$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: dTZKyQyvFeY8T0gjyGz3QwGRV0ma9ZCBGmUPkH3XROc= Subject key identifier: 40:7F:53:37:44:90:6C:33:7D:64:3A:3E:F3:5A:74:1C:34:98:FA:B3 Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 0125 Signing time: Thu 03 Apr 2025 03:52:39 +0000 Manifest this update: Thu 03 Apr 2025 03:52:38 +0000 Manifest next update: Thu 10 Apr 2025 03:52:38 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: j4+nyMeF4PPr3tgj4iAlYc/trMOrr+guecoM/f3rg5I=) 2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: j93vJ2NAnCNQy/x2PjU9v6iPhwn1QcPjRO5LSFsSwNE=) 3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: aCNtxlW0MshwMMlV+N563xkNmlCQdXbxR/lNk+drIlA=) 4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: rOkP4Vb8B8/6UrNv3XnkLOomlf0wseQaO6Jnqbw75S0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265 Validity Not Before: Apr 3 03:52:38 2025 GMT Not After : Apr 10 03:52:38 2025 GMT Subject: CN=67ee0606-ab09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e3:48:10:07:11:0a:97:e0:12:c0:90:a4:28: 7e:66:65:84:32:07:1c:fa:0f:8b:32:56:2a:02:22: 5f:2e:da:5a:69:e6:97:b0:78:7f:43:62:23:0b:35: f0:d1:82:0e:ef:63:bb:bd:26:00:96:49:6c:14:c4: 12:02:75:62:d6:52:a5:81:78:2f:06:b2:dc:93:c5: e2:55:a8:cd:0d:5a:8e:d3:a4:62:2e:4c:15:3c:a5: 5a:97:ca:4c:a9:e4:6b:2e:ce:bf:e2:95:8a:06:88: f1:62:fa:b1:9f:2b:91:8e:f2:fd:c3:13:02:e3:c0: 52:1d:7e:0a:c7:96:60:5d:28:eb:db:1e:5c:43:ca: 00:92:93:11:13:f2:e6:c4:d6:92:c8:c5:6e:02:d5: 08:25:0a:d6:8a:47:c7:b8:fc:3a:73:7e:04:a8:59: c2:03:1b:ff:9e:6f:42:ad:f4:f4:3c:06:25:09:5d: e4:43:b0:d7:15:da:ad:c1:50:12:6d:c4:c0:3b:e0: 90:cf:60:3c:a8:76:61:ee:8a:f4:06:7f:90:7d:f9: 7c:a1:73:b1:5b:d1:56:23:3e:83:7b:e4:22:f4:d1: 0c:56:ae:ae:02:15:d4:46:4c:85:bc:91:ae:98:d1: eb:c8:e1:0b:95:83:79:af:46:ba:0f:96:17:1c:76: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7F:53:37:44:90:6C:33:7D:64:3A:3E:F3:5A:74:1C:34:98:FA:B3 X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:c0:db:fd:01:f5:f7:b4:20:91:9d:01:7d:a5:3a:8d:c5:27: cc:e4:0d:59:24:9d:7e:89:a5:73:fc:47:58:12:dc:8b:c4:77: 09:61:c2:f7:da:2c:c6:d3:a2:2c:40:f6:3c:3d:01:2a:1a:b7: 08:a2:39:9d:14:2a:25:e0:42:9f:98:22:cd:a4:ee:37:37:2d: d7:02:09:5d:2e:c3:22:71:70:9c:7a:27:e3:ba:df:71:2d:dc: 99:c2:c5:30:e6:e9:38:47:d9:36:fc:2a:40:ce:c4:d2:ae:d4: 22:6e:3d:69:52:f9:70:27:cf:33:24:5c:3d:5f:3f:b5:32:8b: a4:8b:64:07:f7:4f:28:2b:3a:ed:b4:f6:44:87:2e:ad:07:cd: c1:6d:c4:6f:46:cd:89:43:44:97:84:3d:87:92:fc:d0:95:88: cf:bb:c5:1c:a6:e5:ca:84:9f:92:65:53:d4:e6:28:bb:da:ee: c6:8c:72:9b:1a:4f:68:60:c5:9f:9a:01:57:28:22:45:2f:48: d1:d9:de:a4:89:c1:57:89:e7:6f:a3:c1:d2:94:98:13:4c:eb: 9a:be:9f:dd:c2:a2:d4:02:3d:cb:3d:b4:46:3b:0c:9b:12:ad: f5:0f:cf:ed:3c:99:f1:bd:b1:86:6c:a6:26:cc:df:a6:99:51: 84:d1:de:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjUwNDAzMDM1MjM4WhcNMjUwNDEwMDM1MjM4WjAYMRYwFAYD VQQDEw02N2VlMDYwNi1hYjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ONIEAcRCpfgEsCQpCh+ZmWEMgcc+g+LMlYqAiJfLtpaaeaXsHh/Q2IjCzXw 0YIO72O7vSYAlklsFMQSAnVi1lKlgXgvBrLck8XiVajNDVqO06RiLkwVPKVal8pM qeRrLs6/4pWKBojxYvqxnyuRjvL9wxMC48BSHX4Kx5ZgXSjr2x5cQ8oAkpMRE/Lm xNaSyMVuAtUIJQrWikfHuPw6c34EqFnCAxv/nm9CrfT0PAYlCV3kQ7DXFdqtwVAS bcTAO+CQz2A8qHZh7or0Bn+Qffl8oXOxW9FWIz6De+Qi9NEMVq6uAhXURkyFvJGu mNHryOELlYN5r0a6D5YXHHa0EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEB/UzdE kGwzfWQ6PvNadBw0mPqzMB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABwNv9AfX3tCCRnQF9pTqNxSfM5A1ZJJ1+iaVz/EdYEtyLxHcJYcL3 2izG06IsQPY8PQEqGrcIojmdFCol4EKfmCLNpO43Ny3XAgldLsMicXCceifjut9x LdyZwsUw5uk4R9k2/CpAzsTSrtQibj1pUvlwJ88zJFw9Xz+1Mouki2QH908oKzrt tPZEhy6tB83BbcRvRs2JQ0SXhD2HkvzQlYjPu8UcpuXKhJ+SZVPU5ii72u7GjHKb Gk9oYMWfmgFXKCJFL0jR2d6kicFXiedvo8HSlJgTTOuavp/dwqLUAj3LPbRGOwyb Eq31D8/tPJnxvbGGbKYmzN+mmVGE0d5+ -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:32 2025 by rpki-client