$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: NYz6izWvYeNbSYGkVGPpqnO++C0KF/kVD4FjPcLNnvI= Subject key identifier: 6A:C4:63:B0:F5:15:73:97:1A:A4:78:6B:29:00:EF:91:A8:12:3C:43 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: C9 Signing time: Fri 11 Apr 2025 04:57:59 +0000 Manifest this update: Fri 11 Apr 2025 04:57:58 +0000 Manifest next update: Fri 18 Apr 2025 04:57:58 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: wcYftElt/iOisMxpjVYaS72CINom144Nvv6zaTq8Xkk=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: XRFVx29hjFc5pKNr7AkvLob3HQjLTaD9Ns3C1RRvN4w=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: elMINW9VmQY5nycCbQ/QKtRjE+I0nxMVlzRRTvQng4k=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: E3gtntzxmL6luEWEYnHzIxmyJjY7WSBf3VBE5/D496g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Apr 11 04:57:58 2025 GMT Not After : Apr 18 04:57:58 2025 GMT Subject: CN=67f8a157-2326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:74:36:8f:05:7f:5d:20:7b:5f:9c:d6:bd: 23:d2:a5:3c:b7:4e:f9:75:3e:9b:6c:ed:1f:7d:e6: 53:80:41:8a:c2:1e:52:2a:87:79:b5:cb:31:8d:ef: d6:af:e6:ac:a9:ae:a4:cf:35:15:93:f6:9e:d3:dc: eb:98:12:19:46:37:1c:4f:27:62:17:8d:cc:79:ae: 93:84:13:2e:af:b5:6c:e3:8f:c2:a6:93:cf:74:98: c1:4f:78:e3:5b:9d:c1:e2:24:9b:ad:9e:28:f8:aa: 21:7b:2e:f2:f2:40:b3:30:f9:49:8f:54:8e:4e:ed: 54:b3:88:f9:09:9f:e6:3b:ca:cf:19:9d:6c:ec:90: 7c:8a:ae:38:b1:79:81:5d:ec:35:54:ce:ea:68:90: 9e:23:94:29:ce:6e:ec:00:0e:33:05:61:a4:26:c0: a0:4e:56:87:42:16:60:48:b0:61:e0:f3:d7:40:3a: e7:a7:dd:b6:5e:b0:33:97:e9:ff:98:a9:dd:1e:77: cd:5c:01:6f:56:92:1f:98:a3:d9:fe:b8:c4:d7:88: de:5a:1e:d4:2d:3c:fc:67:1f:4d:00:5b:52:a2:06: 6d:b8:08:ac:d7:73:bb:8a:9c:6a:38:67:3b:7a:05: 2c:38:ef:9e:f4:26:8b:9a:d4:1d:df:42:b1:e9:30: d0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C4:63:B0:F5:15:73:97:1A:A4:78:6B:29:00:EF:91:A8:12:3C:43 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:53:51:0c:45:bf:a8:94:c3:5e:b8:e5:53:e0:7e:05:5b:db: 4c:ac:8f:10:86:6a:4e:b9:4d:54:58:45:ec:89:d8:d5:70:ef: c2:ed:b8:7a:51:2a:0c:a4:51:f0:39:cf:d6:d8:27:29:e1:a9: 98:dd:76:33:65:6a:e0:3f:e2:fd:89:5d:5d:6f:45:f8:e6:ee: bd:c5:17:ec:14:6d:00:8c:04:59:a9:a3:5c:28:1d:9f:52:4a: ef:e3:50:7b:06:62:b2:4b:4e:b3:e3:e4:67:16:55:ab:1a:47: 17:c2:4f:ba:f4:06:ec:f5:07:b3:65:af:5d:77:da:f8:aa:58: e9:c1:f9:17:c8:f6:0a:b4:6e:02:00:93:e5:3c:4a:45:a5:fe: 44:d3:81:ab:8a:06:7a:a0:c5:e3:70:f3:5f:81:39:06:99:34: c8:15:60:a9:44:51:31:80:ca:61:0b:b3:56:75:1e:6e:34:58: 6c:b1:1c:84:4f:39:89:be:cb:bb:a5:e7:b1:04:e1:2e:d8:a1: c8:5b:a0:be:bc:03:61:83:d1:87:44:d2:6a:a5:e3:89:17:36: 05:6e:84:65:a6:12:1a:05:3e:39:a9:6e:b9:fd:c6:3b:a5:2b: 1c:ad:03:1e:3d:ff:af:ce:c0:88:26:c9:3c:4e:c9:fd:a2:01: a4:75:d4:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjUwNDExMDQ1NzU4WhcNMjUwNDE4MDQ1NzU4WjAYMRYwFAYD VQQDEw02N2Y4YTE1Ny0yMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbl0No8Ff10ge1+c1r0j0qU8t075dT6bbO0ffeZTgEGKwh5SKod5tcsxje/W r+asqa6kzzUVk/ae09zrmBIZRjccTydiF43Mea6ThBMur7Vs44/CppPPdJjBT3jj W53B4iSbrZ4o+Kohey7y8kCzMPlJj1SOTu1Us4j5CZ/mO8rPGZ1s7JB8iq44sXmB Xew1VM7qaJCeI5Qpzm7sAA4zBWGkJsCgTlaHQhZgSLBh4PPXQDrnp922XrAzl+n/ mKndHnfNXAFvVpIfmKPZ/rjE14jeWh7ULTz8Zx9NAFtSogZtuAis13O7ipxqOGc7 egUsOO+e9CaLmtQd30Kx6TDQ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrEY7D1 FXOXGqR4aykA75GoEjxDMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDU1EMRb+olMNeuOVT4H4FW9tMrI8QhmpOuU1UWEXsidjVcO/C7bh6 USoMpFHwOc/W2Ccp4amY3XYzZWrgP+L9iV1db0X45u69xRfsFG0AjARZqaNcKB2f Ukrv41B7BmKyS06z4+RnFlWrGkcXwk+69Abs9QezZa9dd9r4qljpwfkXyPYKtG4C AJPlPEpFpf5E04GrigZ6oMXjcPNfgTkGmTTIFWCpRFExgMphC7NWdR5uNFhssRyE TzmJvsu7peexBOEu2KHIW6C+vANhg9GHRNJqpeOJFzYFboRlphIaBT45qW65/cY7 pSscrQMePf+vzsCIJsk8Tsn9ogGkddSR -----END CERTIFICATE-----Generated at Sat Apr 12 17:36:07 2025 by rpki-client