$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft File: 0rwrzA84njpcUzzEc6fENrsbdNk.mft (raw, json) Hash identifier: GVbzL9l0jBqfBaBNv+0+H0cTr8g2m8OR37qZ3axKfrg= Subject key identifier: DD:54:AB:BD:52:AF:EF:A7:80:BB:DC:7B:D4:58:B0:E6:CE:D7:1A:7D Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2D4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft Manifest number: 2D28 Signing time: Fri 04 Apr 2025 15:34:42 +0000 Manifest this update: Fri 04 Apr 2025 15:34:42 +0000 Manifest next update: Fri 11 Apr 2025 15:34:42 +0000 Files and hashes: 1: 0rwrzA84njpcUzzEc6fENrsbdNk.crl (hash: DatJFgPIgZKzW5Qq1yPQni2U7nKB65WJ4bubJyJvEQc=) 2: E2AD90E813E811E9B287C144C4F9AE02.roa (hash: bLM4hecBjp4+kZrFBYpUYh3+T8MNWN7sNl7r7CCqW6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11596 (0x2d4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7 Validity Not Before: Apr 4 15:34:42 2025 GMT Not After : Apr 11 15:34:42 2025 GMT Subject: CN=67effc12-4e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:b2:c1:e4:78:b3:6f:1b:9f:c1:d1:3e:da: ef:31:4f:db:2e:17:a4:a0:90:82:a7:51:d1:b4:66: 0f:3a:59:40:00:c5:10:de:01:0c:db:a4:a0:47:4b: ec:17:4d:75:2f:bb:e5:84:3f:93:66:26:ea:50:14: 0b:13:2a:00:d4:1c:dc:d7:ee:ea:90:89:1b:51:63: e5:cf:41:c8:b2:d3:6e:66:f2:af:0d:30:4c:77:03: 71:d1:b7:b9:27:d7:72:51:58:52:51:92:74:1b:a5: 00:a4:4e:d1:be:7a:b5:68:11:71:92:f3:01:b6:dd: 15:1e:de:80:87:9f:a7:c9:ab:93:ae:78:7b:57:6d: 7b:b0:f7:e2:f2:2d:a0:ed:c2:05:ac:9d:9a:45:c5: 61:ba:cd:d3:81:30:22:16:5d:03:f7:a7:da:88:e2: d2:e3:06:40:bb:2c:d3:11:b2:9d:26:34:82:08:1d: f6:90:7d:80:e9:ea:3c:9d:fe:c6:2d:3c:2b:1b:25: cf:64:91:74:43:1c:f4:a4:3d:5d:0e:91:03:b1:35: f6:05:8e:eb:b3:aa:12:43:7a:28:8e:ac:d5:be:64: 0f:5c:2a:2d:ed:30:fb:5b:5f:50:7c:dd:77:f2:e7: a4:11:30:b1:c6:eb:a9:d9:7f:1d:b5:1c:16:db:b2: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:AB:BD:52:AF:EF:A7:80:BB:DC:7B:D4:58:B0:E6:CE:D7:1A:7D X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:00:09:4e:89:60:f4:d9:c2:ee:a4:ac:1a:3e:b5:e4:95:37: d2:22:32:51:bc:28:04:9e:28:65:26:4d:e2:bd:bf:26:ac:a8: b9:5a:bd:24:58:39:a9:ac:00:c5:bb:77:72:5f:5a:89:0d:40: 8d:ce:94:8e:a5:46:ab:f0:46:ee:88:57:eb:97:50:b4:fa:48: 5e:08:e9:fd:7a:94:73:5e:07:e0:6f:53:f3:b8:4a:4c:3a:7e: 02:6e:7d:78:e5:be:20:01:b3:1b:f2:1c:94:db:00:7e:91:5e: 84:b5:ce:f1:fc:f7:b6:5d:91:92:ab:37:8d:11:40:79:93:23: be:8d:51:f9:fa:67:fb:88:95:25:77:97:96:82:fe:f5:bf:56: 2a:e5:b7:10:8f:99:ff:0f:ca:bd:cc:23:1c:e8:9e:0f:f3:27: 08:68:ec:97:ab:20:0e:1d:b4:73:6c:ae:c6:6e:30:de:de:32: 74:a6:86:5b:e7:87:32:60:8b:a4:a7:3b:dc:c9:a7:c4:bc:60: 47:1e:b7:bb:18:a6:d4:11:b8:e6:21:59:1a:5a:51:b5:7b:ed: 0e:30:33:a4:28:90:6b:9c:32:ee:09:da:d0:10:2f:52:41:9a: b9:2d:d9:e1:f5:ab:b6:f6:93:ee:55:8e:b7:bf:0c:0b:09:b8: 4a:28:65:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjUwNDA0MTUzNDQyWhcNMjUwNDExMTUzNDQyWjAYMRYwFAYD VQQDEw02N2VmZmMxMi00ZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAmyweR4s28bn8HRPtrvMU/bLhekoJCCp1HRtGYPOllAAMUQ3gEM26SgR0vs F011L7vlhD+TZibqUBQLEyoA1Bzc1+7qkIkbUWPlz0HIstNuZvKvDTBMdwNx0be5 J9dyUVhSUZJ0G6UApE7Rvnq1aBFxkvMBtt0VHt6Ah5+nyauTrnh7V217sPfi8i2g 7cIFrJ2aRcVhus3TgTAiFl0D96faiOLS4wZAuyzTEbKdJjSCCB32kH2A6eo8nf7G LTwrGyXPZJF0Qxz0pD1dDpEDsTX2BY7rs6oSQ3oojqzVvmQPXCot7TD7W19QfN13 8uekETCxxuup2X8dtRwW27IULwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1Uq71S r++ngLvce9RYsObO1xp9MB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjFDNy81NDIyMkZEMDhGQUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5q cGNVenpFYzZmRU5yc2JkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOAAlOiWD02cLupKwaPrXklTfSIjJRvCgEnihlJk3ivb8mrKi5Wr0k WDmprADFu3dyX1qJDUCNzpSOpUar8EbuiFfrl1C0+kheCOn9epRzXgfgb1PzuEpM On4Cbn145b4gAbMb8hyU2wB+kV6Etc7x/Pe2XZGSqzeNEUB5kyO+jVH5+mf7iJUl d5eWgv71v1Yq5bcQj5n/D8q9zCMc6J4P8ycIaOyXqyAOHbRzbK7GbjDe3jJ0poZb 54cyYIukpzvcyafEvGBHHre7GKbUEbjmIVkaWlG1e+0OMDOkKJBrnDLuCdrQEC9S QZq5Ldnh9au29pPuVY63vwwLCbhKKGWk -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:40 2025 by rpki-client