$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft File: RJ0H2pINoCY0K_biaJzH4PCjyvw.mft (raw, json) Hash identifier: U+IwbzfhB5kj2oPsPWwdnhL6ODIqlz7aaHeyhJBBr2k= Subject key identifier: 4A:FB:96:A2:49:5F:7C:E2:A4:3A:7C:9F:72:2D:B7:AB:14:64:D7:29 Authority key identifier: 44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC Certificate issuer: /CN=A91DAC6A/serialNumber=449D07DA920DA026342BF6E2689CC7E0F0A3CAFC Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft Manifest number: 4B Signing time: Sat 29 Mar 2025 06:38:01 +0000 Manifest this update: Sat 29 Mar 2025 06:38:00 +0000 Manifest next update: Sat 05 Apr 2025 06:38:00 +0000 Files and hashes: 1: RJ0H2pINoCY0K_biaJzH4PCjyvw.crl (hash: 0Z4sYvWr2J0RAYsgSicOx53kmQTgBl2QIx31T2doNUg=) 2: 24E9EF3C9C0B11EFABD74439C4F9AE02.roa (hash: jqs0ABnXsd8cXcdu4xuE6qRkZ64UI3BOhOOWWgnZ0J4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAC6A Validity Not Before: Mar 29 06:38:00 2025 GMT Not After : Apr 5 06:38:00 2025 GMT Subject: CN=67e79548-abd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:17:db:a8:56:7c:41:34:23:6e:e3:9a:d9: 76:c0:0f:67:1e:ee:16:95:5a:2d:87:f2:c5:55:e5: 20:49:54:1d:1c:dd:9e:fc:c2:af:8b:d9:58:58:9e: 37:69:ed:80:5e:1a:dc:3e:bc:a4:bf:23:8f:e4:8d: 0f:50:bc:79:15:3e:41:1f:83:bd:6a:a5:27:c0:7d: 55:bb:92:1c:71:b8:90:9a:2e:3a:cf:d2:a7:e2:19: f0:a2:22:b4:f6:3c:af:b6:f1:03:03:1e:8d:6f:b0: f0:c1:08:c9:8e:d0:4a:4e:ec:af:0d:8b:56:88:d5: bd:48:32:1f:51:10:36:8d:9a:79:36:ed:14:51:1d: 54:78:b7:96:15:cd:d0:16:33:f0:1b:d4:21:94:8f: 6c:73:0f:ae:88:a0:24:79:98:f3:9e:3d:51:d2:fd: b9:31:64:c5:7b:bd:85:a9:8f:4f:22:f7:76:77:03: 86:7c:c1:53:88:ca:ef:4b:fd:5b:bd:a0:75:a4:89: ed:89:df:98:53:fa:f1:37:d5:57:b2:8d:99:36:16: e6:38:da:67:88:08:45:1e:72:d8:8d:4d:d7:49:98: fb:fe:c7:a8:90:5f:25:7a:02:64:7b:97:00:91:5c: ef:29:0c:b5:7b:bf:20:63:99:8b:d9:27:39:31:cf: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FB:96:A2:49:5F:7C:E2:A4:3A:7C:9F:72:2D:B7:AB:14:64:D7:29 X509v3 Authority Key Identifier: keyid:44:9D:07:DA:92:0D:A0:26:34:2B:F6:E2:68:9C:C7:E0:F0:A3:CA:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RJ0H2pINoCY0K_biaJzH4PCjyvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAC6A/90662EB69C0A11EFAED65738C4F9AE02/RJ0H2pINoCY0K_biaJzH4PCjyvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7f:4a:95:54:bd:44:7f:44:96:16:d6:ce:a7:45:fd:93:90: 9f:39:9b:50:88:d7:57:3b:d4:cc:1f:96:43:66:6b:0a:3a:69: eb:3f:07:b1:c4:75:df:a6:db:4e:35:2b:bb:11:93:54:3d:a7: 26:01:1f:49:61:db:88:e1:f2:86:76:25:3a:93:90:3b:e8:92: ce:b8:3a:6d:b1:39:7d:36:43:45:c0:22:b6:4c:49:ff:7f:68: 5a:58:33:ce:8b:e3:4b:7f:fd:60:c3:b6:a9:6d:9a:05:b1:60: 8f:23:4b:3b:d7:f6:83:ac:e5:7a:98:4e:0c:72:91:f3:f7:8a: 8b:27:39:f4:dc:33:a7:a6:00:38:d7:ba:d1:ab:a7:6a:ad:b7: 5b:34:c7:5a:b1:cb:1e:e4:4a:28:42:4d:f8:7d:62:ac:f0:ed: ea:d5:20:48:35:4b:3d:d9:03:61:b2:3b:3e:93:4c:22:78:99: 75:fb:90:2f:a7:41:bb:fb:c9:79:12:83:a5:32:93:c0:c6:3a: d3:b1:42:e6:48:5e:c3:7e:6e:66:e4:f5:13:f9:9e:97:14:84: 66:5e:c3:e9:f1:dc:ce:37:5b:f9:d2:c6:49:f8:97:64:41:cb: a4:df:06:7b:ea:61:80:ff:b3:af:5e:18:73:17:41:93:0e:25: bf:3c:f5:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QUM2QTExMC8GA1UEBRMoNDQ5RDA3REE5MjBEQTAyNjM0MkJGNkUyNjg5Q0M3RTBG MEEzQ0FGQzAeFw0yNTAzMjkwNjM4MDBaFw0yNTA0MDUwNjM4MDBaMBgxFjAUBgNV BAMTDTY3ZTc5NTQ4LWFiZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNPhfbqFZ8QTQjbuOa2XbAD2ce7haVWi2H8sVV5SBJVB0c3Z78wq+L2VhYnjdp 7YBeGtw+vKS/I4/kjQ9QvHkVPkEfg71qpSfAfVW7khxxuJCaLjrP0qfiGfCiIrT2 PK+28QMDHo1vsPDBCMmO0EpO7K8Ni1aI1b1IMh9REDaNmnk27RRRHVR4t5YVzdAW M/Ab1CGUj2xzD66IoCR5mPOePVHS/bkxZMV7vYWpj08i93Z3A4Z8wVOIyu9L/Vu9 oHWkie2J35hT+vE31VeyjZk2FuY42meICEUectiNTddJmPv+x6iQXyV6AmR7lwCR XO8pDLV7vyBjmYvZJzkxz6LHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSvuWoklf fOKkOnyfci23qxRk1ykwHwYDVR0jBBgwFoAURJ0H2pINoCY0K/biaJzH4PCjyvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQzZBLzkwNjYyRUI2OUMw QTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZMEtfYmlhSnpINFBDanl2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkowSDJwSU5vQ1kwS19iaWFKekg0UENqeXZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB QzZBLzkwNjYyRUI2OUMwQTExRUZBRUQ2NTczOEM0RjlBRTAyL1JKMEgycElOb0NZ MEtfYmlhSnpINFBDanl2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1/SpVUvUR/RJYW1s6nRf2TkJ85m1CI11c71MwflkNmawo6aes/B7HE dd+m2041K7sRk1Q9pyYBH0lh24jh8oZ2JTqTkDvoks64Om2xOX02Q0XAIrZMSf9/ aFpYM86L40t//WDDtqltmgWxYI8jSzvX9oOs5XqYTgxykfP3iosnOfTcM6emADjX utGrp2qtt1s0x1qxyx7kSihCTfh9Yqzw7erVIEg1Sz3ZA2GyOz6TTCJ4mXX7kC+n Qbv7yXkSg6Uyk8DGOtOxQuZIXsN+bmbk9RP5npcUhGZew+nx3M43W/nSxkn4l2RB y6TfBnvqYYD/s69eGHMXQZMOJb889fU= -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:44 2025 by rpki-client