$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: 6acF/bSBYtghfR2j8lhdT6gl4DUymMTaox4KWKsMtr0= Subject key identifier: E8:5A:33:4A:38:49:F4:FD:62:10:83:77:A8:87:35:28:8F:6E:6D:1B Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: BF Signing time: Sat 29 Mar 2025 05:18:28 +0000 Manifest this update: Sat 29 Mar 2025 05:18:28 +0000 Manifest next update: Sat 05 Apr 2025 05:18:28 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: u4KePlkszRwv2JXIQUwMw4ft1TK8uSD0HyouqkJCAxM=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: PLkTX8vn1+WKFw3HdqAbAwP/NjRYQ3swUNgQj1k4DSE=) 3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: zPKvF8zxdu//FyrlKrsovUWXLD3CMiK5ihnLC2Ks3fU=) 4: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: T1g5Fuak08KUBroGfInKXOe5sVU0C30eA43zF3aV9tE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC Validity Not Before: Mar 29 05:18:28 2025 GMT Not After : Apr 5 05:18:28 2025 GMT Subject: CN=67e782a4-b9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:f6:f1:30:55:59:81:55:a0:69:f8:d5:5f: bf:f9:ac:d8:0f:04:30:6f:c1:a7:c0:35:78:aa:b5: 61:37:ec:ce:bc:18:91:ba:fc:73:56:7c:8d:ff:60: 6c:45:fc:fd:61:36:69:30:86:01:bf:48:67:88:5e: 4a:76:3a:7a:ab:06:2c:6e:93:87:a9:57:cb:46:e2: d9:17:84:29:9f:5a:f8:ae:0e:e7:0e:b9:76:6a:8a: d1:42:f3:78:af:5c:6d:0c:af:8b:c5:ee:fb:16:80: eb:ba:ee:fb:d4:4b:f4:37:37:6e:e9:55:56:4a:54: b2:8d:3a:9e:53:26:c3:8c:f7:08:5d:9d:9a:56:31: d5:16:53:b7:fc:4a:62:8e:54:8d:03:c9:6f:83:38: 51:e5:f0:9c:e6:4d:42:a3:68:eb:d9:b3:11:31:56: 6d:de:d3:6a:40:3a:b6:f7:c2:ed:3b:bf:30:1b:8a: 70:f7:8e:d9:03:a5:12:7b:ed:b4:17:49:4a:d7:57: 0c:00:51:2e:83:d7:3f:bf:7c:23:01:8e:cf:2a:10: 4c:08:f1:22:34:81:05:87:0b:b0:e2:b2:5d:3a:92: 63:df:59:a8:89:ef:32:38:44:b2:fe:e5:c7:34:55: 77:d0:62:a1:28:c5:47:fe:4e:53:ea:f8:7c:5b:d5: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5A:33:4A:38:49:F4:FD:62:10:83:77:A8:87:35:28:8F:6E:6D:1B X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:94:d6:8c:fb:89:5b:a6:9f:c9:f1:3b:33:d5:11:1f:bc:dc: 8b:88:64:b3:6c:17:1d:17:e1:93:65:5a:f6:cf:01:a9:54:5c: ea:10:19:31:b6:73:49:64:94:de:4f:ff:44:da:3f:6c:be:19: 03:5a:d2:35:75:4e:32:fb:ac:39:09:48:ad:ae:ee:cd:f5:77: ba:fe:4a:3c:b5:94:7a:eb:3c:c9:2a:be:2b:a0:cf:60:c7:da: f0:c4:c3:59:d5:06:ab:e0:1b:16:86:8c:02:71:3b:f8:66:93: cd:38:e0:8b:00:d6:55:e0:a2:2c:05:c2:d5:50:18:dd:53:91: 44:87:b7:6d:2f:0a:c2:79:88:a1:ad:ad:c3:c8:13:7e:22:43: f4:54:14:25:2f:4b:f5:f0:68:7c:7a:10:76:47:65:00:d2:bc: 4a:50:69:0b:7d:ed:a3:0b:76:97:3a:3b:87:84:15:76:56:29: c9:b9:f2:06:46:03:3f:49:60:b2:ca:b3:64:4c:92:20:63:af: b9:92:25:d7:88:33:8e:7b:2f:fa:ff:3b:f5:89:a6:b6:55:49: 84:b9:53:dc:f2:6c:92:c5:9f:42:26:1c:13:02:26:2f:9b:32: 34:bf:b4:4e:82:b7:d3:4a:13:ae:5f:2e:8e:db:ed:0b:0d:39: 87:a6:e6:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjUwMzI5MDUxODI4WhcNMjUwNDA1MDUxODI4WjAYMRYwFAYD VQQDEw02N2U3ODJhNC1iOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvd328TBVWYFVoGn41V+/+azYDwQwb8GnwDV4qrVhN+zOvBiRuvxzVnyN/2Bs Rfz9YTZpMIYBv0hniF5Kdjp6qwYsbpOHqVfLRuLZF4Qpn1r4rg7nDrl2aorRQvN4 r1xtDK+Lxe77FoDruu771Ev0Nzdu6VVWSlSyjTqeUybDjPcIXZ2aVjHVFlO3/Epi jlSNA8lvgzhR5fCc5k1Co2jr2bMRMVZt3tNqQDq298LtO78wG4pw947ZA6USe+20 F0lK11cMAFEug9c/v3wjAY7PKhBMCPEiNIEFhwuw4rJdOpJj31moie8yOESy/uXH NFV30GKhKMVH/k5T6vh8W9UDqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhaM0o4 SfT9YhCDd6iHNSiPbm0bMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAblNaM+4lbpp/J8Tsz1REfvNyLiGSzbBcdF+GTZVr2zwGpVFzqEBkx tnNJZJTeT/9E2j9svhkDWtI1dU4y+6w5CUitru7N9Xe6/ko8tZR66zzJKr4roM9g x9rwxMNZ1Qar4BsWhowCcTv4ZpPNOOCLANZV4KIsBcLVUBjdU5FEh7dtLwrCeYih ra3DyBN+IkP0VBQlL0v18Gh8ehB2R2UA0rxKUGkLfe2jC3aXOjuHhBV2VinJufIG RgM/SWCyyrNkTJIgY6+5kiXXiDOOey/6/zv1iaa2VUmEuVPc8mySxZ9CJhwTAiYv mzI0v7ROgrfTShOuXy6O2+0LDTmHpub1 -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:05 2025 by rpki-client