$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: lu82wWgk+3aFHNAW4vyLCamBne6tlOIlWjtJMj1KlU8= Subject key identifier: 2A:67:A4:E5:C5:65:7E:6D:CD:91:32:3C:51:72:40:A1:35:07:71:AD Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 04EF Signing time: Mon 14 Apr 2025 23:34:44 +0000 Manifest this update: Mon 14 Apr 2025 23:34:44 +0000 Manifest next update: Mon 21 Apr 2025 23:34:44 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: VK3T1VafT17OyUWmQXSFBhjHl4HEJeBdWK46LePnyDY=) 2: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: w2mL/fsYRB6MmS8ED2TzYNgHT6YJdEKc1P9Mt7Z0I6E=) 3: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=) 4: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: ofRtHX/MKl5XIFnHo+xiQV/BMYeRiUmwlrnI4KBBFTU=) 5: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: HkMdZ/7Zyl8/WVPS96RNyLCvOlQjm91vFX9iVmHYTgY=) 6: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: JFZr5fqj2WXrU9XCj8pCx90LDWf5PYcEkCopcpVaJPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 23:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Apr 14 23:34:44 2025 GMT Not After : Apr 21 23:34:44 2025 GMT Subject: CN=67fd9b94-253d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:21:b2:f8:37:5d:75:73:69:ff:37:ea:b3: cb:63:d8:19:9f:a9:91:ae:1f:0d:60:9c:d3:71:24: 4a:3e:d7:28:52:48:80:28:45:db:d9:86:81:ed:17: 56:be:dd:c8:1b:e6:2f:7a:07:01:6b:5f:9d:dc:b3: ca:25:57:aa:d3:03:bf:ed:7a:a7:7a:f7:17:2b:cf: 5c:dd:2d:8f:4e:41:13:49:0a:15:61:5f:35:c4:cd: de:ee:c9:c0:13:e1:f4:73:64:5d:e7:da:13:23:11: ea:37:52:ab:91:99:ef:58:90:5d:fa:0f:44:87:ed: b4:e4:15:3b:c4:f2:40:2a:c4:e8:a0:39:3c:06:16: cb:33:80:2d:45:e8:23:6d:c0:2a:60:db:92:18:cc: 2a:86:8a:fe:36:65:4e:42:6f:46:86:dc:68:8b:3c: 17:ab:d0:4b:f2:65:61:c3:a5:b4:c2:29:33:be:4a: 74:d9:05:d1:d1:dd:8e:5b:a8:87:b0:b2:62:df:fa: 55:62:fc:d0:54:f6:bd:f0:80:18:2c:ed:46:98:17: c1:3e:45:81:e5:43:c0:1a:de:40:ea:96:0c:ef:10: 86:4f:12:a7:41:9e:96:16:f1:55:9c:50:51:d3:08: dd:de:e6:b0:11:26:eb:17:a7:f0:4b:b9:7d:42:3c: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:67:A4:E5:C5:65:7E:6D:CD:91:32:3C:51:72:40:A1:35:07:71:AD X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:56:2c:c1:ca:6c:cb:2b:93:1e:a4:9a:f9:54:9d:9c:4c:9e: 56:b7:8e:07:33:c6:5e:c5:80:39:2d:13:41:f4:d5:11:1e:ba: de:bc:0a:36:84:65:db:b1:ff:8e:a9:fe:07:ad:46:f3:b0:71: c2:70:c4:39:5e:24:21:f7:f3:37:4a:4e:1e:86:cd:83:02:86: 07:a1:fb:4d:04:68:52:d0:0c:89:e3:ec:24:d8:8c:df:4e:3a: 98:5c:64:05:09:03:bf:2c:0e:05:35:03:26:28:a0:09:31:87: e0:b7:06:55:b7:8b:db:da:70:a7:20:29:b2:2d:fd:3d:c1:cc: 77:6b:b3:b6:eb:a5:4f:4f:75:97:73:f4:19:8e:21:94:60:ed: 90:be:ed:f2:17:2b:cf:25:30:1b:3c:93:77:ee:ed:27:40:c7: d1:8c:52:b1:d6:03:8a:ee:d3:9f:b3:97:39:01:72:6e:21:ca: 3a:5a:ce:8b:18:7d:c0:71:87:1f:b5:69:9b:42:1b:ae:3c:32: 9e:63:29:e9:e6:77:ee:a7:38:94:cb:7e:a9:44:53:5a:be:a2: b5:9a:46:7d:b8:3c:c2:f0:7e:a4:8a:d1:3c:b3:cc:e2:21:85: 7f:58:9b:01:21:9b:a3:38:a0:a2:65:6c:94:af:ac:47:07:f7: c0:d9:72:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjUwNDE0MjMzNDQ0WhcNMjUwNDIxMjMzNDQ0WjAYMRYwFAYD VQQDEw02N2ZkOWI5NC0yNTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuIhsvg3XXVzaf836rPLY9gZn6mRrh8NYJzTcSRKPtcoUkiAKEXb2YaB7RdW vt3IG+YvegcBa1+d3LPKJVeq0wO/7XqnevcXK89c3S2PTkETSQoVYV81xM3e7snA E+H0c2Rd59oTIxHqN1KrkZnvWJBd+g9Eh+205BU7xPJAKsTooDk8BhbLM4AtRegj bcAqYNuSGMwqhor+NmVOQm9GhtxoizwXq9BL8mVhw6W0wikzvkp02QXR0d2OW6iH sLJi3/pVYvzQVPa98IAYLO1GmBfBPkWB5UPAGt5A6pYM7xCGTxKnQZ6WFvFVnFBR 0wjd3uawESbrF6fwS7l9QjxtRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpnpOXF ZX5tzZEyPFFyQKE1B3GtMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjVizBymzLK5MepJr5VJ2cTJ5Wt44HM8ZexYA5LRNB9NURHrrevAo2 hGXbsf+Oqf4HrUbzsHHCcMQ5XiQh9/M3Sk4ehs2DAoYHoftNBGhS0AyJ4+wk2Izf TjqYXGQFCQO/LA4FNQMmKKAJMYfgtwZVt4vb2nCnICmyLf09wcx3a7O266VPT3WX c/QZjiGUYO2Qvu3yFyvPJTAbPJN37u0nQMfRjFKx1gOK7tOfs5c5AXJuIco6Ws6L GH3AcYcftWmbQhuuPDKeYynp5nfupziUy36pRFNavqK1mkZ9uDzC8H6kitE8s8zi IYV/WJsBIZujOKCiZWyUr6xHB/fA2XIs -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:35 2025 by rpki-client