$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft File: 92beXsvKeWcFK5bbbxeCvY_abXQ.mft (raw, json) Hash identifier: zBLfHE7e4Nv9KM80GzlFWhrE/NQh80ko4JJxl1CJxh8= Subject key identifier: 37:F8:CF:9A:BB:C9:3D:01:77:37:8F:14:A1:DC:78:58:64:1D:1C:E6 Authority key identifier: F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74 Certificate issuer: /CN=A91C9670/serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74 Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft Manifest number: 052D Signing time: Thu 10 Apr 2025 23:27:22 +0000 Manifest this update: Thu 10 Apr 2025 23:27:22 +0000 Manifest next update: Thu 17 Apr 2025 23:27:22 +0000 Files and hashes: 1: 92beXsvKeWcFK5bbbxeCvY_abXQ.crl (hash: uiXa3YV5z+ky+naspj1+4R1bbPO8hTa17RtLtQJfEaw=) 2: E2663F929C9511ED8014F84CC4F9AE02.roa (hash: 6Y5tviiZDDG9UDEgc5UyI9seFOB72fV6jZ50KDgSVtg=) 3: E14490BE9C9511ED8014F84CC4F9AE02.roa (hash: yIhHBUsSlf0ICdfFTknapFp3nWFmuwzWUa+01ysRpJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 23:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9670, serialNumber=F766DE5ECBCA7967052B96DB6F1782BD8FDA6D74 Validity Not Before: Apr 10 23:27:22 2025 GMT Not After : Apr 17 23:27:22 2025 GMT Subject: CN=67f853da-ca24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0b:ed:5c:5d:ef:c2:69:fd:90:a7:d3:6b:4a: 6d:6b:13:df:02:9e:9d:4b:d7:49:54:af:35:d6:ef: f1:4c:bd:2e:09:7a:b4:44:ee:a0:66:ea:64:fe:9b: 46:ae:1f:ae:09:e6:47:5e:92:4f:ec:a2:f1:fe:dc: f2:2b:0c:7f:ae:f6:22:2f:3e:5d:ca:bd:85:ca:c0: 55:a6:d3:e1:c0:e5:8c:8f:11:c4:8b:16:43:5e:ac: 1b:64:20:cb:d6:39:cb:3c:4b:e5:45:d2:b4:48:e1: f1:b9:3d:3d:e1:0d:ee:77:04:1c:da:92:5a:94:4e: a2:32:2d:13:e5:0e:46:b9:b9:4a:5e:41:fa:84:66: bd:70:20:ab:9f:8b:ab:f8:d5:99:53:04:e5:ae:b1: cf:a1:61:df:94:a8:e2:3c:20:04:bd:4b:4a:28:c4: 68:13:7d:67:36:d9:e5:c3:eb:2b:73:a4:91:68:81: cc:d3:3e:31:e3:24:b4:43:9f:7a:18:82:30:6e:34: 34:f4:b8:c8:06:33:7b:d9:6e:af:0a:f9:f6:f1:82: 6b:94:fb:e2:c5:6b:33:87:e4:0f:cd:b6:b0:42:fd: 00:9b:8b:ad:44:44:cf:76:2f:e6:b5:6e:9f:b5:a0: a3:02:4e:bc:38:82:f1:42:4e:70:ca:a6:16:78:97: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F8:CF:9A:BB:C9:3D:01:77:37:8F:14:A1:DC:78:58:64:1D:1C:E6 X509v3 Authority Key Identifier: keyid:F7:66:DE:5E:CB:CA:79:67:05:2B:96:DB:6F:17:82:BD:8F:DA:6D:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92beXsvKeWcFK5bbbxeCvY_abXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9670/5940489CF38711EB872C012BC4F9AE02/92beXsvKeWcFK5bbbxeCvY_abXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ea:1b:bf:68:1a:9f:7a:c6:65:b5:b4:d1:ca:3f:a6:0b:f6: b2:33:35:a0:90:1f:d0:df:82:74:03:e1:56:9c:e6:68:c7:d9: 72:bd:56:17:fe:39:63:43:06:ad:4b:7a:f1:f8:5a:4a:41:b3: 73:c7:26:a2:2a:5e:62:f0:a2:6d:30:fa:b0:ab:50:08:e4:dc: 16:30:67:2e:77:2e:58:37:b1:fa:e3:3d:eb:d5:c5:9d:bb:a9: 4d:f7:42:5d:f8:50:13:18:bb:02:0e:4e:c4:81:76:2e:92:f0: e0:a2:f7:e4:79:c3:b3:60:d0:79:25:e5:c6:9c:d8:dd:11:b0: b5:7e:74:4e:c8:03:31:52:f6:81:d1:2f:0a:55:c9:fd:15:bd: ae:fd:31:3b:99:41:27:d4:3e:34:8e:ca:7c:a9:d1:71:c5:a5: 45:65:6c:73:00:7f:a8:6d:99:7a:73:f4:e3:f3:cb:1a:f0:7b: e7:e9:2f:03:48:b8:d7:62:03:00:d7:49:ca:1e:f3:ee:e7:d3: 6b:62:85:07:48:68:af:d9:1f:81:7e:a7:7a:60:58:ba:f3:a7: 3e:e9:00:d3:7a:2d:5b:f2:71:2f:cc:14:7c:62:16:f3:c2:00: e0:17:25:de:b4:3b:8e:f2:01:b7:67:cf:f7:84:73:2e:48:f4: f8:d8:88:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2NzAxMTAvBgNVBAUTKEY3NjZERTVFQ0JDQTc5NjcwNTJCOTZEQjZGMTc4MkJE OEZEQTZENzQwHhcNMjUwNDEwMjMyNzIyWhcNMjUwNDE3MjMyNzIyWjAYMRYwFAYD VQQDEw02N2Y4NTNkYS1jYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QvtXF3vwmn9kKfTa0ptaxPfAp6dS9dJVK811u/xTL0uCXq0RO6gZupk/ptG rh+uCeZHXpJP7KLx/tzyKwx/rvYiLz5dyr2FysBVptPhwOWMjxHEixZDXqwbZCDL 1jnLPEvlRdK0SOHxuT094Q3udwQc2pJalE6iMi0T5Q5GublKXkH6hGa9cCCrn4ur +NWZUwTlrrHPoWHflKjiPCAEvUtKKMRoE31nNtnlw+src6SRaIHM0z4x4yS0Q596 GIIwbjQ09LjIBjN72W6vCvn28YJrlPvixWszh+QPzbawQv0Am4utRETPdi/mtW6f taCjAk68OILxQk5wyqYWeJc7XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf4z5q7 yT0BdzePFKHceFhkHRzmMB8GA1UdIwQYMBaAFPdm3l7LynlnBSuW228Xgr2P2m10 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTY3MC81OTQwNDg5Q0Yz ODcxMUVCODcyQzAxMkJDNEY5QUUwMi85MmJlWHN2S2VXY0ZLNWJiYnhlQ3ZZX2Fi WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyYmVYc3ZLZVdjRks1YmJieGVDdllfYWJYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTY3MC81OTQwNDg5Q0YzODcxMUVCODcyQzAxMkJDNEY5QUUwMi85MmJlWHN2S2VX Y0ZLNWJiYnhlQ3ZZX2FiWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL6hu/aBqfesZltbTRyj+mC/ayMzWgkB/Q34J0A+FWnOZox9lyvVYX /jljQwatS3rx+FpKQbNzxyaiKl5i8KJtMPqwq1AI5NwWMGcudy5YN7H64z3r1cWd u6lN90Jd+FATGLsCDk7EgXYukvDgovfkecOzYNB5JeXGnNjdEbC1fnROyAMxUvaB 0S8KVcn9Fb2u/TE7mUEn1D40jsp8qdFxxaVFZWxzAH+obZl6c/Tj88sa8Hvn6S8D SLjXYgMA10nKHvPu59NrYoUHSGiv2R+Bfqd6YFi686c+6QDTei1b8nEvzBR8Yhbz wgDgFyXetDuO8gG3Z8/3hHMuSPT42IiX -----END CERTIFICATE-----Generated at Sat Apr 12 23:58:05 2025 by rpki-client