$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json) Hash identifier: KkI8x1HZdIKqtZIdmdg6UCnNe16/v5vYCj3mQPpO4mE= Subject key identifier: E9:0A:38:CA:34:23:7D:15:90:02:4A:07:54:1E:0D:73:8E:A8:ED:28 Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft Manifest number: 01D9 Signing time: Sat 29 Mar 2025 02:25:43 +0000 Manifest this update: Sat 29 Mar 2025 02:25:43 +0000 Manifest next update: Sat 05 Apr 2025 02:25:43 +0000 Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: 2wkNC6VV3pkPXY6uozx9DKJ909azSI7Q3V+HfsfrE5g=) 2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: rc/VDMjkPbB4X1/rw349yGgl9pIXGG2Nvyj57rr+IWw=) 3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: 1pnwFpSmR4EBTHjCO/gvMKBX3b/KZHcHGgKDB9usLIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93BB Validity Not Before: Mar 29 02:25:43 2025 GMT Not After : Apr 5 02:25:43 2025 GMT Subject: CN=67e75a27-f53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d8:76:3f:61:e8:ca:17:91:c8:6a:80:c6:e0: 58:2c:f0:cc:b3:42:f1:f8:75:49:c7:fe:70:30:dc: d0:8d:62:71:58:47:58:96:08:e8:5d:ac:95:2c:92: 71:5e:9c:fd:10:d0:52:92:b1:09:95:56:8f:58:26: 22:b9:76:3d:54:2a:41:02:52:f9:a1:d6:16:ca:d8: f5:57:97:71:c5:71:1b:51:32:3d:2c:96:fb:a6:44: ac:e2:d1:a3:85:ad:0d:92:a0:96:99:5a:7f:69:48: 70:7b:b4:12:98:fe:86:b3:04:03:89:63:31:f0:65: 04:f7:26:b6:75:3d:c7:fe:60:a5:49:b3:96:ae:6d: 2d:75:1b:2e:3d:53:0b:67:d2:c2:4d:c2:03:a0:02: 38:15:db:d0:72:13:50:fc:d8:35:d1:62:d0:11:35: db:e3:8c:ab:86:a0:5d:ed:d8:8e:73:92:79:8a:1a: 31:aa:4f:8a:5d:b1:e5:23:15:17:b9:dc:0c:9d:f2: bb:78:a7:ff:73:81:e6:ad:39:80:27:dc:77:7f:65: 05:04:ba:e3:69:36:94:7d:7a:fc:b5:17:8f:3f:74: 85:8c:71:b9:40:00:f9:26:93:98:e1:2f:8d:b9:ea: 8b:f3:db:da:0c:03:84:4a:20:30:07:cd:40:bb:8b: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0A:38:CA:34:23:7D:15:90:02:4A:07:54:1E:0D:73:8E:A8:ED:28 X509v3 Authority Key Identifier: keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c3:5a:d3:fc:dc:c5:a7:90:7f:88:60:b4:e3:bc:f0:6f:c9: 81:a5:6a:50:f3:4b:95:ca:b7:ae:54:5a:7a:9c:9f:fe:28:5b: b9:f4:6a:82:98:13:4c:c0:7e:f4:7d:6b:7c:df:d1:6e:e5:9c: 89:53:fb:24:37:5e:56:bf:a8:25:be:d1:c0:6d:1d:e9:93:31: 7d:ba:f2:aa:1d:5f:de:7e:96:41:f6:1f:03:cb:28:76:3e:4c: 62:ab:cd:2e:a2:d4:e4:c1:b8:b1:16:41:29:f9:a6:5b:b9:db: ad:69:bd:1f:87:16:cd:44:60:e5:2d:10:06:03:11:e3:c6:ee: e4:d1:35:8e:5a:b7:80:30:a0:27:41:63:6f:38:2d:69:7f:f5: 24:02:3e:c4:b3:46:a2:00:ec:8b:91:70:4c:67:e6:5f:fd:19: 64:c0:58:2f:52:a3:0b:cd:c6:5b:d5:98:39:e9:40:03:33:aa: 6d:db:1a:67:01:f6:68:b1:08:65:77:30:e0:7a:87:d1:ff:3b: ce:a2:d5:e9:9c:da:c8:a0:4d:c6:fc:37:0b:00:24:f6:b3:5b: 6e:3b:b5:64:a0:aa:0f:15:7d:f7:b5:67:96:ad:23:64:64:cf: e6:29:2d:7f:11:2c:ff:0c:77:db:67:a9:03:54:d2:5f:53:c8: 2b:1b:ee:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQkIxMTAvBgNVBAUTKEYzRTVFMjU2RDJFQzVDQTY3RjhBMTlCRTVBMUIyODI5 QjEzNzU4MUYwHhcNMjUwMzI5MDIyNTQzWhcNMjUwNDA1MDIyNTQzWjAYMRYwFAYD VQQDEw02N2U3NWEyNy1mNTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dh2P2HoyheRyGqAxuBYLPDMs0Lx+HVJx/5wMNzQjWJxWEdYlgjoXayVLJJx Xpz9ENBSkrEJlVaPWCYiuXY9VCpBAlL5odYWytj1V5dxxXEbUTI9LJb7pkSs4tGj ha0NkqCWmVp/aUhwe7QSmP6GswQDiWMx8GUE9ya2dT3H/mClSbOWrm0tdRsuPVML Z9LCTcIDoAI4FdvQchNQ/Ng10WLQETXb44yrhqBd7diOc5J5ihoxqk+KXbHlIxUX udwMnfK7eKf/c4HmrTmAJ9x3f2UFBLrjaTaUfXr8tRePP3SFjHG5QAD5JpOY4S+N ueqL89vaDAOESiAwB81Au4vYRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkKOMo0 I30VkAJKB1QeDXOOqO0oMB8GA1UdIwQYMBaAFPPl4lbS7Fymf4oZvlobKCmxN1gf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCQi85NDUxRDM3MjRB MDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hLWl9paG0tV2hzb0tiRTNX QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgtWGlWdExzWEtaX2lobS1XaHNvS2JFM1dCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCQi85NDUxRDM3MjRBMDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hL Wl9paG0tV2hzb0tiRTNXQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvw1rT/NzFp5B/iGC047zwb8mBpWpQ80uVyreuVFp6nJ/+KFu59GqC mBNMwH70fWt839Fu5ZyJU/skN15Wv6glvtHAbR3pkzF9uvKqHV/efpZB9h8Dyyh2 Pkxiq80uotTkwbixFkEp+aZbudutab0fhxbNRGDlLRAGAxHjxu7k0TWOWreAMKAn QWNvOC1pf/UkAj7Es0aiAOyLkXBMZ+Zf/RlkwFgvUqMLzcZb1Zg56UADM6pt2xpn AfZosQhldzDgeofR/zvOotXpnNrIoE3G/DcLACT2s1tuO7VkoKoPFX33tWeWrSNk ZM/mKS1/ESz/DHfbZ6kDVNJfU8grG+5v -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:04 2025 by rpki-client