$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: ZC5onbWLxAn8fWumFtAqTy/fTg/NSFTDta4lBDDQKO0= Subject key identifier: D8:97:6A:7A:22:61:25:E4:6F:A9:DF:99:DF:CD:9B:AA:11:51:09:1F Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 3487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 347A Signing time: Sun 06 Apr 2025 14:43:24 +0000 Manifest this update: Sun 06 Apr 2025 14:43:23 +0000 Manifest next update: Sun 13 Apr 2025 14:43:23 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: QX/bZodOhtAtBn6Wa5ok97DfPP9srYNcd94XS+JKsdg=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: joFpQbUhhuICq9lMSQUwGZiftmapGwfxicrZ76+a/Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13447 (0x3487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28 Validity Not Before: Apr 6 14:43:23 2025 GMT Not After : Apr 13 14:43:23 2025 GMT Subject: CN=67f2930c-4d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:49:53:ba:e2:c1:f1:6e:0e:82:98:ab:ae:95: 5f:64:63:6b:ab:43:3f:fb:68:55:55:e4:5a:f5:9a: 8f:f6:58:bf:15:b1:8c:37:e5:d4:5a:7e:61:5f:87: 18:88:b3:67:39:34:23:ae:5c:81:d5:fe:5e:cf:5b: d2:aa:c9:1d:58:0a:d8:35:3c:52:96:52:9e:12:c5: 38:95:44:27:0d:86:28:b4:a3:e7:aa:a0:13:6a:8c: 44:97:21:05:7e:00:d3:ff:9b:93:52:7f:b9:e6:49: ee:01:89:f6:43:80:51:01:c5:f7:d5:3a:3a:6c:a2: c3:92:0b:7f:9c:ea:fa:4c:df:f4:0f:eb:0d:1d:9e: b0:1b:55:cd:d9:bb:ed:f7:03:c0:fd:86:84:e0:0d: a2:2b:d2:81:5e:b7:a2:b2:a9:89:02:34:66:be:78: 11:04:d8:07:4e:a0:78:9d:ad:1e:56:97:a0:82:3d: 55:1b:e4:87:d9:02:0d:87:f0:6b:60:17:90:e8:ce: 4a:5e:57:1e:39:64:84:8c:ef:eb:ec:02:12:e0:a0: d0:38:9e:3c:f6:62:e9:fc:92:0e:ea:75:bc:d4:c0: e1:4f:00:f5:02:5d:96:f7:b6:80:11:91:80:d3:97: 59:0c:2a:94:11:ce:a4:eb:3a:1d:62:0e:32:d3:1e: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:97:6A:7A:22:61:25:E4:6F:A9:DF:99:DF:CD:9B:AA:11:51:09:1F X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b9:22:12:e4:10:08:2e:11:1e:19:66:4f:c8:e4:e4:16:b1: cd:39:00:bf:65:d0:55:2f:52:20:92:05:cc:86:c4:06:67:e0: 14:44:34:fe:11:4d:c9:f7:6e:82:a0:c2:98:69:de:2f:ea:ba: d5:0c:6f:a8:c2:cf:db:c4:94:61:9c:21:9d:b9:a2:f4:72:09: e2:71:d7:c5:63:f5:a8:f1:90:ec:8b:83:a9:ff:b1:10:b3:35: b0:cb:6a:d2:c7:5e:80:de:71:60:ee:a5:c3:83:91:16:82:09: 7d:d5:66:4a:40:20:c1:de:ea:c1:22:a1:27:ec:42:30:a3:bc: 06:19:50:21:9b:34:6f:40:6a:c5:44:cf:18:24:8b:26:4a:ce: f2:5f:4b:fe:43:92:f3:38:04:2c:74:65:ed:97:6e:ed:b0:4b: 13:b1:e5:3f:9d:50:3c:c7:a9:13:b6:3c:c3:a2:f0:39:d1:49: 82:9d:02:dd:92:9e:6d:4a:20:02:7a:22:96:2d:5d:59:6c:b4: d1:e6:21:95:16:d2:d4:5a:14:41:39:62:c1:6d:3b:a8:29:02: 4a:4c:57:a7:3c:ac:92:04:a7:52:0a:03:54:ab:34:9b:29:89: 75:aa:a6:7b:e7:9d:e7:25:0d:0f:10:02:07:e8:3b:55:ce:68: f9:c5:d6:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjUwNDA2MTQ0MzIzWhcNMjUwNDEzMTQ0MzIzWjAYMRYwFAYD VQQDEw02N2YyOTMwYy00ZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUlTuuLB8W4OgpirrpVfZGNrq0M/+2hVVeRa9ZqP9li/FbGMN+XUWn5hX4cY iLNnOTQjrlyB1f5ez1vSqskdWArYNTxSllKeEsU4lUQnDYYotKPnqqATaoxElyEF fgDT/5uTUn+55knuAYn2Q4BRAcX31To6bKLDkgt/nOr6TN/0D+sNHZ6wG1XN2bvt 9wPA/YaE4A2iK9KBXreisqmJAjRmvngRBNgHTqB4na0eVpeggj1VG+SH2QINh/Br YBeQ6M5KXlceOWSEjO/r7AIS4KDQOJ489mLp/JIO6nW81MDhTwD1Al2W97aAEZGA 05dZDCqUEc6k6zodYg4y0x6/LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiXanoi YSXkb6nfmd/Nm6oRUQkfMB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQuSIS5BAILhEeGWZPyOTkFrHNOQC/ZdBVL1IgkgXMhsQGZ+AURDT+ EU3J926CoMKYad4v6rrVDG+ows/bxJRhnCGduaL0cgnicdfFY/Wo8ZDsi4Op/7EQ szWwy2rSx16A3nFg7qXDg5EWggl91WZKQCDB3urBIqEn7EIwo7wGGVAhmzRvQGrF RM8YJIsmSs7yX0v+Q5LzOAQsdGXtl27tsEsTseU/nVA8x6kTtjzDovA50UmCnQLd kp5tSiACeiKWLV1ZbLTR5iGVFtLUWhRBOWLBbTuoKQJKTFenPKySBKdSCgNUqzSb KYl1qqZ7553nJQ0PEAIH6DtVzmj5xdaL -----END CERTIFICATE-----Generated at Sun Apr 6 16:44:36 2025 by rpki-client