$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json) Hash identifier: TQFalmPOjl4SVyxR50URi4GJTr7+XP43iwle/o+5n0g= Subject key identifier: D6:D3:9B:D3:73:28:15:02:78:C2:27:8D:25:98:A7:EE:47:BE:8F:A3 Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Certificate serial: 06CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft Manifest number: 06C1 Signing time: Fri 04 Apr 2025 22:13:29 +0000 Manifest this update: Fri 04 Apr 2025 22:13:28 +0000 Manifest next update: Fri 11 Apr 2025 22:13:28 +0000 Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: 6ng9cQx88oFJZZN8r0Hcog1UZ2roT9EOiylMOsS5hPE=) 2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=) 3: 56617572537F11EB9C970658C4F9AE02.roa (hash: xS7amPwlmGL+CP12HQjnbonilF649h5RUnRZcUUg8FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82F4 Validity Not Before: Apr 4 22:13:28 2025 GMT Not After : Apr 11 22:13:28 2025 GMT Subject: CN=67f05989-df3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:e4:1c:c0:73:4c:e6:d0:cb:e1:5f:d7:3a: 3a:36:e6:f8:02:bf:1d:f9:fd:49:b8:5d:53:8e:8a: be:2a:88:09:1e:46:e6:16:f5:d7:db:75:a2:97:ea: a2:cc:1d:77:44:3b:71:e1:4b:02:04:b8:75:99:d9: 56:eb:7d:24:93:5a:05:80:3f:db:35:17:fa:95:cb: 4f:29:f1:48:92:d8:29:cd:29:d4:da:02:af:9a:bc: a5:34:f9:28:56:42:06:ac:e9:6e:36:43:5b:2e:a5: 5b:6d:85:b1:40:af:15:b7:71:96:ea:0e:72:83:86: 40:e0:32:6b:eb:fc:28:65:33:2b:c6:75:04:32:65: 78:97:98:2c:09:2c:d3:78:76:7e:73:2f:9b:f4:e5: 52:93:0f:0c:c6:e5:46:88:96:2c:2b:19:ab:96:ad: 38:50:15:52:aa:d0:41:15:16:fc:d1:e7:83:cb:c6: 67:51:88:f4:6c:98:09:f3:8f:7f:b2:0f:18:c9:0b: 5b:4f:f2:e6:48:33:55:61:c7:77:b3:16:a9:1e:c2: a4:bc:62:33:dc:11:53:53:8c:1c:7c:1e:e9:f1:f2: 98:5a:9f:09:d3:65:5d:a1:d2:cd:fc:e4:c7:33:cf: b0:65:2a:0d:4c:53:b6:1c:3f:40:50:10:cc:ba:94: d3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D3:9B:D3:73:28:15:02:78:C2:27:8D:25:98:A7:EE:47:BE:8F:A3 X509v3 Authority Key Identifier: keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:44:38:e4:81:00:1c:34:95:f7:9d:3c:0a:b9:4c:44:6d:fd: 1e:3a:13:54:eb:8d:20:99:64:fa:3f:96:f9:35:db:bc:e2:23: fb:f8:ee:7a:c2:6b:46:6a:ed:01:87:d3:39:9b:72:22:e4:36: 7c:83:78:1f:b7:30:22:18:e8:ea:e7:7f:71:3b:63:72:bd:6b: 0f:86:53:c9:3d:eb:70:f1:d4:b6:a4:a3:43:32:05:e2:95:f9: 4e:3a:a8:34:9d:3c:8d:c7:dd:2a:22:f6:94:32:34:6d:88:28: 23:62:2e:be:e3:4a:aa:8d:ed:00:5f:d3:13:6d:d9:77:0d:78: 81:fd:2b:33:17:f9:71:75:9c:4b:80:3f:62:03:11:98:19:61: f7:45:e6:58:bb:dc:69:45:94:eb:db:71:3b:a3:6b:43:fd:42: 92:d9:25:23:bf:16:8c:9e:6c:86:70:17:15:54:8f:fc:55:87: ee:77:a4:43:66:3f:b4:2a:d7:bc:02:f6:a2:69:6f:42:70:3d: 84:c1:dc:7d:b4:f8:72:f9:13:86:bb:e2:f2:2a:6d:98:f7:bf: fe:6d:50:85:b1:53:4e:16:81:d3:45:eb:b9:98:14:76:0a:fd: ed:53:37:e3:c9:8d:ba:d4:3e:4a:77:ca:55:38:91:cd:89:b5: a0:a4:c1:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD OUM3OTNCMUUwHhcNMjUwNDA0MjIxMzI4WhcNMjUwNDExMjIxMzI4WjAYMRYwFAYD VQQDEw02N2YwNTk4OS1kZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3rkHMBzTObQy+Ff1zo6Nub4Ar8d+f1JuF1Tjoq+KogJHkbmFvXX23Wil+qi zB13RDtx4UsCBLh1mdlW630kk1oFgD/bNRf6lctPKfFIktgpzSnU2gKvmrylNPko VkIGrOluNkNbLqVbbYWxQK8Vt3GW6g5yg4ZA4DJr6/woZTMrxnUEMmV4l5gsCSzT eHZ+cy+b9OVSkw8MxuVGiJYsKxmrlq04UBVSqtBBFRb80eeDy8ZnUYj0bJgJ849/ sg8YyQtbT/LmSDNVYcd3sxapHsKkvGIz3BFTU4wcfB7p8fKYWp8J02VdodLN/OTH M8+wZSoNTFO2HD9AUBDMupTTxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbTm9Nz KBUCeMInjSWYp+5Hvo+jMB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm SjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcRDjkgQAcNJX3nTwKuUxEbf0eOhNU640gmWT6P5b5Ndu84iP7+O56 wmtGau0Bh9M5m3Ii5DZ8g3gftzAiGOjq539xO2NyvWsPhlPJPetw8dS2pKNDMgXi lflOOqg0nTyNx90qIvaUMjRtiCgjYi6+40qqje0AX9MTbdl3DXiB/SszF/lxdZxL gD9iAxGYGWH3ReZYu9xpRZTr23E7o2tD/UKS2SUjvxaMnmyGcBcVVI/8VYfud6RD Zj+0Kte8AvaiaW9CcD2Ewdx9tPhy+ROGu+LyKm2Y97/+bVCFsVNOFoHTReu5mBR2 Cv3tUzfjyY261D5Kd8pVOJHNibWgpMHB -----END CERTIFICATE-----Generated at Sat Apr 5 23:07:38 2025 by rpki-client