$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: hCi+4cFkACzItN1HHd87neLGEryjzEFZEZDgdFbO20Y= Subject key identifier: DD:0A:E3:3A:F8:2E:5C:7A:3C:05:DE:E4:00:84:DD:E3:96:E4:6D:06 Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 03EF Signing time: Sat 29 Mar 2025 00:46:47 +0000 Manifest this update: Sat 29 Mar 2025 00:46:46 +0000 Manifest next update: Sat 05 Apr 2025 00:46:46 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: F0MbyiqCbz5YPlrvrQqeBvpegKagm9KLa77p/b6SqAs=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: oZqrtJQlT3Kbcps4JCliN7dRzvuckdjDLLEfBNjz0jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73 Validity Not Before: Mar 29 00:46:46 2025 GMT Not After : Apr 5 00:46:46 2025 GMT Subject: CN=67e742f7-0002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:5b:68:b3:8f:b6:1a:b7:fe:63:06:4e:fd: 55:c7:35:d1:a6:49:44:30:35:b3:cf:7c:cf:74:e4: da:0e:7f:5d:e4:0b:ca:6a:ac:33:23:1a:40:c8:67: da:0b:88:3b:d7:d0:d2:c6:04:73:74:7a:b6:95:64: 5f:f5:3e:cc:42:27:34:3e:b0:16:bb:96:06:aa:dd: f9:31:e8:b4:01:58:1f:f0:4d:8e:fc:bf:7b:16:33: 0c:79:86:b5:59:53:4a:27:09:b9:7b:63:c2:78:e8: d5:d1:82:6f:91:43:13:c0:1f:31:7d:71:28:77:ba: ab:bd:1a:88:5b:2e:19:63:58:9f:1c:f8:e3:0a:63: 2c:ca:66:b6:2d:7c:eb:bb:5b:a8:63:7f:9b:fb:76: 13:88:c9:71:31:49:c7:51:78:8a:7e:23:1a:f3:14: fe:6f:95:35:da:0d:ab:70:cb:1f:31:88:b3:1a:64: 20:60:d7:74:ab:6d:df:d7:71:b8:7e:88:6f:2d:b2: f1:ff:e6:f0:b9:5c:ce:49:21:44:41:e0:e4:81:01: 88:e1:32:15:66:59:63:59:46:ef:fc:53:c2:2b:86: 40:ad:90:55:f3:39:27:76:48:25:ae:de:e5:91:22: 49:b8:9a:61:a4:3c:07:da:91:4d:ae:57:86:fa:e4: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0A:E3:3A:F8:2E:5C:7A:3C:05:DE:E4:00:84:DD:E3:96:E4:6D:06 X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:45:9f:ed:e2:d2:b1:ea:e0:46:a1:88:97:6e:23:7c:18:f6: e7:2c:bb:35:34:16:97:d1:ed:6f:46:a2:19:df:19:80:4a:a4: 03:85:80:ff:12:e0:63:bd:09:2a:03:1e:39:d7:11:2c:49:c4: 10:b6:5d:c7:de:1e:d5:4c:89:ef:9c:65:bb:80:a6:1b:92:c8: 0f:e8:92:93:59:35:fa:97:9c:79:4d:d1:29:6d:65:f9:cd:c6: ea:2e:ef:b4:5e:51:20:e3:18:15:54:98:40:a8:92:57:9c:8a: ec:6f:f9:2c:a6:96:f8:15:7a:48:c6:3c:93:d7:51:f1:d6:b0: 2a:5c:29:b5:f9:67:44:1d:27:f9:56:6b:98:0d:cd:98:47:e9: e2:7e:d2:6d:26:4c:90:91:ec:4b:12:e3:cd:29:8a:5f:19:f8: 55:00:82:5e:2e:60:45:9b:d1:b1:1e:e2:e1:53:02:87:d1:43: b8:ec:5e:ff:1a:f4:29:0e:32:24:e2:95:8e:fd:f7:41:56:d6: e0:91:6e:06:56:05:73:a5:6b:bb:2f:04:8b:28:14:37:bb:43: 57:56:77:27:7a:0f:20:3f:30:38:e5:9d:dc:2f:ce:dd:ad:7e: c9:bd:a9:20:75:a5:a8:fd:52:ad:f2:ad:19:28:9a:18:f3:f6: e8:1f:29:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjUwMzI5MDA0NjQ2WhcNMjUwNDA1MDA0NjQ2WjAYMRYwFAYD VQQDEw02N2U3NDJmNy0wMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30pbaLOPthq3/mMGTv1VxzXRpklEMDWzz3zPdOTaDn9d5AvKaqwzIxpAyGfa C4g719DSxgRzdHq2lWRf9T7MQic0PrAWu5YGqt35Mei0AVgf8E2O/L97FjMMeYa1 WVNKJwm5e2PCeOjV0YJvkUMTwB8xfXEod7qrvRqIWy4ZY1ifHPjjCmMsyma2LXzr u1uoY3+b+3YTiMlxMUnHUXiKfiMa8xT+b5U12g2rcMsfMYizGmQgYNd0q23f13G4 fohvLbLx/+bwuVzOSSFEQeDkgQGI4TIVZlljWUbv/FPCK4ZArZBV8zkndkglrt7l kSJJuJphpDwH2pFNrleG+uRYgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0K4zr4 Llx6PAXe5ACE3eOW5G0GMB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAARZ/t4tKx6uBGoYiXbiN8GPbnLLs1NBaX0e1vRqIZ3xmASqQDhYD/ EuBjvQkqAx451xEsScQQtl3H3h7VTInvnGW7gKYbksgP6JKTWTX6l5x5TdEpbWX5 zcbqLu+0XlEg4xgVVJhAqJJXnIrsb/ksppb4FXpIxjyT11Hx1rAqXCm1+WdEHSf5 VmuYDc2YR+niftJtJkyQkexLEuPNKYpfGfhVAIJeLmBFm9GxHuLhUwKH0UO47F7/ GvQpDjIk4pWO/fdBVtbgkW4GVgVzpWu7LwSLKBQ3u0NXVncneg8gPzA45Z3cL87d rX7JvakgdaWo/VKt8q0ZKJoY8/boHylw -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:14 2025 by rpki-client