$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: OT3fcklve1H44AoWSUYpt3LvMVbfTXukUwvaiBXf5qE= Subject key identifier: 91:9D:57:63:DF:C9:0A:E2:76:AC:1E:D3:E5:91:F9:67:81:4E:2A:0D Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 013D Signing time: Sat 05 Apr 2025 03:48:05 +0000 Manifest this update: Sat 05 Apr 2025 03:48:05 +0000 Manifest next update: Sat 12 Apr 2025 03:48:05 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: BM7ou7rwG4OXsJE9C5C0L+Df7gEjjjYGm6ObhsOCqy8=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: TQNp4VPkd2Y3kuSHIh/mgixwhnfBshqTtBcaPCauLtM=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: GR3/5CWBDLCFuFXDR1pBqo7ZS4ZffgNTqP5rw3l7jgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737 Validity Not Before: Apr 5 03:48:05 2025 GMT Not After : Apr 12 03:48:05 2025 GMT Subject: CN=67f0a7f5-d369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:85:a5:1a:b9:77:2c:b3:05:f8:e5:76:50: f7:9f:c7:14:80:ff:0c:f7:e7:48:90:64:32:d1:55: 14:a3:93:7d:ea:18:fe:48:b9:90:53:6b:cf:54:c5: 77:5a:c9:dc:63:22:4d:31:ae:51:b3:bd:40:d2:77: a1:a4:8e:8d:0a:e8:88:d6:2e:1a:59:c1:6f:e3:49: 6a:5f:4e:a0:02:76:aa:64:37:7c:d7:1c:b1:ab:ae: 92:bd:24:0d:f5:47:f5:a8:b0:b3:ef:0b:f1:b8:26: 38:8f:a3:09:45:2b:60:5a:4d:19:de:7e:1c:bc:80: 50:72:43:3c:0e:b8:ad:55:62:d5:ab:c2:7c:7c:db: 48:e1:47:3e:5c:2e:f3:89:5b:39:e7:44:6f:4a:80: 61:39:89:1e:0c:d5:b2:7b:92:ed:d4:3a:cb:26:36: 91:39:ef:ee:2f:d5:31:4c:c1:2f:eb:b1:6d:94:64: 78:3e:57:0c:fc:53:06:2c:6e:a8:e9:69:3f:8b:5c: 38:67:43:d4:8c:0a:6c:c2:b2:e1:f5:55:f0:6e:3e: 36:68:59:37:45:37:d1:47:ab:c0:eb:9f:27:ed:64: c8:48:12:da:45:37:ad:23:73:ff:4c:36:68:0c:a6: d4:95:ab:da:21:ad:5d:f9:fe:dc:91:06:57:29:7d: 53:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9D:57:63:DF:C9:0A:E2:76:AC:1E:D3:E5:91:F9:67:81:4E:2A:0D X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0f:b8:0a:69:80:a7:10:52:82:6f:78:4c:3f:95:e3:1e:02: a3:c0:b1:0f:ba:d3:ac:ce:a4:91:e3:98:bc:de:b3:cc:98:38: cd:16:a0:7d:a1:6e:86:76:07:0f:d2:f2:76:67:3b:53:0c:77: a9:4c:69:aa:29:e4:1e:63:40:d7:5f:71:c1:c2:6c:63:1a:2c: 9a:dd:d1:b1:91:d1:1b:38:ed:1e:e1:30:06:9d:02:3d:00:5f: 1c:d6:79:9a:ec:02:5c:13:53:51:c7:39:00:01:4d:32:b9:85: 8a:54:36:e5:61:97:d9:c9:b7:a3:5b:2a:1e:db:1f:ef:9d:7f: 27:12:dc:50:dc:f8:db:d1:f4:30:f3:af:b9:a7:4e:2c:ea:5b: 62:a9:f9:1d:d8:67:dc:b4:b8:09:53:e2:47:d1:d1:3d:0e:f0: 1b:17:cd:9e:de:ac:8e:83:37:24:a0:db:6c:9e:98:94:c2:12: 6b:4d:67:5a:86:76:5a:da:d1:09:48:22:58:d1:bf:bd:10:02: ff:45:fe:41:6a:f3:f1:cd:62:bd:47:1a:9d:78:5f:1d:8a:16: 35:57:10:de:e3:6e:86:7d:fa:9c:a4:ae:25:4f:8f:dd:95:c6: d5:bb:c1:bb:e7:4d:4b:e8:55:66:72:5d:ed:de:56:d8:d3:0a: 97:ff:de:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjUwNDA1MDM0ODA1WhcNMjUwNDEyMDM0ODA1WjAYMRYwFAYD VQQDEw02N2YwYTdmNS1kMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgyFpRq5dyyzBfjldlD3n8cUgP8M9+dIkGQy0VUUo5N96hj+SLmQU2vPVMV3 WsncYyJNMa5Rs71A0nehpI6NCuiI1i4aWcFv40lqX06gAnaqZDd81xyxq66SvSQN 9Uf1qLCz7wvxuCY4j6MJRStgWk0Z3n4cvIBQckM8DritVWLVq8J8fNtI4Uc+XC7z iVs550RvSoBhOYkeDNWye5Lt1DrLJjaROe/uL9UxTMEv67FtlGR4PlcM/FMGLG6o 6Wk/i1w4Z0PUjApswrLh9VXwbj42aFk3RTfRR6vA658n7WTISBLaRTetI3P/TDZo DKbUlavaIa1d+f7ckQZXKX1TEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGdV2Pf yQridqwe0+WR+WeBTioNMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaD7gKaYCnEFKCb3hMP5XjHgKjwLEPutOszqSR45i83rPMmDjNFqB9 oW6GdgcP0vJ2ZztTDHepTGmqKeQeY0DXX3HBwmxjGiya3dGxkdEbOO0e4TAGnQI9 AF8c1nma7AJcE1NRxzkAAU0yuYWKVDblYZfZybejWyoe2x/vnX8nEtxQ3Pjb0fQw 86+5p04s6ltiqfkd2GfctLgJU+JH0dE9DvAbF82e3qyOgzckoNtsnpiUwhJrTWda hnZa2tEJSCJY0b+9EAL/Rf5BavPxzWK9RxqdeF8dihY1VxDe426GffqcpK4lT4/d lcbVu8G7501L6FVmcl3t3lbY0wqX/96i -----END CERTIFICATE-----Generated at Sun Apr 6 06:39:41 2025 by rpki-client