$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft File: glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json) Hash identifier: vdWbzr8uQcERUzxvTWCRitKr9tSMdNn9Rkpk0d7Ftd8= Subject key identifier: 8D:20:53:C0:D5:D1:BB:FD:8F:3E:18:F8:41:D4:C3:6A:71:95:D1:BD Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 Certificate issuer: /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft Manifest number: 01CF Signing time: Thu 03 Apr 2025 02:11:44 +0000 Manifest this update: Thu 03 Apr 2025 02:11:44 +0000 Manifest next update: Thu 10 Apr 2025 02:11:44 +0000 Files and hashes: 1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: oITAViWi8N59P2lc4XEyg9eyYtBLtuaOs5BjwG/uEmE=) 2: 237306724C5611ED8D5DDD70C4F9AE02.roa (hash: M5APD5jLzCTS+EqF5L/kaW7FUXSVgVVwOlYb/pQ9rq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0514 Validity Not Before: Apr 3 02:11:44 2025 GMT Not After : Apr 10 02:11:44 2025 GMT Subject: CN=67edee60-911b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:da:d9:3d:38:57:9c:10:cf:fb:9b:32:b6: 7b:ea:6a:ae:a9:89:39:12:d9:0a:aa:ad:f6:4c:92: 4d:fa:f0:e9:c4:0c:38:b7:78:a5:c9:6d:73:b3:c3: 90:04:d4:fe:d8:be:84:26:e2:aa:cf:10:f7:bb:e6: 3c:fc:a9:fd:b8:48:90:92:7b:b8:71:e1:26:d0:b2: 9b:bd:e5:6a:59:01:70:31:08:c6:53:f1:e8:80:10: 0f:82:8c:fd:70:14:4e:5a:6d:e7:94:44:43:f0:ac: f4:ca:d9:32:89:61:ac:ca:50:81:00:dd:8e:e3:d2: ff:27:d1:26:61:c5:3b:34:7e:1a:b4:08:4f:8a:0f: 0f:e6:e3:c7:0e:37:d1:d5:a7:90:46:39:57:7b:83: 30:23:23:77:25:d7:81:11:49:45:2e:67:e0:e0:7e: ca:69:6d:b4:8a:a9:c2:1f:2e:b5:18:b9:73:cf:ea: 2e:16:d5:18:a0:6e:4c:fe:19:32:76:49:f0:b5:a5: 72:97:6a:88:31:c6:5c:79:a8:cc:1e:9e:9c:a8:66: a4:5a:58:05:51:a0:09:34:2b:eb:4c:b3:d1:d4:13: a7:7a:8d:8f:12:3b:11:9b:41:38:1a:dc:1e:c8:51: d6:ee:47:e6:a2:c2:12:c6:5e:a3:e1:48:28:62:f6: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:20:53:C0:D5:D1:BB:FD:8F:3E:18:F8:41:D4:C3:6A:71:95:D1:BD X509v3 Authority Key Identifier: keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:14:1e:07:9d:0a:04:6b:08:37:30:dd:fc:fa:46:eb:3a:cf: 7b:31:a1:1c:4e:c2:1b:2f:ef:c6:2b:a4:98:3b:97:5a:d4:f8: 6e:69:6a:fd:42:8b:5e:c9:d9:7b:88:af:38:76:95:8b:32:94: 91:b6:22:94:81:2f:f3:6e:49:6b:08:de:60:ec:18:4c:31:b0: 85:50:19:b6:95:99:f0:43:e8:a7:a4:d4:69:1d:e1:ed:59:57: 0b:f3:07:b0:09:4f:94:89:89:49:16:4d:0f:c0:4c:8d:05:ac: 82:95:08:bb:f0:c7:c3:5e:32:8c:8d:17:59:f5:39:d9:c5:ce: 12:c3:7a:59:ae:6b:d8:00:d7:48:f9:29:e3:e8:ba:a9:e8:0d: 75:27:a6:e0:28:cd:cd:e3:7f:f6:19:7c:e6:3d:71:ba:31:81: 4f:7f:00:c6:52:bf:e9:ea:0c:2d:4f:77:66:a7:f7:10:9d:22: 75:d0:89:02:99:bf:59:df:75:e4:07:87:b6:74:37:c1:d7:98: 54:82:91:d6:e5:85:27:29:77:7c:60:65:2a:3b:e1:40:0a:c1: 1e:4e:c9:1f:43:34:b5:91:f9:0c:6f:a1:01:71:9b:9f:2a:21: 03:d6:3d:96:89:52:8b:87:44:f7:fa:1c:1c:a9:17:b4:76:58: fb:79:58:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1MTQxMTAvBgNVBAUTKDgyNTIzNDA0MDc2OTNGOEJDN0MxMzIyNTNGNDA2QzA0 RTQ2Nzc2RjYwHhcNMjUwNDAzMDIxMTQ0WhcNMjUwNDEwMDIxMTQ0WjAYMRYwFAYD VQQDEw02N2VkZWU2MC05MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseHa2T04V5wQz/ubMrZ76mquqYk5EtkKqq32TJJN+vDpxAw4t3ilyW1zs8OQ BNT+2L6EJuKqzxD3u+Y8/Kn9uEiQknu4ceEm0LKbveVqWQFwMQjGU/HogBAPgoz9 cBROWm3nlERD8Kz0ytkyiWGsylCBAN2O49L/J9EmYcU7NH4atAhPig8P5uPHDjfR 1aeQRjlXe4MwIyN3JdeBEUlFLmfg4H7KaW20iqnCHy61GLlzz+ouFtUYoG5M/hky dknwtaVyl2qIMcZceajMHp6cqGakWlgFUaAJNCvrTLPR1BOneo2PEjsRm0E4Gtwe yFHW7kfmosISxl6j4UgoYvaPvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0gU8DV 0bv9jz4Y+EHUw2pxldG9MB8GA1UdIwQYMBaAFIJSNAQHaT+Lx8EyJT9AbATkZ3b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDUxNC9FRjBBMzUyRTRD NTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0dkh3VElsUDBCc0JPUm5k dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dsSTBCQWRwUDR2SHdUSWxQMEJzQk9SbmR2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDUxNC9FRjBBMzUyRTRDNTMxMUVEOEFDMDUwNzBDNEY5QUUwMi9nbEkwQkFkcFA0 dkh3VElsUDBCc0JPUm5kdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeFB4HnQoEawg3MN38+kbrOs97MaEcTsIbL+/GK6SYO5da1PhuaWr9 Qoteydl7iK84dpWLMpSRtiKUgS/zbklrCN5g7BhMMbCFUBm2lZnwQ+inpNRpHeHt WVcL8wewCU+UiYlJFk0PwEyNBayClQi78MfDXjKMjRdZ9TnZxc4Sw3pZrmvYANdI +Snj6Lqp6A11J6bgKM3N43/2GXzmPXG6MYFPfwDGUr/p6gwtT3dmp/cQnSJ10IkC mb9Z33XkB4e2dDfB15hUgpHW5YUnKXd8YGUqO+FACsEeTskfQzS1kfkMb6EBcZuf KiED1j2WiVKLh0T3+hwcqRe0dlj7eViS -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:44 2025 by rpki-client