$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft File: iZOTjIV1ACgOj15T3As-kweu1Kc.mft (raw, json) Hash identifier: aCpaO+H8p+AwvXMPA4tMvWnVYVuVHlKNET3W4sWYzU4= Subject key identifier: 0A:57:AD:F3:49:00:79:6B:2E:F6:A0:F6:C8:0E:C6:1A:C4:2D:06:CC Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft Manifest number: 17 Signing time: Sat 29 Mar 2025 07:19:00 +0000 Manifest this update: Sat 29 Mar 2025 07:19:00 +0000 Manifest next update: Sat 05 Apr 2025 07:19:00 +0000 Files and hashes: 1: iZOTjIV1ACgOj15T3As-kweu1Kc.crl (hash: P8RsV9TjGCrlYoMFq9NsbyiZIxpGdA1h9E4ra86YymI=) 2: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (hash: t4VsjBzDPnCNqQJ4/+l/e7o+o8AvICh72VVWJ8BMmY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3E1 Validity Not Before: Mar 29 07:19:00 2025 GMT Not After : Apr 5 07:19:00 2025 GMT Subject: CN=67e79ee4-3ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:87:3d:4d:2d:09:f2:bf:41:ae:72:b5:bb: 26:fb:34:5d:be:b4:b3:ff:b5:21:86:57:bc:7d:6a: 4e:82:d1:5e:2a:55:c5:ae:e2:c3:2e:9c:22:21:28: a0:f4:58:94:d2:bb:54:f2:ab:44:bd:e7:9e:fd:73: b0:bd:d6:7e:ae:c2:5a:97:dd:d3:1f:f4:73:39:bb: 19:a7:e4:fb:e4:5c:bf:58:06:06:2d:4a:aa:31:8a: 29:39:be:de:96:74:5c:a3:63:ad:a8:23:1f:fa:10: a5:62:ba:55:07:64:ac:78:0d:08:e4:cf:8f:65:ed: db:91:86:d5:53:eb:86:36:85:4e:5f:34:af:ba:71: e5:15:5a:ca:50:8a:80:f4:61:9d:a8:07:99:64:38: 94:dd:8d:d6:04:1f:d1:b6:0d:cb:54:e8:1d:be:3f: a0:d7:9b:af:24:39:02:32:77:26:e7:d4:e4:7e:88: 89:20:e9:49:a9:54:3c:c8:2c:11:a6:e7:2b:49:43: 02:0c:11:10:3e:87:32:0b:66:48:80:ed:fd:e0:80: 42:72:b0:91:98:cc:39:0c:55:0e:5a:52:0c:4e:b6: 80:ac:5e:2a:06:26:ef:18:c7:23:49:a4:5c:69:46: d1:03:d3:ed:37:9b:4f:04:f9:97:c2:41:7d:bf:ec: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:57:AD:F3:49:00:79:6B:2E:F6:A0:F6:C8:0E:C6:1A:C4:2D:06:CC X509v3 Authority Key Identifier: keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:dd:26:bb:df:a6:7f:3e:2d:d7:0f:e7:9c:a5:a5:ec:a9:d1: 1c:94:c8:1e:f2:58:13:51:20:1e:e2:80:06:9a:3f:a7:0b:65: 1a:c4:b2:f4:eb:dc:41:f1:3a:3f:7a:df:d8:3f:32:16:d2:9a: 87:a8:f8:cc:9f:ee:18:d2:46:9e:0c:f3:eb:1f:2c:12:31:17: 9f:99:e0:44:c8:64:6f:48:e8:db:87:bd:d0:d5:92:3c:34:17: cd:b2:8b:e5:56:af:a8:ad:a1:ab:ec:e4:8f:b6:7e:05:d1:48: cf:3c:c6:42:67:55:c2:11:46:b1:c1:04:69:ee:f8:e0:f8:ef: 9c:d8:0c:03:4f:ff:ac:e8:ae:c5:ff:5a:a8:ce:e3:84:e1:64: 31:75:c7:e2:94:8a:d2:86:34:a6:43:68:9b:6b:7a:75:7c:35: 1e:76:38:38:f2:62:02:e8:ef:c3:6d:24:5c:5a:ea:83:9c:62: 86:89:de:86:43:20:0f:e9:0c:bd:e8:11:e0:7c:7b:3b:ef:eb: 1e:8d:06:f5:81:78:ab:75:80:95:1e:5a:38:9a:66:c8:25:03: 7a:ab:0c:69:8d:1f:bd:85:de:ae:1f:cc:f2:96:96:64:4f:d2: 44:54:86:b4:70:68:d0:32:c9:2c:14:ac:ed:ac:3b:88:44:7c: bc:5e:d6:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDNFMTExMC8GA1UEBRMoODk5MzkzOEM4NTc1MDAyODBFOEY1RTUzREMwQjNFOTMw N0FFRDRBNzAeFw0yNTAzMjkwNzE5MDBaFw0yNTA0MDUwNzE5MDBaMBgxFjAUBgNV BAMTDTY3ZTc5ZWU0LTNhZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7Moc9TS0J8r9BrnK1uyb7NF2+tLP/tSGGV7x9ak6C0V4qVcWu4sMunCIhKKD0 WJTSu1Tyq0S95579c7C91n6uwlqX3dMf9HM5uxmn5PvkXL9YBgYtSqoxiik5vt6W dFyjY62oIx/6EKViulUHZKx4DQjkz49l7duRhtVT64Y2hU5fNK+6ceUVWspQioD0 YZ2oB5lkOJTdjdYEH9G2DctU6B2+P6DXm68kOQIydybn1OR+iIkg6UmpVDzILBGm 5ytJQwIMERA+hzILZkiA7f3ggEJysJGYzDkMVQ5aUgxOtoCsXioGJu8YxyNJpFxp RtED0+03m08E+ZfCQX2/7H2hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUClet80kA eWsu9qD2yA7GGsQtBswwHwYDVR0jBBgwFoAUiZOTjIV1ACgOj15T3As+kweu1Kcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEM0UxLzdDRjA3QkM2RUY0 NzExRUZBRjRDNDk2OEM0RjlBRTAyL2laT1RqSVYxQUNnT2oxNVQzQXMta3dldTFL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVpPVGpJVjFBQ2dPajE1VDNBcy1rd2V1MUtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE M0UxLzdDRjA3QkM2RUY0NzExRUZBRjRDNDk2OEM0RjlBRTAyL2laT1RqSVYxQUNn T2oxNVQzQXMta3dldTFLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFbdJrvfpn8+LdcP55ylpeyp0RyUyB7yWBNRIB7igAaaP6cLZRrEsvTr 3EHxOj9639g/MhbSmoeo+Myf7hjSRp4M8+sfLBIxF5+Z4ETIZG9I6NuHvdDVkjw0 F82yi+VWr6itoavs5I+2fgXRSM88xkJnVcIRRrHBBGnu+OD475zYDANP/6zorsX/ WqjO44ThZDF1x+KUitKGNKZDaJtrenV8NR52ODjyYgLo78NtJFxa6oOcYoaJ3oZD IA/pDL3oEeB8ezvv6x6NBvWBeKt1gJUeWjiaZsglA3qrDGmNH72F3q4fzPKWlmRP 0kRUhrRwaNAyySwUrO2sO4hEfLxe1h8= -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:31 2025 by rpki-client