$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: ChvFq9xgGkdAbEy2EZvXmmvq5+aOIaCJprp+ZAW5uFI= Subject key identifier: 8A:8D:34:DB:52:F0:A4:7C:57:2B:39:31:66:A8:D3:A9:65:05:56:C2 Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0D00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0CF6 Signing time: Fri 18 Apr 2025 18:12:58 +0000 Manifest this update: Fri 18 Apr 2025 18:12:58 +0000 Manifest next update: Fri 25 Apr 2025 18:12:58 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: 0qpggpXsj4ykQfCeM74AQjtMtuudazhcUV27ehWplhY=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: YQKzakVZRwkEoSkOxzmifYwaHBBE1uM/hdsf+7QDJq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Apr 18 18:12:58 2025 GMT Not After : Apr 25 18:12:58 2025 GMT Subject: CN=6802962a-3939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:7f:35:27:de:dc:af:1a:44:8f:34:db:ee: 4d:79:f1:1e:da:8f:cb:07:ec:bc:bb:7e:26:cd:51: 49:d4:6d:37:ac:fc:04:97:01:25:8c:4b:91:c5:fe: f8:3c:1a:21:03:96:d0:4c:0a:f7:4b:f4:7a:18:17: 7f:60:e7:29:b0:7c:0e:b0:54:06:86:e1:08:58:00: 56:d6:ec:3c:36:5c:04:1c:87:9b:c6:47:1e:18:53: 1a:b2:c7:5b:0c:6e:3e:53:17:72:1c:fc:21:ba:e8: 9e:27:74:3c:d5:7a:42:54:f3:7b:18:bb:d8:b0:ce: 0e:e3:1b:37:17:5b:01:bc:c5:8d:2c:45:65:0c:60: 01:c8:ae:5d:8c:06:e6:31:f0:6b:03:53:14:ec:f6: b8:2c:23:f7:79:ef:52:35:aa:8b:43:44:41:f0:c1: 97:09:15:f9:24:1f:48:73:8e:e3:33:5b:d0:e4:50: a1:85:b9:ec:63:03:e6:e8:b5:91:ee:80:ae:14:f9: 2b:46:bc:4d:cd:3f:96:09:74:01:85:47:58:ca:4e: 4e:c0:87:f3:cb:b3:e8:a4:68:7b:c8:26:ab:63:06: cd:65:f7:d3:19:c4:16:c2:c9:69:cb:55:50:61:34: ed:6e:66:4f:c7:6a:53:57:59:35:fb:63:9f:5f:95: c7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:34:DB:52:F0:A4:7C:57:2B:39:31:66:A8:D3:A9:65:05:56:C2 X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:62:c3:ff:ab:34:0c:df:ee:28:eb:ed:5d:88:b8:3d:11:88: 68:7f:51:cc:28:ee:4f:67:a3:fc:f8:49:88:dd:71:d6:a8:00: ad:13:65:78:d7:85:46:2c:4a:be:fe:98:7d:d4:54:90:a3:65: 25:5a:e7:92:b2:1d:e4:3b:6c:4d:dc:ae:1e:6c:43:a3:33:ad: 1c:01:86:1b:66:15:45:a4:87:a8:c7:d4:d7:d4:7e:19:6a:73: 73:e8:5e:7e:93:28:0d:4d:ab:d1:5c:4d:d1:27:81:86:9c:94: d9:b7:70:2c:70:2e:15:92:48:5d:ee:7d:79:cf:bc:b6:41:31: 3e:86:0d:2c:76:82:fd:b2:3b:f9:09:85:ab:cf:e1:08:bf:b6: 9f:d5:6d:46:9b:fd:ec:fc:00:d0:44:61:32:57:06:87:73:21: b2:ae:2f:a0:3a:c8:03:c4:03:8a:72:5b:5a:97:00:30:f7:35: 12:a3:70:fa:dc:d4:44:ff:0d:53:50:27:52:14:d8:f0:98:7e: c2:6a:6c:99:6a:41:52:88:d8:ec:03:07:8f:bf:2d:86:93:c4: 23:a6:c7:eb:85:d5:29:8b:dd:72:2b:df:cc:2d:4b:6a:bd:c1: 80:aa:d6:5a:7e:54:74:0f:11:95:e3:ce:85:b0:4d:87:6b:15: 5c:39:3a:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjUwNDE4MTgxMjU4WhcNMjUwNDI1MTgxMjU4WjAYMRYwFAYD VQQDEw02ODAyOTYyYS0zOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo1/NSfe3K8aRI802+5NefEe2o/LB+y8u34mzVFJ1G03rPwElwEljEuRxf74 PBohA5bQTAr3S/R6GBd/YOcpsHwOsFQGhuEIWABW1uw8NlwEHIebxkceGFMassdb DG4+UxdyHPwhuuieJ3Q81XpCVPN7GLvYsM4O4xs3F1sBvMWNLEVlDGAByK5djAbm MfBrA1MU7Pa4LCP3ee9SNaqLQ0RB8MGXCRX5JB9Ic47jM1vQ5FChhbnsYwPm6LWR 7oCuFPkrRrxNzT+WCXQBhUdYyk5OwIfzy7PopGh7yCarYwbNZffTGcQWwslpy1VQ YTTtbmZPx2pTV1k1+2OfX5XHqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqNNNtS 8KR8Vys5MWao06llBVbCMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdYsP/qzQM3+4o6+1diLg9EYhof1HMKO5PZ6P8+EmI3XHWqACtE2V4 14VGLEq+/ph91FSQo2UlWueSsh3kO2xN3K4ebEOjM60cAYYbZhVFpIeox9TX1H4Z anNz6F5+kygNTavRXE3RJ4GGnJTZt3AscC4Vkkhd7n15z7y2QTE+hg0sdoL9sjv5 CYWrz+EIv7af1W1Gm/3s/ADQRGEyVwaHcyGyri+gOsgDxAOKcltalwAw9zUSo3D6 3NRE/w1TUCdSFNjwmH7CamyZakFSiNjsAwePvy2Gk8QjpsfrhdUpi91yK9/MLUtq vcGAqtZaflR0DxGV486FsE2HaxVcOTqZ -----END CERTIFICATE-----Generated at Sun Apr 20 19:38:29 2025 by rpki-client