$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft File: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json) Hash identifier: BEyRhKLQxxoDpnZKxRcglbn/2QcI5M4yhLgKOjIBNvA= Subject key identifier: C6:91:CD:C3:0A:F2:70:20:49:5C:80:50:F7:BD:98:4C:35:92:D5:8E Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft Manifest number: 018C Signing time: Sat 05 Apr 2025 03:00:49 +0000 Manifest this update: Sat 05 Apr 2025 03:00:49 +0000 Manifest next update: Sat 12 Apr 2025 03:00:49 +0000 Files and hashes: 1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: h8tQ4E1Eh/uxVesifUVtlKTf2jMRX2ZRBEkaslR47og=) 2: A24D0F54140C11EFBC640B71C4F9AE02.roa (hash: iTyxeo6fdLY6zYqk38GBrAnxGbLRbpbsfA4HbHTb8W0=) 3: 545EDE9C140911EF8520A25BC4F9AE02.roa (hash: f/RigGqDQyE5cV9YFdD69wWLUqqtBXkgZ1bqVEllexY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA40 Validity Not Before: Apr 5 03:00:49 2025 GMT Not After : Apr 12 03:00:49 2025 GMT Subject: CN=67f09ce1-7e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:50:32:26:d9:0a:5b:00:ec:14:52:18:f3: 89:12:2a:94:e7:6f:aa:78:16:99:7a:f1:eb:2d:ab: 7c:a9:09:3c:0a:0e:23:1b:a1:3f:b1:d0:a0:5a:7f: 37:1e:65:c6:9e:7d:75:33:56:15:8a:a8:d4:d9:de: a3:d6:2e:18:b4:bb:f3:0a:01:dd:3f:c5:52:24:b1: 7c:13:15:15:36:20:c8:00:f7:86:62:c8:a9:d9:81: 90:5a:11:a4:70:7b:af:7e:0d:c2:29:a3:e1:22:4b: ff:02:d8:0e:71:59:fc:65:a7:a4:a6:78:36:57:85: d6:a1:a4:a2:90:05:d1:8b:25:f3:06:2f:55:4a:97: 69:1f:91:04:b1:74:da:4a:9c:cc:c3:7e:66:21:d2: c9:b8:91:32:8f:9d:07:a7:95:09:3f:f3:02:33:9b: 5d:43:fa:ad:ae:9d:3a:14:d6:d1:23:51:a6:19:53: ea:48:c8:5a:80:4c:e6:ea:42:b9:19:5b:b9:89:51: 16:3e:b8:77:6f:eb:3f:ad:45:2d:96:d1:5c:47:fb: d4:9a:79:88:a3:e5:95:c1:4d:8d:86:13:68:c9:2d: 98:59:7c:19:81:3c:42:4a:50:a8:55:d4:c1:44:68: 10:29:9a:50:ae:4a:58:90:13:d4:cc:5e:ee:a4:75: a6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:91:CD:C3:0A:F2:70:20:49:5C:80:50:F7:BD:98:4C:35:92:D5:8E X509v3 Authority Key Identifier: keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6e:22:cc:e0:67:9d:0c:51:38:b2:da:70:94:93:b9:09:12: 72:5e:a2:aa:dc:fe:e2:1e:07:fd:4e:37:27:b1:67:2b:1a:36: 57:8d:f2:ae:60:07:29:1a:73:b1:7b:c5:f1:70:a2:60:19:87: 59:10:31:e9:ba:e2:3f:a5:06:9f:ac:87:4b:5b:23:ed:85:fd: 1f:13:9d:9a:42:6e:75:6b:ad:63:83:60:e9:6c:65:d1:56:b0: 94:40:f6:48:88:50:f4:be:eb:69:e6:b1:22:73:a6:a9:1c:11: d0:82:a7:2c:0d:20:d0:01:79:4f:3c:ca:06:3a:21:53:1f:10: 5a:04:69:cf:f8:3c:6d:a6:3a:dd:f0:d9:9e:ac:10:b7:94:c8: c1:43:53:53:87:27:f6:53:92:31:82:c9:b6:78:62:f7:80:c0: 45:48:89:28:92:1f:85:12:a9:93:32:04:f3:33:0a:3a:d9:fe: be:c7:6b:de:24:78:81:e7:e2:13:a4:95:e6:88:80:0f:22:6f: 60:9d:97:15:50:74:93:90:fc:32:d9:b9:e2:5c:0b:95:d4:0d: 90:ae:87:23:2f:5d:54:c7:7a:e3:aa:b3:26:4f:24:2d:a9:3d: 9a:c2:1d:4f:50:98:97:71:b6:d6:4e:0d:d4:02:eb:6d:d0:db: 8e:3e:e8:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBNDAxMTAvBgNVBAUTKDM3QjYyQTc3MjUxQzUyQTA0QjMzQjgyRDJFRDAyMDRD OTI3QTQyOUEwHhcNMjUwNDA1MDMwMDQ5WhcNMjUwNDEyMDMwMDQ5WjAYMRYwFAYD VQQDEw02N2YwOWNlMS03ZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQlQMibZClsA7BRSGPOJEiqU52+qeBaZevHrLat8qQk8Cg4jG6E/sdCgWn83 HmXGnn11M1YViqjU2d6j1i4YtLvzCgHdP8VSJLF8ExUVNiDIAPeGYsip2YGQWhGk cHuvfg3CKaPhIkv/AtgOcVn8Zaekpng2V4XWoaSikAXRiyXzBi9VSpdpH5EEsXTa SpzMw35mIdLJuJEyj50Hp5UJP/MCM5tdQ/qtrp06FNbRI1GmGVPqSMhagEzm6kK5 GVu5iVEWPrh3b+s/rUUtltFcR/vUmnmIo+WVwU2NhhNoyS2YWXwZgTxCSlCoVdTB RGgQKZpQrkpYkBPUzF7upHWmkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaRzcMK 8nAgSVyAUPe9mEw1ktWOMB8GA1UdIwQYMBaAFDe2KnclHFKgSzO4LS7QIEySekKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREE0MC85NkYwRDcwQ0JC REExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1VxQkxNN2d0THRBZ1RKSjZR cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL043WXFkeVVjVXFCTE03Z3RMdEFnVEpKNlFwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REE0MC85NkYwRDcwQ0JCREExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1Vx QkxNN2d0THRBZ1RKSjZRcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBebiLM4GedDFE4stpwlJO5CRJyXqKq3P7iHgf9TjcnsWcrGjZXjfKu YAcpGnOxe8XxcKJgGYdZEDHpuuI/pQafrIdLWyPthf0fE52aQm51a61jg2DpbGXR VrCUQPZIiFD0vutp5rEic6apHBHQgqcsDSDQAXlPPMoGOiFTHxBaBGnP+Dxtpjrd 8NmerBC3lMjBQ1NThyf2U5Ixgsm2eGL3gMBFSIkokh+FEqmTMgTzMwo62f6+x2ve JHiB5+ITpJXmiIAPIm9gnZcVUHSTkPwy2bniXAuV1A2QrocjL11Ux3rjqrMmTyQt qT2awh1PUJiXcbbWTg3UAutt0NuOPuig -----END CERTIFICATE-----Generated at Sun Apr 6 05:22:02 2025 by rpki-client