$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft File: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json) Hash identifier: C5xHRezCe4IJRjh6xjuzPWJfzrkYbuut+2nLS0aA/Kg= Subject key identifier: 44:2E:86:5E:80:59:31:30:A5:A7:D2:D5:B3:5D:34:0F:21:7C:0C:38 Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft Manifest number: 04 Signing time: Sat 05 Apr 2025 07:30:07 +0000 Manifest this update: Sat 05 Apr 2025 07:30:06 +0000 Manifest next update: Sat 12 Apr 2025 07:30:06 +0000 Files and hashes: 1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: eQlDS6XHZEudc7h51gIikEX7cXtzbl//w1aG3l8NrT8=) 2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: 0kwUuP5urHGVd8jLbBCR4DTFP/4KfdSRWVGXFWx70hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6CCA Validity Not Before: Apr 5 07:30:06 2025 GMT Not After : Apr 12 07:30:06 2025 GMT Subject: CN=67f0dbfe-79fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:c9:84:56:89:39:5b:44:ee:33:c2:7d:19: af:c6:e4:8c:be:bb:df:11:a8:56:1e:e7:13:25:5b: 64:e6:2e:e4:4e:47:d9:50:29:94:71:23:13:c5:56: ca:ed:d0:36:2c:9b:f5:5f:47:32:9a:50:0d:4e:ea: 7e:69:27:02:76:cf:82:43:6a:af:f3:79:3f:f6:f2: 29:5b:1b:d6:9c:5f:29:60:7b:96:90:64:5d:c3:f2: dd:ea:6a:43:74:67:78:22:0b:fe:c3:44:f1:a6:20: ab:cc:31:49:d9:82:91:fd:78:b4:c1:67:9f:11:96: 2e:0f:ba:2d:66:2f:40:17:4b:55:0e:da:25:64:b2: 7f:31:37:e5:f2:a1:9d:e6:21:bb:ce:40:d6:23:34: 75:c7:83:0d:d1:bf:52:f4:40:08:70:c1:cf:ae:e0: 5b:83:83:73:d6:32:72:f6:a8:cc:90:aa:52:72:ab: 1a:b6:5d:f1:f1:14:78:30:94:b7:63:de:7a:fb:d0: f0:41:95:2e:b6:0f:03:41:3e:14:4f:d7:3c:a2:51: b2:df:b6:93:86:b5:ae:0b:6b:e4:7f:95:52:51:c6: 3b:66:a7:d4:a5:9f:9a:75:9f:71:c7:6b:6e:47:ab: c1:0f:b7:69:b1:75:39:ba:d8:49:d2:12:5c:eb:50: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2E:86:5E:80:59:31:30:A5:A7:D2:D5:B3:5D:34:0F:21:7C:0C:38 X509v3 Authority Key Identifier: keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:88:74:30:87:79:93:23:40:ac:b2:5e:b6:53:97:23:b1:70: 94:77:d8:f2:63:d9:c7:3b:56:a8:3c:59:23:8a:52:0c:bc:c8: ef:cf:f4:c6:90:f4:2c:04:ea:0b:ba:78:06:29:eb:4e:dc:ab: 6a:87:83:45:14:74:67:a2:22:f0:6a:f2:be:6b:7b:0c:37:04: 6a:3a:7f:75:bc:6e:59:0f:18:29:ee:af:91:30:80:ef:42:ec: 1d:ab:3b:80:5b:8d:64:24:ac:27:ed:66:d8:0c:b9:e7:6b:4a: 4c:46:e9:c0:33:3c:7f:aa:e3:e5:26:21:f4:e1:7d:2b:ee:42: 68:a4:32:6a:c1:e7:79:4e:b6:9c:0f:fb:a6:05:97:91:c8:99: 10:3f:ee:fb:0a:0d:c8:66:24:27:17:06:e4:2c:1f:f8:c3:6e: 50:ea:b2:40:56:10:36:b1:06:79:b0:ff:e3:33:04:c1:bb:5f: 04:40:43:5a:6c:5b:76:2f:2f:04:ce:ec:6c:46:54:97:19:bb: 2b:58:84:f1:63:3b:88:bb:d3:90:e8:18:c3:bb:79:ea:db:d1: 87:5b:82:b8:e8:c6:e2:32:84:7c:9e:8b:7f:c1:f3:aa:9d:59: af:88:5b:0b:b9:5f:c6:31:7e:0c:28:91:c5:de:42:6f:33:08: 04:52:31:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkNDQTExMC8GA1UEBRMoREIxM0ZCQUY3QjNCMzhEQjc2MzBEQjBCOTczNzREQUFE MDMxNUFERTAeFw0yNTA0MDUwNzMwMDZaFw0yNTA0MTIwNzMwMDZaMBgxFjAUBgNV BAMTDTY3ZjBkYmZlLTc5ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrpsmEVok5W0TuM8J9Ga/G5Iy+u98RqFYe5xMlW2TmLuROR9lQKZRxIxPFVsrt 0DYsm/VfRzKaUA1O6n5pJwJ2z4JDaq/zeT/28ilbG9acXylge5aQZF3D8t3qakN0 Z3giC/7DRPGmIKvMMUnZgpH9eLTBZ58Rli4Pui1mL0AXS1UO2iVksn8xN+XyoZ3m IbvOQNYjNHXHgw3Rv1L0QAhwwc+u4FuDg3PWMnL2qMyQqlJyqxq2XfHxFHgwlLdj 3nr70PBBlS62DwNBPhRP1zyiUbLftpOGta4La+R/lVJRxjtmp9Sln5p1n3HHa25H q8EPt2mxdTm62EnSElzrUHiJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURC6GXoBZ MTClp9LVs100DyF8DDgwHwYDVR0jBBgwFoAU2xP7r3s7ONt2MNsLlzdNqtAxWt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2Q0NBLzI0MDEwRDUyMEY3 MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050Mk1Oc0xsemROcXRBeFd0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnhQN3IzczdPTnQyTU5zTGx6ZE5xdEF4V3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 Q0NBLzI0MDEwRDUyMEY3MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050 Mk1Oc0xsemROcXRBeFd0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIyIdDCHeZMjQKyyXrZTlyOxcJR32PJj2cc7Vqg8WSOKUgy8yO/P9MaQ 9CwE6gu6eAYp607cq2qHg0UUdGeiIvBq8r5reww3BGo6f3W8blkPGCnur5EwgO9C 7B2rO4BbjWQkrCftZtgMuedrSkxG6cAzPH+q4+UmIfThfSvuQmikMmrB53lOtpwP +6YFl5HImRA/7vsKDchmJCcXBuQsH/jDblDqskBWEDaxBnmw/+MzBMG7XwRAQ1ps W3YvLwTO7GxGVJcZuytYhPFjO4i705DoGMO7eerb0YdbgrjoxuIyhHyei3/B86qd Wa+IWwu5X8YxfgwokcXeQm8zCARSMT0= -----END CERTIFICATE-----Generated at Sun Apr 6 08:54:43 2025 by rpki-client