$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json) Hash identifier: 1mvZqctmzcAl5LBLogmMKpQ9IzQDZhXw8UEDkyZRR8o= Subject key identifier: 93:18:F5:8F:52:BA:6F:05:C5:86:37:7B:CB:1B:61:44:B9:55:42:11 Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Certificate serial: 0AA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft Manifest number: 0A9B Signing time: Tue 08 Apr 2025 19:25:36 +0000 Manifest this update: Tue 08 Apr 2025 19:25:35 +0000 Manifest next update: Tue 15 Apr 2025 19:25:35 +0000 Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: AfPu4VqUqW302iwVDMSL9iu2xtfbWiPL0gZAFRq5i0o=) 2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: TWQ1ADwa1K2dZAFElhYa7BYiQdhNeF1NWXVQTSgNoBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 19:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2721 (0xaa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1 Validity Not Before: Apr 8 19:25:35 2025 GMT Not After : Apr 15 19:25:35 2025 GMT Subject: CN=67f5782f-6dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:ac:ee:07:a5:f5:e4:9b:68:0a:25:0c:6e: d4:12:0a:a0:a4:0d:08:f7:e9:ad:75:d5:21:42:b4: a4:de:8b:e3:21:ee:8d:0f:02:97:f5:92:5a:fa:89: cb:4e:35:84:0d:5d:b1:a2:3c:79:d1:9f:60:fb:96: de:2b:2d:b4:5c:9c:bc:39:b3:c5:a1:b7:33:86:e1: a4:67:d2:84:4e:99:f1:a1:88:ca:e2:b8:ac:4d:ed: b8:93:e2:4c:ab:06:9f:69:2a:d4:87:34:27:34:4e: 59:de:10:c6:6d:31:e0:be:bc:40:c4:00:f4:5f:ab: 2f:27:81:0d:26:23:63:26:6c:98:66:54:9c:ad:57: 45:4d:b6:65:16:d3:72:b2:4f:d2:9a:83:51:50:4d: 37:39:83:d3:82:1c:c7:d6:20:af:f5:b4:01:87:aa: fb:98:3e:63:74:d2:4a:74:7c:75:46:c1:dc:9e:6c: 8c:a0:56:fc:3a:7f:91:8a:5b:0c:c4:d9:a4:7c:2d: 12:aa:8d:42:fe:8e:9b:a6:e4:9c:31:ee:bb:cc:88: e0:62:e8:c5:d7:e0:c3:9a:ce:c4:f2:72:52:55:ca: b3:cd:b2:11:70:a1:75:d6:68:6e:05:ae:98:39:61: c9:20:3c:a8:b8:0e:b7:ad:d3:21:47:ec:9b:2a:0f: ff:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:18:F5:8F:52:BA:6F:05:C5:86:37:7B:CB:1B:61:44:B9:55:42:11 X509v3 Authority Key Identifier: keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:e5:4a:b2:77:19:11:2e:a6:2a:cb:cb:e3:19:00:9a:58:58: c9:a4:4b:98:58:33:b2:6b:69:93:fa:49:59:5b:fc:a9:4c:a5: 50:9c:29:0d:30:21:c0:93:55:13:58:25:c5:2b:b8:0f:26:c1: 68:97:19:1b:09:63:55:0d:c0:55:9e:c3:82:29:b6:96:93:cb: 3f:60:de:15:96:80:c8:8f:0a:79:b5:79:5e:8a:5d:dc:b6:f9: bf:e4:61:98:a8:fa:08:fb:53:cc:9a:95:53:85:b3:1a:ad:f5: 96:a1:53:98:ec:0f:0e:c8:00:ec:53:76:4e:67:17:f3:6e:0b: a4:22:ca:83:85:28:e6:77:32:84:1a:39:b6:06:f0:c9:28:af: e9:44:3d:a6:21:c8:85:bd:3b:1d:8d:65:82:1d:8c:2a:6b:ac: 8f:89:b9:ab:3c:bf:e3:52:e1:bf:c2:02:ab:95:cf:fc:6e:c0: 08:ff:30:f3:ea:be:36:c2:bc:62:ad:d0:6b:39:d7:a7:4d:5c: c4:76:03:cd:91:34:82:0a:81:8f:97:09:e8:a6:1f:bc:d7:1e: 01:a4:71:f8:b7:33:9c:5b:ea:64:64:df:31:bc:ab:c1:73:ca: 6d:78:17:17:c6:7b:2a:e6:04:63:92:ae:d5:27:21:42:8c:a2: 15:32:d9:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy NDlDRDM2MjQwHhcNMjUwNDA4MTkyNTM1WhcNMjUwNDE1MTkyNTM1WjAYMRYwFAYD VQQDEw02N2Y1NzgyZi02ZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMOs7gel9eSbaAolDG7UEgqgpA0I9+mtddUhQrSk3ovjIe6NDwKX9ZJa+onL TjWEDV2xojx50Z9g+5beKy20XJy8ObPFobczhuGkZ9KETpnxoYjK4risTe24k+JM qwafaSrUhzQnNE5Z3hDGbTHgvrxAxAD0X6svJ4ENJiNjJmyYZlScrVdFTbZlFtNy sk/SmoNRUE03OYPTghzH1iCv9bQBh6r7mD5jdNJKdHx1RsHcnmyMoFb8On+RilsM xNmkfC0Sqo1C/o6bpuScMe67zIjgYujF1+DDms7E8nJSVcqzzbIRcKF11mhuBa6Y OWHJIDyouA63rdMhR+ybKg//hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMY9Y9S um8FxYY3e8sbYUS5VUIRMB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm5UqydxkRLqYqy8vjGQCaWFjJpEuYWDOya2mT+klZW/ypTKVQnCkN MCHAk1UTWCXFK7gPJsFolxkbCWNVDcBVnsOCKbaWk8s/YN4VloDIjwp5tXleil3c tvm/5GGYqPoI+1PMmpVThbMarfWWoVOY7A8OyADsU3ZOZxfzbgukIsqDhSjmdzKE Gjm2BvDJKK/pRD2mIciFvTsdjWWCHYwqa6yPibmrPL/jUuG/wgKrlc/8bsAI/zDz 6r42wrxirdBrOdenTVzEdgPNkTSCCoGPlwnoph+81x4BpHH4tzOcW+pkZN8xvKvB c8pteBcXxnsq5gRjkq7VJyFCjKIVMtlq -----END CERTIFICATE-----Generated at Fri Apr 11 15:30:40 2025 by rpki-client