$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: FJuzRioGMoIsa4Zt+vwGSSUteyRy67RBIdhLCbSR15A= Subject key identifier: 4E:DB:E0:C1:FC:A6:99:A9:00:06:C3:A9:44:CF:95:1C:47:91:AE:3C Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 1438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 141C Signing time: Fri 04 Apr 2025 17:01:23 +0000 Manifest this update: Fri 04 Apr 2025 17:01:23 +0000 Manifest next update: Fri 11 Apr 2025 17:01:23 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: INyJ2lwszp4ONqdPIjL2XFFV8CabwVSpvIwELEpgxYE=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: TyzdfixbvhgTgVbeTj4apy/zB+wf6IDh1/Lzfu3rZJM=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: 0LjZpONzgJ6xRmwAyv6QVE86pcOrLtlD9gU4D1tfLto=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: z0fyXCO60lkejMfyEE4mQL9l0P7nQ3XY65wfTKmQOmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5176 (0x1438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB Validity Not Before: Apr 4 17:01:23 2025 GMT Not After : Apr 11 17:01:23 2025 GMT Subject: CN=67f01063-2a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ca:86:46:92:87:f2:39:2b:63:5f:b9:a5:74: a1:eb:e2:35:f9:43:24:7b:9b:b7:ce:ca:60:51:fc: b7:ae:9c:08:03:a2:09:8a:8b:3f:ac:6b:03:eb:41: 1c:e1:8f:d1:48:86:50:fd:88:ad:1d:4e:e2:58:30: db:41:e0:9e:f6:ae:ed:38:80:e4:38:ed:f4:7e:15: 84:45:42:43:59:a6:32:3c:60:44:9b:09:88:b4:4c: 41:30:6f:b1:35:fe:a0:2c:7b:77:98:1d:19:85:f1: 0c:54:f3:50:5e:1c:ff:7d:ca:39:0e:56:80:29:ff: 3b:e3:7e:19:c1:9d:c3:74:8a:e8:0a:af:e8:d2:1d: 4e:7f:65:f8:9c:1c:ae:89:e3:80:6c:bb:1b:bc:62: 74:c0:83:b0:94:37:8e:94:cb:5e:d1:8f:d4:0a:3e: 61:bc:bd:98:2f:8b:6d:57:e3:f3:f8:e0:4e:20:78: f6:53:63:d4:7f:2d:5e:16:bf:26:61:9b:8c:5e:a7: f5:89:f8:78:c8:fc:70:88:f1:21:0f:51:5c:61:7f: 61:34:75:78:46:84:f8:6c:97:b8:f0:6c:0f:e2:b3: 4b:64:1c:e5:03:7a:d9:d5:22:22:21:58:53:61:ad: ad:d4:dc:5e:89:29:6c:ea:c9:04:12:57:25:39:a4: 25:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DB:E0:C1:FC:A6:99:A9:00:06:C3:A9:44:CF:95:1C:47:91:AE:3C X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:81:09:cb:55:84:6d:7e:58:59:a2:23:6d:f1:78:d7:8d:ab: a2:76:0b:ea:bc:77:7f:5d:2f:80:f4:5f:f3:91:df:4b:2f:39: ba:8a:96:ba:0d:d7:69:a9:7b:0f:d3:65:ca:41:c9:92:af:45: d3:5e:57:20:32:e9:8b:ad:3d:4d:fd:b9:cb:2d:a2:70:78:f1: 0b:93:67:f8:f9:c9:8b:40:80:44:be:70:d1:08:9a:55:60:c3: 1d:4d:e6:1b:51:aa:73:5c:1a:33:10:fe:11:d4:c6:88:b2:50: d1:82:d3:c7:a4:16:32:10:c9:0e:33:99:c9:74:e7:37:86:8a: 12:1b:8a:75:5d:6f:98:fb:5f:4b:7a:4d:9c:c9:48:5b:c7:0f: a0:06:3b:90:17:20:d1:7a:3f:51:20:e1:b6:19:ff:b0:40:da: e9:4f:5d:72:17:19:b0:48:50:cd:8f:7b:31:2a:c9:f2:13:e5: c6:a7:c2:30:3b:d4:24:01:28:aa:12:c8:34:98:92:57:2a:ed: 7d:73:16:12:27:ba:b0:db:38:67:2f:7e:d2:e5:6c:40:df:f5: 19:84:9c:e5:c9:fd:f6:28:64:ac:e1:ef:5f:b5:6e:82:c9:62: 41:be:cf:6e:b4:a6:53:e2:66:e8:99:63:ae:f1:0f:8f:f9:7a: 95:35:e5:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjUwNDA0MTcwMTIzWhcNMjUwNDExMTcwMTIzWjAYMRYwFAYD VQQDEw02N2YwMTA2My0yYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMqGRpKH8jkrY1+5pXSh6+I1+UMke5u3zspgUfy3rpwIA6IJios/rGsD60Ec 4Y/RSIZQ/YitHU7iWDDbQeCe9q7tOIDkOO30fhWERUJDWaYyPGBEmwmItExBMG+x Nf6gLHt3mB0ZhfEMVPNQXhz/fco5DlaAKf87434ZwZ3DdIroCq/o0h1Of2X4nByu ieOAbLsbvGJ0wIOwlDeOlMte0Y/UCj5hvL2YL4ttV+Pz+OBOIHj2U2PUfy1eFr8m YZuMXqf1ifh4yPxwiPEhD1FcYX9hNHV4RoT4bJe48GwP4rNLZBzlA3rZ1SIiIVhT Ya2t1NxeiSls6skEElclOaQlvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7b4MH8 ppmpAAbDqUTPlRxHka48MB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8gQnLVYRtflhZoiNt8XjXjauidgvqvHd/XS+A9F/zkd9LLzm6ipa6 DddpqXsP02XKQcmSr0XTXlcgMumLrT1N/bnLLaJwePELk2f4+cmLQIBEvnDRCJpV YMMdTeYbUapzXBozEP4R1MaIslDRgtPHpBYyEMkOM5nJdOc3hooSG4p1XW+Y+19L ek2cyUhbxw+gBjuQFyDRej9RIOG2Gf+wQNrpT11yFxmwSFDNj3sxKsnyE+XGp8Iw O9QkASiqEsg0mJJXKu19cxYSJ7qw2zhnL37S5WxA3/UZhJzlyf32KGSs4e9ftW6C yWJBvs9utKZT4mbomWOu8Q+P+XqVNeUQ -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:41 2025 by rpki-client