$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json) Hash identifier: BvOP3UZ+rUXGZqGKQV4++U4y2d6F1nhQjBOSC2YlD1E= Subject key identifier: F4:D5:4A:D9:54:56:2B:99:7C:82:52:DC:3E:57:8C:44:8C:3F:C0:0B Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 1024 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft Manifest number: 101A Signing time: Tue 08 Apr 2025 17:27:36 +0000 Manifest this update: Tue 08 Apr 2025 17:27:36 +0000 Manifest next update: Tue 15 Apr 2025 17:27:36 +0000 Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: sE8jhwsDzAeTaaiuun7TMy8STt7bRYAV5MtxSuxDuJg=) 2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: y5NX1YIUJkNfdZYbpVfh0lEdhrqmAzue7Svt0KDhStg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 17:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4132 (0x1024) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721 Validity Not Before: Apr 8 17:27:36 2025 GMT Not After : Apr 15 17:27:36 2025 GMT Subject: CN=67f55c88-6101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b2:e8:87:45:ae:12:b7:6a:e3:a9:28:d9:f4: 41:45:a5:a5:e4:32:b1:5e:99:b2:86:52:59:6c:48: 6f:79:af:9b:2a:07:90:80:27:6a:78:5e:e5:a4:a2: da:e6:20:cc:74:ad:f4:73:07:21:73:61:81:9b:1b: 2c:ab:0a:fb:a9:ef:25:79:02:14:ed:d9:0e:6c:af: 74:45:75:81:dc:6c:a2:a9:1f:19:8e:0a:61:28:d9: da:6f:6e:32:74:28:57:34:8d:2c:e6:e0:7b:a1:5d: f7:b7:2a:b6:3a:b8:2a:9b:da:2e:b0:09:49:c8:82: a2:e2:78:87:b9:06:4c:4d:91:f9:b6:e9:25:3f:2c: 2a:03:08:c7:c8:44:b9:63:8b:32:97:1d:9c:d9:c3: c1:b8:5e:58:90:c1:2d:2b:52:da:a4:34:b7:93:70: 6a:3d:54:98:16:83:ea:1a:61:3a:3e:ed:a1:97:06: 59:11:61:99:dc:5b:d9:4e:be:13:4e:f1:34:e6:5e: 2a:14:e9:04:92:6f:43:c6:2d:38:c9:45:c2:90:7b: 41:c3:1e:5e:38:53:a7:65:bb:44:b2:52:a1:16:f6: b1:3b:b2:b8:0e:62:9c:f5:39:33:fa:ad:44:e4:da: 37:32:9f:7e:78:7c:a6:01:3f:63:38:df:bd:d7:68: 2e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D5:4A:D9:54:56:2B:99:7C:82:52:DC:3E:57:8C:44:8C:3F:C0:0B X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:90:ac:48:b3:61:07:d8:a1:89:16:a6:4f:d8:52:c4:77:e8: 88:70:e0:ae:09:7d:7f:ab:f8:c2:fd:f1:15:19:ba:02:b6:27: 08:09:a0:b9:d7:31:41:00:a1:77:8f:1f:35:8a:dc:63:b4:c2: a3:3e:e2:4b:53:18:be:20:9b:7d:15:f3:e6:a2:ca:f2:2c:88: 10:06:67:e0:66:2b:0c:b9:bb:e2:c1:14:9e:3b:da:cf:d5:33: 2a:11:16:8d:2b:e9:06:e9:7e:3f:be:39:f5:b5:ea:e6:35:10: b6:93:4b:79:78:03:0c:74:ee:ac:8d:9e:e7:a1:4f:00:6b:20: ef:d1:f2:96:f2:20:17:af:56:9a:a8:06:01:88:cf:7c:19:2b: 9a:94:1a:f0:ab:d5:bb:99:bf:18:82:c4:59:e3:1b:ef:48:5b: 00:00:78:c2:9d:a2:5a:7a:ee:73:db:7a:8a:bf:ca:fb:d7:15: 9a:0f:0a:8d:c9:e3:07:04:76:96:4b:ef:0e:ee:e9:fb:96:3e: 27:9d:4d:3a:98:72:74:cf:6d:f9:46:68:52:2b:c5:d6:f8:ad: 4d:8b:86:bc:a9:4c:b5:fc:14:0a:e4:9b:f9:74:5b:ef:b7:9b: 1b:be:a9:e1:18:2a:75:70:9c:03:cd:9f:c5:75:1f:c9:95:43: ec:b7:d6:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjUwNDA4MTcyNzM2WhcNMjUwNDE1MTcyNzM2WjAYMRYwFAYD VQQDEw02N2Y1NWM4OC02MTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rLoh0WuErdq46ko2fRBRaWl5DKxXpmyhlJZbEhvea+bKgeQgCdqeF7lpKLa 5iDMdK30cwchc2GBmxssqwr7qe8leQIU7dkObK90RXWB3GyiqR8ZjgphKNnab24y dChXNI0s5uB7oV33tyq2Orgqm9ousAlJyIKi4niHuQZMTZH5tuklPywqAwjHyES5 Y4sylx2c2cPBuF5YkMEtK1LapDS3k3BqPVSYFoPqGmE6Pu2hlwZZEWGZ3FvZTr4T TvE05l4qFOkEkm9Dxi04yUXCkHtBwx5eOFOnZbtEslKhFvaxO7K4DmKc9Tkz+q1E 5No3Mp9+eHymAT9jON+912gufQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTVStlU ViuZfIJS3D5XjESMP8ALMB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs ekVoZ1BST0VJamsyNFdBbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZkKxIs2EH2KGJFqZP2FLEd+iIcOCuCX1/q/jC/fEVGboCticICaC5 1zFBAKF3jx81itxjtMKjPuJLUxi+IJt9FfPmosryLIgQBmfgZisMubviwRSeO9rP 1TMqERaNK+kG6X4/vjn1termNRC2k0t5eAMMdO6sjZ7noU8AayDv0fKW8iAXr1aa qAYBiM98GSualBrwq9W7mb8YgsRZ4xvvSFsAAHjCnaJaeu5z23qKv8r71xWaDwqN yeMHBHaWS+8O7un7lj4nnU06mHJ0z235RmhSK8XW+K1Ni4a8qUy1/BQK5Jv5dFvv t5sbvqnhGCp1cJwDzZ/FdR/JlUPst9Zd -----END CERTIFICATE-----Generated at Fri Apr 11 14:08:24 2025 by rpki-client