$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json) Hash identifier: kd2+HywjxW0q7ockLPx5vx04XvPrIpTKGAhWY2XOkeM= Subject key identifier: D9:71:BC:DE:4C:1B:1E:3B:F1:57:BC:B9:BF:57:1B:02:02:95:1A:E0 Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft Manifest number: D5 Signing time: Sat 05 Apr 2025 04:56:47 +0000 Manifest this update: Sat 05 Apr 2025 04:56:47 +0000 Manifest next update: Sat 12 Apr 2025 04:56:47 +0000 Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: IlDc/bCTaaYH5bediICObBwb8gLgqAsbvPkxU4g2PlY=) 2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: Ed+WGj4YoSK8RoZY5/E6txkQiwmhNLhgRfvyu7U8cGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0EDF Validity Not Before: Apr 5 04:56:47 2025 GMT Not After : Apr 12 04:56:47 2025 GMT Subject: CN=67f0b80f-e623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:61:3c:6d:50:10:0b:45:b6:d7:31:3b:46: 43:65:57:2d:7c:ee:b9:ef:ff:cb:6a:2c:b7:1b:92: 74:ae:ae:3a:04:96:fe:ae:46:8f:79:8e:a0:61:03: a9:44:4a:05:fa:5e:20:1b:b5:89:3a:ed:bd:cd:4f: 6d:a9:d5:24:ac:be:6d:e8:9c:77:57:14:1c:b7:4d: b5:f6:9f:6a:54:38:b7:3b:e8:f4:71:49:6e:f8:46: f4:24:d0:77:9d:d6:cb:01:2f:06:e2:fa:c5:90:bc: 8f:21:4f:2f:01:27:6f:18:f3:5a:df:af:5c:b5:98: 91:9f:51:77:72:2a:22:4d:22:8e:59:d5:d2:74:62: a3:d9:37:70:3f:ba:ee:b3:c0:44:88:53:2e:6b:2c: de:cf:bc:55:cc:cd:41:99:ed:dc:6b:80:b8:e8:63: 64:81:52:e6:93:fc:67:5d:d8:ae:04:95:e5:d3:94: a4:80:b5:73:5a:3a:80:13:37:f6:d9:f1:3e:68:02: 2c:9d:b7:66:92:7b:3d:d7:d6:eb:88:42:74:eb:2e: e5:2e:85:f6:f4:f8:01:83:68:5a:30:54:ad:71:25: 54:a8:36:22:99:bd:b5:fd:e6:c5:d1:5a:ca:35:58: 57:91:a4:b6:59:a8:4d:5a:a9:f8:b6:1f:c5:b4:1e: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:71:BC:DE:4C:1B:1E:3B:F1:57:BC:B9:BF:57:1B:02:02:95:1A:E0 X509v3 Authority Key Identifier: keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ee:1c:39:99:be:2e:aa:b5:a8:67:06:f0:26:e9:9e:96:e3: 1b:7c:3b:5d:ed:20:d1:86:0a:06:30:67:b0:4b:21:3a:40:49: 7a:2f:f3:16:c4:68:46:9d:d0:44:88:df:2b:bf:96:e9:c2:cb: 04:fb:fa:7f:33:57:97:b4:69:91:96:25:3f:6d:5a:a1:e1:ae: 88:00:73:24:d9:ae:f9:a7:8e:22:3b:0d:b8:54:a7:43:b9:37: ea:60:a4:df:5b:db:09:df:5f:52:16:cc:a2:f0:eb:08:d6:e9: 2e:95:11:77:23:2d:53:09:35:86:6c:83:08:04:fe:4f:e4:a7: 83:cb:1b:43:44:74:4b:7a:64:0a:ea:33:7d:ec:e8:01:93:60: fd:0d:69:f4:51:f3:71:da:c8:88:09:48:44:a3:d5:eb:5e:9e: 32:e7:61:c1:f5:86:9b:ac:2f:3e:e1:03:b4:c6:8c:05:6e:f1: e6:71:59:54:76:b6:46:4e:6e:24:6d:27:2a:7c:61:0f:fa:5d: 9a:13:d3:12:2b:c3:22:5e:66:29:b9:b3:63:0d:e0:d4:93:ac: 32:ed:c7:de:13:c5:65:78:89:a5:c2:3b:6e:07:eb:57:5f:cf: ba:d0:e3:b0:b2:89:ba:2c:50:0c:2f:bb:0e:44:b4:a8:21:eb: 70:e0:fe:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFREYxMTAvBgNVBAUTKDhCNjQxOTY4NjkxMTdCOTlCODc5QjREQ0JBRjA0Mjkw QkMxNjgxMEMwHhcNMjUwNDA1MDQ1NjQ3WhcNMjUwNDEyMDQ1NjQ3WjAYMRYwFAYD VQQDEw02N2YwYjgwZi1lNjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvERhPG1QEAtFttcxO0ZDZVctfO657//Laiy3G5J0rq46BJb+rkaPeY6gYQOp REoF+l4gG7WJOu29zU9tqdUkrL5t6Jx3VxQct0219p9qVDi3O+j0cUlu+Eb0JNB3 ndbLAS8G4vrFkLyPIU8vASdvGPNa369ctZiRn1F3cioiTSKOWdXSdGKj2TdwP7ru s8BEiFMuayzez7xVzM1Bme3ca4C46GNkgVLmk/xnXdiuBJXl05SkgLVzWjqAEzf2 2fE+aAIsnbdmkns919briEJ06y7lLoX29PgBg2haMFStcSVUqDYimb21/ebF0VrK NVhXkaS2WahNWqn4th/FtB7VbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlxvN5M Gx478Ve8ub9XGwIClRrgMB8GA1UdIwQYMBaAFItkGWhpEXuZuHm03LrwQpC8FoEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEVERi8zREUzOUU4MkNG QUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1bTRlYlRjdXZCQ2tMd1dn UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEVERi8zREUzOUU4MkNGQUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1 bTRlYlRjdXZCQ2tMd1dnUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh7hw5mb4uqrWoZwbwJumeluMbfDtd7SDRhgoGMGewSyE6QEl6L/MW xGhGndBEiN8rv5bpwssE+/p/M1eXtGmRliU/bVqh4a6IAHMk2a75p44iOw24VKdD uTfqYKTfW9sJ319SFsyi8OsI1ukulRF3Iy1TCTWGbIMIBP5P5KeDyxtDRHRLemQK 6jN97OgBk2D9DWn0UfNx2siICUhEo9XrXp4y52HB9YabrC8+4QO0xowFbvHmcVlU drZGTm4kbScqfGEP+l2aE9MSK8MiXmYpubNjDeDUk6wy7cfeE8VleImlwjtuB+tX X8+60OOwsom6LFAML7sORLSoIetw4P5w -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:55 2025 by rpki-client