$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft File: K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json) Hash identifier: 3McCl96RLFn0ZlazZrj5DRnLKk7TcQ3RQuPoLgWBXok= Subject key identifier: 39:9F:A3:ED:E6:3C:AC:ED:F6:B3:B7:06:9B:0A:4D:D0:1F:A8:74:9A Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft Manifest number: 07A6 Signing time: Wed 16 Apr 2025 20:57:34 +0000 Manifest this update: Wed 16 Apr 2025 20:57:33 +0000 Manifest next update: Wed 23 Apr 2025 20:57:33 +0000 Files and hashes: 1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: dnKyljxeFt9jf0zgyGMkd5x2UecsjTGTEeHRN5Gxt8A=) 2: 353932A29B3111EEAFB64748C4F9AE02.roa (hash: 9uk0usjnIlSyDjwPsAY9kObLcGremCDO3bEAYN35jzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 20:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Validity Not Before: Apr 16 20:57:33 2025 GMT Not After : Apr 23 20:57:33 2025 GMT Subject: CN=680019bd-a744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:09:d2:d3:14:ec:1a:b4:a3:af:8b:4f:a7: 30:87:85:59:43:5d:52:1c:e0:28:e3:c0:a2:c0:5c: 22:ef:8d:7f:0d:7f:26:d8:2b:17:e8:e0:3f:93:eb: 5b:5c:b4:65:e1:78:0d:95:7f:3d:89:2c:a6:7f:79: 1c:81:fe:06:00:fe:68:e3:ab:94:c0:05:76:7b:1d: cb:5e:12:64:6a:a3:e7:39:96:0a:fb:92:8f:64:3a: 4b:5c:76:98:f8:27:b8:ec:13:51:d6:74:5e:3a:4d: 03:7b:d1:32:74:8e:1d:29:60:8b:5c:0e:03:63:a4: e3:1a:46:ef:08:b0:39:80:01:66:bb:4a:c1:7f:93: 67:84:1e:9e:27:65:be:d1:05:f3:53:dc:3d:55:1c: f3:19:a5:f7:55:ce:75:9f:b4:78:b8:51:61:ae:f9: d7:cf:9f:7c:92:6b:83:7a:b1:5f:fd:dc:c8:8f:38: 2b:e2:8c:5e:69:22:58:1e:b2:80:7d:e7:68:15:e5: e6:dc:ec:63:98:ca:03:8d:0b:af:34:d6:33:33:e5: 40:86:19:30:e2:4e:f1:eb:3e:04:96:5e:a4:df:05: 3e:46:10:72:73:27:d8:39:ac:b3:98:23:56:a1:80: fc:cc:e2:3e:39:6c:fd:54:75:bb:30:30:49:72:f1: 8f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9F:A3:ED:E6:3C:AC:ED:F6:B3:B7:06:9B:0A:4D:D0:1F:A8:74:9A X509v3 Authority Key Identifier: keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e9:db:51:94:d6:10:b2:13:23:93:fe:93:df:6e:67:b7:61: 05:eb:5b:76:f9:a2:a2:73:1d:b5:8f:1c:c5:6f:3d:b7:75:c4: 79:dc:99:96:f2:c5:0f:56:b7:5b:9f:9b:a8:7a:98:7b:84:cc: 70:85:6f:08:83:f5:47:ec:79:f0:9e:b3:20:b7:1b:e0:62:dc: 09:b8:f7:e1:c9:02:f4:82:17:cd:d6:d9:ef:5d:e2:d7:3e:bd: 42:84:36:8d:a3:ba:e7:58:62:a6:57:88:da:cd:0d:bb:74:71: 15:8e:7c:19:13:d2:c9:58:f6:39:8b:ab:b1:11:b5:6b:11:a9: b7:bc:9f:d2:8a:8e:c7:32:62:1c:b2:8c:c1:bd:a0:11:d2:78: a4:af:40:20:99:f3:79:cb:33:62:9c:08:3d:ac:2e:15:33:1d: 13:bf:47:34:f6:a3:c1:c2:af:6f:30:62:69:00:4f:42:b6:3c: 25:08:6b:04:dc:ca:1b:1d:bb:a9:63:d3:25:a1:a4:47:6d:d3: 9a:02:a6:71:a9:1b:ff:0e:f3:66:80:3d:88:44:f3:7f:a7:50: 06:02:fc:0d:23:3d:a0:15:a0:49:7e:6e:e9:df:31:b5:73:aa: 8c:9e:0b:e2:0e:11:b1:6f:c7:23:08:c2:02:79:2e:2d:e0:ab: 6d:1d:b6:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2 NTM4MjM0OTIwHhcNMjUwNDE2MjA1NzMzWhcNMjUwNDIzMjA1NzMzWjAYMRYwFAYD VQQDEw02ODAwMTliZC1hNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMMJ0tMU7Bq0o6+LT6cwh4VZQ11SHOAo48CiwFwi741/DX8m2CsX6OA/k+tb XLRl4XgNlX89iSymf3kcgf4GAP5o46uUwAV2ex3LXhJkaqPnOZYK+5KPZDpLXHaY +Ce47BNR1nReOk0De9EydI4dKWCLXA4DY6TjGkbvCLA5gAFmu0rBf5NnhB6eJ2W+ 0QXzU9w9VRzzGaX3Vc51n7R4uFFhrvnXz598kmuDerFf/dzIjzgr4oxeaSJYHrKA fedoFeXm3OxjmMoDjQuvNNYzM+VAhhkw4k7x6z4Ell6k3wU+RhBycyfYOayzmCNW oYD8zOI+OWz9VHW7MDBJcvGP4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmfo+3m PKzt9rO3BpsKTdAfqHSaMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODEwMC9BQUM3MkUwQ0ZDQ0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJ Yy16dWRkWjFnMVJsT0NOSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM6dtRlNYQshMjk/6T325nt2EF61t2+aKicx21jxzFbz23dcR53JmW 8sUPVrdbn5uoeph7hMxwhW8Ig/VH7HnwnrMgtxvgYtwJuPfhyQL0ghfN1tnvXeLX Pr1ChDaNo7rnWGKmV4jazQ27dHEVjnwZE9LJWPY5i6uxEbVrEam3vJ/Sio7HMmIc sozBvaAR0nikr0AgmfN5yzNinAg9rC4VMx0Tv0c09qPBwq9vMGJpAE9CtjwlCGsE 3MobHbupY9MloaRHbdOaAqZxqRv/DvNmgD2IRPN/p1AGAvwNIz2gFaBJfm7p3zG1 c6qMngviDhGxb8cjCMICeS4t4KttHbZX -----END CERTIFICATE-----Generated at Fri Apr 18 18:27:59 2025 by rpki-client