$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: xms2E7XZrIRpYqhjnxb+/GFbPvXjI7FL4CMofffWXL4= Subject key identifier: EB:32:07:DE:28:93:00:18:E1:BD:87:3F:0F:C9:D3:1E:F6:01:22:58 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 0967 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 095A Signing time: Sun 06 Apr 2025 19:58:20 +0000 Manifest this update: Sun 06 Apr 2025 19:58:20 +0000 Manifest next update: Sun 13 Apr 2025 19:58:20 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: cAH/2QlRpm+R/VCRozfMgNT+ZQ7DJnn/XIr6JrEJmsA=) 2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: OKYnpL3ItOClZYUiMv6VNENRunTew7JMF8uzbl0/Bwg=) 3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: c/YMEhJjfVpB3i5Wjtv4VGg1Y4E70AtSKzhUUpN9Sak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 19:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2407 (0x967) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2 Validity Not Before: Apr 6 19:58:20 2025 GMT Not After : Apr 13 19:58:20 2025 GMT Subject: CN=67f2dcdc-1bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:8d:99:d5:68:3d:36:69:a8:4d:ce:ee:0c: e0:4a:ed:6e:62:4c:e4:55:d4:2d:5e:44:f0:13:0b: 82:db:0d:ef:e1:aa:fc:01:54:3d:9c:0f:0c:d8:cf: 79:fd:be:d6:65:1e:b2:98:c5:2a:9f:a4:20:2c:63: 88:12:1b:37:ab:8c:c2:7f:c5:f7:b4:18:d8:a4:eb: 36:16:ac:f3:1a:c8:6a:39:0f:7c:f3:0e:47:62:4c: 79:32:6c:8e:4e:e5:1b:df:cf:6a:33:55:6a:95:57: 5a:f8:f4:9b:f3:38:33:b1:80:e5:8b:84:b4:eb:f1: 13:fd:67:db:56:12:48:4c:8f:36:31:21:2d:67:a9: 60:82:6f:4a:af:8e:c0:3f:88:e0:59:a0:cf:0b:61: a3:39:cd:e4:cb:f3:3a:d4:89:b8:84:3c:8b:c5:fa: 25:60:47:6e:15:a3:0e:60:10:a3:df:e6:27:6e:47: 55:c4:0f:8a:32:3a:55:a6:f1:a1:44:5a:25:21:9f: 52:08:c8:da:af:e8:d4:9a:b6:a0:e6:9d:90:ef:77: 1e:27:f1:a4:11:ca:d5:72:6a:dd:17:d3:00:b8:89: a5:f4:55:25:70:e1:0d:41:64:3a:a8:fe:80:ee:06: 5b:9c:c6:29:e6:eb:9e:e0:68:e7:23:ae:14:10:06: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:32:07:DE:28:93:00:18:E1:BD:87:3F:0F:C9:D3:1E:F6:01:22:58 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:18:6d:3a:ca:ab:bc:0b:83:6a:b6:b8:68:80:b6:c3:04:c3: ab:99:d9:47:ca:97:f4:95:7a:89:0d:a5:28:4a:2f:8b:ff:e1: e5:fe:e7:d9:3f:18:17:9c:83:21:a7:0a:84:98:d1:c3:19:72: 02:3c:87:e6:b6:29:bf:3c:46:3e:b1:fc:14:f7:c6:c5:86:b3: 1c:e5:6f:ab:c3:5a:4e:7d:30:58:05:9d:6a:a7:a9:44:c0:3f: 40:d7:61:49:ad:d9:78:60:0b:e5:c6:13:bb:31:76:43:c7:47: 57:e5:0e:f8:22:db:b2:55:41:81:3d:5b:68:b7:af:b6:4d:ae: 12:86:53:36:58:ac:26:5d:16:56:f1:26:e9:15:2a:2f:0b:67: 55:f2:bb:1e:74:37:c0:1a:f1:b5:d3:f3:8c:46:75:a4:33:a1: 94:87:e8:ec:99:85:58:17:22:ff:95:d8:84:61:26:1e:01:c3: 7f:04:3d:f2:bb:1e:52:16:1f:de:4d:9b:26:e9:96:01:99:11: 97:aa:0c:b1:c5:6e:f8:26:e2:22:a7:f7:fe:21:9e:e2:02:ed: c5:a5:48:bc:3f:60:9a:58:57:ed:c6:27:f3:97:63:0f:f2:ee: 62:a2:d4:70:e6:88:c5:51:62:3e:16:e7:f8:6d:f2:34:a3:ac: b1:ea:41:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjUwNDA2MTk1ODIwWhcNMjUwNDEzMTk1ODIwWjAYMRYwFAYD VQQDEw02N2YyZGNkYy0xYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5mNmdVoPTZpqE3O7gzgSu1uYkzkVdQtXkTwEwuC2w3v4ar8AVQ9nA8M2M95 /b7WZR6ymMUqn6QgLGOIEhs3q4zCf8X3tBjYpOs2FqzzGshqOQ988w5HYkx5MmyO TuUb389qM1VqlVda+PSb8zgzsYDli4S06/ET/WfbVhJITI82MSEtZ6lggm9Kr47A P4jgWaDPC2GjOc3ky/M61Im4hDyLxfolYEduFaMOYBCj3+YnbkdVxA+KMjpVpvGh RFolIZ9SCMjar+jUmrag5p2Q73ceJ/GkEcrVcmrdF9MAuIml9FUlcOENQWQ6qP6A 7gZbnMYp5uue4GjnI64UEAb2TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsyB94o kwAY4b2HPw/J0x72ASJYMB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOGG06yqu8C4NqtrhogLbDBMOrmdlHypf0lXqJDaUoSi+L/+Hl/ufZ PxgXnIMhpwqEmNHDGXICPIfmtim/PEY+sfwU98bFhrMc5W+rw1pOfTBYBZ1qp6lE wD9A12FJrdl4YAvlxhO7MXZDx0dX5Q74ItuyVUGBPVtot6+2Ta4ShlM2WKwmXRZW 8SbpFSovC2dV8rsedDfAGvG10/OMRnWkM6GUh+jsmYVYFyL/ldiEYSYeAcN/BD3y ux5SFh/eTZsm6ZYBmRGXqgyxxW74JuIip/f+IZ7iAu3FpUi8P2CaWFftxifzl2MP 8u5iotRw5ojFUWI+Fuf4bfI0o6yx6kHy -----END CERTIFICATE-----Generated at Mon Apr 7 04:27:24 2025 by rpki-client