$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: +C/ELUdPESkiNqPjVM8DXpPGHjPco8GIH1GBO/Pt7j8= Subject key identifier: 50:EC:92:33:7B:2D:00:43:22:9A:7A:80:E7:2B:DD:1D:F0:12:9B:6D Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 03F6 Signing time: Thu 03 Apr 2025 00:32:42 +0000 Manifest this update: Thu 03 Apr 2025 00:32:42 +0000 Manifest next update: Thu 10 Apr 2025 00:32:42 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: SGlvjM9MX20RUGcdSjvO+YgyuTH2pLOBNG34wY0W1RE=) 2: A8827568116911EEBB241C32C4F9AE02.roa (hash: Qc67Zl9xH5UQVVuJaiSmRCShgX4fnvxw7leOq59EYpg=) 3: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: Gw3lyprk2wHQfVI8gyQDjj5muddHnRtxMvJMvAySrdk=) 4: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: qtIjXGWFBwLcXf/7DCnDMfdtxosWwEooU8YqRW4JUKo=) 5: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: Zzu4mk3oMia2siQQ0DnH3c4pXZbn4XSvZ0+RKKFCJKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E Validity Not Before: Apr 3 00:32:42 2025 GMT Not After : Apr 10 00:32:42 2025 GMT Subject: CN=67edd72a-bf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:cd:fc:87:be:a4:ff:50:b2:85:2b:03:62: ad:27:7f:8d:63:00:b5:e9:6e:57:30:27:33:0e:9e: dd:09:16:87:d7:69:29:88:97:a8:65:38:e7:1a:3e: 80:c1:73:5b:fd:6a:d6:69:de:88:d7:57:d0:06:d2: 3e:12:7e:d2:ef:c4:dc:9c:2b:3a:a3:6a:f0:a1:51: ea:42:be:77:97:90:ea:8d:75:5a:fd:40:35:bf:ea: 72:b2:ac:0f:d1:21:07:d7:f8:ec:95:6b:a1:c5:58: 9b:fb:02:91:74:0d:4b:82:2c:86:11:79:34:b8:eb: 10:44:be:99:3a:7c:2d:fb:0a:74:a8:b2:55:5d:fc: b1:17:4f:c9:db:f1:6d:0a:91:c8:06:30:37:e4:6e: 49:29:d5:f6:4a:9f:c8:9c:9e:53:5f:4f:2d:27:76: f1:14:23:2b:5f:56:79:49:50:ae:81:1b:a4:71:4e: 68:3b:dc:50:b5:1d:ad:1e:b6:07:59:88:f8:7e:16: 7e:0d:b4:8f:a0:c0:f5:d6:cb:60:3c:a1:e1:38:8c: ff:46:1b:d3:6f:e4:f3:89:c0:4a:88:35:e8:b1:08: 5b:22:6d:83:b0:e7:67:ff:1c:54:cb:2e:cd:b1:1a: 09:71:f3:b3:c4:0b:ed:e6:10:ab:05:d9:c1:b6:2e: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EC:92:33:7B:2D:00:43:22:9A:7A:80:E7:2B:DD:1D:F0:12:9B:6D X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e4:92:8d:1d:1f:fe:c7:2c:e5:31:b8:48:3d:9d:82:7b:83: 20:f1:65:42:01:3b:d4:ee:0c:12:d1:49:dd:e0:0a:99:62:59: 7d:ec:9f:05:99:d3:a0:eb:e1:10:7c:50:64:b3:10:17:0c:ba: a9:1a:f2:f1:c6:b5:aa:72:27:8d:ee:82:3b:bb:36:57:4f:20: 40:63:a2:3f:8d:07:d2:ea:de:9d:49:9b:a7:cf:80:90:db:76: 9f:f1:bf:cb:f1:39:6d:4e:d4:dd:f0:43:1b:2b:8a:64:f0:ab: c9:92:92:67:a7:50:20:4c:6c:a4:ad:32:36:c2:59:17:0a:cd: c3:71:dc:e3:d7:de:94:e0:c6:c5:88:32:3f:17:cf:63:d9:db: 04:0e:62:85:20:7a:a0:14:20:70:3b:6f:69:a8:16:d3:90:00: 16:26:a4:44:25:d4:d0:52:3a:e0:23:de:3e:4c:c9:e7:0b:ad: 43:00:bf:13:98:f8:f4:0e:48:e2:db:82:fa:6b:1c:80:53:60: ce:bf:69:39:0e:87:ff:ed:a9:8b:7f:51:ee:cf:bc:98:d2:da: 4c:a5:53:92:7b:6f:d2:ba:b4:20:45:ee:eb:5f:b9:48:7e:4d: 6b:2f:ec:6e:e7:3b:dd:db:7e:01:ec:c5:6b:77:ef:20:f5:7a: 65:56:75:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjUwNDAzMDAzMjQyWhcNMjUwNDEwMDAzMjQyWjAYMRYwFAYD VQQDEw02N2VkZDcyYS1iZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjrN/Ie+pP9QsoUrA2KtJ3+NYwC16W5XMCczDp7dCRaH12kpiJeoZTjnGj6A wXNb/WrWad6I11fQBtI+En7S78TcnCs6o2rwoVHqQr53l5DqjXVa/UA1v+pysqwP 0SEH1/jslWuhxVib+wKRdA1LgiyGEXk0uOsQRL6ZOnwt+wp0qLJVXfyxF0/J2/Ft CpHIBjA35G5JKdX2Sp/InJ5TX08tJ3bxFCMrX1Z5SVCugRukcU5oO9xQtR2tHrYH WYj4fhZ+DbSPoMD11stgPKHhOIz/RhvTb+TzicBKiDXosQhbIm2DsOdn/xxUyy7N sRoJcfOzxAvt5hCrBdnBti7+BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDskjN7 LQBDIpp6gOcr3R3wEpttMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd5JKNHR/+xyzlMbhIPZ2Ce4Mg8WVCATvU7gwS0Und4AqZYll97J8F mdOg6+EQfFBksxAXDLqpGvLxxrWqcieN7oI7uzZXTyBAY6I/jQfS6t6dSZunz4CQ 23af8b/L8TltTtTd8EMbK4pk8KvJkpJnp1AgTGykrTI2wlkXCs3Dcdzj196U4MbF iDI/F89j2dsEDmKFIHqgFCBwO29pqBbTkAAWJqREJdTQUjrgI94+TMnnC61DAL8T mPj0Dkji24L6axyAU2DOv2k5Dof/7amLf1Huz7yY0tpMpVOSe2/SurQgRe7rX7lI fk1rL+xu5zvd234B7MVrd+8g9XplVnW9 -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:13 2025 by rpki-client