$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json) Hash identifier: E9267hUgQObzC2fxOf/ZPQxopJ0wRWfAmPagpSglHwg= Subject key identifier: 8F:6B:8B:FE:29:75:A9:53:B6:BE:61:0C:0E:5A:A8:44:5D:5E:8F:95 Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3 Certificate serial: 0892 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft Manifest number: 088A Signing time: Fri 04 Apr 2025 20:45:40 +0000 Manifest this update: Fri 04 Apr 2025 20:45:39 +0000 Manifest next update: Fri 11 Apr 2025 20:45:39 +0000 Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: Vnx8d9hzzQ5MRh6wW7C38Jn4i+if4Ph/vWTyEalxdW0=) 2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: Pjk7KOVj7H3BoAMc7NRiJiAFk/4ChSG9JZtPBtMlKPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2194 (0x892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA Validity Not Before: Apr 4 20:45:39 2025 GMT Not After : Apr 11 20:45:39 2025 GMT Subject: CN=67f044f4-ad24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:05:ab:ea:b2:eb:25:db:78:e5:84:1c:2f: eb:d6:20:ab:e9:3d:55:7f:1e:c6:74:5f:fb:88:9c: 92:41:af:65:bf:75:f1:7b:c4:fc:0b:47:6e:97:66: ab:52:11:d3:6b:0b:a1:f2:16:f1:4c:1c:14:4c:e6: 5d:8f:46:9c:4a:2d:cc:b6:c1:40:fb:ee:27:36:7c: c5:e5:2a:5e:14:d7:94:fb:14:f8:1e:81:6b:df:9c: 18:74:23:c9:1c:de:7b:4f:35:ca:a6:fa:4b:68:ca: 88:dd:67:f5:26:24:04:29:94:16:34:8f:ee:1d:96: 39:f2:c2:32:03:f2:d7:71:09:29:0c:fb:5e:14:29: b4:ef:65:5c:6f:e1:7f:3f:10:fb:d3:8a:cb:12:7f: 9c:39:54:77:e2:14:aa:00:e3:88:b8:42:4f:25:59: 66:26:31:b5:a9:35:37:fa:22:2e:2d:84:61:16:ae: 8a:a5:2e:3c:2d:23:55:d6:aa:d0:ce:0f:37:c9:b9: d7:23:ef:93:6b:87:17:0f:a2:27:5d:b7:b1:a3:71: 2e:1e:ba:26:a7:44:45:e4:cd:a2:bf:04:bd:69:c1: 15:29:29:dd:99:b3:a3:fa:cd:d8:20:dd:ba:70:2f: d3:a6:71:74:92:0f:33:4f:95:ce:7e:14:33:cb:8d: d7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6B:8B:FE:29:75:A9:53:B6:BE:61:0C:0E:5A:A8:44:5D:5E:8F:95 X509v3 Authority Key Identifier: keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:42:cb:31:88:5e:c2:21:b9:33:2b:57:71:70:62:c7:c5:27: 41:dd:da:77:f1:87:6e:f8:aa:cc:f4:53:2f:27:8c:b4:57:1a: a2:03:48:8d:0a:40:a0:d9:d8:81:87:9a:47:df:13:7a:4e:43: ed:18:8d:81:84:00:9d:71:4b:30:bf:4b:0f:54:0a:10:0f:a4: d5:dc:96:7a:19:4c:e1:21:ae:12:fc:8b:da:80:bf:89:13:eb: 8b:a8:f9:0c:3d:a7:cd:b2:58:5c:f5:fe:8b:79:39:c2:f5:7c: 3a:fb:c2:5a:2a:f5:1f:4a:8e:aa:04:53:8a:15:ec:26:70:40: fa:90:d6:c6:b0:09:53:12:e8:d9:e9:22:79:51:ba:0c:57:00: 6b:e5:ef:81:13:dc:a4:90:c4:da:12:5a:a4:bb:58:53:31:5d: 96:ee:ee:b1:e8:36:43:28:ee:ea:bf:25:39:0e:7a:31:1c:f5: 94:4f:a1:9f:79:8e:96:11:d3:d7:92:35:6b:18:79:27:20:00: b8:cb:3f:a2:6b:55:38:8d:1c:ac:ed:03:9a:1f:86:dc:65:23: 26:b5:9f:68:6e:80:5c:cf:c9:be:a9:e4:eb:0b:1b:f5:f7:f3: 35:74:b1:24:d1:56:f6:54:62:ad:65:72:28:4d:7e:71:c9:c7: 33:95:99:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDkyMkQ2MEVBMTkzOTY3MTc3QkM2QzM5QTQwNjg1OThB M0I3NUE2RDMwHhcNMjUwNDA0MjA0NTM5WhcNMjUwNDExMjA0NTM5WjAYMRYwFAYD VQQDEw02N2YwNDRmNC1hZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTEFq+qy6yXbeOWEHC/r1iCr6T1Vfx7GdF/7iJySQa9lv3Xxe8T8C0dul2ar UhHTawuh8hbxTBwUTOZdj0acSi3MtsFA++4nNnzF5SpeFNeU+xT4HoFr35wYdCPJ HN57TzXKpvpLaMqI3Wf1JiQEKZQWNI/uHZY58sIyA/LXcQkpDPteFCm072Vcb+F/ PxD704rLEn+cOVR34hSqAOOIuEJPJVlmJjG1qTU3+iIuLYRhFq6KpS48LSNV1qrQ zg83ybnXI++Ta4cXD6InXbexo3EuHromp0RF5M2ivwS9acEVKSndmbOj+s3YIN26 cC/TpnF0kg8zT5XOfhQzy43XOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9ri/4p dalTtr5hDA5aqERdXo+VMB8GA1UdIwQYMBaAFJItYOoZOWcXe8bDmkBoWYo7dabT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8zMjA5MDFDNEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4ZDd4c09hUUdoWmlqdDFw dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpMWc2aGs1WnhkN3hzT2FRR2haaWp0MXB0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8zMjA5MDFDNEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9raTFnNmhrNVp4 ZDd4c09hUUdoWmlqdDFwdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6QssxiF7CIbkzK1dxcGLHxSdB3dp38Ydu+KrM9FMvJ4y0VxqiA0iN CkCg2diBh5pH3xN6TkPtGI2BhACdcUswv0sPVAoQD6TV3JZ6GUzhIa4S/IvagL+J E+uLqPkMPafNslhc9f6LeTnC9Xw6+8JaKvUfSo6qBFOKFewmcED6kNbGsAlTEujZ 6SJ5UboMVwBr5e+BE9ykkMTaElqku1hTMV2W7u6x6DZDKO7qvyU5DnoxHPWUT6Gf eY6WEdPXkjVrGHknIAC4yz+ia1U4jRys7QOaH4bcZSMmtZ9oboBcz8m+qeTrCxv1 9/M1dLEk0Vb2VGKtZXIoTX5xycczlZn+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:44 2025 by rpki-client