$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft File: ho7LZCXagzKIkuV7sN9kThrrc7M.mft (raw, json) Hash identifier: iyo3o/t1/DFEuebfYLfgm+8p4t63u+apIqGt4oeSldM= Subject key identifier: 7C:D4:FE:69:D0:6C:06:2B:9B:CA:74:F4:58:A5:D0:E8:2E:5E:E2:49 Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft Manifest number: 02BC Signing time: Thu 03 Apr 2025 01:30:11 +0000 Manifest this update: Thu 03 Apr 2025 01:30:11 +0000 Manifest next update: Thu 10 Apr 2025 01:30:11 +0000 Files and hashes: 1: ho7LZCXagzKIkuV7sN9kThrrc7M.crl (hash: gnmQfOSPbn1nQG34r4zB6eJX01FwTu3XG/UQm6mAVlg=) 2: 5C7085CA929811ED9C3F4163C4F9AE02.roa (hash: jre2vqEbptB4xJwOL59Axq+r7br5KETLkmyJEM9TLFk=) 3: 2E73B40089CA11EF9D45F344C4F9AE02.roa (hash: AC9qL1JmCHG5dg0vjJNKY7KJG1pWhEheRkBl8uBeh7M=) 4: D40753E8F6C411EEAFF62079C4F9AE02.roa (hash: 7rGtfoGtmNjkgpBebj5AN23TDyFs8EyElxm7Ay6opxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9945 Validity Not Before: Apr 3 01:30:11 2025 GMT Not After : Apr 10 01:30:11 2025 GMT Subject: CN=67ede4a3-cdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:99:1c:ba:70:ec:d1:ce:26:a5:1e:9f:77:af: f9:bd:db:0f:bc:38:64:7a:62:2e:84:28:c0:60:aa: 32:49:2e:8a:0b:1f:b8:2f:c7:a0:d7:62:b3:8e:ff: 1c:c1:46:e2:c9:1c:20:d7:93:d2:82:61:93:11:94: 16:e9:0e:05:8a:8f:7a:ec:95:9b:9f:92:14:68:79: 59:5c:1c:05:bb:7e:00:8a:5f:6e:da:a2:62:3f:52: 1d:3f:31:89:96:8d:05:ee:b0:d1:a1:c0:fd:26:97: 64:4d:2d:5e:76:64:de:02:6a:42:57:53:6f:a4:a4: bf:04:e2:32:e6:71:6b:0f:97:d2:d1:98:c1:96:6a: ef:e8:30:54:5d:96:7f:3b:47:4c:98:81:c8:df:07: 95:e1:77:9b:a2:16:e2:6b:b9:7f:eb:34:4e:2d:2f: 12:a0:df:fc:2f:69:d8:6c:6f:12:91:4e:90:c0:b0: ec:e7:d1:95:22:38:6a:4a:96:61:85:8e:bb:4c:23: 75:28:cd:94:49:3c:b8:ba:bc:bf:06:a8:17:94:95: 52:9c:9c:d9:30:b2:93:1f:b4:c8:73:53:db:e3:09: 71:c7:0d:c9:a4:e1:f5:6d:19:90:4c:c7:93:99:04: bd:ce:c4:99:b7:5b:8f:85:c8:2b:6a:2d:48:81:1b: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D4:FE:69:D0:6C:06:2B:9B:CA:74:F4:58:A5:D0:E8:2E:5E:E2:49 X509v3 Authority Key Identifier: keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:77:00:03:73:63:b5:c3:a5:85:01:4f:94:4a:53:09:fa:e2: 3c:3f:3f:8f:27:5e:3c:67:6f:90:15:3d:b3:2a:a2:4a:33:af: 39:5b:1b:3d:eb:6d:fd:39:a7:e4:a1:05:41:e5:dd:f8:26:6f: c5:64:f8:a0:d6:e2:2b:65:32:57:94:e2:4c:31:1c:d9:b7:1d: 7b:0e:4a:97:ba:89:b9:25:34:7b:c2:ad:d1:39:9d:48:04:5b: 32:14:af:eb:58:e9:d1:b2:ad:c2:ee:e6:25:73:c1:eb:7e:65: 29:ea:f7:65:db:57:da:8a:de:38:51:80:3e:31:ce:8f:d1:3e: a3:1a:f4:cc:1e:ae:f6:f4:ca:0c:8e:f4:a8:13:05:7b:fa:bb: 1c:41:01:1f:d1:db:8e:6d:d4:46:e2:88:91:f5:f9:47:33:89: 04:97:82:32:4b:7c:65:ae:2e:51:6e:f3:1b:cf:eb:35:a1:df: 48:32:4d:44:98:56:b1:75:69:82:97:9b:0a:aa:d2:ab:00:33: 3b:f4:d8:0b:53:d5:3f:18:6a:ed:f1:1f:b6:37:58:68:0c:c5: 4b:0a:f2:e0:6b:f8:dd:1a:25:95:c4:a2:cb:8d:a3:d0:f0:de: 50:9c:fa:d2:d4:49:f2:75:a3:69:1e:01:f9:ee:33:ee:63:0e: 09:12:85:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF MUFFQjczQjMwHhcNMjUwNDAzMDEzMDExWhcNMjUwNDEwMDEzMDExWjAYMRYwFAYD VQQDEw02N2VkZTRhMy1jZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05kcunDs0c4mpR6fd6/5vdsPvDhkemIuhCjAYKoySS6KCx+4L8eg12Kzjv8c wUbiyRwg15PSgmGTEZQW6Q4Fio967JWbn5IUaHlZXBwFu34Ail9u2qJiP1IdPzGJ lo0F7rDRocD9JpdkTS1edmTeAmpCV1NvpKS/BOIy5nFrD5fS0ZjBlmrv6DBUXZZ/ O0dMmIHI3weV4Xebohbia7l/6zROLS8SoN/8L2nYbG8SkU6QwLDs59GVIjhqSpZh hY67TCN1KM2USTy4ury/BqgXlJVSnJzZMLKTH7TIc1Pb4wlxxw3JpOH1bRmQTMeT mQS9zsSZt1uPhcgrai1IgRuxlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzU/mnQ bAYrm8p09Fil0OguXuJJMB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTk0NS9CQzAwQzhGMkYwOUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6 S0lrdVY3c045a1RocnJjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWdwADc2O1w6WFAU+USlMJ+uI8Pz+PJ148Z2+QFT2zKqJKM685Wxs9 6239OafkoQVB5d34Jm/FZPig1uIrZTJXlOJMMRzZtx17DkqXuom5JTR7wq3ROZ1I BFsyFK/rWOnRsq3C7uYlc8HrfmUp6vdl21fait44UYA+Mc6P0T6jGvTMHq729MoM jvSoEwV7+rscQQEf0duObdRG4oiR9flHM4kEl4IyS3xlri5RbvMbz+s1od9IMk1E mFaxdWmCl5sKqtKrADM79NgLU9U/GGrt8R+2N1hoDMVLCvLga/jdGiWVxKLLjaPQ 8N5QnPrS1EnydaNpHgH57jPuYw4JEoUD -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:48 2025 by rpki-client