$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: n9rJ/BS5bENs4G+Ye+qTAtEJSJdIBy3WUqktwyCEQfc= Subject key identifier: 1D:6F:6A:4F:98:31:26:A4:4C:93:C5:39:49:1D:C1:6F:78:8F:B7:89 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 3470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 346C Signing time: Fri 04 Apr 2025 15:06:02 +0000 Manifest this update: Fri 04 Apr 2025 15:06:02 +0000 Manifest next update: Fri 11 Apr 2025 15:06:02 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: C6+50uyTOU+uLieOtaTsTvwUCJhkNYCBHnJfgX9Soqw=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: bZ78zYHCnstuVWjSxrFde4CQb6MOUeIvruPUliQa2hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C Validity Not Before: Apr 4 15:06:02 2025 GMT Not After : Apr 11 15:06:02 2025 GMT Subject: CN=67eff55a-9c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:b3:d7:e7:99:27:b7:47:3a:ee:c0:8e:62: 20:3c:2a:0a:d3:1e:97:96:1f:40:3d:92:c6:a5:42: 53:76:e7:0c:9e:81:68:77:ce:ac:06:c0:22:d3:3d: 08:90:db:0b:5e:61:19:fb:b0:dd:ab:1c:a6:ac:53: b0:13:af:e4:28:7e:f5:0d:e7:7e:cd:66:58:a0:ec: 00:47:32:1b:a4:c8:20:24:33:62:29:47:c2:ab:64: 03:4b:c0:db:af:2e:83:e4:e1:45:1a:3a:42:f9:13: 25:13:2f:c5:e8:6d:6e:98:70:54:7e:8e:9e:13:63: ab:0f:79:a3:38:3d:d6:15:0c:b1:48:89:36:5d:9f: 15:ad:93:60:e4:b3:1c:6f:94:c3:17:10:15:85:df: be:3c:b9:bd:20:e3:b1:80:b0:9e:6f:6b:6a:92:d2: eb:f3:51:31:98:9e:60:cc:bc:7b:04:11:bb:a0:a0: 0b:f3:7a:ba:bf:0e:0e:1a:6e:78:ee:d2:2d:68:95: 3f:71:a2:41:d6:67:f1:31:04:4e:42:3d:0c:c2:cb: ad:1f:45:4d:a1:be:64:30:ed:99:10:19:5f:a6:55: aa:75:bd:7b:24:ef:1a:09:f9:ed:02:f7:af:7f:6a: 7e:99:e0:a2:9d:fa:ea:91:e3:0a:60:8d:2e:3f:a6: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6F:6A:4F:98:31:26:A4:4C:93:C5:39:49:1D:C1:6F:78:8F:B7:89 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d6:82:8d:05:da:19:2f:a0:27:cd:c4:18:c2:d0:59:da:aa: a2:94:67:39:d6:98:77:11:5f:0a:92:68:3a:a6:4c:38:97:39: b7:75:86:e6:fa:99:b9:65:97:19:95:bd:f0:73:22:a7:a8:f3: ea:62:c1:91:81:5a:eb:0f:ca:f0:e8:9e:47:e1:6e:88:83:0f: 39:e4:83:d9:37:a2:cd:3d:bc:73:d3:67:d0:cc:4b:0d:c4:73: eb:5b:b2:57:ac:46:4e:16:7a:dc:82:bc:cb:12:2d:ca:77:c1: 65:9c:ac:b2:ed:40:f4:13:b0:d6:7b:08:d3:d2:23:35:41:3c: 35:ae:3f:d2:59:0d:4a:31:f2:4b:fe:8c:47:5c:c8:2f:28:0c: a9:d8:fd:19:05:51:04:11:e0:b3:d0:a2:d9:eb:82:b0:58:a1: 9a:54:e2:88:9d:61:9e:b3:42:cf:5d:76:34:6b:62:d9:30:6b: 3e:09:06:21:4a:ce:c7:50:88:93:ff:2f:0a:2d:e1:f8:85:ac: 17:f9:b2:2e:e0:8a:78:f4:61:f4:a9:bc:c0:61:28:16:75:98: a5:1f:a2:08:07:cc:cc:6e:a1:0d:d6:fd:ca:60:e5:75:8a:d8: 51:2e:1b:16:cd:e3:ef:04:03:63:e5:a9:1c:9b:40:27:84:09: bc:fe:40:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjUwNDA0MTUwNjAyWhcNMjUwNDExMTUwNjAyWjAYMRYwFAYD VQQDEw02N2VmZjU1YS05Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK+z1+eZJ7dHOu7AjmIgPCoK0x6Xlh9APZLGpUJTducMnoFod86sBsAi0z0I kNsLXmEZ+7DdqxymrFOwE6/kKH71Ded+zWZYoOwARzIbpMggJDNiKUfCq2QDS8Db ry6D5OFFGjpC+RMlEy/F6G1umHBUfo6eE2OrD3mjOD3WFQyxSIk2XZ8VrZNg5LMc b5TDFxAVhd++PLm9IOOxgLCeb2tqktLr81ExmJ5gzLx7BBG7oKAL83q6vw4OGm54 7tItaJU/caJB1mfxMQROQj0MwsutH0VNob5kMO2ZEBlfplWqdb17JO8aCfntAvev f2p+meCinfrqkeMKYI0uP6Z+swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1vak+Y MSakTJPFOUkdwW94j7eJMB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp1oKNBdoZL6AnzcQYwtBZ2qqilGc51ph3EV8Kkmg6pkw4lzm3dYbm +pm5ZZcZlb3wcyKnqPPqYsGRgVrrD8rw6J5H4W6Igw855IPZN6LNPbxz02fQzEsN xHPrW7JXrEZOFnrcgrzLEi3Kd8FlnKyy7UD0E7DWewjT0iM1QTw1rj/SWQ1KMfJL /oxHXMgvKAyp2P0ZBVEEEeCz0KLZ64KwWKGaVOKInWGes0LPXXY0a2LZMGs+CQYh Ss7HUIiT/y8KLeH4hawX+bIu4Ip49GH0qbzAYSgWdZilH6IIB8zMbqEN1v3KYOV1 ithRLhsWzePvBANj5akcm0AnhAm8/kCS -----END CERTIFICATE-----Generated at Sun Apr 6 02:13:35 2025 by rpki-client