$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft File: 4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json) Hash identifier: pCBznsTUE3sGIZgF9HCiyBUYm4KO2ddqN6DezovIvI8= Subject key identifier: 0C:F2:48:3B:4B:B3:43:BB:F7:43:65:D3:CF:48:CC:0E:B3:03:D7:77 Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE Certificate issuer: /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft Manifest number: 02A2 Signing time: Sat 29 Mar 2025 01:47:12 +0000 Manifest this update: Sat 29 Mar 2025 01:47:12 +0000 Manifest next update: Sat 05 Apr 2025 01:47:12 +0000 Files and hashes: 1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: CDH1a/N+9wnoIpBYwSGLqzYT3Nb8coLoo966ykW/VbE=) 2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: tfUuxZjAK76Q4T6Ge0ulThHXULE82KNLMMQeccievfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6AE0 Validity Not Before: Mar 29 01:47:12 2025 GMT Not After : Apr 5 01:47:12 2025 GMT Subject: CN=67e75120-843c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:4c:e7:c8:b7:0f:83:31:d7:52:b8:63:a0: a9:3a:44:41:35:04:98:27:41:40:77:5a:7f:d7:8c: cd:61:a4:13:c8:16:c0:1c:ce:6f:a0:b6:95:23:2e: d4:6e:a7:3a:32:f7:88:75:a2:ab:f6:c8:08:16:ea: 63:30:82:09:32:1a:35:51:a6:64:73:3b:a4:72:ea: 67:12:fd:50:d5:b1:53:9c:89:01:c4:c0:d6:6e:74: 32:8e:50:66:9b:4c:38:43:1d:d8:45:f0:d0:7e:51: fb:8d:08:e0:a4:65:ac:89:38:aa:ed:8a:f9:d1:e0: 56:9a:7e:76:8a:96:6e:89:9d:65:32:4a:13:35:7c: ee:36:5b:59:12:d4:dd:8a:9e:ed:ed:9e:28:35:9f: 3e:ed:13:8f:2d:9f:a9:c7:60:ee:06:f5:95:1a:25: 58:13:a0:00:66:7b:5b:b3:1e:73:c4:78:4f:55:d7: aa:82:0f:1e:07:12:cf:0f:f7:e2:2a:4e:0f:9a:ca: b2:a2:af:68:f3:00:94:60:0a:9e:f4:4f:c1:42:19: 54:e0:6b:ee:ad:98:df:de:74:d9:f2:c3:08:55:96: b9:9b:10:21:68:14:ba:1e:4c:c4:6c:16:eb:e7:93: ad:e5:23:b1:91:8b:35:56:d8:da:27:21:d8:47:c0: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F2:48:3B:4B:B3:43:BB:F7:43:65:D3:CF:48:CC:0E:B3:03:D7:77 X509v3 Authority Key Identifier: keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1e:de:8c:4e:0e:17:2b:57:e0:ce:ea:12:24:dd:ee:d6:18: b9:42:2d:b2:81:9a:4a:1b:b0:90:66:dd:5e:b7:19:9d:c5:2a: df:4f:d0:49:b5:0b:b1:31:25:4f:1c:70:61:a1:85:6f:8d:d8: c8:27:d0:24:80:ca:b8:c7:88:25:a5:32:9f:0a:8a:19:3e:1c: c8:48:bd:c1:89:7a:f2:c6:02:1d:f9:cf:9e:99:18:b1:b8:98: 73:1a:b7:8a:bd:52:50:8c:80:7c:bd:22:f0:e3:f5:84:6b:9f: 95:e1:f4:fc:17:38:9d:2a:35:d3:93:e3:05:da:5a:be:5f:23: 3b:0d:90:60:26:4b:fd:ab:b5:38:b2:49:9c:ed:0d:33:04:3c: 33:5a:4d:32:1e:80:38:8d:4d:88:08:6d:4b:8f:e8:90:a1:c7: 09:58:3b:19:12:55:7b:2b:55:6e:4b:46:22:ee:08:e6:ed:ab: a6:28:d6:1c:f8:1b:57:28:d2:04:85:35:ea:38:b0:ce:1e:8f: 55:a0:9b:23:4e:ed:20:34:8a:6c:a6:5f:e8:b3:ac:c4:e9:bf: 5b:ae:e5:c7:4e:3a:8d:de:f7:43:d8:08:6d:92:8f:f0:11:df: 4f:a3:58:46:8f:0a:4f:cf:75:cd:1c:c2:3f:bd:a4:cd:f0:23: dc:d6:be:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBRTAxMTAvBgNVBAUTKEUxNDg5RTA1NDU2RTkyQ0FENzE1ODQ3MjAwRTRBNzVE NkMzRTQzQ0UwHhcNMjUwMzI5MDE0NzEyWhcNMjUwNDA1MDE0NzEyWjAYMRYwFAYD VQQDEw02N2U3NTEyMC04NDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIVM58i3D4Mx11K4Y6CpOkRBNQSYJ0FAd1p/14zNYaQTyBbAHM5voLaVIy7U bqc6MveIdaKr9sgIFupjMIIJMho1UaZkczukcupnEv1Q1bFTnIkBxMDWbnQyjlBm m0w4Qx3YRfDQflH7jQjgpGWsiTiq7Yr50eBWmn52ipZuiZ1lMkoTNXzuNltZEtTd ip7t7Z4oNZ8+7ROPLZ+px2DuBvWVGiVYE6AAZntbsx5zxHhPVdeqgg8eBxLPD/fi Kk4Pmsqyoq9o8wCUYAqe9E/BQhlU4GvurZjf3nTZ8sMIVZa5mxAhaBS6HkzEbBbr 55Ot5SOxkYs1VtjaJyHYR8BhMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzySDtL s0O790Nl089IzA6zA9d3MB8GA1UdIwQYMBaAFOFIngVFbpLK1xWEcgDkp11sPkPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFFMC9GQTA0N0Y1NEYx RkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtzclhGWVJ5QU9TblhXdy1R ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVaWVCVVZ1a3NyWEZZUnlBT1NuWFd3LVE4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFFMC9GQTA0N0Y1NEYxRkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtz clhGWVJ5QU9TblhXdy1RODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOHt6MTg4XK1fgzuoSJN3u1hi5Qi2ygZpKG7CQZt1etxmdxSrfT9BJ tQuxMSVPHHBhoYVvjdjIJ9AkgMq4x4glpTKfCooZPhzISL3BiXryxgId+c+emRix uJhzGreKvVJQjIB8vSLw4/WEa5+V4fT8FzidKjXTk+MF2lq+XyM7DZBgJkv9q7U4 skmc7Q0zBDwzWk0yHoA4jU2ICG1Lj+iQoccJWDsZElV7K1VuS0Yi7gjm7aumKNYc +BtXKNIEhTXqOLDOHo9VoJsjTu0gNIpspl/os6zE6b9bruXHTjqN3vdD2Ahtko/w Ed9Po1hGjwpPz3XNHMI/vaTN8CPc1r48 -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:21 2025 by rpki-client