$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json) Hash identifier: jlNr7QyDc1EFe4zUojI9uiryP00LW8k7rOBFXh+iJQA= Subject key identifier: B2:E9:1C:59:F3:0D:8B:2C:4A:EF:1C:56:3C:8A:A5:8E:8D:03:E6:AA Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft Manifest number: 018D Signing time: Fri 11 Apr 2025 02:51:25 +0000 Manifest this update: Fri 11 Apr 2025 02:51:25 +0000 Manifest next update: Fri 18 Apr 2025 02:51:25 +0000 Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: l5poYnPAxaXc+oYwjf1qQaNhZIrGzTywyv5LyPwtm4E=) 2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA Validity Not Before: Apr 11 02:51:25 2025 GMT Not After : Apr 18 02:51:25 2025 GMT Subject: CN=67f883ad-325f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:d3:fb:48:be:60:20:5c:a2:18:89:81:bc: 31:8d:1a:3d:34:99:07:11:d1:b7:f9:0b:82:ab:c6: 26:ca:25:98:60:fc:be:be:10:9d:b3:cb:6e:28:94: 46:c3:21:a6:f3:44:bd:d6:58:08:87:4b:dd:71:59: 65:2d:d2:52:cc:1f:f9:b7:1f:d4:04:ac:61:e7:4c: 30:c7:36:7e:62:5b:ea:e8:6f:65:15:44:5a:09:31: 44:81:76:b7:ce:59:6e:e5:d6:8e:36:31:a2:74:79: 3b:3e:cf:f9:99:78:ad:26:b8:fe:6d:d1:7d:8d:35: d3:c5:5c:e5:7f:e7:dc:3f:42:5a:67:e8:08:1c:43: a0:9b:31:0c:10:05:a5:7e:c5:5a:ba:77:b1:6d:6a: d3:dd:7b:bf:ae:35:19:38:ac:25:81:45:e5:d7:1f: 17:07:75:86:11:d2:0d:f0:58:bf:41:f0:55:33:c4: 26:d3:81:37:bb:16:fa:93:39:86:e9:18:e7:c3:65: 6d:57:a4:7d:bc:81:a6:22:8b:5e:95:c6:4b:a9:6d: 83:d6:5c:23:27:cc:2b:dc:9d:75:24:ed:72:35:c0: 3a:98:8a:94:7a:35:b4:24:21:3d:96:11:c6:0d:d3: df:cb:af:b0:89:0e:49:b9:ec:f7:e3:1e:ca:dc:66: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E9:1C:59:F3:0D:8B:2C:4A:EF:1C:56:3C:8A:A5:8E:8D:03:E6:AA X509v3 Authority Key Identifier: keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:9d:79:b4:34:28:cd:0b:14:6c:56:27:89:f9:f9:d0:9f:81: 79:a7:49:45:29:d8:b2:98:01:d7:6c:7e:56:5a:4a:65:a9:b5: 0b:ca:1d:b0:b5:fd:05:86:45:c7:fa:a3:bc:de:e8:cf:68:70: 42:6d:bf:74:ce:3a:74:d2:12:e1:ee:86:2f:79:3d:26:c6:15: 90:aa:c1:ba:d0:f9:12:50:0b:79:63:7b:e5:8a:27:3a:95:e2: 2e:8d:7a:d5:d4:cc:f5:0c:ad:e9:ef:3c:cd:e5:a5:0c:e9:0d: 01:e4:ab:ef:87:e9:5a:a8:50:6e:36:a1:a7:0d:9d:6a:92:2c: f8:7f:c5:a4:0f:e4:80:4b:c2:06:b7:64:ea:12:af:71:af:10: b2:a1:c2:05:d5:cb:2a:29:77:ec:08:cb:c2:7a:ea:70:85:f3: 0a:c9:2a:8c:e8:bf:fd:38:5d:92:f2:8f:fc:fd:6d:c6:80:40: da:22:eb:6a:78:62:aa:bf:b0:e0:5b:f4:75:e5:f3:72:a4:af: a4:38:ff:7d:d2:db:49:46:58:b1:cc:0c:76:d7:42:10:63:3b: b5:24:0b:96:42:11:0e:d8:96:89:6f:38:8d:5f:a7:86:3a:17: 82:c9:25:05:c2:03:7c:f7:12:2e:80:04:23:28:79:ff:61:9b: a9:bd:12:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5MkQxMTAvBgNVBAUTKDdERDg1RUM0Mzk3ODZGRDQyRTBCRjdCNzIxMzc3NjVG MDVEMEU5RkEwHhcNMjUwNDExMDI1MTI1WhcNMjUwNDE4MDI1MTI1WjAYMRYwFAYD VQQDEw02N2Y4ODNhZC0zMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPrT+0i+YCBcohiJgbwxjRo9NJkHEdG3+QuCq8YmyiWYYPy+vhCds8tuKJRG wyGm80S91lgIh0vdcVllLdJSzB/5tx/UBKxh50wwxzZ+Ylvq6G9lFURaCTFEgXa3 zllu5daONjGidHk7Ps/5mXitJrj+bdF9jTXTxVzlf+fcP0JaZ+gIHEOgmzEMEAWl fsVaunexbWrT3Xu/rjUZOKwlgUXl1x8XB3WGEdIN8Fi/QfBVM8Qm04E3uxb6kzmG 6Rjnw2VtV6R9vIGmIotelcZLqW2D1lwjJ8wr3J11JO1yNcA6mIqUejW0JCE9lhHG DdPfy6+wiQ5Juez34x7K3GY4mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLpHFnz DYssSu8cVjyKpY6NA+aqMB8GA1UdIwQYMBaAFH3YXsQ5eG/ULgv3tyE3dl8F0On6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC82QkUyQ0FEMEJE MzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5UXVDX2UzSVRkMlh3WFE2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkaGV4RGw0YjlRdUNfZTNJVGQyWHdYUTZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjkyRC82QkUyQ0FEMEJEMzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5 UXVDX2UzSVRkMlh3WFE2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZnXm0NCjNCxRsVieJ+fnQn4F5p0lFKdiymAHXbH5WWkplqbULyh2w tf0FhkXH+qO83ujPaHBCbb90zjp00hLh7oYveT0mxhWQqsG60PkSUAt5Y3vliic6 leIujXrV1Mz1DK3p7zzN5aUM6Q0B5Kvvh+laqFBuNqGnDZ1qkiz4f8WkD+SAS8IG t2TqEq9xrxCyocIF1csqKXfsCMvCeupwhfMKySqM6L/9OF2S8o/8/W3GgEDaIutq eGKqv7DgW/R15fNypK+kOP990ttJRlixzAx210IQYzu1JAuWQhEO2JaJbziNX6eG OheCySUFwgN89xIugAQjKHn/YZupvRIT -----END CERTIFICATE-----Generated at Sat Apr 12 15:20:06 2025 by rpki-client