$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json) Hash identifier: 6RNNBB3Ob42lPQYCIzjkVbIbUK8lTyp2K3U0qogB10U= Subject key identifier: FB:32:3F:0A:46:D6:53:13:D1:B6:42:D5:05:FB:C7:89:90:92:C7:11 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 04CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft Manifest number: 04C0 Signing time: Wed 02 Apr 2025 23:52:40 +0000 Manifest this update: Wed 02 Apr 2025 23:52:40 +0000 Manifest next update: Wed 09 Apr 2025 23:52:40 +0000 Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: X218qq9mnPQW3LJs1nIISeubC2dSjQz7lo8aOmrvll0=) 2: D3001978D03B11ECA7C18D2DC4F9AE02.roa (hash: vi6p9KgYknGhreGBPh3kN54oohxRsUYwMbP9umzMvS4=) 3: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: VeKl0MHR8TI54m6waTajw/toZ1ifpbQZ1lUNcn/xegU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1230 (0x4ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765 Validity Not Before: Apr 2 23:52:40 2025 GMT Not After : Apr 9 23:52:40 2025 GMT Subject: CN=67edcdc8-5c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4c:f4:ce:42:b3:fb:ad:93:84:e8:10:25:c6: ca:59:c9:7b:7f:8a:da:6f:85:83:32:48:80:fa:2e: b8:c7:94:fb:c3:68:99:66:d5:f2:20:8b:82:1e:af: f9:15:5d:0b:0a:fe:59:64:50:bf:94:45:3a:41:ff: d1:df:bc:97:b3:31:09:fb:3a:e5:5b:21:c8:e5:12: 34:e5:9d:a3:d4:87:12:c0:1c:12:0c:0e:06:1d:a5: d8:e8:ce:05:70:06:04:bb:b0:e1:f1:f8:c1:c6:85: 11:3f:27:b9:d6:c6:e9:41:ee:e5:a4:d5:86:d4:f1: a9:d1:4e:ff:4a:82:e1:e7:a1:1d:7a:f3:eb:c8:e0: 53:de:57:87:69:2f:3e:ce:a6:68:a7:f2:aa:b7:d6: a2:de:2a:f4:30:8c:50:9b:e2:37:a0:84:29:d9:3e: de:2f:42:cc:ef:64:ee:c1:eb:e3:35:1f:8b:c8:72: 28:d9:8a:f9:85:5f:66:f3:24:de:47:f0:90:c5:3a: f7:a5:a8:aa:fd:ab:7a:cf:3c:6a:2a:56:18:eb:33: 76:b4:1e:24:64:b4:24:1b:6a:ec:36:e6:f7:1d:de: 99:f9:0c:3b:04:fc:ac:1e:11:79:b7:f7:4f:61:2a: fd:c4:ee:d0:8b:56:1b:91:76:d9:df:21:6c:bc:7b: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:32:3F:0A:46:D6:53:13:D1:B6:42:D5:05:FB:C7:89:90:92:C7:11 X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:85:cd:fa:7b:c8:cf:58:cb:66:be:a0:5d:71:dd:33:20:98: c8:59:91:c3:b8:f5:16:1d:82:16:3e:2d:c2:70:47:bf:d0:c4: e4:ec:67:cf:3c:96:5b:75:4a:47:3b:aa:c4:4c:f9:58:d9:10: a6:67:44:0a:ca:f6:cd:ad:bc:9b:44:ec:a5:74:2b:66:55:82: 09:6b:75:b1:69:e2:51:fe:79:83:32:e9:d2:c0:f5:90:d6:a1: 7a:72:2d:23:98:8f:5c:25:e8:eb:fc:40:39:54:a1:f3:ee:55: db:48:41:76:ae:da:cd:fa:d8:36:a9:9c:e3:59:6c:fa:77:a5: d4:cb:e9:94:36:ea:b9:65:66:14:33:cb:1a:78:75:7c:39:33: 8a:d6:e4:9b:2e:11:0d:e0:2f:3c:7a:0d:3f:3d:51:e5:96:2f: 76:06:4d:8c:cd:1b:0e:94:cf:3e:da:37:42:fc:db:49:d7:34: a5:df:0d:bb:4b:02:03:e3:92:a2:7b:9a:2f:1b:44:a6:db:52: 1f:65:d8:7e:4a:5c:09:08:a8:a4:13:d8:c0:b2:43:e4:da:38: b1:21:f8:c2:a8:b2:65:a3:f1:44:47:45:5a:3f:e4:ad:e0:e0: 70:4b:f3:dd:99:14:b3:57:21:ec:39:ec:06:a1:2d:bc:81:b5: ce:b9:0f:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjUwNDAyMjM1MjQwWhcNMjUwNDA5MjM1MjQwWjAYMRYwFAYD VQQDEw02N2VkY2RjOC01YzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kz0zkKz+62ThOgQJcbKWcl7f4rab4WDMkiA+i64x5T7w2iZZtXyIIuCHq/5 FV0LCv5ZZFC/lEU6Qf/R37yXszEJ+zrlWyHI5RI05Z2j1IcSwBwSDA4GHaXY6M4F cAYEu7Dh8fjBxoURPye51sbpQe7lpNWG1PGp0U7/SoLh56EdevPryOBT3leHaS8+ zqZop/Kqt9ai3ir0MIxQm+I3oIQp2T7eL0LM72TuwevjNR+LyHIo2Yr5hV9m8yTe R/CQxTr3paiq/at6zzxqKlYY6zN2tB4kZLQkG2rsNub3Hd6Z+Qw7BPysHhF5t/dP YSr9xO7Qi1YbkXbZ3yFsvHt4PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsyPwpG 1lMT0bZC1QX7x4mQkscRMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG Mm1FQkNBLVlNaS05WlpHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBShc36e8jPWMtmvqBdcd0zIJjIWZHDuPUWHYIWPi3CcEe/0MTk7GfP PJZbdUpHO6rETPlY2RCmZ0QKyvbNrbybROyldCtmVYIJa3WxaeJR/nmDMunSwPWQ 1qF6ci0jmI9cJejr/EA5VKHz7lXbSEF2rtrN+tg2qZzjWWz6d6XUy+mUNuq5ZWYU M8saeHV8OTOK1uSbLhEN4C88eg0/PVHlli92Bk2MzRsOlM8+2jdC/NtJ1zSl3w27 SwID45Kie5ovG0Sm21IfZdh+SlwJCKikE9jAskPk2jixIfjCqLJlo/FER0VaP+St 4OBwS/PdmRSzVyHsOewGoS28gbXOuQ8v -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:40 2025 by rpki-client