$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft File: _2p8LLPdLXe95os2uoNseVip1No.mft (raw, json) Hash identifier: sm/T3rF8xuVQ2XiiP6ou24a2gO66R2RE0+gfHIo1bTs= Subject key identifier: D6:A6:AC:EF:90:51:C6:94:49:7B:E4:25:78:80:06:D9:75:23:C9:B0 Authority key identifier: FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA Certificate issuer: /CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft Manifest number: 018C Signing time: Sat 05 Apr 2025 02:59:02 +0000 Manifest this update: Sat 05 Apr 2025 02:59:01 +0000 Manifest next update: Sat 12 Apr 2025 02:59:01 +0000 Files and hashes: 1: _2p8LLPdLXe95os2uoNseVip1No.crl (hash: 2X0U+cIf+ADFKQyOXLIj5PhpVWldMRbuTTH5lyl2aec=) 2: 6903848C20A911EEBEC77485C4F9AE02.roa (hash: oeA5QwLSLGhzBCJJCLR/tH3NWML3OhbjDPXjELI4Bqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7506 Validity Not Before: Apr 5 02:59:01 2025 GMT Not After : Apr 12 02:59:01 2025 GMT Subject: CN=67f09c76-429f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:ab:de:4e:a3:32:d2:7a:9a:80:a6:07:18: ab:62:ef:38:5a:f1:cd:14:cc:b2:bf:5d:d6:f3:af: 13:b0:bf:d9:0f:68:46:a5:71:bf:a6:09:da:f2:9a: 28:e5:f2:2a:68:48:b0:e6:25:51:97:c7:fa:29:0f: 24:b1:d1:2e:ef:e6:49:2e:06:54:36:e3:58:50:9f: fc:a9:b5:73:c1:85:ba:61:4e:af:fc:5d:ba:1c:14: 28:9e:41:ac:e4:fd:c9:24:fb:d1:2f:5f:ac:7f:13: eb:88:79:d8:60:d9:f0:a2:dd:78:aa:8e:22:fb:8c: 76:69:0a:a1:f0:54:3a:e0:86:4c:2b:19:c6:38:a6: 93:a6:ba:0c:b4:c8:54:fd:68:f0:63:ab:d1:87:d1: 94:15:70:72:e5:e9:f3:93:cc:4b:71:04:37:64:cb: b1:4d:47:5c:53:fb:ff:a2:f6:ac:fd:f7:68:51:33: 78:fc:65:fd:a3:4c:97:9a:85:99:ec:ec:98:05:db: 13:bb:d9:b5:e9:b5:ee:07:3a:5c:de:84:f0:c7:04: 98:35:63:a3:88:ae:60:76:bb:2a:21:63:57:63:5a: cf:26:0c:8e:29:6b:20:58:76:b8:1b:b3:cc:90:7a: f8:93:64:4b:ff:25:d3:89:4e:1e:82:8e:e6:84:5c: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A6:AC:EF:90:51:C6:94:49:7B:E4:25:78:80:06:D9:75:23:C9:B0 X509v3 Authority Key Identifier: keyid:FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:f5:e4:ee:11:3a:a2:83:e3:84:80:1b:3b:af:81:36:64:9f: 52:49:32:6d:24:bd:02:dd:e7:cf:f3:33:8a:40:75:90:ae:94: 6c:53:18:53:27:f4:4e:a8:b6:99:68:28:32:46:be:ab:7a:2c: b8:38:79:70:8a:d2:ae:e9:cd:82:1a:6e:a8:81:3b:fa:15:8c: 52:b2:2b:40:1f:ec:5b:4a:ba:3f:80:78:71:99:c1:f4:f6:3b: 33:2b:96:06:0f:9a:f0:cc:3a:8b:ff:72:22:a3:c1:2e:55:c2: ed:ee:25:b7:6e:a0:ec:bd:41:d7:52:98:02:be:bd:2f:44:2a: d6:9a:6f:de:db:8d:a5:cd:64:a7:fb:78:83:5d:27:3b:fc:24: 09:0e:5e:19:1c:31:b8:74:e3:54:89:b8:7c:2d:84:fa:4f:9a: 4c:c1:2f:4c:60:19:87:08:f6:c4:49:25:4a:11:56:4d:91:80: 00:26:0c:d1:3a:05:9e:b3:a8:eb:1b:be:da:03:54:dd:65:30: 98:1b:bb:03:9d:f3:f7:0f:b4:b1:57:f6:50:64:a2:43:ed:ff: fe:ba:2f:18:3a:1a:f7:a5:5f:8e:7a:86:9a:09:99:dd:f9:6e: f9:e5:5c:70:77:d6:6c:5b:34:20:31:cf:5d:ae:56:77:b2:5e: 40:56:18:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MDYxMTAvBgNVBAUTKEZGNkE3QzJDQjNERDJENzdCREU2OEIzNkJBODM2Qzc5 NThBOUQ0REEwHhcNMjUwNDA1MDI1OTAxWhcNMjUwNDEyMDI1OTAxWjAYMRYwFAYD VQQDEw02N2YwOWM3Ni00MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn+r3k6jMtJ6moCmBxirYu84WvHNFMyyv13W868TsL/ZD2hGpXG/pgna8poo 5fIqaEiw5iVRl8f6KQ8ksdEu7+ZJLgZUNuNYUJ/8qbVzwYW6YU6v/F26HBQonkGs 5P3JJPvRL1+sfxPriHnYYNnwot14qo4i+4x2aQqh8FQ64IZMKxnGOKaTproMtMhU /WjwY6vRh9GUFXBy5enzk8xLcQQ3ZMuxTUdcU/v/ovas/fdoUTN4/GX9o0yXmoWZ 7OyYBdsTu9m16bXuBzpc3oTwxwSYNWOjiK5gdrsqIWNXY1rPJgyOKWsgWHa4G7PM kHr4k2RL/yXTiU4ego7mhFyazwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNamrO+Q UcaUSXvkJXiABtl1I8mwMB8GA1UdIwQYMBaAFP9qfCyz3S13veaLNrqDbHlYqdTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUwNi85NTU0MjY2MkI2 ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExYZTk1b3MydW9Oc2VWaXAx Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18ycDhMTFBkTFhlOTVvczJ1b05zZVZpcDFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUwNi85NTU0MjY2MkI2ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExY ZTk1b3MydW9Oc2VWaXAxTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC69eTuETqig+OEgBs7r4E2ZJ9SSTJtJL0C3efP8zOKQHWQrpRsUxhT J/ROqLaZaCgyRr6reiy4OHlwitKu6c2CGm6ogTv6FYxSsitAH+xbSro/gHhxmcH0 9jszK5YGD5rwzDqL/3Iio8EuVcLt7iW3bqDsvUHXUpgCvr0vRCrWmm/e242lzWSn +3iDXSc7/CQJDl4ZHDG4dONUibh8LYT6T5pMwS9MYBmHCPbESSVKEVZNkYAAJgzR OgWes6jrG77aA1TdZTCYG7sDnfP3D7SxV/ZQZKJD7f/+ui8YOhr3pV+OeoaaCZnd +W755Vxwd9ZsWzQgMc9drlZ3sl5AVhh3 -----END CERTIFICATE-----Generated at Sat Apr 5 11:39:15 2025 by rpki-client