$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: F+jvBjHgL8ad+tkS/gV025d3/lKq47vUMNWvgdWnwkk= Subject key identifier: 36:8A:BF:E4:4F:B2:57:83:26:F9:B1:22:F6:CF:7F:0C:9D:91:AE:98 Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 1041 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 103A Signing time: Sat 12 Apr 2025 17:19:18 +0000 Manifest this update: Sat 12 Apr 2025 17:19:17 +0000 Manifest next update: Sat 19 Apr 2025 17:19:17 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: cUI6kRVQJxQf8BeyE/OMcoa8cgZxPDJsdo/K6vUlbko=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: Zx1NZFaobsMkPgZlMNZ8S9A1zmjC7C3D22JCgStrQxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4161 (0x1041) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Apr 12 17:19:17 2025 GMT Not After : Apr 19 17:19:17 2025 GMT Subject: CN=67faa096-1ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:3f:26:d8:93:ea:42:5e:b1:91:e1:66:69: bb:d6:2f:df:d6:e6:6d:43:5d:59:32:59:36:bf:57: f5:73:ce:c4:5d:b2:da:25:a4:ad:c1:81:fc:7f:69: 34:2b:93:62:fa:be:5d:52:47:15:7d:c7:63:bf:b1: 4b:06:e2:7e:74:8b:0e:40:06:86:fe:a0:88:17:4c: 00:23:08:b1:33:37:67:73:e5:10:4e:f2:15:a4:ef: 12:8c:ae:8d:dc:ce:9a:d3:74:96:61:74:d9:4b:d1: 52:e0:65:77:da:ca:36:33:a6:6c:07:b2:71:3d:ef: 1d:a7:cd:5a:0b:8b:6d:8d:f9:9a:cd:0e:49:aa:d1: 92:92:fb:b1:05:08:27:97:ca:15:9f:3a:3e:63:63: 59:89:30:b9:7f:17:57:04:34:85:16:b9:00:81:f6: 13:50:83:e8:b4:83:96:78:79:7f:ce:d3:bd:72:5a: 12:17:97:a3:af:29:b0:07:7a:17:fd:e6:4b:c8:c8: 60:29:f6:8f:4b:d8:09:bf:f3:23:58:b3:50:80:82: 15:13:92:23:e2:76:d7:e8:95:8f:c8:18:2a:9f:54: 6e:53:a4:96:a3:28:c8:14:ce:e2:71:a3:8c:8f:26: 28:00:8f:13:7e:03:c6:cf:7b:45:d9:95:8c:fb:ca: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8A:BF:E4:4F:B2:57:83:26:F9:B1:22:F6:CF:7F:0C:9D:91:AE:98 X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:e6:7a:ac:c3:57:97:fe:c9:e6:66:7a:56:5a:26:e3:9d:9a: fe:39:f8:c3:98:09:df:13:d3:40:5c:31:17:78:4b:ee:38:56: 46:88:7c:c4:6a:7f:c2:e1:e0:6e:49:92:67:2a:bb:78:51:08: 72:a0:e5:d2:f1:a3:a4:38:85:a7:e4:af:5e:b8:c9:4d:a8:f5: fd:66:be:c9:d8:c9:1e:e3:1f:3d:31:ac:1f:b5:70:35:03:a5: 7c:e9:b4:87:fe:c2:b3:e3:5e:e0:78:fd:61:59:30:ba:f7:bf: 84:9f:8e:07:18:f7:3b:4b:2b:11:5d:9b:69:fc:b7:63:e5:40: 54:6e:05:a2:ef:f2:7d:2b:06:d6:61:22:b5:1c:f0:10:7e:48: 04:51:d2:7f:ab:c1:6a:87:c6:94:34:2f:ba:95:52:8c:cd:f0: 53:09:0f:74:f1:37:10:9d:f9:94:09:82:c1:43:71:79:80:a0: ab:c0:13:dd:75:85:af:d9:99:7c:be:99:2e:c3:21:a8:2e:2d: 32:8b:43:fa:b1:79:ea:8d:3f:2e:73:04:0b:4f:22:eb:7b:66: 15:24:6c:25:b4:16:f1:cd:10:86:9b:34:62:a1:28:a9:28:2a: a3:48:7c:ca:9e:27:01:8a:a9:83:b3:f9:ee:e4:b5:15:c1:35: b6:f6:7e:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjUwNDEyMTcxOTE3WhcNMjUwNDE5MTcxOTE3WjAYMRYwFAYD VQQDEw02N2ZhYTA5Ni0xZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lQ/JtiT6kJesZHhZmm71i/f1uZtQ11ZMlk2v1f1c87EXbLaJaStwYH8f2k0 K5Ni+r5dUkcVfcdjv7FLBuJ+dIsOQAaG/qCIF0wAIwixMzdnc+UQTvIVpO8SjK6N 3M6a03SWYXTZS9FS4GV32so2M6ZsB7JxPe8dp81aC4ttjfmazQ5JqtGSkvuxBQgn l8oVnzo+Y2NZiTC5fxdXBDSFFrkAgfYTUIPotIOWeHl/ztO9cloSF5ejrymwB3oX /eZLyMhgKfaPS9gJv/MjWLNQgIIVE5Ij4nbX6JWPyBgqn1RuU6SWoyjIFM7icaOM jyYoAI8TfgPGz3tF2ZWM+8o4HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaKv+RP sleDJvmxIvbPfwydka6YMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF5nqsw1eX/snmZnpWWibjnZr+OfjDmAnfE9NAXDEXeEvuOFZGiHzE an/C4eBuSZJnKrt4UQhyoOXS8aOkOIWn5K9euMlNqPX9Zr7J2Mke4x89MawftXA1 A6V86bSH/sKz417geP1hWTC697+En44HGPc7SysRXZtp/Ldj5UBUbgWi7/J9KwbW YSK1HPAQfkgEUdJ/q8Fqh8aUNC+6lVKMzfBTCQ908TcQnfmUCYLBQ3F5gKCrwBPd dYWv2Zl8vpkuwyGoLi0yi0P6sXnqjT8ucwQLTyLre2YVJGwltBbxzRCGmzRioSip KCqjSHzKnicBiqmDs/nu5LUVwTW29n5I -----END CERTIFICATE-----Generated at Sun Apr 13 02:00:23 2025 by rpki-client