$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json) Hash identifier: 2ukDeLethAv+YnHHYDZMVyEog2jffqWtApH09uoUN9I= Subject key identifier: 2D:41:AF:58:3D:36:15:FF:5F:BA:9F:EE:C6:BE:E0:41:2D:95:26:B0 Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft Manifest number: 0A Signing time: Fri 11 Apr 2025 07:23:52 +0000 Manifest this update: Fri 11 Apr 2025 07:23:51 +0000 Manifest next update: Fri 18 Apr 2025 07:23:51 +0000 Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: HWol5imGuZGC4PFQDAksp3/ze2Y9pb+16lC2YJp0oDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 07:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Validity Not Before: Apr 11 07:23:51 2025 GMT Not After : Apr 18 07:23:51 2025 GMT Subject: CN=67f8c387-a9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:f9:6f:dd:d5:6a:f6:df:bf:af:50:bb:62: 7d:77:0a:27:43:8c:cc:a8:4a:2c:56:be:b5:1a:02: ed:46:5a:93:50:d0:bc:22:72:36:12:ef:7b:f9:2c: cd:b3:fa:52:85:3f:67:fc:54:11:7c:b6:d6:8a:df: b1:d5:3a:fc:82:d8:48:12:25:75:7e:08:e0:98:43: 45:7b:58:b2:b9:4c:de:79:70:43:8a:7e:80:dc:8f: a5:3d:68:3d:d3:4e:36:0a:34:d8:96:f7:ca:20:90: c9:e1:07:2b:58:4b:bc:e2:9e:31:5d:f4:44:53:0c: d7:f7:09:2a:ef:b5:63:6b:f4:1d:8d:2b:2a:85:93: 7e:da:a8:60:76:82:56:df:37:c8:e1:b9:2a:78:c5: 5c:84:54:38:af:e6:7f:ff:b4:5a:c3:96:7b:47:2b: bb:07:23:91:12:cb:cd:36:14:79:f6:69:b8:8f:71: da:9e:5f:c0:c0:aa:8a:a1:b0:d3:59:5b:59:e7:1c: 92:fb:f9:50:28:b1:37:57:4d:e2:e1:15:32:99:5f: bf:f0:a8:ed:14:c2:5d:30:19:74:b9:4b:d1:b4:d1: ce:b0:27:e3:98:e1:cc:a0:6c:cd:d3:07:00:1b:3b: 8e:05:d3:06:19:ef:b1:74:73:8e:9d:28:20:f4:e4: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:41:AF:58:3D:36:15:FF:5F:BA:9F:EE:C6:BE:E0:41:2D:95:26:B0 X509v3 Authority Key Identifier: keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:ef:dc:26:85:20:cc:d6:a1:d8:e2:84:09:c1:93:e0:c9:b6: 4e:77:61:5b:8f:4e:97:87:a2:09:a8:c6:56:a3:a7:4c:f5:df: 33:d6:d4:6c:d8:89:3b:af:9c:16:1a:7f:ff:73:58:23:37:e9: 19:ec:68:d3:a5:05:60:1b:d8:c1:91:ed:be:0d:9e:b3:24:df: 77:1d:96:6d:e6:be:20:7c:ec:ff:e1:de:c0:a0:da:d9:91:d2: 72:49:65:4d:f5:8f:b0:fd:8c:b0:53:59:3c:54:24:06:22:0a: 73:90:d8:42:ce:74:1f:72:e7:9a:46:c1:2e:d9:f9:dd:47:36: a0:93:8c:39:3a:d4:2a:10:77:e2:3c:41:ce:94:3d:6f:ac:68: 65:f9:02:71:3d:f8:02:68:09:d3:8c:1c:f1:88:61:84:8f:dc: 95:21:44:76:97:ee:40:36:aa:1b:09:d4:5b:1c:5a:a3:d2:c4: 23:66:37:4f:60:a4:cb:c1:36:b0:af:17:d0:b3:80:e4:80:1f: 12:7b:e1:3b:c4:b5:fb:88:88:c3:5e:24:1f:8d:a0:cd:54:b4: 87:9f:8d:83:0f:c7:a5:a6:d3:ed:7f:3e:d1:f3:e2:ef:ac:03: a3:f6:85:23:a6:22:86:1d:b6:f7:44:80:30:89:90:0e:fe:a7: cb:b6:21:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoQzdDREI0RUExODE2NUU1OTgyRDBBOTE5RkY0N0Y3MjY3 NkUwNTA3MzAeFw0yNTA0MTEwNzIzNTFaFw0yNTA0MTgwNzIzNTFaMBgxFjAUBgNV BAMTDTY3ZjhjMzg3LWE5YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD3vlv3dVq9t+/r1C7Yn13CidDjMyoSixWvrUaAu1GWpNQ0LwicjYS73v5LM2z +lKFP2f8VBF8ttaK37HVOvyC2EgSJXV+COCYQ0V7WLK5TN55cEOKfoDcj6U9aD3T TjYKNNiW98ogkMnhBytYS7zinjFd9ERTDNf3CSrvtWNr9B2NKyqFk37aqGB2glbf N8jhuSp4xVyEVDiv5n//tFrDlntHK7sHI5ESy802FHn2abiPcdqeX8DAqoqhsNNZ W1nnHJL7+VAosTdXTeLhFTKZX7/wqO0Uwl0wGXS5S9G00c6wJ+OY4cygbM3TBwAb O44F0wYZ77F0c46dKCD05H9NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULUGvWD02 Ff9fup/uxr7gQS2VJrAwHwYDVR0jBBgwFoAUx8206hgWXlmC0KkZ/0f3JnbgUHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzE3MjU0NkJDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDgyMDZoZ1dYbG1DMEtrWl8wZjNKbmJnVUhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzE3MjU0NkJDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxt QzBLa1pfMGYzSm5iZ1VITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHDv3CaFIMzWodjihAnBk+DJtk53YVuPTpeHogmoxlajp0z13zPW1GzY iTuvnBYaf/9zWCM36RnsaNOlBWAb2MGR7b4NnrMk33cdlm3mviB87P/h3sCg2tmR 0nJJZU31j7D9jLBTWTxUJAYiCnOQ2ELOdB9y55pGwS7Z+d1HNqCTjDk61CoQd+I8 Qc6UPW+saGX5AnE9+AJoCdOMHPGIYYSP3JUhRHaX7kA2qhsJ1FscWqPSxCNmN09g pMvBNrCvF9CzgOSAHxJ74TvEtfuIiMNeJB+NoM1UtIefjYMPx6Wm0+1/PtHz4u+s A6P2hSOmIoYdtvdEgDCJkA7+p8u2IT0= -----END CERTIFICATE-----Generated at Sat Apr 12 17:45:25 2025 by rpki-client