$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft File: tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft (raw, json) Hash identifier: Pkb856jkjaVKrkGBeAIB1nJX9NR7oDRrzfvhDv3Ycfg= Subject key identifier: 03:50:9E:B3:64:44:22:76:9F:6A:47:92:13:75:81:D3:FD:0D:F2:C0 Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft Manifest number: 09F7 Signing time: Wed 02 Apr 2025 20:47:41 +0000 Manifest this update: Wed 02 Apr 2025 20:47:41 +0000 Manifest next update: Wed 09 Apr 2025 20:47:41 +0000 Files and hashes: 1: tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl (hash: THtrPDjjEw4r1NQZC3QddX+10P6jzHEdPb+CGXOgrls=) 2: 6897097E6C6311EDBCFA073FC4F9AE02.roa (hash: iM1WPBGRU8kyt2wtZ44xuEtw5kiXcIfrSzUOCPpEqtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE Validity Not Before: Apr 2 20:47:41 2025 GMT Not After : Apr 9 20:47:41 2025 GMT Subject: CN=67eda26d-84c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:72:cd:47:8f:44:9c:28:85:36:43:5e:10: 7b:3f:ef:bb:06:99:14:3d:f0:e9:7d:68:52:3c:57: 63:7b:ea:ef:8b:b8:1d:c1:0d:30:8c:a3:5a:6a:62: d6:ef:42:d8:a2:ec:ea:b7:a1:c2:6d:ce:5e:b8:b7: 22:8d:ea:df:ee:d5:30:3e:c6:9e:38:57:26:76:78: 98:a5:b1:0b:0e:c8:5f:82:28:be:51:04:3d:31:60: fe:d1:99:4e:1c:99:ef:46:79:2a:ec:ec:8a:f5:72: 93:17:47:32:17:d2:8c:ac:7e:c7:c5:9b:b4:8b:73: 5f:42:5c:45:20:e3:98:90:8e:2d:8c:bd:b2:e1:2c: 04:3d:d3:4c:a3:ca:4e:ff:1c:ed:82:13:8d:64:2b: 52:60:da:d7:8e:c9:92:97:72:9e:d0:bc:91:c0:da: b0:f2:1f:03:83:a3:2f:b2:c7:fd:fd:79:83:a5:33: 10:de:6f:39:f8:c7:af:f6:c5:f2:72:ab:7c:f5:78: 6d:8b:ec:bd:bb:9e:18:c5:17:e8:a7:3f:98:b7:64: 09:34:c8:5a:2c:0b:39:9d:bf:5f:ec:27:13:4c:65: 9b:2a:b2:70:49:d4:e9:e2:c1:06:da:bb:4a:60:96: 0b:b1:70:7d:bd:90:8e:b2:c9:4f:b1:4a:d7:0e:bb: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:50:9E:B3:64:44:22:76:9F:6A:47:92:13:75:81:D3:FD:0D:F2:C0 X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:16:f8:32:e8:7d:ec:6d:e3:51:3f:19:b6:15:cc:aa:f6:bd: c7:f8:5a:c0:27:7c:bb:a6:70:9a:36:cf:19:ff:41:f5:03:58: 09:a1:44:09:3b:f7:c4:6c:e4:4f:3c:7d:35:29:1e:fd:a6:e8: 19:0c:32:ea:8c:0d:88:a8:5c:d2:e2:1e:7c:7b:f8:23:45:41: e0:d2:e2:94:1a:24:a4:02:bd:aa:de:3c:84:03:2b:12:aa:58: f0:80:19:77:0a:7d:11:c9:d0:be:cc:94:ff:b1:5d:62:b0:c9: b6:55:eb:33:12:c7:e0:e3:ff:28:f7:23:2d:96:c8:61:cf:b2: 5b:f3:ff:4c:04:be:d6:a6:2a:28:b9:69:c2:f4:b1:fa:f3:e1: 0e:d5:1b:16:fa:db:d9:8a:f3:a3:f3:bd:eb:a3:0c:10:27:8d: 83:c9:ff:7a:2e:49:41:63:b5:cd:07:8e:1f:a8:fe:78:20:66: b1:3d:ce:72:62:75:2c:cb:2f:e6:1a:00:a6:e6:93:51:e5:2c: 50:d3:4e:43:b2:68:71:9c:ee:4f:67:f4:5b:45:88:59:36:ed: bc:d6:ef:c8:05:57:8e:62:a6:cb:19:a1:18:7a:18:54:e5:07: 1b:07:97:98:fb:fd:eb:ef:fa:98:75:67:bd:db:20:ef:55:3d: 48:1c:ab:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjUwNDAyMjA0NzQxWhcNMjUwNDA5MjA0NzQxWjAYMRYwFAYD VQQDEw02N2VkYTI2ZC04NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVdyzUePRJwohTZDXhB7P++7BpkUPfDpfWhSPFdje+rvi7gdwQ0wjKNaamLW 70LYouzqt6HCbc5euLcijerf7tUwPsaeOFcmdniYpbELDshfgii+UQQ9MWD+0ZlO HJnvRnkq7OyK9XKTF0cyF9KMrH7HxZu0i3NfQlxFIOOYkI4tjL2y4SwEPdNMo8pO /xztghONZCtSYNrXjsmSl3Ke0LyRwNqw8h8Dg6Mvssf9/XmDpTMQ3m85+Mev9sXy cqt89Xhti+y9u54YxRfopz+Yt2QJNMhaLAs5nb9f7CcTTGWbKrJwSdTp4sEG2rtK YJYLsXB9vZCOsslPsUrXDrtsOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANQnrNk RCJ2n2pHkhN1gdP9DfLAMB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTBBRS8zN0VCMEM2NkM5NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJh b0dTd2JUUy1NeHFHcU5IajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhFvgy6H3sbeNRPxm2Fcyq9r3H+FrAJ3y7pnCaNs8Z/0H1A1gJoUQJ O/fEbORPPH01KR79pugZDDLqjA2IqFzS4h58e/gjRUHg0uKUGiSkAr2q3jyEAysS qljwgBl3Cn0RydC+zJT/sV1isMm2VeszEsfg4/8o9yMtlshhz7Jb8/9MBL7Wpioo uWnC9LH68+EO1RsW+tvZivOj873rowwQJ42Dyf96LklBY7XNB44fqP54IGaxPc5y YnUsyy/mGgCm5pNR5SxQ005DsmhxnO5PZ/RbRYhZNu281u/IBVeOYqbLGaEYehhU 5QcbB5eY+/3r7/qYdWe92yDvVT1IHKvO -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:46 2025 by rpki-client