$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: C6B4d6uD//7y4Y+qRRagKCJB3zGEWN7IYPOSDcyYrY0= Subject key identifier: A0:72:84:9A:05:30:16:B8:92:F1:9D:54:41:B8:75:9B:9F:56:C8:BD Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 0884 Signing time: Fri 04 Apr 2025 20:47:59 +0000 Manifest this update: Fri 04 Apr 2025 20:47:59 +0000 Manifest next update: Fri 11 Apr 2025 20:47:58 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: zW/bY3Wq4YZRnBR1tCgG3utpvAsNqaQQKtL8VNyTB/Q=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: 9l2BnAHuJJyrHEmwkIwIFNFXNdEVQXjPc/3IgeT+NA4=) 3: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: 44jc2HCK3ANOLLqkUGNn4VzJW+fDcOLIoQKKCEkW6FQ=) 4: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: uiQHUpFXfMyV6JWHHfyojaNEZ38IK1RSRYCfDGxO9D0=) 5: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: /dh2BYyOs2T7d9tTc6SvzUzA1l6MPCZkZgm7SbaZhYs=) 6: 7DE1B508BC8A11EABAFA684CC4F9AE02.roa (hash: aLYKuPmQ5XZ+o/2rxrD1UHlOU4eVMiGT8zGiWBda0Do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD Validity Not Before: Apr 4 20:47:59 2025 GMT Not After : Apr 11 20:47:58 2025 GMT Subject: CN=67f0457f-4da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:04:2e:bf:6c:bc:87:d6:da:eb:44:04:6d: 30:89:d9:54:f3:54:a1:eb:5a:10:7f:f5:d0:aa:3c: 10:ff:f5:f3:55:fb:ba:78:8b:2b:5d:3a:aa:5c:69: ad:d1:a8:9c:ed:12:ae:9d:1b:61:c4:38:3d:8f:bf: 5f:29:ea:bc:59:84:35:d4:83:94:d1:16:ff:d7:21: 46:54:b9:30:61:75:a9:0e:62:9e:6c:e5:eb:9e:75: 3b:17:a7:45:d6:24:5b:4c:6c:07:23:0b:69:e4:7a: bd:40:9e:e7:a7:87:6b:3e:fd:25:16:93:66:25:40: cd:8b:18:af:30:9a:55:da:34:f1:6a:27:a6:11:ff: f1:ce:3c:1a:e1:4e:c7:a8:d3:76:65:c9:2c:bf:34: fa:d2:e8:6f:de:7e:48:2a:41:36:f7:ab:83:24:aa: bb:70:41:3f:1b:0b:3e:ea:1f:cf:da:68:81:b9:4c: 6b:ac:d5:b7:d8:d2:46:9e:94:0d:37:bb:53:47:3b: dc:e7:d4:05:78:b6:5b:1e:73:f5:f4:d6:19:47:2d: 33:d0:34:5d:24:0f:bc:07:f8:8a:d0:60:3c:e5:75: f3:ce:c4:c9:80:0e:11:ee:fd:b4:5c:b8:dd:98:16: e4:83:63:98:2c:3d:51:be:1a:25:8c:f6:66:08:3e: 0c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:72:84:9A:05:30:16:B8:92:F1:9D:54:41:B8:75:9B:9F:56:C8:BD X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1e:98:1c:9c:02:e3:2f:46:75:25:b5:de:bd:3d:f0:9e:20: f2:b6:c7:05:59:ba:03:44:82:ea:e2:ce:59:e5:c1:79:d0:a9: 4d:b1:9d:8e:7f:54:ac:c0:3b:6a:86:7e:8a:a8:18:99:90:79: 48:73:cb:7f:11:9e:c4:bc:ae:07:61:c4:e1:b6:f6:ea:d4:87: a0:e6:9e:d6:f9:a9:7a:04:5c:e6:58:f1:e0:8f:ce:46:43:6d: 8a:71:b9:26:ee:1d:f2:53:c3:ee:ee:c6:6a:60:f1:31:66:08: 7d:e9:62:c6:cd:77:cd:ae:96:3e:70:c2:71:a0:b9:7c:f7:46: e0:5d:b2:8e:2a:ae:ed:93:f1:28:91:f2:dd:5a:35:ef:9d:e3: 23:83:52:b7:5d:27:50:c8:02:e3:1e:ac:c5:21:95:7c:f3:46: f8:04:f3:17:9c:2a:80:de:03:8a:41:8d:55:71:76:cb:21:37: 57:f2:e6:75:fc:3f:73:a9:cf:ad:98:4b:3b:2f:cb:cb:04:b1: c4:1a:00:f0:55:a9:42:c3:78:10:85:12:a1:03:87:93:88:fa: f9:ab:ce:a4:2a:f9:95:58:fa:c6:ff:be:6f:cc:97:c5:38:1d: 89:a1:22:fe:8a:62:fa:29:33:8e:55:99:3a:b3:aa:93:c3:87: 52:7e:ec:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUwNDA0MjA0NzU5WhcNMjUwNDExMjA0NzU4WjAYMRYwFAYD VQQDEw02N2YwNDU3Zi00ZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqsELr9svIfW2utEBG0widlU81Sh61oQf/XQqjwQ//XzVfu6eIsrXTqqXGmt 0aic7RKunRthxDg9j79fKeq8WYQ11IOU0Rb/1yFGVLkwYXWpDmKebOXrnnU7F6dF 1iRbTGwHIwtp5Hq9QJ7np4drPv0lFpNmJUDNixivMJpV2jTxaiemEf/xzjwa4U7H qNN2ZcksvzT60uhv3n5IKkE296uDJKq7cEE/Gws+6h/P2miBuUxrrNW32NJGnpQN N7tTRzvc59QFeLZbHnP19NYZRy0z0DRdJA+8B/iK0GA85XXzzsTJgA4R7v20XLjd mBbkg2OYLD1RvholjPZmCD4M+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKByhJoF MBa4kvGdVEG4dZufVsi9MB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPHpgcnALjL0Z1JbXevT3wniDytscFWboDRILq4s5Z5cF50KlNsZ2O f1SswDtqhn6KqBiZkHlIc8t/EZ7EvK4HYcThtvbq1Ieg5p7W+al6BFzmWPHgj85G Q22Kcbkm7h3yU8Pu7sZqYPExZgh96WLGzXfNrpY+cMJxoLl890bgXbKOKq7tk/Eo kfLdWjXvneMjg1K3XSdQyALjHqzFIZV880b4BPMXnCqA3gOKQY1VcXbLITdX8uZ1 /D9zqc+tmEs7L8vLBLHEGgDwValCw3gQhRKhA4eTiPr5q86kKvmVWPrG/75vzJfF OB2JoSL+imL6KTOOVZk6s6qTw4dSfuxF -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:27 2025 by rpki-client