$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json) Hash identifier: 4rNuTzxwtlN1rCelxI3IAFUEjRTd+9PaLExrwirJqEw= Subject key identifier: 9B:A0:C1:10:E9:7C:65:78:55:92:88:13:B6:94:D5:BA:81:5B:31:4C Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1B7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft Manifest number: 1B65 Signing time: Thu 10 Apr 2025 16:17:54 +0000 Manifest this update: Thu 10 Apr 2025 16:17:53 +0000 Manifest next update: Thu 17 Apr 2025 16:17:53 +0000 Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: UqJ1f6bCVjkI2s1vQyQ4eCJfoeRDkbT6XRou1QrTYEc=) 2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: d9C+rmMNQQZELmuy5aIPVlKeATtzTC5JJ8WoYiMXlHI=) 3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: V0J+K3DJnN+osBZ9dwTDUPh/HvfjgBzZSWLUoCMaCuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 16:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7036 (0x1b7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: Apr 10 16:17:53 2025 GMT Not After : Apr 17 16:17:53 2025 GMT Subject: CN=67f7ef32-51d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:28:cf:0e:f7:40:6a:92:20:ff:1f:e2:a1: 83:38:ef:59:55:28:53:53:05:d9:42:9e:96:d2:86: d1:db:18:ba:1a:36:23:ee:f8:b8:ce:9e:d9:ff:68: 00:53:77:f9:cd:91:db:2b:ff:66:bb:66:1c:ce:46: 49:6d:1d:cc:c8:4a:67:49:8f:a6:ba:fb:22:ea:59: b9:0a:82:88:1a:b4:01:df:8e:15:2e:be:3b:6e:a7: e4:8a:1a:ba:8c:64:7f:71:8b:9f:25:11:e5:2d:8c: 71:20:a0:31:fd:76:63:07:66:96:28:93:dc:3a:99: 20:b3:8d:3d:16:2b:a4:04:98:93:b1:36:92:44:f4: bb:19:00:2a:5d:bf:df:75:09:f1:bd:1e:88:3f:27: 5c:eb:6c:7b:fe:7d:09:4a:9f:04:56:70:a0:c3:8a: c0:5f:41:af:41:7d:31:2c:0e:1d:29:29:68:70:21: d9:12:63:54:66:bb:9d:18:40:04:5e:c6:a2:1c:bb: 17:ba:c9:be:d4:6d:63:b6:f9:81:43:0e:41:d2:b1: da:b5:a3:df:a7:8b:73:37:5a:96:51:c5:d3:1a:31: 0f:dd:20:c9:c1:41:57:d3:f2:51:1c:40:80:46:d7: 45:31:74:87:28:96:cf:95:5f:7c:3b:8a:fb:a4:98: bd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A0:C1:10:E9:7C:65:78:55:92:88:13:B6:94:D5:BA:81:5B:31:4C X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:60:d1:b5:a8:d7:2e:92:dd:2f:82:37:2d:c8:c2:ac:5c:db: 84:0d:da:9f:f4:3e:9b:ab:75:d2:77:bf:79:15:62:0c:8e:d1: 18:3b:b6:97:d0:7c:97:0d:f7:36:0f:09:f6:6b:9c:e2:42:05: 4a:9b:9c:9e:07:b9:e2:e6:52:3c:ed:41:e4:08:1e:ff:01:66: 27:c4:e5:bc:5d:03:1d:98:bc:e4:ba:7b:d9:90:45:c5:3b:fd: 05:f5:73:78:66:01:10:41:1e:7f:60:97:df:f6:72:8b:61:a1: 88:a8:53:2b:44:28:13:42:c0:c5:22:38:86:05:2a:25:c5:a2: 51:6f:d9:a1:85:84:68:4a:9e:3d:fd:35:40:0d:2c:49:d3:b0: ce:9d:6b:3b:68:a1:3a:f9:ad:a0:ee:51:6f:fe:07:67:25:09: 5e:62:e0:44:02:58:f5:81:fb:04:0f:5c:43:7f:a1:8a:de:5f: 60:c7:a5:be:0b:64:6a:91:bf:57:d9:2b:43:8b:3d:2c:c4:9c: e7:d5:a9:0b:91:41:fd:06:a4:8e:a8:c5:a1:d7:df:7c:78:d9: aa:b6:3c:d1:a5:6f:18:53:e4:7a:be:2d:a5:7e:4b:03:86:33: 36:d6:fe:d9:8c:ef:c3:49:7d:b4:9e:31:a9:18:e6:b8:0e:ce: bf:44:97:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjUwNDEwMTYxNzUzWhcNMjUwNDE3MTYxNzUzWjAYMRYwFAYD VQQDEw02N2Y3ZWYzMi01MWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAAozw73QGqSIP8f4qGDOO9ZVShTUwXZQp6W0obR2xi6GjYj7vi4zp7Z/2gA U3f5zZHbK/9mu2YczkZJbR3MyEpnSY+muvsi6lm5CoKIGrQB344VLr47bqfkihq6 jGR/cYufJRHlLYxxIKAx/XZjB2aWKJPcOpkgs409FiukBJiTsTaSRPS7GQAqXb/f dQnxvR6IPydc62x7/n0JSp8EVnCgw4rAX0GvQX0xLA4dKSlocCHZEmNUZrudGEAE XsaiHLsXusm+1G1jtvmBQw5B0rHataPfp4tzN1qWUcXTGjEP3SDJwUFX0/JRHECA RtdFMXSHKJbPlV98O4r7pJi9TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJugwRDp fGV4VZKIE7aU1bqBWzFMMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX ckZQRU03bGxoRzk1MHdValEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPYNG1qNcukt0vgjctyMKsXNuEDdqf9D6bq3XSd795FWIMjtEYO7aX 0HyXDfc2Dwn2a5ziQgVKm5yeB7ni5lI87UHkCB7/AWYnxOW8XQMdmLzkunvZkEXF O/0F9XN4ZgEQQR5/YJff9nKLYaGIqFMrRCgTQsDFIjiGBSolxaJRb9mhhYRoSp49 /TVADSxJ07DOnWs7aKE6+a2g7lFv/gdnJQleYuBEAlj1gfsED1xDf6GK3l9gx6W+ C2Rqkb9X2StDiz0sxJzn1akLkUH9BqSOqMWh1998eNmqtjzRpW8YU+R6vi2lfksD hjM21v7ZjO/DSX20njGpGOa4Ds6/RJfw -----END CERTIFICATE-----Generated at Sat Apr 12 17:23:06 2025 by rpki-client