$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft File: i0hqzK8SpnqVaI6NEb1ljAQcElo.mft (raw, json) Hash identifier: Q8Gxd5rhNf67J5Dh/IQ8vp/2k5c8PLMlj+bqyHb5VHk= Subject key identifier: AB:66:9B:D9:05:AF:E4:E7:45:5D:12:81:B1:3A:91:3B:AE:17:F0:DE Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A Certificate issuer: /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft Manifest number: 6B Signing time: Sat 05 Apr 2025 06:12:10 +0000 Manifest this update: Sat 05 Apr 2025 06:12:09 +0000 Manifest next update: Sat 12 Apr 2025 06:12:09 +0000 Files and hashes: 1: i0hqzK8SpnqVaI6NEb1ljAQcElo.crl (hash: vu1qTxjumMHr/jQWyydeMJ3obF5q2EXiDEdJSEnhS2k=) 2: F305F43270E711EF8573CF71C4F9AE02.roa (hash: aci5Spv/e6z609EwzRrCe3VebaHTH23V/kyd6t5TMtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B Validity Not Before: Apr 5 06:12:09 2025 GMT Not After : Apr 12 06:12:09 2025 GMT Subject: CN=67f0c9ba-1fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c8:bc:b0:ae:48:ec:d7:73:05:c2:5a:7b:65: 3f:ce:bd:04:9b:72:7d:76:53:f0:a7:bd:7c:e0:9f: 83:b8:08:f2:32:82:03:7a:8a:5b:a8:65:b0:d3:e2: 96:34:a8:14:b4:8d:d5:53:a2:8f:b4:91:f8:49:5f: 7c:c3:bf:f5:31:21:63:82:1d:cb:99:74:75:5c:4f: f9:ba:6e:c5:40:3f:c0:65:ae:93:84:fc:ad:f7:10: 23:d8:04:f4:cb:de:e0:07:81:1c:41:d2:56:5a:6f: d1:92:8b:0d:27:88:03:b0:92:59:c4:af:d1:cd:94: d8:c3:e8:1a:3c:cc:09:5c:ff:35:c4:34:5e:45:58: 96:84:0a:4a:da:7d:9c:f7:bc:d8:e2:9e:c7:45:93: 9f:e8:f6:e9:f3:f3:d9:4c:2b:e4:0c:98:0d:d7:ae: 53:53:b4:4f:9b:95:24:6e:85:6f:2b:72:19:0c:a3: de:0a:85:8f:1c:f4:2b:f5:65:14:63:19:d9:05:80: 50:21:cb:8e:3a:99:b7:a3:86:65:04:e5:7a:8b:e6: 5f:7a:94:8d:2d:39:21:ec:d9:50:d6:6e:3e:82:05: ee:72:c9:f3:c5:75:a4:ab:28:48:92:86:c3:f7:05: 92:f2:8d:b9:b5:d6:b4:bb:69:f3:e8:3d:f4:4b:d1: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:66:9B:D9:05:AF:E4:E7:45:5D:12:81:B1:3A:91:3B:AE:17:F0:DE X509v3 Authority Key Identifier: keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:d0:48:bd:ba:49:a6:8f:a1:56:cc:99:5f:77:25:76:d1:38: 87:b6:24:81:f6:11:c3:57:71:54:79:66:3e:cf:43:51:f4:13: 78:64:1f:bd:3d:27:08:3a:6a:50:82:12:af:0f:35:c4:80:f3: ed:45:86:b8:90:7b:c4:0b:60:91:a7:05:2b:4c:46:95:56:7d: b2:1c:1e:e5:70:85:fd:35:b1:d1:84:9b:29:08:cc:35:5e:97: b3:2f:69:4c:b9:45:32:52:aa:e7:98:0f:e4:0d:53:b3:be:80: b6:2e:f6:6f:ba:45:34:3c:e3:9e:8c:9d:ea:a6:db:ad:d8:0c: 6e:04:6c:41:09:54:28:a1:e1:8b:f7:40:63:0e:b1:01:35:db: 63:8b:b5:be:00:84:38:90:1d:a0:74:29:7c:a4:99:55:05:11: 2d:9e:63:c8:13:52:d6:18:a0:58:2f:b0:75:1f:62:e7:44:75: d2:4f:60:8c:f6:92:4b:10:cd:1b:7d:70:53:5c:13:30:4e:0d: 57:ec:d8:11:72:bc:9e:42:6d:58:3b:91:b4:64:8e:f4:0d:85: a6:28:9a:6e:a3:bf:27:22:9f:23:56:fa:13:5b:f7:c4:01:df: b4:0b:19:e5:4c:9d:a0:b0:e5:1a:28:93:03:08:3c:ec:f9:b0: 7f:ec:6f:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkE1QjExMC8GA1UEBRMoOEI0ODZBQ0NBRjEyQTY3QTk1Njg4RThEMTFCRDY1OEMw NDFDMTI1QTAeFw0yNTA0MDUwNjEyMDlaFw0yNTA0MTIwNjEyMDlaMBgxFjAUBgNV BAMTDTY3ZjBjOWJhLTFmZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTyLywrkjs13MFwlp7ZT/OvQSbcn12U/CnvXzgn4O4CPIyggN6iluoZbDT4pY0 qBS0jdVToo+0kfhJX3zDv/UxIWOCHcuZdHVcT/m6bsVAP8BlrpOE/K33ECPYBPTL 3uAHgRxB0lZab9GSiw0niAOwklnEr9HNlNjD6Bo8zAlc/zXENF5FWJaECkrafZz3 vNjinsdFk5/o9unz89lMK+QMmA3XrlNTtE+blSRuhW8rchkMo94KhY8c9Cv1ZRRj GdkFgFAhy446mbejhmUE5XqL5l96lI0tOSHs2VDWbj6CBe5yyfPFdaSrKEiShsP3 BZLyjbm11rS7afPoPfRL0f35AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq2ab2QWv 5OdFXRKBsTqRO64X8N4wHwYDVR0jBBgwFoAUi0hqzK8SpnqVaI6NEb1ljAQcElow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQTVCLzREN0NFNjZBNzBF NzExRUZCNDQ0QUY3MEM0RjlBRTAyL2kwaHF6SzhTcG5xVmFJNk5FYjFsakFRY0Vs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaTBocXpLOFNwbnFWYUk2TkViMWxqQVFjRWxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QTVCLzREN0NFNjZBNzBFNzExRUZCNDQ0QUY3MEM0RjlBRTAyL2kwaHF6SzhTcG5x VmFJNk5FYjFsakFRY0Vsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANHQSL26SaaPoVbMmV93JXbROIe2JIH2EcNXcVR5Zj7PQ1H0E3hkH709 Jwg6alCCEq8PNcSA8+1FhriQe8QLYJGnBStMRpVWfbIcHuVwhf01sdGEmykIzDVe l7MvaUy5RTJSqueYD+QNU7O+gLYu9m+6RTQ8456Mneqm263YDG4EbEEJVCih4Yv3 QGMOsQE122OLtb4AhDiQHaB0KXykmVUFES2eY8gTUtYYoFgvsHUfYudEddJPYIz2 kksQzRt9cFNcEzBODVfs2BFyvJ5CbVg7kbRkjvQNhaYomm6jvycinyNW+hNb98QB 37QLGeVMnaCw5RookwMIPOz5sH/sb5o= -----END CERTIFICATE-----Generated at Sun Apr 6 00:20:02 2025 by rpki-client