$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json) Hash identifier: ttrfB5qHqPeuLdXatYk4ZYnUPoK8EhQQgdu5j3AonlU= Subject key identifier: B0:CC:63:B8:39:70:F4:74:BE:52:58:66:A4:D2:B3:10:7C:18:6A:4D Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft Manifest number: 0146 Signing time: Wed 09 Apr 2025 03:18:24 +0000 Manifest this update: Wed 09 Apr 2025 03:18:24 +0000 Manifest next update: Wed 16 Apr 2025 03:18:24 +0000 Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: D7SI2JOst1G1XphCQiKzHz5ydUdyplmtKtjg1wu4pPQ=) 2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 54qHC7QVMBwoC0O3cMcEci4Yy+Xl8hxRZfIa8v1MHj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 03:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5320 Validity Not Before: Apr 9 03:18:24 2025 GMT Not After : Apr 16 03:18:24 2025 GMT Subject: CN=67f5e700-71a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9a:46:cf:2f:5b:10:49:0b:a0:16:5b:ed:b0: 73:72:cf:2c:c4:1b:34:a2:1f:a7:37:6f:5b:70:97: f8:49:2d:f7:1c:12:84:6b:71:bf:d3:4a:9a:33:98: 6c:24:43:bd:87:b4:fb:4e:f8:67:39:2c:38:f6:23: 3f:e3:b3:24:2f:34:f5:c4:c6:e7:ae:7f:6b:a1:e4: 72:70:68:3e:30:0b:f2:e2:fe:c0:bd:d0:9f:fe:eb: 05:c5:e5:9b:e1:fb:7a:4d:49:98:8c:20:03:15:3e: 07:29:82:4e:50:47:14:48:2d:6a:1c:44:30:b5:65: db:5c:41:3b:fe:c0:19:87:8f:a9:70:aa:57:ee:69: 85:9c:bd:f9:98:9f:38:c3:54:c0:15:af:83:90:44: 81:ff:51:15:a0:8a:6b:8c:94:3b:a0:f2:91:83:9e: a9:58:53:aa:1b:2e:fc:ff:2d:14:70:1b:c4:fe:97: 97:c7:e8:da:cb:f0:37:c6:4f:55:6d:6e:90:f7:cd: 5c:4b:2f:86:46:e5:98:13:0c:6f:21:60:63:6b:17: 0c:0e:4d:42:95:43:9e:82:52:a6:d4:65:97:82:7d: 19:d7:81:7c:71:21:2e:23:36:e7:b8:10:77:89:69: 73:1f:d6:34:cf:ae:ab:01:f6:d8:68:38:18:10:7c: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CC:63:B8:39:70:F4:74:BE:52:58:66:A4:D2:B3:10:7C:18:6A:4D X509v3 Authority Key Identifier: keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:75:84:71:11:df:53:e8:6c:f0:7b:51:c7:ed:0f:26:e2:db: d3:46:96:16:9c:39:25:f0:5f:16:fa:3a:03:2b:a4:45:25:d2: d6:d0:b4:5b:c4:a8:04:d1:c0:ff:4c:bb:ec:f5:77:37:39:bb: 54:18:e5:c9:f1:ee:1c:e7:df:56:2f:8c:01:61:d9:af:c8:a3: 5b:35:49:33:1f:3f:5c:3d:1d:35:1a:c4:49:7a:5b:1e:80:6d: bc:89:29:02:03:14:e1:0c:a2:08:c0:cc:cb:8b:c9:1e:1e:35: 34:da:85:29:e5:64:c8:f7:c7:40:a1:c2:d4:12:85:49:6e:8e: 30:82:a6:fb:87:b7:28:96:1b:21:d1:11:fe:e1:23:3e:1b:3b: 38:9e:de:1c:48:bc:96:fe:63:f1:b7:96:12:8f:d6:8a:9c:eb: e8:aa:f2:72:10:19:c4:f2:f3:c6:3d:ff:8b:0e:52:b5:91:7f: 71:76:27:e4:f2:ba:40:ad:33:eb:85:18:5c:7c:21:18:27:26: 47:fd:e7:9a:f3:a3:93:ad:fd:94:cb:0a:9e:77:d9:d4:af:d2: f9:fc:b5:58:b1:40:de:a2:0d:2c:c4:48:aa:55:96:a6:be:4f: 31:5d:16:8c:b0:78:09:3d:20:8a:b8:d3:df:34:a1:02:01:66: 8b:8d:94:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD NEY4OTdCNzYwHhcNMjUwNDA5MDMxODI0WhcNMjUwNDE2MDMxODI0WjAYMRYwFAYD VQQDEw02N2Y1ZTcwMC03MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsppGzy9bEEkLoBZb7bBzcs8sxBs0oh+nN29bcJf4SS33HBKEa3G/00qaM5hs JEO9h7T7TvhnOSw49iM/47MkLzT1xMbnrn9roeRycGg+MAvy4v7AvdCf/usFxeWb 4ft6TUmYjCADFT4HKYJOUEcUSC1qHEQwtWXbXEE7/sAZh4+pcKpX7mmFnL35mJ84 w1TAFa+DkESB/1EVoIprjJQ7oPKRg56pWFOqGy78/y0UcBvE/peXx+jay/A3xk9V bW6Q981cSy+GRuWYEwxvIWBjaxcMDk1ClUOeglKm1GWXgn0Z14F8cSEuIzbnuBB3 iWlzH9Y0z66rAfbYaDgYEHxPdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDMY7g5 cPR0vlJYZqTSsxB8GGpNMB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1 eHptLXBzMVo1NUxFLUplM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBdYRxEd9T6Gzwe1HH7Q8m4tvTRpYWnDkl8F8W+joDK6RFJdLW0LRb xKgE0cD/TLvs9Xc3ObtUGOXJ8e4c599WL4wBYdmvyKNbNUkzHz9cPR01GsRJelse gG28iSkCAxThDKIIwMzLi8keHjU02oUp5WTI98dAocLUEoVJbo4wgqb7h7colhsh 0RH+4SM+Gzs4nt4cSLyW/mPxt5YSj9aKnOvoqvJyEBnE8vPGPf+LDlK1kX9xdifk 8rpArTPrhRhcfCEYJyZH/eea86OTrf2Uywqed9nUr9L5/LVYsUDeog0sxEiqVZam vk8xXRaMsHgJPSCKuNPfNKECAWaLjZT5 -----END CERTIFICATE-----Generated at Fri Apr 11 06:11:27 2025 by rpki-client