$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft File: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json) Hash identifier: GyaMxNKH/tUkADuXzFxqKMzoJNsadcWMd3zzn7e5eB0= Subject key identifier: E9:6D:11:5E:B5:77:2A:BE:99:59:5F:3F:0F:54:C1:15:1D:79:D5:00 Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 Certificate issuer: /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0 Certificate serial: 0727 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft Manifest number: 0722 Signing time: Fri 28 Mar 2025 22:04:43 +0000 Manifest this update: Fri 28 Mar 2025 22:04:42 +0000 Manifest next update: Fri 04 Apr 2025 22:04:42 +0000 Files and hashes: 1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: +tOWgBXUP8d/0Dmd2FVWqTSALSMp5I9xk96Wzp5ZYHs=) 2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: oXfgRMCkFYhKUKORBUUeo77MRVn7Mx2xxFkJ1oK4WsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1831 (0x727) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D536E Validity Not Before: Mar 28 22:04:42 2025 GMT Not After : Apr 4 22:04:42 2025 GMT Subject: CN=67e71cfa-0bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:20:5e:b7:c0:81:d0:d8:a7:f1:ae:52:74:6c: d6:07:1c:ae:17:69:a7:ed:20:99:3f:26:69:59:bd: 37:ff:08:df:1e:1e:08:6d:57:ca:a7:f0:76:44:21: 51:a2:80:6c:59:fe:fa:fb:5e:81:0c:e0:2d:72:16: 69:53:20:bf:ff:8d:47:ba:94:88:42:eb:90:ae:80: cd:e4:1d:bb:d9:ec:45:0f:56:f7:87:a5:61:08:a8: d2:f7:9a:14:e2:2b:86:d4:5f:37:e8:63:b2:e6:0b: 90:02:ae:22:dc:80:bb:53:e6:bc:21:62:d8:99:80: 9d:d5:cc:cf:1b:05:76:9d:38:12:05:d9:df:af:d1: 10:7f:76:49:10:8e:92:76:52:00:6f:89:3c:ce:ee: 33:ad:eb:9a:3e:f5:ae:c1:c4:0b:1b:72:9e:b6:6e: 11:2b:9f:05:b4:b2:7f:43:18:d8:20:18:75:1a:50: 69:d1:51:aa:af:24:c2:0c:90:f7:b6:f7:6e:f8:45: 5c:52:d9:55:fb:43:67:c7:b9:50:8d:0b:bd:89:50: b2:a9:40:07:c3:01:e8:d0:db:75:60:66:11:9d:b3: 8c:c7:d9:8c:0f:fb:37:bb:6f:74:44:85:90:0d:ab: 06:cb:81:5b:43:0f:e1:a8:16:f7:eb:be:eb:ae:47: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6D:11:5E:B5:77:2A:BE:99:59:5F:3F:0F:54:C1:15:1D:79:D5:00 X509v3 Authority Key Identifier: keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a3:4f:5a:f9:49:46:dc:55:62:52:d7:f7:5a:f0:85:7b:27: 30:a6:cd:54:c4:73:b3:19:f4:af:25:8e:2c:3b:9d:4d:d6:25: 56:38:6d:49:bc:d5:b4:7a:df:31:f3:41:6c:9b:4f:e2:3a:03: 74:d0:94:10:62:30:ea:70:04:bd:ef:4e:58:b1:f3:0e:55:a5: b2:12:68:d5:3c:b7:1f:d3:63:b5:c8:f2:c9:5a:63:28:cc:fa: 18:ad:21:23:eb:a8:3f:6a:29:d5:e7:38:6e:dd:a6:5d:13:38: 38:cd:14:2b:b5:1e:bd:85:54:52:c3:fc:c3:98:c4:68:05:26: 69:2d:69:c9:f3:8b:e6:c4:4e:63:0a:47:56:3d:1e:10:e9:fb: 92:d9:1a:f6:77:4e:ec:fb:91:9c:8d:b4:03:53:48:f8:ec:5c: 3b:8a:60:23:1b:8b:81:d3:e9:ce:99:2c:64:04:fb:7e:75:ab: 4f:af:c6:d2:7e:9c:72:05:f1:5d:d0:70:46:31:b8:70:5d:38: ed:95:29:0a:eb:53:48:b8:ac:1f:a7:b9:d2:3e:18:01:bc:01: 2a:f6:a9:7b:34:6f:d4:05:ae:02:b9:61:0a:a9:6a:98:68:e9: c2:4e:26:22:47:5c:a1:6f:69:ca:62:b0:dd:94:fa:18:22:9b: 80:b9:fc:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzNkUxMTAvBgNVBAUTKEY3MzQzMzNCNUJCNTRGQkE4ODJCMjMyRkQyNTMyNTJF N0VBMEJCQzAwHhcNMjUwMzI4MjIwNDQyWhcNMjUwNDA0MjIwNDQyWjAYMRYwFAYD VQQDEw02N2U3MWNmYS0wYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CBet8CB0Nin8a5SdGzWBxyuF2mn7SCZPyZpWb03/wjfHh4IbVfKp/B2RCFR ooBsWf76+16BDOAtchZpUyC//41HupSIQuuQroDN5B272exFD1b3h6VhCKjS95oU 4iuG1F836GOy5guQAq4i3IC7U+a8IWLYmYCd1czPGwV2nTgSBdnfr9EQf3ZJEI6S dlIAb4k8zu4zreuaPvWuwcQLG3Ketm4RK58FtLJ/QxjYIBh1GlBp0VGqryTCDJD3 tvdu+EVcUtlV+0Nnx7lQjQu9iVCyqUAHwwHo0Nt1YGYRnbOMx9mMD/s3u290RIWQ DasGy4FbQw/hqBb3677rrkcQHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOltEV61 dyq+mVlfPw9UwRUdedUAMB8GA1UdIwQYMBaAFPc0MztbtU+6iCsjL9JTJS5+oLvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTM2RS9BNkQ3NDhGQTI5 RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3cUlLeU12MGxNbExuNmd1 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl6UXpPMXUxVDdxSUt5TXYwbE1sTG42Z3U4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTM2RS9BNkQ3NDhGQTI5RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3 cUlLeU12MGxNbExuNmd1OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABo09a+UlG3FViUtf3WvCFeycwps1UxHOzGfSvJY4sO51N1iVWOG1J vNW0et8x80Fsm0/iOgN00JQQYjDqcAS9705YsfMOVaWyEmjVPLcf02O1yPLJWmMo zPoYrSEj66g/ainV5zhu3aZdEzg4zRQrtR69hVRSw/zDmMRoBSZpLWnJ84vmxE5j CkdWPR4Q6fuS2Rr2d07s+5GcjbQDU0j47Fw7imAjG4uB0+nOmSxkBPt+datPr8bS fpxyBfFd0HBGMbhwXTjtlSkK61NIuKwfp7nSPhgBvAEq9ql7NG/UBa4CuWEKqWqY aOnCTiYiR1yhb2nKYrDdlPoYIpuAufxn -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:37 2025 by rpki-client