$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft File: 2QDd8konYiv5ZDdX7byv-u4yHDc.mft (raw, json) Hash identifier: Mvecyc9HsKcE7zJe5294G5TiNc7i03D9dW5j/TwIACo= Subject key identifier: D9:3C:4F:EA:41:54:45:2A:0C:42:D1:6E:87:84:DD:EE:9B:FE:26:2F Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Certificate serial: 0E46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft Manifest number: 0E2D Signing time: Fri 04 Apr 2025 17:55:01 +0000 Manifest this update: Fri 04 Apr 2025 17:55:01 +0000 Manifest next update: Fri 11 Apr 2025 17:55:01 +0000 Files and hashes: 1: 2QDd8konYiv5ZDdX7byv-u4yHDc.crl (hash: QIHctts71HHpofEyPNvWKVW0RLR3ztz54K2PKpRlf2o=) 2: A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa (hash: xJh5HRbn741snUCbMX+RHgdNum29ocH1QT8bD3kB9Uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3654 (0xe46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7773 Validity Not Before: Apr 4 17:55:01 2025 GMT Not After : Apr 11 17:55:01 2025 GMT Subject: CN=67f01cf5-24a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:56:ca:a0:de:13:9b:6a:fe:1c:b8:44:76:39: 7a:f6:87:69:8f:d6:e2:12:df:2e:81:10:ef:cb:07: ef:ea:6b:f8:3f:34:51:50:86:2a:7a:a4:80:a1:01: cb:5c:b4:ef:19:20:84:a8:92:71:ea:56:dd:ff:15: 67:2c:cc:67:56:44:e7:80:77:ac:38:66:24:ac:17: 14:a7:dc:95:2d:ac:7c:59:25:fe:33:97:9e:be:ac: 99:aa:4a:44:7b:1e:06:6a:33:d6:ae:c1:2f:a6:bc: 5c:a5:44:b3:22:ec:8c:36:0c:5f:82:f0:03:d4:ee: 53:55:4f:88:21:a8:29:e8:b0:16:9b:2c:e8:45:52: b3:d3:32:00:58:d6:87:61:73:7a:0c:08:26:4c:6f: 08:da:d8:cd:d7:35:d6:c0:cd:8e:1f:80:02:d7:39: 04:30:fc:55:3a:0b:c4:22:84:40:66:49:03:58:5a: 06:5f:68:e6:eb:6d:d7:8c:5f:6d:19:0a:48:69:32: 03:27:8b:9c:d8:8e:fb:7a:3c:2e:75:40:90:24:49: f7:17:f6:75:87:4a:2d:82:ba:b2:76:11:a9:69:21: 5e:3e:d2:07:c5:c0:94:08:7e:5d:a4:cb:8f:bf:64: 46:34:d4:5c:e2:37:6f:dd:cb:fc:99:32:fb:7b:04: 13:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3C:4F:EA:41:54:45:2A:0C:42:D1:6E:87:84:DD:EE:9B:FE:26:2F X509v3 Authority Key Identifier: keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:34:cf:68:ce:9b:b0:9f:f5:ee:0d:06:d5:5f:82:08:d0:93: 86:e9:33:7d:19:82:76:fe:62:ff:0e:94:26:f0:c6:6b:d9:84: 24:43:14:8e:32:d5:61:cf:60:00:8b:3f:6e:3a:8a:b6:a9:d3: 67:0e:ec:bc:73:65:69:53:d7:39:bc:79:0a:0f:68:3f:d4:45: c4:a7:df:9f:57:b6:96:e3:dc:97:2b:27:e4:c5:37:ac:42:54: b2:b2:5e:7b:93:27:26:f8:2e:c9:26:ac:43:c8:c7:e3:88:6e: 82:e1:c1:5d:bf:3e:16:54:b2:0a:fc:c5:73:e2:75:8c:70:81: d6:57:df:51:17:c0:fd:10:98:12:21:58:03:2d:77:13:1f:b7: 95:d1:2f:44:19:bc:e2:3c:c2:ef:af:63:f3:09:32:41:6d:de: b9:c7:c0:d7:b6:a1:8c:a8:f4:43:2a:74:1d:97:09:40:00:38: cb:ad:2f:c0:e2:b4:49:b6:b0:af:60:32:93:19:c9:92:43:dc: 93:e1:5b:a8:73:b2:bc:c7:1c:6a:c6:a4:16:2c:6b:01:4e:26: 03:71:c9:89:10:95:92:6a:d1:e3:46:01:15:f5:32:3b:63:9f: b6:1e:15:f1:ca:5a:f6:f3:fd:d1:33:45:87:f6:43:1c:65:69: 68:de:0b:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3NzMxMTAvBgNVBAUTKEQ5MDBEREYyNEEyNzYyMkJGOTY0Mzc1N0VEQkNBRkZB RUUzMjFDMzcwHhcNMjUwNDA0MTc1NTAxWhcNMjUwNDExMTc1NTAxWjAYMRYwFAYD VQQDEw02N2YwMWNmNS0yNGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61bKoN4Tm2r+HLhEdjl69odpj9biEt8ugRDvywfv6mv4PzRRUIYqeqSAoQHL XLTvGSCEqJJx6lbd/xVnLMxnVkTngHesOGYkrBcUp9yVLax8WSX+M5eevqyZqkpE ex4GajPWrsEvprxcpUSzIuyMNgxfgvAD1O5TVU+IIagp6LAWmyzoRVKz0zIAWNaH YXN6DAgmTG8I2tjN1zXWwM2OH4AC1zkEMPxVOgvEIoRAZkkDWFoGX2jm623XjF9t GQpIaTIDJ4uc2I77ejwudUCQJEn3F/Z1h0otgrqydhGpaSFePtIHxcCUCH5dpMuP v2RGNNRc4jdv3cv8mTL7ewQToQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNk8T+pB VEUqDELRboeE3e6b/iYvMB8GA1UdIwQYMBaAFNkA3fJKJ2Ir+WQ3V+28r/ruMhw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc3My9BRDMyMjM3Q0Ey RTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllpdjVaRGRYN2J5di11NHlI RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRRGQ4a29uWWl2NVpEZFg3Ynl2LXU0eUhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc3My9BRDMyMjM3Q0EyRTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllp djVaRGRYN2J5di11NHlIRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+NM9ozpuwn/XuDQbVX4II0JOG6TN9GYJ2/mL/DpQm8MZr2YQkQxSO MtVhz2AAiz9uOoq2qdNnDuy8c2VpU9c5vHkKD2g/1EXEp9+fV7aW49yXKyfkxTes QlSysl57kycm+C7JJqxDyMfjiG6C4cFdvz4WVLIK/MVz4nWMcIHWV99RF8D9EJgS IVgDLXcTH7eV0S9EGbziPMLvr2PzCTJBbd65x8DXtqGMqPRDKnQdlwlAADjLrS/A 4rRJtrCvYDKTGcmSQ9yT4Vuoc7K8xxxqxqQWLGsBTiYDccmJEJWSatHjRgEV9TI7 Y5+2HhXxylr28/3RM0WH9kMcZWlo3gu1 -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:48 2025 by rpki-client