$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json) Hash identifier: 45bUv0S0o7Pazi7GGeRhw8w8TmuzfgccA20ygZrZLzg= Subject key identifier: FA:FD:43:11:0E:8A:1B:8D:6C:89:FF:E2:D7:B7:76:BE:F4:AE:61:73 Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft Manifest number: D7 Signing time: Tue 15 Apr 2025 04:26:51 +0000 Manifest this update: Tue 15 Apr 2025 04:26:50 +0000 Manifest next update: Tue 22 Apr 2025 04:26:50 +0000 Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: hipkHSGxYQCVbxNQ93enZbKDWerbOye5TIeyVpn5KOE=) 2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: RjAnkgsXYLCqoCPEa7Dh8sDLDDkGHUa+8B9sBZhUxd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 04:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Validity Not Before: Apr 15 04:26:50 2025 GMT Not After : Apr 22 04:26:50 2025 GMT Subject: CN=67fde00a-9697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:cb:6c:40:a8:b1:15:a9:5a:a8:7c:09:f2: a2:41:6a:a7:d9:b3:98:c2:a2:d0:c0:65:c5:3f:8c: 41:c9:a3:8c:e0:57:c2:0c:88:d9:9c:14:fd:6f:27: a6:62:3c:ab:14:2e:42:93:b9:b9:a3:ff:3d:dc:38: 93:aa:a0:0f:f9:cf:1f:3b:3f:2f:74:c7:d0:9f:3f: 6a:2f:da:65:70:35:8d:18:43:1f:be:48:f3:13:36: 59:dd:1a:12:0a:be:82:92:77:ec:f6:4a:77:8c:2a: 6d:34:a2:cf:29:31:db:f8:48:20:39:b1:19:4a:90: 44:9e:1c:4c:fe:30:4a:88:5f:83:7e:0b:c0:53:45: 3d:4e:e0:5b:98:4c:ec:9a:18:58:ac:f9:d6:a8:1c: 62:f9:28:c0:f8:f5:bb:c7:3a:e6:08:db:74:05:d3: 33:5f:c5:19:bf:7b:13:2f:66:87:37:d1:30:c0:9d: 40:ee:c5:5a:e5:46:20:29:96:fc:f2:ea:9f:c4:7f: 1b:bd:41:6e:59:fb:e7:67:36:12:4c:f5:fc:2e:81: 22:cd:50:91:ae:dd:f5:4f:06:b0:48:ec:d8:b1:08: 64:9d:10:0d:27:ef:33:eb:49:c1:5e:f6:fa:7d:b5: 66:fc:61:38:c9:5d:a1:4d:55:64:95:df:72:ba:84: 7d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FD:43:11:0E:8A:1B:8D:6C:89:FF:E2:D7:B7:76:BE:F4:AE:61:73 X509v3 Authority Key Identifier: keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:1e:12:b1:da:5b:f2:48:98:29:e2:84:e0:da:75:d8:96:e4: 62:a8:c1:ec:01:b5:c9:a7:be:51:bd:d9:a5:02:d3:56:65:66: 18:89:9e:c6:f9:68:72:f4:0e:e0:89:92:d5:8a:67:13:c4:0a: ab:c1:f9:03:4c:3e:5b:65:1e:54:7d:25:b2:4c:b7:c0:42:da: 5e:5f:eb:2b:d3:f3:f3:bf:ec:43:ea:79:54:1d:91:c8:1c:aa: 23:68:fb:70:23:e6:07:f9:b9:47:4b:1f:98:fd:77:f5:dd:2e: e9:dc:7d:c8:42:38:84:85:14:38:8e:9b:4f:49:cb:59:1f:ca: 61:ba:8d:2a:20:4e:6d:a9:09:79:50:8f:c2:ae:0f:3a:bd:14: 9e:ca:6f:69:54:ea:ee:84:e0:89:6c:d9:8a:98:3a:c3:b4:24: d4:2f:0e:7b:8e:d3:ff:b2:ff:96:84:8c:2a:3e:ac:05:db:68: be:75:fb:75:87:fc:26:05:96:e6:bb:9a:10:0a:2a:07:90:6b: d4:46:fd:fa:6b:c0:7b:b9:18:b8:62:1e:41:54:03:34:62:7b: 1e:28:c5:79:2c:4d:40:25:24:4d:e9:39:65:9d:44:96:ce:f1: 9d:23:c2:8e:f0:18:a6:c9:27:a3:8f:05:0a:73:2f:7d:22:a0: f0:88:68:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0 QjBCQUQ2NjYwHhcNMjUwNDE1MDQyNjUwWhcNMjUwNDIyMDQyNjUwWjAYMRYwFAYD VQQDEw02N2ZkZTAwYS05Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDXLbECosRWpWqh8CfKiQWqn2bOYwqLQwGXFP4xByaOM4FfCDIjZnBT9byem YjyrFC5Ck7m5o/893DiTqqAP+c8fOz8vdMfQnz9qL9plcDWNGEMfvkjzEzZZ3RoS Cr6Cknfs9kp3jCptNKLPKTHb+EggObEZSpBEnhxM/jBKiF+DfgvAU0U9TuBbmEzs mhhYrPnWqBxi+SjA+PW7xzrmCNt0BdMzX8UZv3sTL2aHN9EwwJ1A7sVa5UYgKZb8 8uqfxH8bvUFuWfvnZzYSTPX8LoEizVCRrt31TwawSOzYsQhknRANJ+8z60nBXvb6 fbVm/GE4yV2hTVVkld9yuoR9IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr9QxEO ihuNbIn/4te3dr70rmFzMB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FNEM4ODUxMkQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNU OTlrbGFNY1htRmhMQzYxbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHHhKx2lvySJgp4oTg2nXYluRiqMHsAbXJp75RvdmlAtNWZWYYiZ7G +Why9A7giZLVimcTxAqrwfkDTD5bZR5UfSWyTLfAQtpeX+sr0/Pzv+xD6nlUHZHI HKojaPtwI+YH+blHSx+Y/Xf13S7p3H3IQjiEhRQ4jptPSctZH8phuo0qIE5tqQl5 UI/Crg86vRSeym9pVOruhOCJbNmKmDrDtCTULw57jtP/sv+WhIwqPqwF22i+dft1 h/wmBZbmu5oQCioHkGvURv36a8B7uRi4Yh5BVAM0YnseKMV5LE1AJSRN6TllnUSW zvGdI8KO8BimySejjwUKcy99IqDwiGg+ -----END CERTIFICATE-----Generated at Thu Apr 17 10:52:56 2025 by rpki-client