$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json) Hash identifier: IkwyjbIXq1AEnpqR34uyRMZfVKIC7bqYVCY5mtUcenY= Subject key identifier: 38:6B:6D:18:A0:AA:12:56:54:89:13:F4:E9:67:D7:25:61:76:43:E9 Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft Manifest number: 015F Signing time: Thu 03 Apr 2025 03:17:29 +0000 Manifest this update: Thu 03 Apr 2025 03:17:29 +0000 Manifest next update: Thu 10 Apr 2025 03:17:29 +0000 Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: 4AdK9L0A4EKGJVy/1/V0u/cOaycR3zpsvCtWlxU75BE=) 2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: 46KG+z6AmefQLHET8V1p05YXMcYFBhvMuy+GbMJb6u0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FAA Validity Not Before: Apr 3 03:17:29 2025 GMT Not After : Apr 10 03:17:29 2025 GMT Subject: CN=67edfdc9-bf8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:1f:ae:8e:c4:0b:c7:85:27:47:e2:cd:57: c8:67:66:a6:54:03:a6:98:74:e4:49:67:3f:bd:12: f6:88:38:6f:4c:13:5a:0d:f5:b1:1b:a0:7b:97:12: 06:87:f9:9e:8e:56:a6:1c:a2:4c:af:e4:74:7b:75: e0:14:91:82:a8:a4:c5:bf:71:d1:67:37:61:82:7b: 0c:0a:22:60:dd:15:ec:b9:dc:db:c5:3c:f9:a7:e8: 7a:2e:28:de:10:44:e9:14:08:8e:99:2f:4b:79:57: f8:cd:7e:51:9d:a8:cb:8b:9f:34:2c:35:12:60:e8: fd:a1:34:dd:ff:d3:b7:52:09:18:f3:93:85:9a:79: f1:bc:16:05:f3:bb:d8:8b:a1:a0:ae:3e:8c:28:21: 9a:18:57:0d:8c:35:9f:a6:ee:93:86:02:58:a7:79: bd:1d:80:9c:53:6f:73:0e:6e:42:21:7b:8b:ef:a8: 1b:e0:97:78:35:70:6f:86:12:55:69:c5:c6:df:60: 43:02:14:63:8a:e0:93:07:2f:6c:a2:c7:e5:8f:0c: c4:00:71:63:32:5b:5b:70:ab:5d:59:32:c3:c3:d3: 32:b1:d0:6a:aa:e2:8c:d3:d7:d1:48:d8:8d:7e:6c: b8:f7:20:eb:71:13:13:86:2b:a8:61:87:b1:0b:62: 7f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6B:6D:18:A0:AA:12:56:54:89:13:F4:E9:67:D7:25:61:76:43:E9 X509v3 Authority Key Identifier: keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:46:af:56:69:e9:12:c2:f8:1a:57:f1:db:b2:d2:ac:07:9d: f5:66:3d:40:bb:03:9a:24:60:56:3c:33:95:96:cc:4d:d5:e0: c8:df:72:18:53:8a:a3:eb:82:41:91:8c:b5:9d:7d:3b:85:61: a7:4e:96:39:0a:ba:47:98:99:c4:ad:77:9d:dd:29:38:5d:2e: 88:c3:64:78:5b:db:8d:ab:3d:9d:7f:16:89:14:a2:09:7a:e0: 1b:ee:ab:ce:b7:12:fa:a3:56:05:ec:0b:ae:08:7c:cc:9e:59: 9c:9b:8a:17:13:8b:06:ae:55:84:2a:8b:90:3d:ca:ba:e5:51: 15:3a:67:ed:52:30:42:cf:1e:02:78:02:ab:23:df:aa:54:09: 52:29:36:29:74:4b:21:7d:08:8f:5e:95:a2:71:57:a5:b9:5a: 52:7e:64:de:eb:76:86:9d:40:d1:f4:ae:38:72:50:8e:eb:ca: c2:8f:18:82:af:f5:cf:aa:36:b5:e4:c6:3e:72:d6:40:28:d0: cd:b3:f9:9d:9c:c6:5e:c5:1b:9a:ca:2b:68:4f:6f:60:e7:44: 2c:fd:2f:ea:f6:a3:55:b5:53:02:f9:64:8d:33:5f:6b:c9:e8: 09:1f:9d:e8:06:00:c0:94:26:c6:35:e8:8f:06:24:09:37:39: a0:32:60:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx NzdDODk0RjYwHhcNMjUwNDAzMDMxNzI5WhcNMjUwNDEwMDMxNzI5WjAYMRYwFAYD VQQDEw02N2VkZmRjOS1iZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8kfro7EC8eFJ0fizVfIZ2amVAOmmHTkSWc/vRL2iDhvTBNaDfWxG6B7lxIG h/mejlamHKJMr+R0e3XgFJGCqKTFv3HRZzdhgnsMCiJg3RXsudzbxTz5p+h6Lije EETpFAiOmS9LeVf4zX5RnajLi580LDUSYOj9oTTd/9O3UgkY85OFmnnxvBYF87vY i6Ggrj6MKCGaGFcNjDWfpu6ThgJYp3m9HYCcU29zDm5CIXuL76gb4Jd4NXBvhhJV acXG32BDAhRjiuCTBy9sosfljwzEAHFjMltbcKtdWTLDw9MysdBqquKM09fRSNiN fmy49yDrcRMThiuoYYexC2J/jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhrbRig qhJWVIkT9Oln1yVhdkPpMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4 OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5 clB3NmFtNkVJZFFYZklsUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjRq9WaekSwvgaV/HbstKsB531Zj1AuwOaJGBWPDOVlsxN1eDI33IY U4qj64JBkYy1nX07hWGnTpY5CrpHmJnErXed3Sk4XS6Iw2R4W9uNqz2dfxaJFKIJ euAb7qvOtxL6o1YF7AuuCHzMnlmcm4oXE4sGrlWEKouQPcq65VEVOmftUjBCzx4C eAKrI9+qVAlSKTYpdEshfQiPXpWicVeluVpSfmTe63aGnUDR9K44clCO68rCjxiC r/XPqja15MY+ctZAKNDNs/mdnMZexRuayitoT29g50Qs/S/q9qNVtVMC+WSNM19r yegJH53oBgDAlCbGNeiPBiQJNzmgMmDE -----END CERTIFICATE-----Generated at Sat Apr 5 04:02:39 2025 by rpki-client