$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json) Hash identifier: 2AUHJNmTzsO6NTc0cnWDLrBt2Xbz00gJxIlwOAYaNHo= Subject key identifier: BF:9A:5D:9D:28:B7:12:46:5F:EA:26:78:88:6F:5B:B2:5A:65:E2:A7 Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft Manifest number: F9 Signing time: Fri 11 Apr 2025 04:28:35 +0000 Manifest this update: Fri 11 Apr 2025 04:28:34 +0000 Manifest next update: Fri 18 Apr 2025 04:28:34 +0000 Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: oOqSAc5w2lHsJ8eZ59PpeozzYIxpOt2/7xaPL1lUyRs=) 2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: fBtaOlMCOFGQQtGdBagxQGnrYFNg/qX3d4dMpzhuZnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Validity Not Before: Apr 11 04:28:34 2025 GMT Not After : Apr 18 04:28:34 2025 GMT Subject: CN=67f89a73-5b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:6e:43:f7:fa:94:2a:1f:1d:cf:59:04:50: dd:c7:80:f9:cb:a2:ab:d2:69:e1:8b:f9:5f:37:da: c8:84:d4:0f:d6:71:e4:50:1b:4c:8f:ea:75:58:12: b3:27:1d:bc:dc:e3:c0:51:b5:89:4c:3f:9d:75:a9: 2b:d9:11:ff:9c:b3:ef:78:8f:03:f5:b4:3c:01:37: e8:66:19:09:ba:4c:a6:5a:df:66:00:68:7c:59:08: 2e:b8:43:07:eb:f9:5a:7e:8e:91:c9:b8:93:91:4e: 67:34:68:60:9a:ab:11:93:36:8c:55:04:51:e6:2d: 14:f2:ff:b8:c7:97:ef:ce:f6:67:45:3a:a6:1b:36: 06:e3:58:5e:92:8a:46:9f:02:6b:8e:37:5c:8c:05: 5e:9e:35:3d:87:f0:57:2a:a8:0b:1b:36:44:7c:74: ed:2b:a5:64:5d:4a:f2:34:0e:ae:70:37:67:ac:56: 31:c4:3e:c9:77:e0:26:ae:9a:1d:52:ef:37:48:ee: 7c:67:ec:97:99:a7:0c:18:80:a9:82:92:61:cf:64: 1f:4a:7b:b2:92:08:5a:d1:c0:2e:48:9e:9e:7c:49: 16:18:47:98:89:02:4e:83:56:4e:4c:c7:63:cf:44: 22:cc:0e:aa:b5:6b:d5:a2:5e:8f:49:fb:da:26:38: 44:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9A:5D:9D:28:B7:12:46:5F:EA:26:78:88:6F:5B:B2:5A:65:E2:A7 X509v3 Authority Key Identifier: keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:3e:f0:05:8c:d4:9d:ff:68:8e:6c:7c:c4:65:c6:78:11:2e: 0c:a4:0b:25:c0:3f:7b:36:22:a5:77:64:be:13:ed:69:7e:7a: 5b:9c:08:47:bd:8d:5c:4c:f8:74:50:d3:47:e6:32:1a:d8:05: 1d:a2:5c:3d:24:90:e2:9b:f1:53:f3:2e:61:e7:59:ad:14:0d: 57:57:bc:9a:c7:e9:8d:60:44:45:de:1c:ed:a0:84:9a:bf:12: 3a:61:c3:64:0f:74:78:b6:0e:b1:8b:1b:b3:36:4a:c1:a5:4d: 35:17:48:b2:cc:bd:7d:76:0a:1a:38:2d:a5:63:e0:e9:39:f8: cb:e4:92:24:fd:a3:1c:6c:af:9c:6a:0a:15:97:1f:4c:1a:bc: 99:43:66:7a:b8:03:9c:7c:75:d5:3f:8a:e9:1b:04:70:bd:a7: a8:94:18:99:32:50:b3:e1:7d:0b:e5:d4:37:47:28:22:55:f8: 6b:43:2e:d5:f7:90:87:7b:a6:e5:5d:3f:cb:19:4b:68:ee:fb: 13:68:ee:ef:cb:c8:cc:d6:3e:4b:cd:6b:0c:4c:61:41:44:e7: 6e:bb:59:dd:5d:61:4c:31:27:42:06:2c:4e:ae:f0:9d:6e:d6: ab:31:26:c8:f0:11:49:d2:69:93:ec:64:08:a0:c9:ed:32:fa: d5:42:35:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAzNzIxMTAvBgNVBAUTKEYyOUIyM0VBNEUxMTRDREM5Q0E2RDM3RjVFRjc5RUY0 QzM1QzcyODIwHhcNMjUwNDExMDQyODM0WhcNMjUwNDE4MDQyODM0WjAYMRYwFAYD VQQDEw02N2Y4OWE3My01Yjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzZuQ/f6lCofHc9ZBFDdx4D5y6Kr0mnhi/lfN9rIhNQP1nHkUBtMj+p1WBKz Jx283OPAUbWJTD+ddakr2RH/nLPveI8D9bQ8ATfoZhkJukymWt9mAGh8WQguuEMH 6/lafo6RybiTkU5nNGhgmqsRkzaMVQRR5i0U8v+4x5fvzvZnRTqmGzYG41hekopG nwJrjjdcjAVenjU9h/BXKqgLGzZEfHTtK6VkXUryNA6ucDdnrFYxxD7Jd+Amrpod Uu83SO58Z+yXmacMGICpgpJhz2QfSnuykgha0cAuSJ6efEkWGEeYiQJOg1ZOTMdj z0QizA6qtWvVol6PSfvaJjhE2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+aXZ0o txJGX+omeIhvW7JaZeKnMB8GA1UdIwQYMBaAFPKbI+pOEUzcnKbTf173nvTDXHKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDM3Mi8yMEE1NEZDODlE ODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlROeWNwdE5fWHZlZTlNTmNj b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhwc2o2azRSVE55Y3B0Tl9YdmVlOU1OY2NvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDM3Mi8yMEE1NEZDODlEODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlRO eWNwdE5fWHZlZTlNTmNjb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/PvAFjNSd/2iObHzEZcZ4ES4MpAslwD97NiKld2S+E+1pfnpbnAhH vY1cTPh0UNNH5jIa2AUdolw9JJDim/FT8y5h51mtFA1XV7yax+mNYERF3hztoISa vxI6YcNkD3R4tg6xixuzNkrBpU01F0iyzL19dgoaOC2lY+DpOfjL5JIk/aMcbK+c agoVlx9MGryZQ2Z6uAOcfHXVP4rpGwRwvaeolBiZMlCz4X0L5dQ3RygiVfhrQy7V 95CHe6blXT/LGUto7vsTaO7vy8jM1j5LzWsMTGFBROduu1ndXWFMMSdCBixOrvCd btarMSbI8BFJ0mmT7GQIoMntMvrVQjWN -----END CERTIFICATE-----Generated at Sun Apr 13 05:34:17 2025 by rpki-client