$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft File: 3af4p0oKdM_262MEKLbJ1w1XvXY.mft (raw, json) Hash identifier: yyrDWLl4W2u0DF4nSObeXWEtHen6GjU49yCdr33f0V4= Subject key identifier: E6:54:F9:8E:10:20:FC:20:5F:FB:92:26:0E:CB:59:76:B0:66:44:D2 Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0D8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft Manifest number: 0D53 Signing time: Fri 04 Apr 2025 18:09:33 +0000 Manifest this update: Fri 04 Apr 2025 18:09:32 +0000 Manifest next update: Fri 11 Apr 2025 18:09:32 +0000 Files and hashes: 1: 3af4p0oKdM_262MEKLbJ1w1XvXY.crl (hash: pFcwCLr+5YI3oqnpoL+NAA59B1JSJX6YJlRurYXV06U=) 2: CE83F0E6F0E411EAA47C3968C4F9AE02.roa (hash: ZQBdoWyO873LcT1vKoBchR3Mc6PGkjTHNlXwZK5KBUA=) 3: E69AF38AB11C11EAACC28D2EC4F9AE02.roa (hash: vmjmVmXjdkD0vxVvLQigcrFyWXDcETievw8r2QIVv8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3469 (0xd8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4 Validity Not Before: Apr 4 18:09:32 2025 GMT Not After : Apr 11 18:09:32 2025 GMT Subject: CN=67f0205c-6d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:d0:31:47:1a:fb:97:26:b6:c5:13:79:05: dc:44:8f:c8:71:11:73:de:0c:ef:6c:89:20:87:5e: 3e:29:14:39:df:0c:73:e2:99:95:51:17:eb:74:79: 72:5a:44:ae:f9:f4:17:53:6f:55:fe:76:d5:16:a9: bb:37:c2:62:8c:34:81:ef:cb:87:0c:b6:91:11:9c: 46:0d:f4:58:a2:1f:ab:07:ae:7e:d4:a7:aa:58:17: b8:f0:48:14:73:a6:f6:ff:b2:20:a3:fa:5c:9c:2e: 46:f6:3a:b2:ff:cc:4b:33:dc:4c:32:85:13:02:c4: a5:45:56:b2:19:0d:70:dd:7c:71:d9:9f:95:11:9f: f2:1f:1f:87:08:3d:30:3d:84:19:9c:f6:86:22:dc: 9b:1b:06:f9:03:eb:de:54:4e:d8:92:0a:6d:3e:6a: 37:ed:b4:b6:03:47:74:9f:08:61:60:be:a2:49:5f: aa:a4:ea:43:31:e4:55:1c:e8:de:bc:56:a5:50:9d: 2a:04:02:fe:69:90:3c:5a:75:3e:3e:11:a7:6d:e1: dd:1c:45:cb:76:0e:13:81:ce:25:c2:20:35:8d:70: 7e:d4:4c:c4:00:84:77:1c:71:01:e3:f3:77:42:bd: cc:c3:cd:0f:81:1a:69:76:df:21:61:b5:28:a5:39: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:54:F9:8E:10:20:FC:20:5F:FB:92:26:0E:CB:59:76:B0:66:44:D2 X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:71:53:24:f0:0c:5b:e8:66:b6:64:5f:60:cf:99:54:0f:a6: ac:91:8d:3b:c6:37:62:63:92:b2:27:6e:15:4a:e7:40:fc:67: 9d:8c:d7:7e:d5:ba:c4:e9:4b:61:f4:d4:b8:ca:46:a0:0a:4e: 78:0e:a7:42:61:89:22:94:95:99:9f:53:f0:9d:4a:3d:80:87: 98:c2:6c:b9:f7:4e:d9:c3:f0:c3:6a:b6:ff:23:26:82:5e:a9: a0:0b:53:9e:92:89:44:e2:ba:c2:b4:33:8a:5a:41:2b:fe:ca: b7:22:b6:fc:a8:44:4f:fe:80:07:3d:89:81:a2:ec:a7:77:21: ec:49:ac:b6:30:8c:0d:7e:75:38:69:b7:60:df:25:76:49:5b: a1:7a:a0:b6:e2:34:b6:b6:f8:6b:0b:79:2e:cd:53:6a:72:91: ff:28:3f:56:c2:dd:4f:66:81:d2:7b:d5:99:ee:54:63:e0:ad: 3c:22:e3:b9:67:3b:1a:ca:81:d7:14:07:8d:c7:22:b8:d3:c6: f5:e2:f6:f5:9e:a8:b7:1b:ca:4e:cc:c9:d0:96:06:bd:51:34: d8:e4:6b:5d:4d:91:f0:11:99:e9:38:9d:fa:3c:7d:b6:f9:7a: c6:e1:2d:3d:94:e4:51:47:77:80:95:29:50:2e:ae:37:82:02: c7:06:b8:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjUwNDA0MTgwOTMyWhcNMjUwNDExMTgwOTMyWjAYMRYwFAYD VQQDEw02N2YwMjA1Yy02ZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoHQMUca+5cmtsUTeQXcRI/IcRFz3gzvbIkgh14+KRQ53wxz4pmVURfrdHly WkSu+fQXU29V/nbVFqm7N8JijDSB78uHDLaREZxGDfRYoh+rB65+1KeqWBe48EgU c6b2/7Igo/pcnC5G9jqy/8xLM9xMMoUTAsSlRVayGQ1w3Xxx2Z+VEZ/yHx+HCD0w PYQZnPaGItybGwb5A+veVE7YkgptPmo37bS2A0d0nwhhYL6iSV+qpOpDMeRVHOje vFalUJ0qBAL+aZA8WnU+PhGnbeHdHEXLdg4Tgc4lwiA1jXB+1EzEAIR3HHEB4/N3 Qr3Mw80PgRppdt8hYbUopTnLdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZU+Y4Q IPwgX/uSJg7LWXawZkTSMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yRDFBNTk1QUQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RN XzI2Mk1FS0xiSjF3MVh2WFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAcVMk8Axb6Ga2ZF9gz5lUD6askY07xjdiY5KyJ24VSudA/GedjNd+ 1brE6Uth9NS4ykagCk54DqdCYYkilJWZn1PwnUo9gIeYwmy5907Zw/DDarb/IyaC XqmgC1OekolE4rrCtDOKWkEr/sq3Irb8qERP/oAHPYmBouyndyHsSay2MIwNfnU4 abdg3yV2SVuheqC24jS2tvhrC3kuzVNqcpH/KD9Wwt1PZoHSe9WZ7lRj4K08IuO5 ZzsayoHXFAeNxyK408b14vb1nqi3G8pOzMnQlga9UTTY5GtdTZHwEZnpOJ36PH22 +XrG4S09lORRR3eAlSlQLq43ggLHBrg8 -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:36 2025 by rpki-client