$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json) Hash identifier: qAll7VTjxJl6IJZpRgrKCrnOsDiPhf9hLXdY/YgFnxg= Subject key identifier: 5B:6E:3F:74:9B:F8:13:23:65:08:EC:21:F7:BC:42:8D:6C:C1:96:19 Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 032A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft Manifest number: 0301 Signing time: Sat 29 Mar 2025 01:38:16 +0000 Manifest this update: Sat 29 Mar 2025 01:38:16 +0000 Manifest next update: Sat 05 Apr 2025 01:38:16 +0000 Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: dHuPOOoDGEhzMse7EHvT4I34x9A48MJaJ+9Qq1O46k4=) 2: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: qiPRAo39Nv8HoFoTbRrwivY4p7lSrXMxurkPZTZZGmo=) 3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: +6Qn9fMMN2JTLH3JCNnMkYnKTJVe5wXPrggbGe55SKw=) 4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: tdNvvtBtSkEXNP3bq9ounB53zb+u6cTArykXyU3hS/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 810 (0x32a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC Validity Not Before: Mar 29 01:38:16 2025 GMT Not After : Apr 5 01:38:16 2025 GMT Subject: CN=67e74f08-6144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:5e:57:1b:e7:eb:f9:c6:c7:03:0a:62:80: a0:73:1f:c0:9d:d8:04:2c:ac:9b:1b:75:0d:4f:4a: 64:f4:81:ce:77:58:0f:5a:29:8a:13:b9:93:63:74: f4:00:51:4c:1d:8f:1e:e9:36:af:b6:67:40:1c:21: 9f:2e:76:e1:24:ba:46:8e:23:8f:dd:8e:d9:82:3f: f1:8d:3b:13:d8:94:42:68:cc:6c:6f:f1:7e:4c:ad: 6f:b8:f9:8b:b9:14:19:d3:af:91:09:34:a0:4b:29: e6:ef:98:57:ee:9d:f9:6d:81:98:04:dd:b2:b1:8a: 68:39:aa:e2:76:dc:bb:c9:6e:2e:4b:d7:ae:0e:70: da:2c:e9:84:3f:1d:31:41:fe:84:57:19:ef:bf:bd: bd:b6:3c:e3:57:cb:2a:f9:10:9d:07:d5:f8:64:bf: 57:f3:3d:1d:40:da:62:3b:8c:a9:10:64:f7:e4:32: f0:1f:14:d9:a6:70:cb:2e:9a:1e:89:ea:55:79:9a: 9b:f9:9c:b5:22:a7:f1:9a:29:95:16:88:ee:36:ce: c1:d0:94:4f:ed:d0:24:1c:92:a3:6a:a9:be:a9:de: d9:b3:91:fc:d6:82:be:e5:cf:40:46:30:25:34:02: 18:ac:70:2f:9d:d1:83:87:8d:1a:a0:aa:2b:9c:49: d1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6E:3F:74:9B:F8:13:23:65:08:EC:21:F7:BC:42:8D:6C:C1:96:19 X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:0c:2c:1b:01:ba:b7:9d:53:85:1c:60:25:b7:fc:19:90:d7: fb:46:58:8a:b6:07:d0:fb:f4:ed:b5:90:66:26:7b:c6:fb:0c: 7b:83:c5:be:38:91:d1:1f:28:4d:f6:71:84:65:e1:ba:f5:7d: 62:59:f5:d2:77:02:38:7c:9c:73:66:4e:f6:74:86:70:d8:24: 45:83:20:15:b7:0f:28:46:70:c6:04:30:aa:9f:1f:24:78:a3: 1b:98:39:bb:a3:ae:e8:f1:d2:5d:f1:56:32:94:03:6c:2a:89: 22:7c:7e:21:22:f5:d0:7d:72:2c:4b:97:96:ce:2f:6d:4c:90: cb:06:dd:7c:c5:c5:33:ab:0c:db:47:1a:fa:57:36:50:83:61: 3d:d6:c0:1d:a6:57:44:6e:da:b8:5f:c6:a1:13:b6:fc:17:0f: 70:36:54:08:4d:59:d4:b0:03:7c:0e:0a:14:56:ab:8f:0d:a9: 67:39:7f:ac:e2:f5:28:0a:42:cb:82:ce:68:a7:8d:4e:e9:f3: ce:69:d7:c0:01:5f:64:d5:ba:b2:90:ba:72:0f:68:40:e0:8d: 64:02:24:15:40:a7:00:9f:fa:ae:7d:12:d5:5c:3f:92:bf:56: 77:91:e2:fd:0b:e4:8e:26:3b:83:dc:f8:67:a0:dc:c9:3e:aa: d5:85:71:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwMzI5MDEzODE2WhcNMjUwNDA1MDEzODE2WjAYMRYwFAYD VQQDEw02N2U3NGYwOC02MTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt15eVxvn6/nGxwMKYoCgcx/AndgELKybG3UNT0pk9IHOd1gPWimKE7mTY3T0 AFFMHY8e6TavtmdAHCGfLnbhJLpGjiOP3Y7Zgj/xjTsT2JRCaMxsb/F+TK1vuPmL uRQZ06+RCTSgSynm75hX7p35bYGYBN2ysYpoOaridty7yW4uS9euDnDaLOmEPx0x Qf6EVxnvv729tjzjV8sq+RCdB9X4ZL9X8z0dQNpiO4ypEGT35DLwHxTZpnDLLpoe iepVeZqb+Zy1IqfxmimVFojuNs7B0JRP7dAkHJKjaqm+qd7Zs5H81oK+5c9ARjAl NAIYrHAvndGDh40aoKornEnRXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtuP3Sb +BMjZQjsIfe8Qo1swZYZMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl aXYyaWpDenFZVkFTY0RoZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIDCwbAbq3nVOFHGAlt/wZkNf7RliKtgfQ+/TttZBmJnvG+wx7g8W+ OJHRHyhN9nGEZeG69X1iWfXSdwI4fJxzZk72dIZw2CRFgyAVtw8oRnDGBDCqnx8k eKMbmDm7o67o8dJd8VYylANsKokifH4hIvXQfXIsS5eWzi9tTJDLBt18xcUzqwzb Rxr6VzZQg2E91sAdpldEbtq4X8ahE7b8Fw9wNlQITVnUsAN8DgoUVquPDalnOX+s 4vUoCkLLgs5op41O6fPOadfAAV9k1bqykLpyD2hA4I1kAiQVQKcAn/qufRLVXD+S v1Z3keL9C+SOJjuD3PhnoNzJPqrVhXGo -----END CERTIFICATE-----Generated at Fri Apr 4 18:24:07 2025 by rpki-client