$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft File: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft (raw, json) Hash identifier: /g5mmPFfLGh8RiaGGqpKtYWYl4rTTUlirAKwKPXFojo= Subject key identifier: 9B:5D:F8:04:3E:8D:05:1A:6B:96:82:64:DD:A6:EF:3B:90:72:C5:1B Authority key identifier: 08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F Certificate issuer: /CN=A91FF7FC/serialNumber=08D9F483E4542158F62CBE705869EBED77FB927F Certificate serial: 04A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft Manifest number: 049C Signing time: Sat 29 Mar 2025 00:12:17 +0000 Manifest this update: Sat 29 Mar 2025 00:12:16 +0000 Manifest next update: Sat 05 Apr 2025 00:12:16 +0000 Files and hashes: 1: CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl (hash: R+a+4x23v56HmIavLtBM1fMlAViG3Slu4hDb3wt4TY4=) 2: 5CA72CF82A6911EC94518740C4F9AE02.roa (hash: DNv6RERe4SqIzEBmNx3Q6xCWL7cpJvtrVCrMm/mBf0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF7FC Validity Not Before: Mar 29 00:12:16 2025 GMT Not After : Apr 5 00:12:16 2025 GMT Subject: CN=67e73ae1-e849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:3b:52:58:48:83:cb:3f:ee:69:52:c7:e1: 2f:d8:6b:81:1b:80:eb:cf:13:7c:91:ce:d0:9f:9d: 6a:37:53:65:4d:3d:3f:f2:e8:60:71:36:8b:46:8d: 17:68:ca:a5:cc:c0:f0:59:28:51:b7:d2:ba:f4:d6: fd:0d:58:a8:a5:0f:98:76:56:64:50:db:fb:07:e9: e8:12:60:e1:fe:f1:7d:04:58:53:10:95:47:c4:5d: dc:dc:c6:8c:d5:f5:a2:d1:a2:87:bd:54:48:18:b1: bb:9a:c3:a7:89:d6:95:d3:b0:1e:09:a0:ac:46:be: a6:e2:47:9d:c8:bc:18:6c:f1:50:4f:6b:40:26:cf: f6:9c:b1:48:5f:bf:a1:e4:65:e6:bc:68:b1:fd:cf: a9:9a:bc:7b:a0:47:9d:45:77:e9:fc:68:72:ea:c8: 84:a0:35:19:67:c1:1a:2c:7e:19:8c:56:c9:fb:af: f2:d7:4f:aa:07:a3:28:d9:42:86:65:db:3f:e3:62: 8a:3a:f0:be:30:22:0e:79:56:96:7b:97:6c:f2:0e: 67:d1:60:1c:0c:dd:b2:e6:10:d7:01:10:06:9d:42: 77:c1:6b:3b:1f:4c:05:6f:9d:1b:6a:d2:a2:fe:c8: 39:a5:3f:11:50:7e:7e:99:3b:0b:f1:a9:eb:16:fb: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5D:F8:04:3E:8D:05:1A:6B:96:82:64:DD:A6:EF:3B:90:72:C5:1B X509v3 Authority Key Identifier: keyid:08:D9:F4:83:E4:54:21:58:F6:2C:BE:70:58:69:EB:ED:77:FB:92:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF7FC/4E23B39C2A6211ECA9A67C30C4F9AE02/CNn0g-RUIVj2LL5wWGnr7Xf7kn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:17:a3:7f:97:e4:a4:6c:30:4f:c4:a4:eb:4e:49:cd:56:41: e8:f5:f3:17:32:4c:ff:d0:15:b8:c4:60:80:20:b3:32:77:7c: f6:16:32:45:8f:7f:1d:2c:0a:4a:d8:e4:c0:f1:5a:9f:05:fb: d7:1c:36:db:4e:66:90:ec:2f:98:d5:d0:4b:39:15:6a:87:f1: 7f:db:ff:3f:ab:1f:d0:68:36:26:3b:f0:df:71:e3:dc:07:5a: a3:55:3b:e4:5a:78:93:2f:81:63:ac:a0:bc:66:7d:da:a1:a8: 8f:fa:77:b4:c2:6f:27:96:45:e2:60:eb:9b:25:b3:58:55:4f: fb:8e:3d:85:0b:20:87:82:bc:54:71:2d:93:0e:09:c2:4e:59: 4e:60:80:99:7a:b9:1f:1f:72:b0:42:19:27:08:7b:bf:7f:60: f0:52:18:40:19:06:11:a1:fc:e4:26:73:a0:36:fd:ad:67:87: 34:a8:9a:7a:b2:6f:59:37:d9:32:82:2e:07:62:b9:26:25:05: bc:7c:8a:8a:ce:d7:d7:cd:7d:c5:23:cb:55:9e:38:c2:20:5a: 50:d3:8e:cf:55:7a:87:c2:3c:b9:56:58:4b:7d:28:d2:6e:9d: fa:b5:10:68:6b:55:31:1c:55:c6:c1:0a:a3:44:65:04:12:ad: 71:7a:55:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3RkMxMTAvBgNVBAUTKDA4RDlGNDgzRTQ1NDIxNThGNjJDQkU3MDU4NjlFQkVE NzdGQjkyN0YwHhcNMjUwMzI5MDAxMjE2WhcNMjUwNDA1MDAxMjE2WjAYMRYwFAYD VQQDEw02N2U3M2FlMS1lODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+A7UlhIg8s/7mlSx+Ev2GuBG4DrzxN8kc7Qn51qN1NlTT0/8uhgcTaLRo0X aMqlzMDwWShRt9K69Nb9DViopQ+YdlZkUNv7B+noEmDh/vF9BFhTEJVHxF3c3MaM 1fWi0aKHvVRIGLG7msOnidaV07AeCaCsRr6m4kedyLwYbPFQT2tAJs/2nLFIX7+h 5GXmvGix/c+pmrx7oEedRXfp/Ghy6siEoDUZZ8EaLH4ZjFbJ+6/y10+qB6Mo2UKG Zds/42KKOvC+MCIOeVaWe5ds8g5n0WAcDN2y5hDXARAGnUJ3wWs7H0wFb50batKi /sg5pT8RUH5+mTsL8anrFvsLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtd+AQ+ jQUaa5aCZN2m7zuQcsUbMB8GA1UdIwQYMBaAFAjZ9IPkVCFY9iy+cFhp6+13+5J/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjdGQy80RTIzQjM5QzJB NjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlWajJMTDV3V0ducjdYZjdr bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NObjBnLVJVSVZqMkxMNXdXR25yN1hmN2tuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjdGQy80RTIzQjM5QzJBNjIxMUVDQTlBNjdDMzBDNEY5QUUwMi9DTm4wZy1SVUlW ajJMTDV3V0ducjdYZjdrbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAF6N/l+SkbDBPxKTrTknNVkHo9fMXMkz/0BW4xGCAILMyd3z2FjJF j38dLApK2OTA8VqfBfvXHDbbTmaQ7C+Y1dBLORVqh/F/2/8/qx/QaDYmO/DfcePc B1qjVTvkWniTL4FjrKC8Zn3aoaiP+ne0wm8nlkXiYOubJbNYVU/7jj2FCyCHgrxU cS2TDgnCTllOYICZerkfH3KwQhknCHu/f2DwUhhAGQYRofzkJnOgNv2tZ4c0qJp6 sm9ZN9kygi4HYrkmJQW8fIqKztfXzX3FI8tVnjjCIFpQ047PVXqHwjy5VlhLfSjS bp36tRBoa1UxHFXGwQqjRGUEEq1xelWd -----END CERTIFICATE-----Generated at Fri Apr 4 18:27:58 2025 by rpki-client