$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft File: A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json) Hash identifier: 13ToAPT8HyqmyVZH0wmw98gjzb4URwAj3t4VwBVs6es= Subject key identifier: FD:55:5D:1E:3A:BB:B2:8C:A1:77:C1:3E:0D:E0:5A:70:40:9B:E2:3C Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4 Certificate issuer: /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4 Certificate serial: 10D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft Manifest number: 0EC2 Signing time: Mon 14 Apr 2025 18:05:54 +0000 Manifest this update: Mon 14 Apr 2025 18:05:54 +0000 Manifest next update: Mon 21 Apr 2025 18:05:54 +0000 Files and hashes: 1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: lwU9nckkuRJ2znZet5mOYOa3Cm++zpf366UjE8CUuDg=) 2: 5CF5B0D0C0FC11EFBD950B83C4F9AE02.roa (hash: YaMSZkZmb/43IpCXVJI7v5m+sQOENYgB4njMtXBa97I=) 3: 2BB8ADC445FF11EF962C0B77C4F9AE02.roa (hash: fh9R0omngS61Ch6+ZEGV+cqvLqR573nL2rW1F1DhVAw=) 4: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: 2d6B7dOvusdbolEglGxOmkSZdHYDTyLSYjs57fzYYnk=) 5: 161D8022A24611EF966F6286C4F9AE02.roa (hash: ceTZVpw7rCFHUlXqkaohAqOzq6O3kLILB+r7fOW1zYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 18:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4311 (0x10d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7156, serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4 Validity Not Before: Apr 14 18:05:54 2025 GMT Not After : Apr 21 18:05:54 2025 GMT Subject: CN=67fd4e82-e9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:7d:bf:39:7e:5e:ec:e0:0a:79:91:71:f2: fc:23:ab:14:b5:8f:45:ae:fd:7f:eb:e0:c0:48:04: 07:96:c2:b3:69:58:dc:fb:30:2e:6c:ad:76:7f:b4: 11:60:8b:96:eb:fb:1e:a5:68:ef:11:53:89:a3:92: 32:64:f2:60:e0:b0:2a:cf:62:0e:c7:93:b7:4f:7f: 3a:c5:6f:9c:23:c2:c9:d7:8e:4e:b0:3f:b5:db:49: 15:1f:46:04:5d:ae:92:74:10:84:cc:d1:47:b1:df: b1:4d:12:97:c9:ee:fc:2c:15:db:74:fa:d6:08:10: 65:f5:77:86:90:42:9c:88:b0:c9:ae:cd:77:50:95: 8d:84:ed:31:6c:85:80:a2:6b:4d:54:e2:c2:bc:96: 9d:1c:ba:40:c1:cc:84:d2:d4:f5:4c:ea:ed:d3:6b: c4:c0:20:f6:72:ac:51:1e:d4:57:d4:a0:06:88:d8: 4e:78:86:ba:e5:41:45:04:3c:db:f8:62:9a:c1:c1: ae:fa:71:89:8a:01:41:5d:2a:99:80:3a:37:08:1a: 47:a9:f5:7f:1b:d8:08:02:35:88:ff:7b:61:74:2c: e6:c9:8a:64:df:31:fe:9b:33:f0:26:d6:a8:4d:72: 65:31:ce:4a:85:1f:aa:a2:9d:e7:58:b5:f4:b8:23: 66:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:55:5D:1E:3A:BB:B2:8C:A1:77:C1:3E:0D:E0:5A:70:40:9B:E2:3C X509v3 Authority Key Identifier: keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a1:99:97:ea:f2:85:9c:9d:53:ec:b6:98:d4:0b:62:16:9b: 8e:ca:1a:04:4e:5e:ab:4a:22:69:26:58:55:57:31:3b:47:be: 2d:f2:13:00:73:c2:e9:b2:12:6a:2f:d5:ff:d2:b8:df:45:31: 4e:a5:f8:9e:b6:99:bd:8a:98:85:ae:85:3f:90:d5:fd:98:e9: 7f:87:42:b3:49:59:b4:e4:a3:f3:8e:aa:52:ad:51:c4:11:ec: 90:66:a4:eb:c7:14:f5:74:55:a6:d7:c8:d6:9a:de:6d:94:0b: c2:70:06:e0:6f:a6:1a:87:46:f6:df:65:da:77:2f:c2:f0:51: 31:73:22:27:84:ce:b0:44:e5:d2:b5:85:f2:0e:c0:03:1b:0f: 3d:50:f3:2f:94:20:73:e6:e1:5c:c1:2f:28:6d:a7:71:48:25: 8e:b8:5b:fd:d6:78:36:dc:a5:73:7f:43:7c:47:f6:43:64:98: c7:20:d1:37:d8:16:6c:1d:1f:19:72:7c:85:45:16:c8:67:bb: 3c:9c:c1:b0:30:41:8e:22:a9:80:5f:2e:d0:50:c5:91:ff:c8: b6:c5:a0:cd:cd:38:c2:67:2b:36:f9:32:31:ff:f2:c1:79:83: 7b:5a:fd:d1:ce:e3:c1:f4:5c:7c:6e:56:ca:b6:11:3e:f6:c2: 33:22:8d:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxNTYxMTAvBgNVBAUTKDAzNDZCNjM0RjI2M0Y2MzY4NDIzOURCNkRGNjRCQkJB Q0RGN0Y4QTQwHhcNMjUwNDE0MTgwNTU0WhcNMjUwNDIxMTgwNTU0WjAYMRYwFAYD VQQDEw02N2ZkNGU4Mi1lOWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5l9vzl+XuzgCnmRcfL8I6sUtY9Frv1/6+DASAQHlsKzaVjc+zAubK12f7QR YIuW6/sepWjvEVOJo5IyZPJg4LAqz2IOx5O3T386xW+cI8LJ145OsD+120kVH0YE Xa6SdBCEzNFHsd+xTRKXye78LBXbdPrWCBBl9XeGkEKciLDJrs13UJWNhO0xbIWA omtNVOLCvJadHLpAwcyE0tT1TOrt02vEwCD2cqxRHtRX1KAGiNhOeIa65UFFBDzb +GKawcGu+nGJigFBXSqZgDo3CBpHqfV/G9gIAjWI/3thdCzmyYpk3zH+mzPwJtao TXJlMc5KhR+qop3nWLX0uCNmHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1VXR46 u7KMoXfBPg3gWnBAm+I8MB8GA1UdIwQYMBaAFANGtjTyY/Y2hCOdtt9ku7rN9/ik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzE1Ni9COUYwODQ0Q0Yy M0QxMUU5QUY4NDI3MjRDNEY5QUUwMi9BMGEyTlBKajlqYUVJNTIyMzJTN3VzMzMt S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EwYTJOUEpqOWphRUk1MjIzMlM3dXMzMy1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzE1Ni9COUYwODQ0Q0YyM0QxMUU5QUY4NDI3MjRDNEY5QUUwMi9BMGEyTlBKajlq YUVJNTIyMzJTN3VzMzMtS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxoZmX6vKFnJ1T7LaY1AtiFpuOyhoETl6rSiJpJlhVVzE7R74t8hMA c8LpshJqL9X/0rjfRTFOpfietpm9ipiFroU/kNX9mOl/h0KzSVm05KPzjqpSrVHE EeyQZqTrxxT1dFWm18jWmt5tlAvCcAbgb6Yah0b232Xady/C8FExcyInhM6wROXS tYXyDsADGw89UPMvlCBz5uFcwS8obadxSCWOuFv91ng23KVzf0N8R/ZDZJjHINE3 2BZsHR8ZcnyFRRbIZ7s8nMGwMEGOIqmAXy7QUMWR/8i2xaDNzTjCZys2+TIx//LB eYN7Wv3RzuPB9Fx8blbKthE+9sIzIo3A -----END CERTIFICATE-----Generated at Wed Apr 16 17:11:29 2025 by rpki-client