$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: iDgWm/Qv3dHgXD9XRrV4jaB4v1MxSMHyAe9gK5dwuSk= Subject key identifier: 83:20:B2:9E:77:E3:62:91:4E:D4:65:29:00:46:AF:9B:90:25:ED:5C Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 3483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 3478 Signing time: Fri 04 Apr 2025 14:58:59 +0000 Manifest this update: Fri 04 Apr 2025 14:58:58 +0000 Manifest next update: Fri 11 Apr 2025 14:58:58 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: j3zX1XYOjeGQ9gxijuHl1vZQHLbbzQG6KJ9k/Z1XmE0=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 8wn1BShCqNm3QYIhzMCvnBkRSH1pV/AljqzDWjCUBxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13443 (0x3483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815 Validity Not Before: Apr 4 14:58:58 2025 GMT Not After : Apr 11 14:58:58 2025 GMT Subject: CN=67eff3b3-d7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:62:2c:4e:67:74:a9:bc:f3:13:dc:21:36: 88:fe:57:dd:a2:8d:7e:42:b8:03:f3:0a:2a:6a:c8: 17:d3:5e:8d:3d:4b:cf:e5:e8:31:ba:f7:19:78:fa: 5a:8e:76:5b:64:3f:c5:e3:04:11:55:d4:4a:f5:c9: 96:30:c9:97:c2:e2:4b:79:0b:64:27:12:31:24:67: 42:5a:af:3e:4e:bd:53:77:90:01:85:22:36:02:11: 8a:6e:97:ff:cc:a3:48:76:7b:93:f6:06:a8:89:24: 2c:a5:3e:ca:d3:54:d6:41:1e:94:9f:cb:67:98:11: 71:8e:74:f1:21:74:89:7a:0c:a1:11:d8:47:e7:d7: b7:bb:8a:2e:f3:6e:f6:87:1b:0b:86:d0:d4:6b:f2: 4c:b8:46:0f:95:79:90:a0:ea:cd:ca:33:8e:95:24: 97:7f:d5:d8:8a:58:eb:4d:1a:7c:5c:e2:54:1f:c8: 2f:4f:8d:f9:f3:bf:5c:da:b5:b7:3c:f7:b7:8f:fe: fc:2c:dc:43:fd:98:97:d0:e1:22:27:f1:c0:e4:8d: 47:42:2b:27:d7:16:28:d2:27:ba:7e:2a:32:c0:94: 85:73:4e:d2:b4:fe:f8:d3:bf:ce:06:e0:de:87:70: 4f:af:53:7e:bd:9a:97:31:d1:5b:f4:e1:cb:74:93: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:20:B2:9E:77:E3:62:91:4E:D4:65:29:00:46:AF:9B:90:25:ED:5C X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a5:a4:da:6c:90:c7:b0:9f:fb:34:a9:d9:e3:43:c6:73:d3: eb:7c:d4:67:a2:86:32:13:60:a7:91:52:2c:7b:fe:22:58:89: 1b:43:db:56:23:de:91:b7:0e:c2:8c:d7:90:7f:09:09:c2:af: 37:d0:2c:ff:ab:a3:1b:23:dc:a9:c9:3c:12:58:78:ec:24:91: 7e:49:9b:c9:72:56:4c:8a:12:13:6e:ee:c7:ed:2d:ad:c2:d5: c0:89:68:ca:66:58:85:f3:0d:ce:e2:80:a8:9a:78:59:b8:1a: 5d:ba:c8:fb:c1:c1:f7:6c:39:4f:99:4f:39:99:f1:ce:2c:f2: 80:09:6e:80:11:06:f6:af:2c:d3:9a:a0:2d:e8:52:76:f3:f9: d9:1a:7d:8d:25:20:a0:f9:01:ff:fa:fa:52:9d:1b:22:ce:7e: 94:97:7e:6c:bf:21:62:c9:3e:0a:75:e9:c6:3c:0f:fb:2a:9e: ac:49:56:76:a3:51:99:62:ef:04:05:b1:85:54:94:bc:0d:59: fc:3d:90:56:4e:b2:06:59:de:fb:2d:69:7d:4b:1a:78:f8:f9: f9:a2:6d:94:d3:f5:99:c4:2b:81:08:3d:47:5c:c9:ed:b4:55: ad:02:e8:a1:6c:bb:46:e6:08:c4:a5:4b:9b:de:c8:81:e5:56: 61:3b:bc:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjUwNDA0MTQ1ODU4WhcNMjUwNDExMTQ1ODU4WjAYMRYwFAYD VQQDEw02N2VmZjNiMy1kN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3piLE5ndKm88xPcITaI/lfdoo1+QrgD8woqasgX016NPUvP5egxuvcZePpa jnZbZD/F4wQRVdRK9cmWMMmXwuJLeQtkJxIxJGdCWq8+Tr1Td5ABhSI2AhGKbpf/ zKNIdnuT9gaoiSQspT7K01TWQR6Un8tnmBFxjnTxIXSJegyhEdhH59e3u4ou8272 hxsLhtDUa/JMuEYPlXmQoOrNyjOOlSSXf9XYiljrTRp8XOJUH8gvT435879c2rW3 PPe3j/78LNxD/ZiX0OEiJ/HA5I1HQisn1xYo0ie6fioywJSFc07StP7407/OBuDe h3BPr1N+vZqXMdFb9OHLdJNgXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMgsp53 42KRTtRlKQBGr5uQJe1cMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANpaTabJDHsJ/7NKnZ40PGc9PrfNRnooYyE2CnkVIse/4iWIkbQ9tW I96Rtw7CjNeQfwkJwq830Cz/q6MbI9ypyTwSWHjsJJF+SZvJclZMihITbu7H7S2t wtXAiWjKZliF8w3O4oComnhZuBpdusj7wcH3bDlPmU85mfHOLPKACW6AEQb2ryzT mqAt6FJ28/nZGn2NJSCg+QH/+vpSnRsizn6Ul35svyFiyT4KdenGPA/7Kp6sSVZ2 o1GZYu8EBbGFVJS8DVn8PZBWTrIGWd77LWl9Sxp4+Pn5om2U0/WZxCuBCD1HXMnt tFWtAuihbLtG5gjEpUub3siB5VZhO7wv -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:53 2025 by rpki-client