$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: MDhB1LsN2hjs4woDoMyeHq66zH4Oy0HCGmfq7kAxKdM= Subject key identifier: E5:23:CF:B1:C1:74:BD:F0:7B:03:EF:39:07:70:DE:53:C2:BB:02:04 Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 0141 Signing time: Thu 03 Apr 2025 03:34:34 +0000 Manifest this update: Thu 03 Apr 2025 03:34:34 +0000 Manifest next update: Thu 10 Apr 2025 03:34:34 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: Ci8uuR1n9skijgbfdzihCC3n4siJpvrTZ3R9RMMSvoE=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 61dFCpFb3ek9f8W7MGjus+wVQMOYkxnO6WKnJYsH5TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3 Validity Not Before: Apr 3 03:34:34 2025 GMT Not After : Apr 10 03:34:34 2025 GMT Subject: CN=67ee01ca-c33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:33:a2:de:92:a2:ff:ef:cd:e3:89:50:9a:23: 5c:3f:9b:85:3f:97:1f:92:bc:18:af:03:48:7d:ec: 25:64:a3:85:55:ba:e4:38:49:bf:ae:1b:87:30:6a: 4e:49:8b:e8:2c:63:4b:88:3b:e8:0c:61:3c:c3:08: 4b:dd:aa:9a:70:21:3d:b1:ee:6c:2d:8d:31:69:ac: 27:be:e6:b4:f8:75:ef:bf:24:37:d2:de:cb:6d:6b: 8a:18:11:85:9b:fb:82:35:5a:0f:8a:eb:d4:22:fb: 17:f5:68:df:49:af:62:47:b7:29:13:bd:f1:54:9f: 11:12:a8:02:38:5a:b0:41:00:86:56:56:26:af:99: b4:7e:40:e1:2f:a8:a4:78:4a:2c:c3:aa:61:e8:a5: 4d:9d:20:d2:67:5c:65:fe:0e:84:09:b0:13:80:78: 42:b7:12:c3:aa:81:16:38:81:fb:74:73:42:9b:ea: 18:60:74:21:d8:59:1a:6a:35:12:e5:c9:e3:d0:97: 5a:0a:ba:85:f8:91:ba:cc:c8:d5:0a:f3:85:35:bf: d1:71:d4:51:b6:a6:f0:01:a4:f1:a1:b7:ee:59:6c: 8a:e7:78:90:ca:da:72:60:9f:84:8f:86:e8:ee:9f: 30:92:70:ec:f6:87:bc:dd:75:1c:ed:ac:cd:81:78: a4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:23:CF:B1:C1:74:BD:F0:7B:03:EF:39:07:70:DE:53:C2:BB:02:04 X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b7:33:a2:1a:73:bd:59:aa:f9:d0:30:7a:55:3c:4a:ec:12: 5b:89:ec:a7:32:bd:39:3c:32:f1:e4:9c:4c:94:58:85:ff:3a: 9d:55:34:01:55:98:3d:b5:c6:6e:80:8e:7d:5a:83:c5:39:b3: bb:a7:b2:2f:59:3e:72:af:05:ed:ac:04:34:71:e7:90:fd:42: 8f:2d:52:2a:b1:bf:e4:1c:36:12:54:6c:44:1b:35:47:7b:be: 08:25:94:0f:28:ff:2f:9b:1c:3b:9b:5d:96:1e:3d:09:95:d5: 2f:64:85:30:1e:86:35:41:cb:90:53:a2:c6:98:a8:09:21:4e: 8c:6a:3f:c6:84:dd:5d:ef:fe:66:d3:c9:5c:1c:c3:04:89:65: 8a:ee:6c:ca:87:d4:3c:84:cd:57:09:0c:01:42:19:58:71:db: 9f:f1:bf:6a:ae:d2:d3:2b:3a:40:d6:94:b7:e3:4a:5d:35:f6: 26:25:42:4f:61:5b:dd:50:d8:6e:5b:d5:1b:98:9e:a9:22:ce: 65:4b:4b:6d:95:c3:90:3e:19:c1:13:f1:40:3d:35:49:53:ec: 71:cc:1a:6f:ec:32:92:15:db:17:3d:2b:58:8d:03:46:90:f9: 20:36:93:8b:05:45:18:f2:12:8c:d7:46:c0:dc:1b:19:d8:51: e2:f2:9e:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUwNDAzMDMzNDM0WhcNMjUwNDEwMDMzNDM0WjAYMRYwFAYD VQQDEw02N2VlMDFjYS1jMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjOi3pKi/+/N44lQmiNcP5uFP5cfkrwYrwNIfewlZKOFVbrkOEm/rhuHMGpO SYvoLGNLiDvoDGE8wwhL3aqacCE9se5sLY0xaawnvua0+HXvvyQ30t7LbWuKGBGF m/uCNVoPiuvUIvsX9WjfSa9iR7cpE73xVJ8REqgCOFqwQQCGVlYmr5m0fkDhL6ik eEosw6ph6KVNnSDSZ1xl/g6ECbATgHhCtxLDqoEWOIH7dHNCm+oYYHQh2FkaajUS 5cnj0JdaCrqF+JG6zMjVCvOFNb/RcdRRtqbwAaTxobfuWWyK53iQytpyYJ+Ej4bo 7p8wknDs9oe83XUc7azNgXik4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUjz7HB dL3wewPvOQdw3lPCuwIEMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHtzOiGnO9War50DB6VTxK7BJbieynMr05PDLx5JxMlFiF/zqdVTQB VZg9tcZugI59WoPFObO7p7IvWT5yrwXtrAQ0ceeQ/UKPLVIqsb/kHDYSVGxEGzVH e74IJZQPKP8vmxw7m12WHj0JldUvZIUwHoY1QcuQU6LGmKgJIU6Maj/GhN1d7/5m 08lcHMMEiWWK7mzKh9Q8hM1XCQwBQhlYcduf8b9qrtLTKzpA1pS340pdNfYmJUJP YVvdUNhuW9UbmJ6pIs5lS0ttlcOQPhnBE/FAPTVJU+xxzBpv7DKSFdsXPStYjQNG kPkgNpOLBUUY8hKM10bA3BsZ2FHi8p47 -----END CERTIFICATE-----Generated at Fri Apr 4 21:52:09 2025 by rpki-client