$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: bwxinOS4LGOdkcHOkPnXy8HK5Pe2gMpZxf1NiLIR1g8= Subject key identifier: 33:2F:FC:0E:D1:03:B9:73:5F:F1:DF:BD:2C:5E:59:91:A5:B0:95:27 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 07AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 07A0 Signing time: Fri 04 Apr 2025 21:24:24 +0000 Manifest this update: Fri 04 Apr 2025 21:24:24 +0000 Manifest next update: Fri 11 Apr 2025 21:24:24 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: b6NkBSeUcHvz4kVRIVWMwFAaYa30KqzPefAYiyKY9/M=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: ipH52NvI6j7Qm3VJ3UEcq9yvGVo2LC48K1opbVhCFvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1962 (0x7aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A Validity Not Before: Apr 4 21:24:24 2025 GMT Not After : Apr 11 21:24:24 2025 GMT Subject: CN=67f04e08-9213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:92:f7:53:be:33:bf:e2:10:88:93:87:88:fe: 75:f0:00:6b:c1:70:01:ff:26:e9:c4:33:2d:68:a9: 9d:51:29:18:4a:25:49:f2:1d:c8:df:7c:6e:7b:4a: dc:fd:d7:92:98:4a:e8:61:a7:71:9f:65:44:5c:01: 25:78:59:90:4e:c8:88:87:31:fe:aa:34:59:0c:8a: 30:f1:bb:77:7e:63:d0:47:3a:70:f6:8f:e0:ad:f3: 69:1a:c7:af:21:59:38:8f:e3:34:f6:8b:97:29:06: 21:4f:93:85:05:8f:f4:1f:52:a4:82:59:71:f0:75: e3:41:56:e3:49:43:ea:b5:d2:8b:42:b7:2d:e9:da: b0:62:b6:87:09:c9:24:12:f6:49:b1:45:d1:3b:bb: 1b:6b:fd:46:62:6f:4b:1d:ce:1b:d7:4c:22:0e:b0: d4:24:4f:50:aa:5b:c8:da:d6:30:a8:27:6d:6b:a1: de:79:e3:cc:ae:e2:bf:e4:d3:01:77:b2:28:82:a3: 0b:de:fd:49:53:06:6b:52:ab:12:d0:51:a2:83:87: 4d:d9:a5:23:fe:4a:cc:97:74:9d:5f:a7:5f:48:a3: 3c:7b:54:a2:82:2d:68:33:ca:65:09:b8:a3:8a:e7: de:bb:36:18:b1:f8:7a:ac:88:c8:02:f4:4f:8e:f5: 25:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2F:FC:0E:D1:03:B9:73:5F:F1:DF:BD:2C:5E:59:91:A5:B0:95:27 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:57:f8:f4:77:ec:c6:56:3c:c0:6f:39:9e:f1:31:6c:41:ad: fc:ae:9c:2c:73:e0:5c:82:cb:27:56:4d:12:ab:da:26:d1:d2: f3:46:3e:c1:3c:5b:64:5d:e6:18:fe:0e:d5:c0:bf:96:cf:58: 4e:4b:68:e9:95:6d:22:ad:00:d1:6e:76:e5:ea:90:f2:c6:c9: 5d:34:17:1e:a3:b7:7c:b5:4e:e6:b9:30:d0:03:7b:15:73:88: fc:58:10:6c:05:93:82:04:12:97:e6:d6:d9:d1:7f:4c:86:ae: b8:f8:1a:6f:b0:5c:e1:4b:fc:fa:b0:bf:52:d1:c9:2b:84:bc: 0e:86:2c:5e:90:09:dc:a8:c0:57:66:09:b3:18:81:d1:93:a9: a9:7b:88:98:fd:bc:94:0d:9f:0d:2b:e3:2e:7d:a1:bd:e1:61: 5a:94:45:2b:98:1c:52:c6:53:b0:b1:2a:1e:81:e1:37:c0:24: 69:7a:1b:ba:e9:4b:4e:3b:c4:ad:81:fb:4f:f2:bd:c0:c1:81: 42:dc:55:41:ab:54:2b:a5:2c:60:c1:ff:d5:83:04:2e:cd:63: c2:ce:c6:58:69:c9:10:9d:f1:1a:1e:83:42:f0:f0:d6:13:bb: a6:1e:b4:7f:75:22:70:61:ed:d3:65:cd:2b:f6:e0:73:22:23: c9:47:b5:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjUwNDA0MjEyNDI0WhcNMjUwNDExMjEyNDI0WjAYMRYwFAYD VQQDEw02N2YwNGUwOC05MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpL3U74zv+IQiJOHiP518ABrwXAB/ybpxDMtaKmdUSkYSiVJ8h3I33xue0rc /deSmEroYadxn2VEXAEleFmQTsiIhzH+qjRZDIow8bt3fmPQRzpw9o/grfNpGsev IVk4j+M09ouXKQYhT5OFBY/0H1Kkgllx8HXjQVbjSUPqtdKLQrct6dqwYraHCckk EvZJsUXRO7sba/1GYm9LHc4b10wiDrDUJE9QqlvI2tYwqCdta6HeeePMruK/5NMB d7IogqML3v1JUwZrUqsS0FGig4dN2aUj/krMl3SdX6dfSKM8e1Sigi1oM8plCbij iufeuzYYsfh6rIjIAvRPjvUlgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMv/A7R A7lzX/HfvSxeWZGlsJUnMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmV/j0d+zGVjzAbzme8TFsQa38rpwsc+BcgssnVk0Sq9om0dLzRj7B PFtkXeYY/g7VwL+Wz1hOS2jplW0irQDRbnbl6pDyxsldNBceo7d8tU7muTDQA3sV c4j8WBBsBZOCBBKX5tbZ0X9Mhq64+BpvsFzhS/z6sL9S0ckrhLwOhixekAncqMBX ZgmzGIHRk6mpe4iY/byUDZ8NK+MufaG94WFalEUrmBxSxlOwsSoegeE3wCRpehu6 6UtOO8StgftP8r3AwYFC3FVBq1QrpSxgwf/VgwQuzWPCzsZYackQnfEaHoNC8PDW E7umHrR/dSJwYe3TZc0r9uBzIiPJR7XW -----END CERTIFICATE-----Generated at Sat Apr 5 16:51:30 2025 by rpki-client