$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft File: ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json) Hash identifier: yNPjZWAG3qiImiQw11kwvku6Y+pqCawapmxbrNJ08ck= Subject key identifier: D9:FB:33:1C:95:17:63:8D:D0:66:CF:0E:5A:5A:AA:D9:0A:34:C7:3D Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED Certificate issuer: /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft Manifest number: 05A7 Signing time: Wed 02 Apr 2025 23:11:41 +0000 Manifest this update: Wed 02 Apr 2025 23:11:40 +0000 Manifest next update: Wed 09 Apr 2025 23:11:40 +0000 Files and hashes: 1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: OedJDv6mjtcMX1W5DGFQNlPNFTjxSi1BdrCP8tfjvIo=) 2: BB01CFB0723811EEA39E0042C4F9AE02.roa (hash: Wmsh7cLIzhswuDyOVOYJZDVZYFQtMqV8cI7HOX5SCRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944AB Validity Not Before: Apr 2 23:11:40 2025 GMT Not After : Apr 9 23:11:40 2025 GMT Subject: CN=67edc42c-c916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:33:61:76:8a:e4:5b:45:23:52:57:42:b1: c4:ce:a7:ab:d8:92:1d:58:1f:97:da:4d:7d:5d:db: d3:da:2f:f6:87:26:18:6b:c6:49:ba:76:d1:12:30: 3c:7c:74:0c:f2:c4:95:b2:55:8e:c2:34:02:1f:b4: 41:7e:c5:76:27:d2:ab:2f:85:97:b6:52:70:c0:a7: 55:de:c6:a8:81:eb:6f:b9:01:b6:92:dd:7e:38:32: 3d:98:b0:99:98:77:b5:6a:cd:bf:4a:74:6f:31:ba: d6:c8:40:6d:24:1c:77:34:1b:3f:e5:69:2c:87:fe: c7:65:78:93:1c:32:70:ce:c8:f7:d2:d0:c3:48:0d: 32:7d:e5:7f:72:c5:a1:c9:85:35:9e:04:32:26:3a: f0:cb:56:29:a9:b7:a9:ea:4e:0a:2c:4c:ef:2f:5e: 00:f5:ae:b5:9a:db:68:7a:75:32:4a:8b:91:ca:01: bd:e2:83:29:6c:3a:c9:0c:4b:ad:df:ba:41:57:40: 83:7a:18:e3:24:4f:cc:4c:0b:61:4f:06:67:3f:e3: 45:1e:c6:58:fb:85:bc:8f:98:6b:17:af:c0:85:6d: 7c:52:94:f8:a8:33:1a:bc:39:17:dc:a9:b0:61:44: 29:88:61:69:40:ab:90:fb:ef:c6:40:76:33:57:81: 2d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FB:33:1C:95:17:63:8D:D0:66:CF:0E:5A:5A:AA:D9:0A:34:C7:3D X509v3 Authority Key Identifier: keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:98:54:37:a4:cb:77:57:be:a1:f4:74:2e:02:8c:a7:ab:4f: 6b:6a:7b:07:dc:17:ad:b6:fa:e3:fe:d5:e9:00:2c:e1:2c:bf: 42:29:19:4c:a6:48:c5:21:92:c3:9e:2e:b8:e3:94:05:f5:1b: ab:79:42:3c:9d:1d:e2:0d:51:cc:b6:5f:67:f9:4d:25:be:23: ec:36:a0:87:16:51:e9:43:ab:34:1a:62:73:32:cb:47:2c:09: 54:2b:68:cd:38:ba:8c:7f:d0:0f:b2:30:54:57:ef:38:bb:3c: 22:05:bb:a3:61:39:71:7b:11:4d:af:7c:a1:b9:60:ee:82:4b: ad:1d:e6:de:a2:25:ee:c3:29:62:8b:e6:02:00:bc:cb:df:3c: 84:6f:03:df:12:56:52:c2:c9:54:52:af:34:1d:0d:d2:a5:f5: 01:d0:09:ce:bf:84:e2:8c:fe:09:8e:f1:e5:38:4e:df:ae:7d: 75:9b:b2:27:52:d2:35:f9:25:c9:09:76:6f:a2:bb:21:36:da: 3e:a2:f0:ea:eb:57:45:ae:33:6b:94:d5:be:74:49:c8:b3:1b: 9b:c6:ce:18:dc:f5:32:53:0e:6b:b9:02:9c:8b:82:5d:5d:ba: ba:7c:f5:40:77:68:ac:3b:47:5f:9d:1f:39:20:ee:3e:eb:53: e5:b7:55:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0QUIxMTAvBgNVBAUTKDZBMTIxOTcyNkQyMzlDODJGNUE0NDYwMTEyN0QxQUY4 NzI1Q0UwRUQwHhcNMjUwNDAyMjMxMTQwWhcNMjUwNDA5MjMxMTQwWjAYMRYwFAYD VQQDEw02N2VkYzQyYy1jOTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMwzYXaK5FtFI1JXQrHEzqer2JIdWB+X2k19XdvT2i/2hyYYa8ZJunbREjA8 fHQM8sSVslWOwjQCH7RBfsV2J9KrL4WXtlJwwKdV3saogetvuQG2kt1+ODI9mLCZ mHe1as2/SnRvMbrWyEBtJBx3NBs/5Wksh/7HZXiTHDJwzsj30tDDSA0yfeV/csWh yYU1ngQyJjrwy1Ypqbep6k4KLEzvL14A9a61mttoenUySouRygG94oMpbDrJDEut 37pBV0CDehjjJE/MTAthTwZnP+NFHsZY+4W8j5hrF6/AhW18UpT4qDMavDkX3Kmw YUQpiGFpQKuQ++/GQHYzV4Et3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn7MxyV F2ON0GbPDlpaqtkKNMc9MB8GA1UdIwQYMBaAFGoSGXJtI5yC9aRGARJ9GvhyXODt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRBQi82RkUzMDZBNkMy QzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5JTDFwRVlCRW4wYS1ISmM0 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoSVpjbTBqbklMMXBFWUJFbjBhLUhKYzRPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDRBQi82RkUzMDZBNkMyQzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5J TDFwRVlCRW4wYS1ISmM0TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLmFQ3pMt3V76h9HQuAoynq09ransH3Bettvrj/tXpACzhLL9CKRlM pkjFIZLDni6445QF9RureUI8nR3iDVHMtl9n+U0lviPsNqCHFlHpQ6s0GmJzMstH LAlUK2jNOLqMf9APsjBUV+84uzwiBbujYTlxexFNr3yhuWDugkutHebeoiXuwyli i+YCALzL3zyEbwPfElZSwslUUq80HQ3SpfUB0AnOv4TijP4JjvHlOE7frn11m7In UtI1+SXJCXZvorshNto+ovDq61dFrjNrlNW+dEnIsxubxs4Y3PUyUw5ruQKci4Jd Xbq6fPVAd2isO0dfnR85IO4+61Plt1UE -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:08 2025 by rpki-client