$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: n9WxPTb1A2H9+7qLzNfa41oLCKMMGJ7qfKqyQh0XfZs= Subject key identifier: 8B:36:F1:D3:7E:D7:D3:6A:CD:1F:D0:FD:76:81:0B:0C:72:D3:9D:B4 Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 0447 Signing time: Thu 03 Apr 2025 00:15:46 +0000 Manifest this update: Thu 03 Apr 2025 00:15:45 +0000 Manifest next update: Thu 10 Apr 2025 00:15:45 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: F0tKiSBhJo4G/4EUFlMJz6KxVvGlTCbFNgt8Im8TK/s=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: P2DNiNhjlpF64BsKz4nEdQOFVD1WxrPx8iOejuhEZGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20 Validity Not Before: Apr 3 00:15:45 2025 GMT Not After : Apr 10 00:15:45 2025 GMT Subject: CN=67edd332-168a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:06:53:19:a3:ac:76:5c:82:38:c4:09:3d:73: 17:b9:9e:ae:59:76:40:dc:1a:c0:18:a8:d8:43:f5: ba:5e:1e:0e:89:37:f7:45:77:9a:21:09:7e:01:6e: 41:ff:06:78:d1:de:bf:f3:e3:2d:37:db:5c:e6:e6: c3:66:66:6e:e9:39:a0:8a:32:d3:4c:d7:6d:c9:1d: 2f:9e:70:ff:57:5d:d0:0b:c0:a0:32:4b:1f:db:33: 64:71:c9:1a:2b:17:e5:9a:38:98:3e:a8:3f:db:f3: 10:65:00:32:96:05:aa:f3:f2:0a:31:ff:c8:ec:4d: 89:75:81:c2:47:18:c4:3b:a0:57:ad:4f:dc:ae:6a: 0e:d6:4a:bc:e6:e8:b0:e1:2c:5c:cd:64:5b:39:a4: 89:96:3a:7d:2b:f6:f9:4a:17:d2:2d:64:9b:1f:2f: 56:a3:9b:c8:b6:83:b7:33:78:c2:65:58:4a:87:4d: 1d:fd:09:55:b2:42:e3:e5:cf:7d:07:d2:25:78:0c: ad:82:5b:09:42:a9:e7:49:d3:0e:dd:6e:f7:1a:f4: 86:18:8f:85:15:79:17:8e:94:3a:45:9c:47:56:87: bf:66:c2:77:bb:47:c3:05:05:80:9a:1b:60:cd:54: 5e:40:f2:69:e9:8d:9f:01:33:6f:f5:1e:3e:20:e1: 71:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:F1:D3:7E:D7:D3:6A:CD:1F:D0:FD:76:81:0B:0C:72:D3:9D:B4 X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:25:54:cd:4f:04:a7:48:b8:3b:98:e9:0a:f8:be:47:e9:34: 13:b6:77:e7:64:60:5b:15:0a:35:cb:13:41:2e:1a:68:17:1a: 1d:45:4c:fe:7b:c2:da:0c:0f:16:5d:d3:27:01:0b:e8:c9:c2: 10:e4:32:3b:b8:0e:b3:37:3b:2e:f5:48:62:b8:b4:f8:c9:44: 99:87:c5:f1:92:9c:f6:f2:c8:d8:6e:a3:dd:b4:e2:aa:ad:0f: b2:e7:6e:e5:7b:6e:03:e6:be:43:5a:f7:d9:47:8d:01:48:e3: b0:65:73:81:fb:a2:23:0e:28:21:f2:8d:3d:8b:65:76:1d:f3: 52:11:a8:a5:7a:1f:35:03:a1:30:21:53:77:5a:5b:02:ff:0c: 7d:b9:8e:74:6c:14:bd:92:6f:c1:7d:4b:83:c6:a9:96:78:fe: 69:49:6b:ba:af:f3:67:d6:78:bf:46:71:c3:92:3b:19:0c:cc: d2:ee:f9:75:a6:53:b5:91:4f:92:ff:9e:eb:85:8b:9a:fb:b3: 6c:b4:25:e1:d4:46:63:cc:08:6e:84:87:8a:37:33:9e:60:c9: 3a:10:fe:22:0f:d3:6c:18:80:51:81:5b:95:e3:61:ef:50:1f: 5e:75:23:72:23:c6:3a:aa:1f:97:30:f2:c2:3a:5a:6d:0e:b4: 5d:3a:cb:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjUwNDAzMDAxNTQ1WhcNMjUwNDEwMDAxNTQ1WjAYMRYwFAYD VQQDEw02N2VkZDMzMi0xNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wZTGaOsdlyCOMQJPXMXuZ6uWXZA3BrAGKjYQ/W6Xh4OiTf3RXeaIQl+AW5B /wZ40d6/8+MtN9tc5ubDZmZu6TmgijLTTNdtyR0vnnD/V13QC8CgMksf2zNkccka KxflmjiYPqg/2/MQZQAylgWq8/IKMf/I7E2JdYHCRxjEO6BXrU/crmoO1kq85uiw 4SxczWRbOaSJljp9K/b5ShfSLWSbHy9Wo5vItoO3M3jCZVhKh00d/QlVskLj5c99 B9IleAytglsJQqnnSdMO3W73GvSGGI+FFXkXjpQ6RZxHVoe/ZsJ3u0fDBQWAmhtg zVReQPJp6Y2fATNv9R4+IOFxXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIs28dN+ 19NqzR/Q/XaBCwxy0520MB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsJVTNTwSnSLg7mOkK+L5H6TQTtnfnZGBbFQo1yxNBLhpoFxodRUz+ e8LaDA8WXdMnAQvoycIQ5DI7uA6zNzsu9UhiuLT4yUSZh8Xxkpz28sjYbqPdtOKq rQ+y527le24D5r5DWvfZR40BSOOwZXOB+6IjDigh8o09i2V2HfNSEaileh81A6Ew IVN3WlsC/wx9uY50bBS9km/BfUuDxqmWeP5pSWu6r/Nn1ni/RnHDkjsZDMzS7vl1 plO1kU+S/57rhYua+7NstCXh1EZjzAhuhIeKNzOeYMk6EP4iD9NsGIBRgVuV42Hv UB9edSNyI8Y6qh+XMPLCOlptDrRdOstg -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:56 2025 by rpki-client