$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json) Hash identifier: pFbDx2Go/SZJZUPuVu8thfiNDYo7pVnfv4clotDiao0= Subject key identifier: 1B:C0:EC:08:54:E9:DD:7D:B7:86:93:47:49:B2:9D:A5:CE:FA:87:4E Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft Manifest number: 062F Signing time: Fri 04 Apr 2025 22:28:50 +0000 Manifest this update: Fri 04 Apr 2025 22:28:50 +0000 Manifest next update: Fri 11 Apr 2025 22:28:50 +0000 Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: TStzJFhkCWOXZT7nrbh/SpE9csILpcCrCalI1AOM2yU=) 2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: Ps44UQPvNI+l6dnKBZUyTUvHvKmwO+RBPeKzPiMeBfw=) 3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: gsfWGtMmL+dpa9EjzvC9HprHiy8q0yGq8k/h26d5iH8=) 4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: myGu3py2MJoX+9pcsdAEfeXFlVuZbTSedA0MlFyQwmI=) 5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: IRx8YlQZD3iZNO8ZkV5fm0YkjEB3fazq27IMfHjcxDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D Validity Not Before: Apr 4 22:28:50 2025 GMT Not After : Apr 11 22:28:50 2025 GMT Subject: CN=67f05d22-d827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:4f:34:b7:2f:bf:92:47:53:f9:63:2e:ad: 51:7b:06:4c:66:b4:34:24:11:b4:d6:bb:bc:7f:03: a3:fb:55:b4:97:4d:08:ad:0b:fd:0a:f7:67:28:e1: ea:c0:a9:e8:0a:b0:09:60:5c:2b:ab:12:ba:1b:7c: ed:cc:5f:ac:dd:42:6a:3d:1a:78:9b:4b:9d:cc:ee: 62:9a:90:d3:71:25:2d:45:e1:25:be:4a:29:15:a8: 12:2e:f7:ec:a1:17:cc:85:c1:69:8c:4f:ce:f5:66: b9:69:6b:77:c3:f7:b0:a6:cd:a6:9e:35:f4:27:4d: 1e:12:d6:36:6c:12:ac:69:81:c7:d4:d5:c4:62:31: eb:0d:96:08:74:5c:61:9b:b5:24:3e:07:59:d6:85: 9f:e8:69:1d:68:a2:34:92:77:13:e4:e1:b6:4d:9b: d4:57:f6:23:ca:5e:70:a4:77:2c:7c:ef:3f:07:b1: 69:e9:0e:b9:d0:4b:2a:55:73:0e:e9:80:d1:6b:61: 39:69:7b:31:76:3e:a0:62:12:d1:90:49:38:56:ce: 9a:5b:8f:2c:fd:a7:4f:cf:cb:d0:2f:9d:28:49:20: 53:1a:e3:bd:d9:ff:03:ea:72:d5:35:a6:45:5c:e7: df:33:d8:45:0d:b7:0e:5d:0f:35:40:99:fd:ac:ed: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C0:EC:08:54:E9:DD:7D:B7:86:93:47:49:B2:9D:A5:CE:FA:87:4E X509v3 Authority Key Identifier: keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:10:7d:f1:6d:f3:7a:d2:e5:a3:80:e0:37:b1:85:59:ca:c3: 43:19:c1:32:0d:0c:84:56:92:df:45:14:b7:66:de:c6:4d:e7: 95:c4:cf:5a:41:8c:fd:9b:38:69:49:01:fd:97:0d:eb:38:53: 47:44:9a:23:4a:38:a3:78:54:2d:ee:ce:00:3a:f7:d5:19:e6: 0b:d6:d5:3d:9b:df:fa:57:14:99:08:b8:2d:9d:c8:c4:bb:cf: c8:a5:b8:38:ed:47:69:be:35:81:5b:61:0f:33:1b:30:b9:b3: 08:26:0d:7f:34:69:01:de:2f:31:93:fa:10:df:4a:4c:78:3d: 72:b4:4c:6d:cd:1b:f6:24:4d:81:25:99:7f:bb:c6:69:62:12: e8:e4:aa:e8:86:d3:90:bc:f1:e4:39:f1:af:6a:44:6c:51:65: 4f:f6:97:ca:73:c7:04:b7:f5:57:ca:64:11:69:24:c5:ec:c3: e4:ce:66:96:48:98:5c:05:52:69:02:c2:c0:fc:c1:08:18:ae: d8:80:4c:ec:23:91:5f:78:5c:30:09:10:72:c9:b9:1c:c8:13: c7:70:fc:90:08:4f:ff:f0:44:03:13:81:85:df:bb:b4:a7:b6: ec:b5:90:dc:a3:7b:bd:bb:7d:36:a1:fa:96:e7:27:d9:fb:cb: 43:7c:06:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD MkE0RTI5Q0UwHhcNMjUwNDA0MjIyODUwWhcNMjUwNDExMjIyODUwWjAYMRYwFAYD VQQDEw02N2YwNWQyMi1kODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb5PNLcvv5JHU/ljLq1RewZMZrQ0JBG01ru8fwOj+1W0l00IrQv9CvdnKOHq wKnoCrAJYFwrqxK6G3ztzF+s3UJqPRp4m0udzO5impDTcSUtReElvkopFagSLvfs oRfMhcFpjE/O9Wa5aWt3w/ewps2mnjX0J00eEtY2bBKsaYHH1NXEYjHrDZYIdFxh m7UkPgdZ1oWf6GkdaKI0kncT5OG2TZvUV/Yjyl5wpHcsfO8/B7Fp6Q650EsqVXMO 6YDRa2E5aXsxdj6gYhLRkEk4Vs6aW48s/adPz8vQL50oSSBTGuO92f8D6nLVNaZF XOffM9hFDbcOXQ81QJn9rO00PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvA7AhU 6d19t4aTR0mynaXO+odOMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw TURiUnh5M1V3S2ZDcE9LYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABEH3xbfN60uWjgOA3sYVZysNDGcEyDQyEVpLfRRS3Zt7GTeeVxM9a QYz9mzhpSQH9lw3rOFNHRJojSjijeFQt7s4AOvfVGeYL1tU9m9/6VxSZCLgtncjE u8/Ipbg47UdpvjWBW2EPMxswubMIJg1/NGkB3i8xk/oQ30pMeD1ytExtzRv2JE2B JZl/u8ZpYhLo5KrohtOQvPHkOfGvakRsUWVP9pfKc8cEt/VXymQRaSTF7MPkzmaW SJhcBVJpAsLA/MEIGK7YgEzsI5FfeFwwCRByybkcyBPHcPyQCE//8EQDE4GF37u0 p7bstZDco3u9u302ofqW5yfZ+8tDfAZW -----END CERTIFICATE-----Generated at Sun Apr 6 21:10:14 2025 by rpki-client