:d7:5d:d8:2d:0d:00:90:f6:de:ac:7f:ca:5b:86: 42:d7:92:6d:43:07:db:b0:8c:35:54:2a:51:72:6f:ff:32:e9: 76:3c:49:fa:ff:f3:8f:3b:93:21:cd:3b:b9:37:4c:23:fc:17: de:5a:44:62:cf:15:97:2b:0d:79:76:ae:09:c4:26:7d:28:32: 71:56:92:62:71:86:1a:d3:c4:0d:58:48:f7:ec:1a:06:7c:76: dc:19:80:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjUwNDAyMjEyMTU3WhcNMjUwNDA5MjEyMTU3WjAYMRYwFAYD VQQDEw02N2VkYWE3NS03OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvieTQLsxQEFwe+EBAM9Bmk1IMSw9E8zBvAa2AlG6+A1qKv6tOYQ7XrcDxeO+ 1rj7JJn+f1juxy6RwQylFNjhFkpesQ11mmTuuPbGpE5uGNjrAM2H6Q39m987tc1t oE4SKC/VmGf91TY5+rQROAQY7wLM47SP1ZEIHFBuWaPPr5ZWRbjSTZOEh/YS1QmR LQUox98qNsBg5nxAx02rkv5gtgJSW7iNtUnw7jHupeZHXzGyvzB/AyXg5+BVxy4k oUIk0zkqzsgFEibXG5iitEZD8dAqtb9Z/TCm21nScpxoH8J1fnGVH0WxFhKlFbAw tfuGbANOD/lIpATvepHzH2JAOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJw7uXjM E0XAHA8NIfKUYgP6BBcxMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDFFOS9EQUQ4RkI4MDA3OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2 ZnN2Z0tUVnlYQ1hOSnIxcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVL/M69inPSX/JYWQr0bUc44eLJr00T7akzs/OvASF/ZwkTprzBBts XrXQWHH27Bfr6PhvXXQQOA8FZS0EX8USwGMByNHEEklc23me62KyFAO1Pu0GsG+K 3ssHmxpTI7ZA5wTf9pe5e4zsVA/2u8czTrlWnazcno1UNIrh65t7X8SLHX2KybHG 81vHjq6uPsOYAErtxS97dQHIzd/vz1GanoNJH73Z113YLQ0AkPberH/KW4ZC15Jt QwfbsIw1VCpRcm//Mul2PEn6//OPO5MhzTu5N0wj/BfeWkRizxWXKw15dq4JxCZ9 KDJxVpJicYYa08QNWEj37BoGfHbcGYDy -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:49 2025 by rpki-client