$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft File: A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json) Hash identifier: Sxr9bWSVa3RDNQwEGbp+0IYIXO/LyXyfWoDu0hOfhcQ= Subject key identifier: 04:55:05:3A:C7:D5:29:5E:74:66:84:84:44:64:1E:32:25:46:03:45 Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Certificate serial: 0BD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft Manifest number: 0BC0 Signing time: Fri 04 Apr 2025 18:59:01 +0000 Manifest this update: Fri 04 Apr 2025 18:59:00 +0000 Manifest next update: Fri 11 Apr 2025 18:59:00 +0000 Files and hashes: 1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: Zui/Z6CM9muos5Gbr4ykc4jxwGjIHLRy6bjULXqvImM=) 2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: d0pBZZ4RvHYAFaiTNU/2gKYjejf//tWF0XMSJbZsqXg=) 3: 398848523A0011EFB7007939C4F9AE02.roa (hash: g/48h2ExElnkoWctOHQeDXu24OxHb6yA2ORuNL7eIjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4003 Validity Not Before: Apr 4 18:59:00 2025 GMT Not After : Apr 11 18:59:00 2025 GMT Subject: CN=67f02bf5-ddcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8d:b2:98:cc:4f:66:a7:1e:08:15:e8:38:19: c7:44:bb:bf:c8:a7:15:d8:66:e2:ab:74:c7:e0:11: b5:8f:ab:ad:85:bc:30:34:6f:83:c2:70:03:7f:bf: 73:1c:3b:c3:9c:76:4c:4e:b1:22:d2:7c:22:39:8f: c4:8e:fe:b9:1b:de:1d:a4:d1:c3:1a:19:58:71:21: 25:6e:9c:29:9b:e2:d4:fe:3d:d7:61:ae:0f:a8:9b: 22:ef:21:65:6a:02:ee:ff:5d:15:fe:3c:ca:ed:97: 1d:a7:87:5b:cf:d8:69:db:80:d9:9f:a6:dc:48:72: fd:5c:64:ae:0c:58:c1:12:ca:a9:5a:aa:ac:a3:64: 6f:e7:18:7e:7d:f1:84:b8:eb:8f:04:a4:31:e8:c7: 6e:23:f4:5e:3f:ae:21:1c:52:5e:80:92:fb:8b:17: bc:e5:42:32:93:26:ce:76:56:ac:86:70:b1:2e:f1: b4:ce:2e:c9:fe:3b:0d:61:d8:e4:ff:47:c4:b9:6f: 68:ee:7e:5a:d9:b9:8d:c3:de:1d:88:f3:1c:b7:d3: 0a:bc:03:a2:13:b7:55:8b:48:fc:86:eb:49:71:81: 5f:18:da:40:67:1e:ae:56:70:36:cb:de:26:7a:44: c4:2b:27:15:28:f3:40:ac:ee:06:0f:29:31:05:f0: ec:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:55:05:3A:C7:D5:29:5E:74:66:84:84:44:64:1E:32:25:46:03:45 X509v3 Authority Key Identifier: keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:e4:ef:80:05:d2:fe:30:c3:c7:90:2f:7d:b7:63:4f:0b:70: f6:78:e6:6b:45:6a:69:57:25:8d:27:bc:76:29:90:81:c2:03: ef:06:f8:f2:c9:ab:49:18:ef:fc:2a:27:82:a6:4b:8d:bc:3b: bf:30:4c:09:4c:56:72:eb:35:23:0b:cc:fd:07:7d:ba:b4:e0: 62:90:58:bc:be:de:be:2b:83:50:1a:5e:22:8a:78:a5:97:45: b4:e0:f2:1b:5c:e2:ba:33:af:b6:0d:f1:7f:1e:86:66:cf:07: 45:6c:de:01:cc:4a:7e:97:6a:93:7d:ef:19:9e:7c:bb:01:f3: 6a:89:8b:dd:b3:6c:b9:a7:16:e8:fc:27:19:6a:ea:6e:32:93: 9f:fc:1d:04:0e:1a:c1:01:4c:b3:0f:a4:f4:2e:54:93:b3:c0: f1:28:62:81:28:cc:0f:35:fe:d5:45:46:08:66:80:cc:44:3a: 40:e6:d6:b0:1e:ba:db:c5:2f:04:1b:a9:a5:3a:96:37:92:ab: 92:1b:ef:ab:a2:b7:be:0b:e7:15:9e:68:8c:9a:51:3a:f2:74: 23:d4:26:d6:d2:f1:eb:f7:20:08:61:2f:4f:e8:46:a5:d0:10: 95:22:8d:fc:de:8e:a7:09:2a:82:81:6b:e1:6d:5f:e5:80:40: d3:fc:79:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwMDMxMTAvBgNVBAUTKDAzOEE4NkYzNjJCMjU1N0Y5NEJFNzcyRUUwQzVGRDMx ODQ1RkUyNjMwHhcNMjUwNDA0MTg1OTAwWhcNMjUwNDExMTg1OTAwWjAYMRYwFAYD VQQDEw02N2YwMmJmNS1kZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk42ymMxPZqceCBXoOBnHRLu/yKcV2Gbiq3TH4BG1j6uthbwwNG+DwnADf79z HDvDnHZMTrEi0nwiOY/Ejv65G94dpNHDGhlYcSElbpwpm+LU/j3XYa4PqJsi7yFl agLu/10V/jzK7Zcdp4dbz9hp24DZn6bcSHL9XGSuDFjBEsqpWqqso2Rv5xh+ffGE uOuPBKQx6MduI/ReP64hHFJegJL7ixe85UIykybOdlashnCxLvG0zi7J/jsNYdjk /0fEuW9o7n5a2bmNw94diPMct9MKvAOiE7dVi0j8hutJcYFfGNpAZx6uVnA2y94m ekTEKycVKPNArO4GDykxBfDsfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARVBTrH 1SledGaEhERkHjIlRgNFMB8GA1UdIwQYMBaAFAOKhvNislV/lL53LuDF/TGEX+Jj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDAwMy9COEU4QUQ3MjFB RDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZYLVV2bmN1NE1YOU1ZUmY0 bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0cUc4Mkt5VlgtVXZuY3U0TVg5TVlSZjRtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDAwMy9COEU4QUQ3MjFBRDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZY LVV2bmN1NE1YOU1ZUmY0bU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo5O+ABdL+MMPHkC99t2NPC3D2eOZrRWppVyWNJ7x2KZCBwgPvBvjy yatJGO/8KieCpkuNvDu/MEwJTFZy6zUjC8z9B326tOBikFi8vt6+K4NQGl4iinil l0W04PIbXOK6M6+2DfF/HoZmzwdFbN4BzEp+l2qTfe8Znny7AfNqiYvds2y5pxbo /CcZaupuMpOf/B0EDhrBAUyzD6T0LlSTs8DxKGKBKMwPNf7VRUYIZoDMRDpA5taw HrrbxS8EG6mlOpY3kquSG++rore+C+cVnmiMmlE68nQj1CbW0vHr9yAIYS9P6Eal 0BCVIo383o6nCSqCgWvhbV/lgEDT/Hma -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:10 2025 by rpki-client