$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft File: n9LoZrHrgid6tvVi_jLgg1mzAWU.mft (raw, json) Hash identifier: 2nmFJmLOazKiIpbMU2HWrE9L0xrXRT6apoIZ1w7geUs= Subject key identifier: A8:13:17:71:15:25:45:D3:35:54:23:ED:0B:11:C9:09:08:83:BB:F3 Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65 Certificate issuer: /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft Manifest number: 065C Signing time: Wed 02 Apr 2025 22:31:25 +0000 Manifest this update: Wed 02 Apr 2025 22:31:24 +0000 Manifest next update: Wed 09 Apr 2025 22:31:24 +0000 Files and hashes: 1: n9LoZrHrgid6tvVi_jLgg1mzAWU.crl (hash: 44gIJqSiKmXerUa7uF2fTaYkMAwAyHymO8iu6AvNmtI=) 2: BF351C380A2111EEA26EAE0EC4F9AE02.roa (hash: oGuqbCREFm9ZWSmRoFzBXwWMbym/4RjEQVLDxXxyOlo=) 3: 6C42C95C0A0411EE9FEEAB44C4F9AE02.roa (hash: 2EoXxsF3YeIcHrteSRJc8SmsPXHgCaJXfP147EXJ8V8=) 4: 6D39AFB00A0411EE9FEEAB44C4F9AE02.roa (hash: mK4z59iph2yMURpRXdd3+cDRQXC8EuVVACLhc5J4EWo=) 5: 3F2B1C3AB48E11EBB0455C2DC4F9AE02.roa (hash: sivEYBO7PXdxBzs49Sa2/GKGpQYDM3gFjYXpi1+OrJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7C0E Validity Not Before: Apr 2 22:31:24 2025 GMT Not After : Apr 9 22:31:24 2025 GMT Subject: CN=67edbabc-0acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:0d:8f:0b:01:03:75:35:11:17:71:5c:90: 8c:eb:76:f7:c9:27:d1:2a:1d:e0:c1:92:06:93:37: 00:0a:65:98:7f:db:96:62:65:d6:b0:60:61:13:a7: b7:e0:b5:3c:4e:4f:12:6f:8e:00:06:2e:d4:4d:16: bd:22:82:27:dc:24:40:6b:0b:5c:41:0e:b9:69:23: 40:e9:c8:b3:54:b2:d5:72:18:11:76:de:5d:86:f9: 54:3e:9b:3c:81:6c:1a:c6:41:5f:0c:9e:b0:8c:26: 2b:44:14:d7:c2:34:74:58:06:c2:1c:96:bf:5b:d1: 96:af:1a:d6:fe:4b:6b:03:46:ab:96:7a:2e:a4:51: aa:17:42:d1:19:ba:f2:43:f2:0d:2d:5d:7f:00:ed: 68:fe:cc:c1:26:d6:2a:06:ae:93:7b:15:a8:50:d0: 7c:22:1f:94:42:53:14:d7:4c:36:e4:6e:0c:73:25: 84:b1:1f:37:f3:c1:fd:1d:cf:e6:72:88:c8:7c:98: 40:cf:b3:27:bb:43:40:49:82:5b:0c:0a:a2:d3:73: b0:a4:e8:b1:50:ae:cc:60:25:1e:4d:a4:da:a0:8d: f5:34:1e:19:1e:b7:b9:2d:86:16:c6:2a:5e:cd:4e: 1a:9e:d6:e7:a6:94:bb:aa:be:fa:5e:09:04:be:54: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:13:17:71:15:25:45:D3:35:54:23:ED:0B:11:C9:09:08:83:BB:F3 X509v3 Authority Key Identifier: keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:50:ec:df:03:ce:90:bb:69:81:14:cb:60:88:5c:5f:4b:41: bf:83:99:28:b3:60:23:9d:9f:56:ab:c2:0a:c5:ee:1c:42:b4: 38:8b:00:f2:0b:11:d2:c8:5a:e3:b2:13:57:57:7b:db:93:be: 26:92:92:1e:62:f6:30:64:f0:36:cd:63:f8:77:38:ee:33:81: d1:d0:d1:3e:1e:65:aa:68:6b:ad:1b:68:c5:03:e4:89:07:55: 02:07:a6:c3:88:31:12:19:04:c0:67:6f:39:fb:26:9d:70:62: 37:29:03:a3:65:5f:38:c2:74:fb:23:bd:71:1d:d1:1f:ee:a6: 02:3d:cf:d0:a8:60:56:1a:9e:2d:10:f7:15:3a:dc:9c:cb:16: b4:13:06:11:c9:c0:0a:b3:38:ed:c1:ee:8a:25:32:be:b0:0b: 7a:c0:b7:2e:f8:78:9c:fc:44:5a:a2:e6:ed:ed:7e:02:a0:1e: c3:16:d3:f8:20:71:6c:f9:3c:ee:d5:d6:9e:39:8b:3e:78:92: a4:12:ff:99:e1:8a:7f:9e:16:da:60:a5:7c:65:31:35:03:97: 58:99:6a:d8:55:a3:74:ab:54:fa:57:7c:ca:17:ac:2e:06:8a: 56:ac:08:c8:7a:4e:d5:33:67:26:48:98:c8:47:42:20:04:8c: 6d:01:fb:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdDMEUxMTAvBgNVBAUTKDlGRDJFODY2QjFFQjgyMjc3QUI2RjU2MkZFMzJFMDgz NTlCMzAxNjUwHhcNMjUwNDAyMjIzMTI0WhcNMjUwNDA5MjIzMTI0WjAYMRYwFAYD VQQDEw02N2VkYmFiYy0wYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6ENjwsBA3U1ERdxXJCM63b3ySfRKh3gwZIGkzcACmWYf9uWYmXWsGBhE6e3 4LU8Tk8Sb44ABi7UTRa9IoIn3CRAawtcQQ65aSNA6cizVLLVchgRdt5dhvlUPps8 gWwaxkFfDJ6wjCYrRBTXwjR0WAbCHJa/W9GWrxrW/ktrA0arlnoupFGqF0LRGbry Q/INLV1/AO1o/szBJtYqBq6TexWoUNB8Ih+UQlMU10w25G4McyWEsR8388H9Hc/m cojIfJhAz7Mnu0NASYJbDAqi03OwpOixUK7MYCUeTaTaoI31NB4ZHre5LYYWxipe zU4antbnppS7qr76XgkEvlQzqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgTF3EV JUXTNVQj7QsRyQkIg7vzMB8GA1UdIwQYMBaAFJ/S6Gax64Inerb1Yv4y4INZswFl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0MwRS9FRTU5RTdGNDgw RjkxMUVCOTg1RjQzM0FDNEY5QUUwMi9uOUxvWnJIcmdpZDZ0dlZpX2pMZ2cxbXpB V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245TG9ackhyZ2lkNnR2VmlfakxnZzFtekFXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0MwRS9FRTU5RTdGNDgwRjkxMUVCOTg1RjQzM0FDNEY5QUUwMi9uOUxvWnJIcmdp ZDZ0dlZpX2pMZ2cxbXpBV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMUOzfA86Qu2mBFMtgiFxfS0G/g5kos2AjnZ9Wq8IKxe4cQrQ4iwDy CxHSyFrjshNXV3vbk74mkpIeYvYwZPA2zWP4dzjuM4HR0NE+HmWqaGutG2jFA+SJ B1UCB6bDiDESGQTAZ285+yadcGI3KQOjZV84wnT7I71xHdEf7qYCPc/QqGBWGp4t EPcVOtycyxa0EwYRycAKszjtwe6KJTK+sAt6wLcu+Hic/ERaoubt7X4CoB7DFtP4 IHFs+Tzu1daeOYs+eJKkEv+Z4Yp/nhbaYKV8ZTE1A5dYmWrYVaN0q1T6V3zKF6wu BopWrAjIek7VM2cmSJjIR0IgBIxtAfvy -----END CERTIFICATE-----Generated at Fri Apr 4 21:12:33 2025 by rpki-client