$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json) Hash identifier: 3rkJZFjly4SAOLUyGNT0xU8Pu9JYlQuVJDY6kAMUrl0= Subject key identifier: 96:5E:DF:13:AB:76:76:D1:CE:EE:CC:6A:A7:37:DF:10:6E:B3:56:7D Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 05B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft Manifest number: 05A6 Signing time: Wed 02 Apr 2025 23:13:29 +0000 Manifest this update: Wed 02 Apr 2025 23:13:28 +0000 Manifest next update: Wed 09 Apr 2025 23:13:28 +0000 Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: 1+oUUbfpDshMK+u0R3vIuz5AfFcmctWCbpHZ3K3r+KE=) 2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: 7ioLjk8VeJvEHBuoWRfrT57B74IDRpNgRa9+NJtrnGo=) 3: 0DD6AB9CA4F011EC96AF7B65C4F9AE02.roa (hash: /5KvjYunF83kIcMiJK5ao0UnFWTIm9b33GuRAVT7yXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7 Validity Not Before: Apr 2 23:13:28 2025 GMT Not After : Apr 9 23:13:28 2025 GMT Subject: CN=67edc499-d2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:c9:09:13:f0:68:68:9c:51:02:68:11:e8: 5b:59:89:7a:fd:a4:5b:87:64:43:ae:5a:b4:15:2b: ae:9f:8c:1b:32:85:65:14:91:a8:64:5d:8a:28:e4: 82:90:42:87:69:60:f9:06:32:13:2d:8b:16:7b:e9: 0e:4e:ce:eb:fa:60:4d:20:3a:03:2b:f7:bc:6d:70: d9:1a:aa:8a:fb:66:9c:da:e4:35:b4:08:f1:3a:73: 25:f2:d0:13:9b:e6:d9:7f:04:84:f7:f8:c5:f0:ad: 3c:06:9e:b0:e0:3e:45:61:84:bb:8d:e6:62:dd:ec: a8:46:3e:fd:38:87:7c:72:07:5a:84:c2:14:f7:11: 88:d8:7b:35:e8:ad:51:32:1d:17:58:29:23:bf:a0: 54:e8:ea:52:08:b2:aa:03:52:42:e6:5e:6c:6d:cb: a6:12:ed:ab:f7:da:a1:10:b8:e1:d4:5c:43:d9:82: 5b:87:1c:90:ae:cc:c6:b8:37:0f:e0:67:4b:b0:62: e0:7c:77:b9:94:06:dc:0b:9f:42:a6:9d:11:b2:0e: 0e:1d:a2:f0:94:70:f5:8b:68:c7:d1:0b:54:0e:68: 57:cc:f5:5b:76:cf:1f:8e:f4:87:e4:b4:0a:90:b3: 3e:99:6f:94:cb:87:91:e4:eb:2b:f1:f3:da:3e:33: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5E:DF:13:AB:76:76:D1:CE:EE:CC:6A:A7:37:DF:10:6E:B3:56:7D X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:b4:f0:75:32:a3:5f:a5:5d:36:3e:15:8f:9a:70:20:e0:8e: 5c:4f:ef:72:08:8a:73:42:2c:12:5d:42:33:3b:56:45:bf:45: 48:c5:af:11:d7:85:62:d1:63:51:e8:58:70:b0:d3:44:59:72: c7:51:30:30:8e:42:e7:d1:08:45:8a:58:6c:ca:16:50:93:81: be:0e:7a:ea:e2:7f:04:4e:0d:7e:32:47:8f:c2:8c:a5:34:23: de:f9:4a:fc:42:c1:55:d0:47:12:1b:a4:51:30:af:d0:6b:1b: b5:9d:73:54:88:20:89:31:9c:66:0e:cb:e1:48:ae:65:75:58: 13:68:01:60:2f:40:ce:74:3b:3a:a6:6d:ed:9c:19:59:fa:52: 56:c4:a1:d7:44:e5:3f:2d:56:56:d7:3e:bd:34:75:e5:90:51: c4:c9:29:98:4d:25:6c:a7:61:6c:06:c4:88:e1:6a:d0:d0:e1: 3d:90:53:b0:97:1b:a9:8b:ca:87:5b:c4:8e:b7:07:35:ae:70: 36:75:f1:da:84:03:57:7a:98:e0:f9:96:92:7e:a8:6d:05:e5: 30:b0:1f:e3:79:81:8f:e6:04:f8:e0:85:0d:05:2e:28:56:24: 64:04:e3:50:a5:d2:80:ad:a0:19:f9:4d:7f:10:e5:dd:b4:f1: ff:02:22:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjUwNDAyMjMxMzI4WhcNMjUwNDA5MjMxMzI4WjAYMRYwFAYD VQQDEw02N2VkYzQ5OS1kMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqt7JCRPwaGicUQJoEehbWYl6/aRbh2RDrlq0FSuun4wbMoVlFJGoZF2KKOSC kEKHaWD5BjITLYsWe+kOTs7r+mBNIDoDK/e8bXDZGqqK+2ac2uQ1tAjxOnMl8tAT m+bZfwSE9/jF8K08Bp6w4D5FYYS7jeZi3eyoRj79OId8cgdahMIU9xGI2Hs16K1R Mh0XWCkjv6BU6OpSCLKqA1JC5l5sbcumEu2r99qhELjh1FxD2YJbhxyQrszGuDcP 4GdLsGLgfHe5lAbcC59Cpp0Rsg4OHaLwlHD1i2jH0QtUDmhXzPVbds8fjvSH5LQK kLM+mW+Uy4eR5Osr8fPaPjP+LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZe3xOr dnbRzu7Maqc33xBus1Z9MB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjVGNy80NEZDRTU2OEM3ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FD dUtITlJYZVRYazg4Slp3WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVtPB1MqNfpV02PhWPmnAg4I5cT+9yCIpzQiwSXUIzO1ZFv0VIxa8R 14Vi0WNR6FhwsNNEWXLHUTAwjkLn0QhFilhsyhZQk4G+Dnrq4n8ETg1+MkePwoyl NCPe+Ur8QsFV0EcSG6RRMK/Qaxu1nXNUiCCJMZxmDsvhSK5ldVgTaAFgL0DOdDs6 pm3tnBlZ+lJWxKHXROU/LVZW1z69NHXlkFHEySmYTSVsp2FsBsSI4WrQ0OE9kFOw lxupi8qHW8SOtwc1rnA2dfHahANXepjg+ZaSfqhtBeUwsB/jeYGP5gT44IUNBS4o ViRkBONQpdKAraAZ+U1/EOXdtPH/AiJQ -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:05 2025 by rpki-client