$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: fx9Ejb7RSkjInKBox1S3T0ngnJVHn0mLW1aqu4dL5Gg= Subject key identifier: 8F:7B:79:92:39:B6:65:05:22:10:B8:6C:82:A9:AB:22:E4:9E:99:AE Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 119C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 1182 Signing time: Tue 08 Apr 2025 17:15:43 +0000 Manifest this update: Tue 08 Apr 2025 17:15:43 +0000 Manifest next update: Tue 15 Apr 2025 17:15:43 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: 9sPsusaF0PD7YaP/GaM71HGCux+ZrLyOwTKuBEU0+DU=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 17:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4508 (0x119c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336 Validity Not Before: Apr 8 17:15:43 2025 GMT Not After : Apr 15 17:15:43 2025 GMT Subject: CN=67f559bf-f18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b1:00:6b:c2:5c:e0:fe:46:c3:25:b9:b1:70: 2f:84:a3:95:ef:57:4d:f7:22:94:4e:d2:db:3d:cd: 5e:00:3e:5d:ec:e8:f5:64:e4:ff:e0:9c:dd:b5:5a: d0:cb:f5:13:57:39:52:7b:50:9a:ca:5f:8a:43:fa: 68:7d:19:88:a7:f8:de:ed:7d:1d:9f:3e:15:fe:a7: 20:6d:33:19:f5:9d:7f:dd:4c:7b:33:d7:1a:18:a4: 41:7a:28:b9:6d:83:bb:e8:9f:2e:94:04:19:55:ed: 00:d7:2c:e0:32:15:05:02:1e:26:d3:d1:34:05:f9: 33:92:45:88:1f:f1:fe:ca:93:d5:92:eb:89:25:b5: 26:c5:6e:66:a7:9e:12:2e:f7:d7:bf:fb:1c:71:8a: ea:6f:b3:85:2e:b9:80:0d:3a:c4:a9:7e:cd:70:01: 2a:48:c7:1d:3b:7f:81:68:dc:c4:38:ea:83:75:93: bf:41:37:76:9a:e6:d3:7a:29:c3:13:77:7d:b5:9e: 53:01:5d:e9:d0:43:5c:e9:1a:3c:b0:6e:64:c2:64: bb:2d:28:d8:8e:a3:cf:f9:32:95:ec:fd:e3:64:12: 7b:92:ba:9c:5d:99:cc:c2:d6:ff:70:d4:cb:8d:11: ff:6c:f5:08:bd:d9:32:a3:5d:24:4a:20:d9:07:0e: 85:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7B:79:92:39:B6:65:05:22:10:B8:6C:82:A9:AB:22:E4:9E:99:AE X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:06:f4:6f:01:ed:78:10:f6:96:b7:36:18:83:7f:9d:6b:63: 2f:81:e3:e3:23:85:62:ab:c3:5a:c4:3f:d2:a0:f9:d3:78:55: 60:34:8d:e1:a9:26:41:f6:fb:a1:06:7a:d1:3c:1b:00:04:9c: f5:db:67:79:50:78:d4:26:70:99:46:db:3d:49:28:5b:a6:c2: 15:6e:4a:be:b1:38:22:0b:91:59:2d:ff:91:bd:fb:a0:19:fb: df:8f:52:d4:ae:ad:82:2b:d5:a3:fd:60:de:9e:77:6c:af:87: 5e:26:97:8b:17:4f:5a:c6:1d:5f:5d:94:2a:70:d8:aa:13:c1: 8e:99:e4:b2:92:ff:67:96:18:f7:1a:bb:82:38:f2:14:4f:f6: f3:62:38:7f:66:f3:51:ae:3d:00:f5:2a:46:e8:dc:04:55:55: 55:fb:27:f2:ae:ee:57:16:b9:af:e2:0b:73:86:43:1e:10:f6: 15:1e:1e:32:a9:53:cd:83:7d:a0:9b:42:a9:c9:46:f0:3e:6d: d0:1b:7c:9a:7e:68:80:c2:07:63:d6:79:84:6a:04:11:af:d7: f4:02:3c:5a:1a:a9:d4:3d:42:5c:5e:33:7d:75:9e:99:21:0a: e1:f9:1e:14:d8:bb:a2:21:d6:95:cd:5c:d9:79:9b:d2:d0:d7: 81:8a:67:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUwNDA4MTcxNTQzWhcNMjUwNDE1MTcxNTQzWjAYMRYwFAYD VQQDEw02N2Y1NTliZi1mMThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLEAa8Jc4P5GwyW5sXAvhKOV71dN9yKUTtLbPc1eAD5d7Oj1ZOT/4JzdtVrQ y/UTVzlSe1Cayl+KQ/pofRmIp/je7X0dnz4V/qcgbTMZ9Z1/3Ux7M9caGKRBeii5 bYO76J8ulAQZVe0A1yzgMhUFAh4m09E0BfkzkkWIH/H+ypPVkuuJJbUmxW5mp54S LvfXv/sccYrqb7OFLrmADTrEqX7NcAEqSMcdO3+BaNzEOOqDdZO/QTd2mubTeinD E3d9tZ5TAV3p0ENc6Ro8sG5kwmS7LSjYjqPP+TKV7P3jZBJ7krqcXZnMwtb/cNTL jRH/bPUIvdkyo10kSiDZBw6F3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI97eZI5 tmUFIhC4bIKpqyLknpmuMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1BvRvAe14EPaWtzYYg3+da2MvgePjI4Viq8NaxD/SoPnTeFVgNI3h qSZB9vuhBnrRPBsABJz122d5UHjUJnCZRts9SShbpsIVbkq+sTgiC5FZLf+Rvfug Gfvfj1LUrq2CK9Wj/WDenndsr4deJpeLF09axh1fXZQqcNiqE8GOmeSykv9nlhj3 GruCOPIUT/bzYjh/ZvNRrj0A9SpG6NwEVVVV+yfyru5XFrmv4gtzhkMeEPYVHh4y qVPNg32gm0KpyUbwPm3QG3yafmiAwgdj1nmEagQRr9f0AjxaGqnUPUJcXjN9dZ6Z IQrh+R4U2LuiIdaVzVzZeZvS0NeBimc8 -----END CERTIFICATE-----Generated at Thu Apr 10 17:03:34 2025 by rpki-client