$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json) Hash identifier: bPG8nvMRUivnt5Vgc67xIvK7XK6kEK46Ke4+2WWXI+k= Subject key identifier: CF:6B:CC:55:72:D0:38:4F:8A:ED:5B:79:99:E0:32:E9:55:76:BD:92 Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft Manifest number: 34 Signing time: Thu 17 Apr 2025 06:25:03 +0000 Manifest this update: Thu 17 Apr 2025 06:25:02 +0000 Manifest next update: Thu 24 Apr 2025 06:25:02 +0000 Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: xyDD6jXhvS4WLFKsBHtR8hAsK7rAmsRx4AfxHRcHiHE=) 2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: BnzgVRQY1lWGd2cFrP1xnxB6cOmKQA86fc66ckx28mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 06:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Validity Not Before: Apr 17 06:25:02 2025 GMT Not After : Apr 24 06:25:02 2025 GMT Subject: CN=68009ebe-6bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:23:64:46:b2:72:32:a2:5d:8a:3c:05:8f:b0: c2:36:8b:fe:bb:f1:5f:f4:a6:93:67:c4:ec:c9:48: 4b:09:33:fd:b8:7e:08:3b:63:10:f2:ca:23:ac:f1: 6e:84:82:e3:84:3c:14:d7:37:7c:74:df:96:07:e4: a6:2c:77:9b:c8:88:27:a8:8d:a8:40:d6:e0:55:0e: 2b:de:18:e3:ed:7b:a5:97:ae:92:d2:53:28:fd:27: 1b:93:55:de:c0:22:bf:f5:77:8b:7c:24:bb:6b:be: 6b:8e:ba:26:db:34:3e:85:0c:a4:79:c9:4b:de:80: 96:02:55:36:85:d7:46:15:1d:77:3f:26:30:5c:34: dd:9d:0c:fb:a4:2c:c4:52:41:0f:d6:2f:e7:5e:f7: b7:2b:2b:e7:5c:6c:dc:ea:eb:61:55:b9:97:c0:89: 7d:ac:b4:92:71:9b:41:6f:2a:15:5c:25:92:bb:a9: c7:0f:fc:6e:f6:20:75:fb:f4:ad:5e:b2:ea:9e:5e: 05:7e:5c:b4:0e:e3:9c:e9:eb:d6:dd:45:c2:ec:67: 79:25:a6:10:0e:53:a4:6d:2e:f6:0e:07:87:a8:1f: a0:bc:8a:58:69:0c:b1:bf:ba:81:0c:06:5b:3a:ea: f6:05:bd:ed:a6:71:c0:bb:76:40:af:9c:ae:5a:5d: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6B:CC:55:72:D0:38:4F:8A:ED:5B:79:99:E0:32:E9:55:76:BD:92 X509v3 Authority Key Identifier: keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e9:5f:46:b8:e6:df:68:aa:c5:db:d3:ed:38:e4:9d:10:bf: 7a:6a:59:f1:c5:f3:88:0a:6f:0b:4a:48:2c:c9:08:5a:8f:69: 7b:c9:46:d1:d5:24:4d:84:1d:08:ba:e7:cf:cd:25:1b:a0:c7: c9:7c:fb:bf:5b:5e:ae:1e:96:c9:4b:5b:ac:49:2a:42:eb:a9: 46:4c:4d:08:11:a8:c5:20:13:dd:e6:4d:01:93:c1:fa:49:c2: 63:57:41:86:f6:6d:f9:dd:1f:2b:4f:6e:49:25:d2:8f:fc:1e: 23:1d:fd:32:ee:f3:c1:78:62:2d:fe:c5:4d:c3:da:97:8e:69: f6:b6:e1:f2:d4:08:6c:8c:83:49:38:ff:ba:a6:cc:68:10:16: 7c:23:04:45:01:44:a9:60:93:cc:bc:b3:9b:70:b7:d3:e4:45: a8:34:4c:09:10:db:d3:b6:1a:6b:36:2b:a4:a8:c1:c1:41:a4: d7:53:cf:38:bd:05:bf:1e:91:a0:fc:d8:74:60:dc:51:70:3f: 4b:dd:07:ed:44:9d:b2:e3:56:ca:8b:68:23:e1:ad:82:65:3e: cc:ac:63:bf:07:5f:c7:14:72:86:e1:c8:6a:38:5e:07:83:52: a5:3f:d3:f1:de:f0:ad:fc:74:74:51:6c:92:4c:0e:c8:74:59: 27:c3:d5:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTVEQzExMC8GA1UEBRMoRDM2RTEwNDI2MUY4MTlENjhEMEY3MEJCMjlBREZFOEVG NDYzQjJFRDAeFw0yNTA0MTcwNjI1MDJaFw0yNTA0MjQwNjI1MDJaMBgxFjAUBgNV BAMTDTY4MDA5ZWJlLTZiZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMI2RGsnIyol2KPAWPsMI2i/678V/0ppNnxOzJSEsJM/24fgg7YxDyyiOs8W6E guOEPBTXN3x035YH5KYsd5vIiCeojahA1uBVDiveGOPte6WXrpLSUyj9JxuTVd7A Ir/1d4t8JLtrvmuOuibbND6FDKR5yUvegJYCVTaF10YVHXc/JjBcNN2dDPukLMRS QQ/WL+de97crK+dcbNzq62FVuZfAiX2stJJxm0FvKhVcJZK7qccP/G72IHX79K1e suqeXgV+XLQO45zp69bdRcLsZ3klphAOU6RtLvYOB4eoH6C8ilhpDLG/uoEMBls6 6vYFve2mccC7dkCvnK5aXYK5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz2vMVXLQ OE+K7Vt5meAy6VV2vZIwHwYDVR0jBBgwFoAU024QQmH4GdaND3C7Ka3+jvRjsu0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNURDLzRGRUMxQzA0Q0VF RDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2RhTkQzQzdLYTMtanZSanN1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMDI0UVFtSDRHZGFORDNDN0thMy1qdlJqc3UwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NURDLzRGRUMxQzA0Q0VFRDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2Rh TkQzQzdLYTMtanZSanN1MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC7pX0a45t9oqsXb0+045J0Qv3pqWfHF84gKbwtKSCzJCFqPaXvJRtHV JE2EHQi658/NJRugx8l8+79bXq4elslLW6xJKkLrqUZMTQgRqMUgE93mTQGTwfpJ wmNXQYb2bfndHytPbkkl0o/8HiMd/TLu88F4Yi3+xU3D2peOafa24fLUCGyMg0k4 /7qmzGgQFnwjBEUBRKlgk8y8s5twt9PkRag0TAkQ29O2Gms2K6SowcFBpNdTzzi9 Bb8ekaD82HRg3FFwP0vdB+1EnbLjVsqLaCPhrYJlPsysY78HX8cUcobhyGo4XgeD UqU/0/He8K38dHRRbJJMDsh0WSfD1eU= -----END CERTIFICATE-----Generated at Sat Apr 19 00:49:28 2025 by rpki-client