$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft File: 0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json) Hash identifier: 3ojxfVzGbCC85hl3FgbHnWcp4/OdvsKOtcn6Pn4ZZCw= Subject key identifier: 33:AF:4D:82:4A:A7:96:33:9B:64:1B:7F:91:99:4A:43:45:CB:4D:FE Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Certificate serial: 0C11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft Manifest number: 0BFF Signing time: Fri 04 Apr 2025 18:51:02 +0000 Manifest this update: Fri 04 Apr 2025 18:51:02 +0000 Manifest next update: Fri 11 Apr 2025 18:51:02 +0000 Files and hashes: 1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: X9oCk3WYPUUAzrp9iGA/OvS3ZODibRz+G4LJwWSYrq8=) 2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: lwkH9V+4ruYpDtKVAny/uyyCWO7r9GoTBPNu4gEXlEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3089 (0xc11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62BF Validity Not Before: Apr 4 18:51:02 2025 GMT Not After : Apr 11 18:51:02 2025 GMT Subject: CN=67f02a16-6cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:e8:91:23:66:21:ab:2e:ac:63:03:f2:e6: 5c:ac:53:68:6d:ce:66:e8:b3:4f:fc:e2:f1:72:7b: c4:da:67:54:a2:77:4f:ef:7a:e3:b6:c5:29:c7:ca: 10:f4:23:6b:da:9f:8c:c0:77:c8:21:74:7f:1c:72: 29:3e:09:9d:eb:fd:e6:f1:11:3c:1b:3a:f3:88:6d: 49:9a:30:a5:61:e4:4a:7b:55:c1:02:7c:4d:02:7e: 6a:06:48:d5:a3:81:b5:bc:cb:44:b2:67:4b:6c:70: 97:bc:ae:c8:a7:c7:e0:18:e8:40:4a:3f:7e:b1:9f: 4b:e4:e0:a1:30:51:bf:db:ae:cd:f0:1d:f2:41:1d: b7:c1:dd:ed:69:24:4d:c4:28:61:a0:96:46:88:5d: 44:84:03:77:ad:11:2b:87:8b:92:e9:23:8e:14:0b: 3d:b4:9d:f4:15:ee:af:4b:a9:07:4d:1a:5e:f4:f0: d1:7d:52:13:d2:62:d6:bf:ac:21:7f:bc:de:39:85: 00:65:d3:d6:17:cb:49:31:14:46:e4:15:71:df:76: cf:90:0f:78:52:cf:bb:32:9a:0f:89:e3:e5:47:b1: 1c:3a:69:8a:4d:97:f1:20:69:cd:76:ce:80:72:8d: 6d:2e:79:16:ac:4e:a5:fb:ae:c6:ce:83:ec:0b:83: e6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AF:4D:82:4A:A7:96:33:9B:64:1B:7F:91:99:4A:43:45:CB:4D:FE X509v3 Authority Key Identifier: keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:57:b1:a6:e9:52:8d:89:91:53:09:ec:76:9f:a9:78:57:aa: b7:88:9e:5c:71:4d:b4:3e:98:b7:53:a2:9d:3e:25:95:4b:42: 11:13:fe:0f:12:b8:ae:b8:da:fb:fe:a8:0c:91:3a:04:e8:ca: c0:39:13:15:a6:1c:98:c4:4b:93:09:de:fc:fc:ab:ee:bb:07: 8f:4c:e7:39:e4:46:13:1c:2d:3a:1c:3d:02:ba:10:30:41:7a: ce:d2:45:68:03:2d:6a:41:e1:65:6c:f0:12:df:4b:9b:2f:2e: f0:bb:6a:31:6b:54:38:b1:55:ea:ae:17:a6:92:fa:2a:50:57: 38:bd:9b:2f:7b:28:4f:d6:65:25:e5:a2:08:78:b4:fa:1b:e1: 3a:b2:f0:2a:9b:09:ee:85:04:8e:e9:78:f8:85:6d:d7:ec:f2: 86:5c:1c:e1:09:46:bb:cb:df:2a:af:c6:95:4d:6c:a9:45:76: a4:a3:b1:68:30:86:09:fb:05:c6:40:0c:a1:64:50:d5:6f:b3: 3f:a7:0c:6c:75:11:ab:ae:28:db:01:65:18:6f:65:7b:2e:92: 4d:93:75:d6:57:d2:61:fe:92:ff:2e:ff:36:99:f9:52:e5:b6: 46:53:be:74:dc:d8:a3:40:ca:b0:cd:08:73:0f:2f:a1:a0:f0: 86:b3:2e:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG MDk5QzNGRjAwHhcNMjUwNDA0MTg1MTAyWhcNMjUwNDExMTg1MTAyWjAYMRYwFAYD VQQDEw02N2YwMmExNi02Y2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ7okSNmIasurGMD8uZcrFNobc5m6LNP/OLxcnvE2mdUondP73rjtsUpx8oQ 9CNr2p+MwHfIIXR/HHIpPgmd6/3m8RE8GzrziG1JmjClYeRKe1XBAnxNAn5qBkjV o4G1vMtEsmdLbHCXvK7Ip8fgGOhASj9+sZ9L5OChMFG/267N8B3yQR23wd3taSRN xChhoJZGiF1EhAN3rRErh4uS6SOOFAs9tJ30Fe6vS6kHTRpe9PDRfVIT0mLWv6wh f7zeOYUAZdPWF8tJMRRG5BVx33bPkA94Us+7MpoPiePlR7EcOmmKTZfxIGnNds6A co1tLnkWrE6l+67GzoPsC4PmawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOvTYJK p5Yzm2Qbf5GZSkNFy03+MB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJCRi80NEVDNTEwNjEwMzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhq cUFYNzVZWWU0M3Z3bWNQX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMV7Gm6VKNiZFTCex2n6l4V6q3iJ5ccU20Ppi3U6KdPiWVS0IRE/4P EriuuNr7/qgMkToE6MrAORMVphyYxEuTCd78/KvuuwePTOc55EYTHC06HD0CuhAw QXrO0kVoAy1qQeFlbPAS30ubLy7wu2oxa1Q4sVXqrhemkvoqUFc4vZsveyhP1mUl 5aIIeLT6G+E6svAqmwnuhQSO6Xj4hW3X7PKGXBzhCUa7y98qr8aVTWypRXako7Fo MIYJ+wXGQAyhZFDVb7M/pwxsdRGrrijbAWUYb2V7LpJNk3XWV9Jh/pL/Lv82mflS 5bZGU7503NijQMqwzQhzDy+hoPCGsy7y -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:40 2025 by rpki-client