$ rpki-client -vvf rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft File: MJ8WI5oTsNAQQo21URRuUu63C7c.mft (raw, json) Hash identifier: AlCtksvK3d2l7VM9H/tP6BEJPDD2ziXOW0KDYr2JMx8= Subject key identifier: 3B:17:51:46:03:C8:87:D3:81:93:D0:40:DF:FA:06:96:C3:B1:7A:7E Authority key identifier: 30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 Certificate issuer: /CN=A91B423C/serialNumber=309F16239A13B0D010428DB551146E52EEB70BB7 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft Manifest number: 0440 Signing time: Sat 05 Apr 2025 00:21:45 +0000 Manifest this update: Sat 05 Apr 2025 00:21:44 +0000 Manifest next update: Sat 12 Apr 2025 00:21:44 +0000 Files and hashes: 1: MJ8WI5oTsNAQQo21URRuUu63C7c.crl (hash: 9gS+qauRMMOX2fPCNkLghUJ18u++ANmWcyuQY4lXYuc=) 2: 118BA98C51CA11EC9067E22CC4F9AE02.roa (hash: L87/P71GLyeOVHRuWVUui3Zcv+2yVuGxBuaLmPWeK04=) 3: 12A7C1D451CA11EC9067E22CC4F9AE02.roa (hash: hvSnlb31gfJnIJknYF0rYUKJLZVmXt9VjFEolvqLYLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B423C Validity Not Before: Apr 5 00:21:44 2025 GMT Not After : Apr 12 00:21:44 2025 GMT Subject: CN=67f07799-b8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:83:bc:77:27:cd:22:13:5d:cc:77:76:da:4b: cb:ac:82:16:76:00:92:c9:80:6f:95:1f:d2:a8:de: ad:f2:c8:ce:8f:7f:5c:c8:1f:e7:a6:12:73:a5:c0: 2a:f1:61:7c:00:ff:9b:31:d9:38:9b:06:ba:98:40: 96:a4:a7:bb:1f:a5:75:5c:fd:ce:14:8e:34:af:0a: 71:79:0e:90:c9:a6:98:e6:4c:02:28:4e:52:2d:b7: 79:f7:6b:c7:f7:30:42:c0:8f:b3:a7:e6:4f:53:49: b7:bf:b3:57:ba:86:32:f9:c9:93:09:42:3b:4c:74: 67:88:d5:2e:d3:f2:2c:c8:4a:07:71:4d:ba:d4:18: 4a:ed:b2:47:77:0b:12:fd:ad:ee:26:16:68:c3:09: 18:07:03:4b:c4:93:ef:a9:ad:e5:79:7d:78:2d:58: f9:71:e4:40:45:55:1f:e1:69:8c:f0:6f:f2:2c:77: 00:df:ad:38:a5:c9:73:ce:58:66:40:db:84:ef:e4: f2:11:0c:a9:5f:0f:32:49:3e:d1:ac:4e:54:77:68: df:35:b4:b0:2e:48:09:48:26:24:04:fe:40:ab:9f: 6c:1d:0c:fc:ee:ad:79:28:d0:29:ef:7b:30:89:be: 54:7a:90:92:44:b0:d9:04:50:77:0c:6d:b8:b5:6b: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:17:51:46:03:C8:87:D3:81:93:D0:40:DF:FA:06:96:C3:B1:7A:7E X509v3 Authority Key Identifier: keyid:30:9F:16:23:9A:13:B0:D0:10:42:8D:B5:51:14:6E:52:EE:B7:0B:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJ8WI5oTsNAQQo21URRuUu63C7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B423C/2737E6B250EC11ECAA3C137CC4F9AE02/MJ8WI5oTsNAQQo21URRuUu63C7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c5:47:35:a0:ac:18:80:66:b9:5a:e4:3e:74:34:c7:79:b3: 94:5f:40:ce:ee:0f:de:03:60:42:4e:0e:ea:94:d2:e2:c6:29: 40:8c:35:89:7c:d3:e1:e6:f8:d4:f4:f7:a9:38:e9:66:0d:8d: d1:43:74:52:a1:f5:b8:0e:0a:93:c4:ac:e3:94:61:8b:71:2f: 88:8c:82:fe:df:ac:98:66:88:9a:64:77:e1:75:03:ef:a9:5d: 52:dc:b2:c9:59:85:c0:b9:a9:a5:58:35:c7:e3:4f:28:25:34: b4:bf:49:a5:be:b8:04:ce:c6:e0:2b:7f:af:9c:ed:37:49:80: 39:31:8e:98:c5:e0:cc:08:05:76:2f:a2:75:ae:a6:25:75:c5: 7b:2f:2a:35:e3:d4:99:96:67:ff:61:ed:9c:1f:68:1b:3f:b7: f0:1c:21:3a:df:48:ce:44:25:bc:d4:eb:92:74:4c:9f:35:d6: 9d:64:bc:dc:f4:22:fc:f0:79:bc:d8:50:0b:44:60:ee:f3:46: 6a:f4:a7:73:30:a8:bf:a0:56:a6:1d:5a:a7:2f:de:d4:e9:2a: d5:fd:e5:aa:7b:a1:2c:4b:5d:32:2d:f4:03:0c:54:9c:1d:8f: 32:9c:c0:d7:90:98:e3:9c:c8:8d:06:08:8a:df:79:37:76:5d: f4:a6:2f:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyM0MxMTAvBgNVBAUTKDMwOUYxNjIzOUExM0IwRDAxMDQyOERCNTUxMTQ2RTUy RUVCNzBCQjcwHhcNMjUwNDA1MDAyMTQ0WhcNMjUwNDEyMDAyMTQ0WjAYMRYwFAYD VQQDEw02N2YwNzc5OS1iOGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IO8dyfNIhNdzHd22kvLrIIWdgCSyYBvlR/SqN6t8sjOj39cyB/nphJzpcAq 8WF8AP+bMdk4mwa6mECWpKe7H6V1XP3OFI40rwpxeQ6QyaaY5kwCKE5SLbd592vH 9zBCwI+zp+ZPU0m3v7NXuoYy+cmTCUI7THRniNUu0/IsyEoHcU261BhK7bJHdwsS /a3uJhZowwkYBwNLxJPvqa3leX14LVj5ceRARVUf4WmM8G/yLHcA3604pclzzlhm QNuE7+TyEQypXw8yST7RrE5Ud2jfNbSwLkgJSCYkBP5Aq59sHQz87q15KNAp73sw ib5UepCSRLDZBFB3DG24tWsA7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsXUUYD yIfTgZPQQN/6BpbDsXp+MB8GA1UdIwQYMBaAFDCfFiOaE7DQEEKNtVEUblLutwu3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDIzQy8yNzM3RTZCMjUw RUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNOQVFRbzIxVVJSdVV1NjND N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KOFdJNW9Uc05BUVFvMjFVUlJ1VXU2M0M3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDIzQy8yNzM3RTZCMjUwRUMxMUVDQUEzQzEzN0NDNEY5QUUwMi9NSjhXSTVvVHNO QVFRbzIxVVJSdVV1NjNDN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWxUc1oKwYgGa5WuQ+dDTHebOUX0DO7g/eA2BCTg7qlNLixilAjDWJ fNPh5vjU9PepOOlmDY3RQ3RSofW4DgqTxKzjlGGLcS+IjIL+36yYZoiaZHfhdQPv qV1S3LLJWYXAuamlWDXH408oJTS0v0mlvrgEzsbgK3+vnO03SYA5MY6YxeDMCAV2 L6J1rqYldcV7Lyo149SZlmf/Ye2cH2gbP7fwHCE630jORCW81OuSdEyfNdadZLzc 9CL88Hm82FALRGDu80Zq9KdzMKi/oFamHVqnL97U6SrV/eWqe6EsS10yLfQDDFSc HY8ynMDXkJjjnMiNBgiK33k3dl30pi+2 -----END CERTIFICATE-----Generated at Sat Apr 5 22:33:58 2025 by rpki-client