$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: 7Pr34HTia5f92JbXkVWM3lW5TJeuMkKn1/jIidpyovk= Subject key identifier: 14:12:47:F6:69:4D:ED:44:62:BA:27:FC:E9:BF:5E:00:64:09:75:17 Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 0518 Signing time: Fri 04 Apr 2025 23:40:37 +0000 Manifest this update: Fri 04 Apr 2025 23:40:36 +0000 Manifest next update: Fri 11 Apr 2025 23:40:36 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: u5Q86WFPgx5BT8blIMe5hgg3iLJwcWJsy9rT8nZ+qJk=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: tUJpt/EI7+mUtTaZxM/GDLtgw+TCPgCTEghkC0N1Z5A=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: 3HZy6lcIbmxJvukR156ukbCJwU755Be6EmYQo4zomEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC Validity Not Before: Apr 4 23:40:36 2025 GMT Not After : Apr 11 23:40:36 2025 GMT Subject: CN=67f06df5-c353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:9a:26:66:97:8d:1b:52:1f:5f:1b:56:0d:bf: d9:dd:22:c9:36:e5:0b:6c:ef:4e:49:3e:51:03:24: 01:2c:df:3d:5a:17:b2:d8:4a:87:68:0f:85:0c:21: 31:88:c8:9a:0e:a6:3e:4e:43:35:5d:2e:8f:16:20: d3:f9:dd:29:cf:b0:f3:c3:b6:11:a0:99:aa:33:af: 3a:a2:8b:97:41:46:a0:00:e8:b5:a4:cf:5f:27:3e: a9:a4:6e:49:30:78:07:98:3d:93:d0:d8:72:99:58: e8:06:ea:6e:1f:17:bd:a2:bb:84:bd:fa:10:5a:9b: 80:a0:f6:10:dc:c7:ee:24:e8:f3:a7:f1:e8:bd:5b: 8d:09:86:7e:7c:72:54:6b:d1:6d:01:3d:f0:f0:53: 03:b2:81:56:47:f8:26:91:7b:9e:c3:25:8e:fa:a0: 7c:04:f7:3a:00:a3:e2:43:83:26:4b:66:a1:52:5d: 10:4e:95:9a:a5:0e:95:6a:ba:49:16:6e:a6:bd:e3: a6:c9:14:ad:c9:2c:21:77:c6:86:ec:57:48:3a:ca: 49:58:9b:42:a6:92:fa:81:7f:f6:f5:4c:08:db:93: 4c:dc:09:90:15:0f:48:8e:4f:ba:39:b1:f5:37:24: 5f:92:fc:7d:43:f6:c9:d0:45:11:84:1e:35:2f:9e: 99:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:12:47:F6:69:4D:ED:44:62:BA:27:FC:E9:BF:5E:00:64:09:75:17 X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:2c:cb:5d:a0:22:ae:11:cb:cf:1b:5b:0a:9a:2c:b8:f2:31: ee:7b:7c:6b:86:09:5e:b0:0c:75:3f:16:23:7a:20:5c:d0:ee: 99:52:3b:6e:2c:5b:aa:aa:71:08:58:c5:99:50:18:f1:c5:4a: 78:1c:68:ca:25:38:03:2a:77:fb:de:24:6a:86:33:85:48:0e: cc:03:59:76:02:54:b0:7e:99:57:a9:87:a1:0f:b7:99:9e:5a: 68:42:36:db:9c:0b:49:55:77:ea:81:06:8f:8a:50:d1:6d:39: 68:4d:b1:fd:db:4e:ad:3e:0e:4c:0f:bb:d2:93:40:20:76:f5: 96:9b:22:75:dd:09:6e:79:bc:97:83:c4:73:87:e0:8e:9d:58: b2:7b:fe:c4:94:55:a9:3b:68:be:20:7d:c0:7e:7e:34:56:05: 42:f0:1a:46:8d:6a:68:84:1c:5a:93:39:e2:75:a1:12:4f:de: 9e:d7:eb:66:20:43:b9:61:bf:bf:da:bd:ac:a1:dc:ec:b0:54: 34:8e:d4:b8:f4:90:88:d8:29:d7:a6:1e:a0:00:40:8d:13:52: 79:f8:d7:d3:11:b2:22:a9:7c:03:96:8f:9d:4a:11:ef:a9:c9: b5:fb:46:0e:28:c3:a8:de:7b:24:d4:3b:d9:eb:0e:8f:7a:17: c4:d5:26:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUwNDA0MjM0MDM2WhcNMjUwNDExMjM0MDM2WjAYMRYwFAYD VQQDEw02N2YwNmRmNS1jMzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/pomZpeNG1IfXxtWDb/Z3SLJNuULbO9OST5RAyQBLN89Whey2EqHaA+FDCEx iMiaDqY+TkM1XS6PFiDT+d0pz7Dzw7YRoJmqM686oouXQUagAOi1pM9fJz6ppG5J MHgHmD2T0NhymVjoBupuHxe9oruEvfoQWpuAoPYQ3MfuJOjzp/HovVuNCYZ+fHJU a9FtAT3w8FMDsoFWR/gmkXuewyWO+qB8BPc6AKPiQ4MmS2ahUl0QTpWapQ6VarpJ Fm6mveOmyRStySwhd8aG7FdIOspJWJtCppL6gX/29UwI25NM3AmQFQ9Ijk+6ObH1 NyRfkvx9Q/bJ0EURhB41L56Z1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQSR/Zp Te1EYron/Om/XgBkCXUXMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQLMtdoCKuEcvPG1sKmiy48jHue3xrhglesAx1PxYjeiBc0O6ZUjtu LFuqqnEIWMWZUBjxxUp4HGjKJTgDKnf73iRqhjOFSA7MA1l2AlSwfplXqYehD7eZ nlpoQjbbnAtJVXfqgQaPilDRbTloTbH9206tPg5MD7vSk0AgdvWWmyJ13QluebyX g8Rzh+COnViye/7ElFWpO2i+IH3Afn40VgVC8BpGjWpohBxakznidaEST96e1+tm IEO5Yb+/2r2sodzssFQ0jtS49JCI2CnXph6gAECNE1J5+NfTEbIiqXwDlo+dShHv qcm1+0YOKMOo3nsk1DvZ6w6PehfE1SZU -----END CERTIFICATE-----Generated at Sat Apr 5 03:43:57 2025 by rpki-client