$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: bJG8LVk8mJVGmLI7rmkrl7xn1EKUZjSblB52eemQ8sU= Subject key identifier: 6C:E9:E5:F6:39:DD:A0:EA:82:32:BA:24:27:5E:A4:6A:A2:2B:91:72 Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0D15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0D02 Signing time: Fri 18 Apr 2025 18:12:12 +0000 Manifest this update: Fri 18 Apr 2025 18:12:11 +0000 Manifest next update: Fri 25 Apr 2025 18:12:11 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: brxxWkeb+88RA/6RfkVz+aYt6zNc4/BttLXByNLFkQk=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: tiA64s/MRKlR1BkumxbFlRLnmMmyLTM+IqS1j/mgdbk=) 3: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: 9JHcHgmG+w7bGvnU6/Eo85gv0xWCdlnreQQjOwseAsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Apr 18 18:12:11 2025 GMT Not After : Apr 25 18:12:11 2025 GMT Subject: CN=680295fb-8d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:fa:ab:9b:3b:9a:4f:10:18:4e:64:39:b8: 33:39:14:0d:7a:f6:a6:ce:1d:e6:34:bc:a5:2c:29: 50:5c:9b:f0:fa:87:52:1c:9c:83:c7:6a:75:57:d1: 47:e6:1e:ce:3e:95:fe:31:f9:8c:f5:d0:ad:0a:7b: 19:87:c0:d5:98:99:f3:bf:06:ce:35:85:6f:1b:0a: d9:f0:27:f5:ed:e4:ec:02:4c:8a:5d:78:21:d5:df: 84:e8:c2:92:fa:b4:4a:a6:77:52:63:f4:b9:37:62: 39:55:1f:d6:82:a7:0f:ac:60:a9:b9:e2:2c:22:01: 43:7b:68:3a:63:b6:3f:6f:69:66:4c:a3:8f:68:7f: b2:de:41:72:43:e9:c1:9e:8d:05:21:29:0d:ab:87: c5:b3:d5:26:47:32:fc:29:fb:fd:58:81:c2:4f:0b: a8:4c:0b:96:9e:2a:22:74:84:4e:25:84:d1:e9:32: 3e:2a:1c:4c:50:5d:0d:b1:ca:24:b6:a8:38:96:a1: 44:a8:b4:26:1c:de:7a:3c:c4:75:25:d2:f5:57:b0: d4:d4:fc:d0:31:c7:d2:67:d3:5e:e9:82:1a:70:84: 28:19:3c:af:8c:bf:45:10:72:36:56:34:0c:74:6e: dd:18:1d:fc:3d:88:fe:0c:19:24:b4:bb:bc:5f:1a: d4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E9:E5:F6:39:DD:A0:EA:82:32:BA:24:27:5E:A4:6A:A2:2B:91:72 X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:10:e4:ef:ae:23:3f:65:3c:89:dd:41:6f:7e:cd:83:cf:c6: 25:5a:bf:52:42:50:66:da:e6:56:9c:35:dd:5f:e0:af:77:fa: 28:4f:48:11:cc:d5:8c:a3:48:ff:08:66:32:ea:62:71:a7:81: e9:4f:90:ba:50:70:eb:17:5b:db:39:22:ab:ee:7a:d2:92:e6: c9:d3:dd:aa:30:0c:6f:01:aa:90:ef:d2:62:a9:c2:3e:90:4f: c0:13:78:62:c9:15:a3:45:72:e6:8a:a2:c7:2e:ba:5b:5e:f1: 9e:05:27:a2:06:2e:bc:5f:ab:c6:36:de:de:52:28:36:f0:c0: e7:cc:65:95:73:0a:7a:db:75:4d:df:f7:29:e5:d5:52:35:5d: 0c:e8:d4:1a:65:34:2a:9c:70:1c:c5:59:7a:09:2a:60:22:cd: 14:4c:c1:9b:20:66:d1:2e:46:a1:ef:99:1e:48:df:68:1a:8b: 03:8d:c5:db:f6:bd:ab:df:d0:8e:c5:58:2a:cc:ed:cc:1b:52: 11:66:96:84:7a:a5:b8:71:0f:63:2b:0a:bb:2f:63:b3:a9:da: ee:1d:ab:8f:49:95:c3:9d:58:96:c3:28:81:55:a1:55:72:ec: fe:ad:a0:65:c2:7c:1e:6a:6b:86:ec:23:56:57:c1:bc:de:a9: a4:50:ce:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjUwNDE4MTgxMjExWhcNMjUwNDI1MTgxMjExWjAYMRYwFAYD VQQDEw02ODAyOTVmYi04ZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncj6q5s7mk8QGE5kObgzORQNevamzh3mNLylLClQXJvw+odSHJyDx2p1V9FH 5h7OPpX+MfmM9dCtCnsZh8DVmJnzvwbONYVvGwrZ8Cf17eTsAkyKXXgh1d+E6MKS +rRKpndSY/S5N2I5VR/WgqcPrGCpueIsIgFDe2g6Y7Y/b2lmTKOPaH+y3kFyQ+nB no0FISkNq4fFs9UmRzL8Kfv9WIHCTwuoTAuWnioidIROJYTR6TI+KhxMUF0Nscok tqg4lqFEqLQmHN56PMR1JdL1V7DU1PzQMcfSZ9Ne6YIacIQoGTyvjL9FEHI2VjQM dG7dGB38PYj+DBkktLu8XxrU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzp5fY5 3aDqgjK6JCdepGqiK5FyMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPEOTvriM/ZTyJ3UFvfs2Dz8YlWr9SQlBm2uZWnDXdX+Cvd/ooT0gR zNWMo0j/CGYy6mJxp4HpT5C6UHDrF1vbOSKr7nrSkubJ092qMAxvAaqQ79JiqcI+ kE/AE3hiyRWjRXLmiqLHLrpbXvGeBSeiBi68X6vGNt7eUig28MDnzGWVcwp623VN 3/cp5dVSNV0M6NQaZTQqnHAcxVl6CSpgIs0UTMGbIGbRLkah75keSN9oGosDjcXb 9r2r39COxVgqzO3MG1IRZpaEeqW4cQ9jKwq7L2OzqdruHauPSZXDnViWwyiBVaFV cuz+raBlwnweamuG7CNWV8G83qmkUM4v -----END CERTIFICATE-----Generated at Sat Apr 19 00:52:51 2025 by rpki-client