$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft File: 29u3f7gUXp1EhgdPtz74TVSOpiI.mft (raw, json) Hash identifier: Ubj6UBQ4PpCgP9p+Xs+XJYfd2IM5ijtEMgRXSSqV378= Subject key identifier: 1D:0A:78:1D:76:BF:59:6D:28:93:B9:D9:D4:40:FB:FD:E0:B7:E8:98 Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 Certificate issuer: /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft Manifest number: AA Signing time: Fri 11 Apr 2025 05:19:08 +0000 Manifest this update: Fri 11 Apr 2025 05:19:08 +0000 Manifest next update: Fri 18 Apr 2025 05:19:08 +0000 Files and hashes: 1: 29u3f7gUXp1EhgdPtz74TVSOpiI.crl (hash: zUb4CT5ZnT6ptcGssV/ReL8wLslzX8A2hc5G6EnIkhM=) 2: 5741EB0A159311EFA0CC790BC4F9AE02.roa (hash: jE4GzHd14AerZws/zq+eZy5XQS34aDVO012G4f0K8Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1511, serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Validity Not Before: Apr 11 05:19:08 2025 GMT Not After : Apr 18 05:19:08 2025 GMT Subject: CN=67f8a64c-c8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:64:cd:33:56:3b:93:09:40:a4:ef:20:81:99: 0d:12:37:d3:b5:34:a9:5d:f4:b1:58:ad:c7:14:36: 6c:39:b9:c1:f9:46:a1:9d:dd:c0:54:3d:d0:8f:f1: 7e:18:73:a4:b8:75:84:7c:b5:46:1d:ad:18:61:db: 6d:87:c5:32:0a:85:c3:58:90:7b:83:83:b9:10:50: 73:31:db:97:ae:96:a0:4a:58:6b:64:87:d0:72:4e: ca:85:c9:3a:f6:44:49:5c:10:20:98:16:1b:22:72: cf:59:28:32:e3:f4:ac:85:f6:23:a7:1f:13:c6:18: 1e:88:44:6e:58:11:9d:79:e3:8f:84:ce:a3:32:fa: 4c:29:7c:f6:01:a4:e4:78:1e:57:a1:78:9a:12:d5: 3a:f7:83:9f:3e:38:e5:9f:a3:8f:db:a3:cd:dc:83: 8b:4c:de:02:7b:1a:b3:ba:ed:53:91:bf:d0:c6:1a: 8b:00:6b:01:11:f9:bc:d5:f1:fa:3c:be:7d:7e:6f: 47:7a:49:84:dc:d5:4f:3e:aa:7b:f4:ab:07:26:17: 05:d1:e2:b3:b2:6d:40:6d:88:ec:1e:69:0a:c1:d7: 42:fb:83:b8:5d:16:ec:26:b2:dc:c0:17:e0:30:24: 3b:2d:e1:76:7b:5e:ad:db:c9:75:a2:30:d7:4e:6e: 08:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0A:78:1D:76:BF:59:6D:28:93:B9:D9:D4:40:FB:FD:E0:B7:E8:98 X509v3 Authority Key Identifier: keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ce:63:14:76:0b:f3:91:7d:c1:1e:9d:d1:93:73:f9:4b:dc: 1e:03:d3:50:70:c8:8f:51:6d:a2:85:c4:62:b8:f0:5c:cc:24: 12:54:cb:33:c1:25:7c:5f:c6:ff:4d:42:61:86:9b:e2:6d:94: 83:63:0a:af:8f:89:1e:df:da:1a:ca:e4:0d:26:e1:72:76:96: 73:d0:56:5d:69:92:38:77:04:bf:7d:2f:71:3e:c6:b5:20:7b: 71:55:8f:db:1d:0a:e5:1a:bb:d9:25:3f:ba:43:dc:1e:5e:fd: 50:b9:51:58:ee:8c:39:6e:83:ac:91:8e:14:b0:50:03:5c:3c: a7:23:69:18:43:09:29:57:b3:74:4b:88:20:9c:63:44:cc:ea: 9b:07:00:fb:db:72:2e:c9:e2:48:06:80:d5:91:38:5e:a3:8c: a5:49:e3:ff:f2:d2:1b:87:d6:56:c8:1c:61:f8:a5:87:eb:3d: 92:4a:55:91:23:40:73:07:5e:ea:23:b5:a1:17:fd:5f:ce:59: 69:26:15:f0:b0:ac:85:82:38:dc:65:15:19:1a:ed:eb:ac:c7: 39:8d:31:2b:63:01:d5:d6:cc:4b:82:49:f4:f7:55:4e:88:a2: 8d:a8:83:41:5f:c7:d7:c4:42:a0:75:4f:d5:40:08:94:d0:7b: 4b:2a:22:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1MTExMTAvBgNVBAUTKERCREJCNzdGQjgxNDVFOUQ0NDg2MDc0RkI3M0VGODRE NTQ4RUE2MjIwHhcNMjUwNDExMDUxOTA4WhcNMjUwNDE4MDUxOTA4WjAYMRYwFAYD VQQDEw02N2Y4YTY0Yy1jOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2TNM1Y7kwlApO8ggZkNEjfTtTSpXfSxWK3HFDZsObnB+Uahnd3AVD3Qj/F+ GHOkuHWEfLVGHa0YYdtth8UyCoXDWJB7g4O5EFBzMduXrpagSlhrZIfQck7Khck6 9kRJXBAgmBYbInLPWSgy4/SshfYjpx8TxhgeiERuWBGdeeOPhM6jMvpMKXz2AaTk eB5XoXiaEtU694OfPjjln6OP26PN3IOLTN4Cexqzuu1Tkb/QxhqLAGsBEfm81fH6 PL59fm9HekmE3NVPPqp79KsHJhcF0eKzsm1AbYjsHmkKwddC+4O4XRbsJrLcwBfg MCQ7LeF2e16t28l1ojDXTm4I1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0KeB12 v1ltKJO52dRA+/3gt+iYMB8GA1UdIwQYMBaAFNvbt3+4FF6dRIYHT7c++E1UjqYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTUxMS84RDM0MzIzQzEz RjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhwMUVoZ2RQdHo3NFRWU09w aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5dTNmN2dVWHAxRWhnZFB0ejc0VFZTT3BpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTUxMS84RDM0MzIzQzEzRjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhw MUVoZ2RQdHo3NFRWU09waUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPzmMUdgvzkX3BHp3Rk3P5S9weA9NQcMiPUW2ihcRiuPBczCQSVMsz wSV8X8b/TUJhhpvibZSDYwqvj4ke39oayuQNJuFydpZz0FZdaZI4dwS/fS9xPsa1 IHtxVY/bHQrlGrvZJT+6Q9weXv1QuVFY7ow5boOskY4UsFADXDynI2kYQwkpV7N0 S4ggnGNEzOqbBwD723IuyeJIBoDVkTheo4ylSeP/8tIbh9ZWyBxh+KWH6z2SSlWR I0BzB17qI7WhF/1fzllpJhXwsKyFgjjcZRUZGu3rrMc5jTErYwHV1sxLgkn091VO iKKNqINBX8fXxEKgdU/VQAiU0HtLKiJ/ -----END CERTIFICATE-----Generated at Sat Apr 12 17:40:55 2025 by rpki-client