$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: uvQfv8a4n45+psWK1g2pUPLYLx6JTsu92HHkVe/7/+w= Subject key identifier: 7E:24:10:24:80:98:0B:DD:B6:DB:99:63:2D:E4:5C:AA:50:6E:D2:F5 Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 3540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 34E3 Signing time: Wed 12 Mar 2025 14:22:49 +0000 Manifest this update: Wed 12 Mar 2025 14:22:48 +0000 Manifest next update: Wed 19 Mar 2025 14:22:48 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: WKqhDaTeVeAQ7DzAaee+X8yDC72FAIsL+hujGwUizCc=) 2: 3931B4364E9D11EFB8701A32C4F9AE02.roa (hash: nVegQxWNWrb99F1Eu2ZQZA/CFkDXKnPbfJ2XCkUJqkM=) 3: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: 6ZDExvD8R6lfn1UNMFWFgjBfUXdJGstZiRI0vF7/Wus=) 4: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: IExbtiolQQ65jCv5u1UwJWeDcm4gG8UyargWa4/V1IY=) 5: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: Owe/AbEsMPyKxZYlgL12xosv4eIWMfqMjX4SIt/KeiA=) 6: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: 4SnN/Dveh2eNpWKukaIi5N9WfKblXmvZSjIrcjaW3wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 14:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13632 (0x3540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C Validity Not Before: Mar 12 14:22:48 2025 GMT Not After : Mar 19 14:22:48 2025 GMT Subject: CN=67d198b8-1b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:b5:37:e4:97:ee:04:24:0f:d5:2c:47:d6: 0c:e4:63:b9:51:e2:c3:d4:66:e7:98:7d:09:a8:2e: f9:74:df:b8:4a:a2:80:17:f8:4b:1f:2e:c3:c7:a1: 26:e2:87:f2:41:f0:d2:0c:45:29:07:13:d5:26:94: 2c:00:f9:8c:cc:ab:52:8a:4e:03:09:bc:b2:13:b6: a7:4a:70:80:ac:78:01:04:7e:91:63:61:eb:85:82: e4:49:5e:25:18:ce:8a:37:86:dc:d8:f3:f8:ad:55: 5f:18:79:80:16:fe:6c:81:98:41:3e:cd:47:55:65: 0d:54:41:d0:78:cb:dc:e1:2c:12:d1:cf:64:5c:7c: 22:c0:f9:d7:50:15:b3:37:9f:65:fc:7f:88:00:c0: 8f:8d:e1:74:a0:97:19:39:9f:22:28:0b:04:12:87: 71:02:3e:8b:96:93:6f:93:d8:1c:1b:d5:18:5a:72: c4:bf:69:6e:58:14:8a:87:92:dd:be:3d:ba:9d:61: 16:77:9b:14:5e:85:b1:84:54:fc:83:45:3a:75:e8: b6:5e:20:68:a7:54:0a:37:74:70:8c:33:1d:9a:aa: ca:23:57:d9:69:a8:63:c3:7a:5f:17:d2:2a:a2:96: 63:a7:70:26:e1:54:8c:cf:26:c4:07:81:fd:03:38: e5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:24:10:24:80:98:0B:DD:B6:DB:99:63:2D:E4:5C:AA:50:6E:D2:F5 X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:8a:50:bb:c4:05:95:bb:c8:de:60:b5:d2:61:73:cc:52:92: ae:9e:6a:58:80:b4:3f:d8:9a:ee:4e:d0:b5:b1:5d:7b:17:dd: 00:ea:7c:05:9d:8e:82:73:e1:90:3c:a1:b6:f9:50:71:fe:68: f9:ad:ab:08:dc:2a:3c:d7:31:51:20:6c:55:45:4b:97:66:50: 96:56:78:bf:be:96:6c:70:3b:58:09:8b:c2:46:45:bf:62:d9: 4f:86:41:45:ef:34:3f:4a:3b:8c:ab:1f:2f:da:b0:5b:3d:d0: 16:6a:81:b6:f6:89:3b:90:a7:8e:47:2f:c0:4b:fc:23:b7:13: 98:ec:69:63:ac:98:da:81:aa:8c:6b:01:4b:51:c1:01:10:8b: e2:79:7f:da:6b:5f:ed:c4:d7:81:23:6a:21:88:4c:2f:56:24: 84:34:44:3a:c6:47:1c:ad:30:66:a7:d3:5c:68:b0:d5:30:86: fa:b8:0e:c8:95:a9:09:ed:d3:83:ab:94:8a:0c:ad:98:2a:a0: 91:6b:52:a5:cc:27:39:c6:91:87:92:20:c6:4e:61:3e:bc:fd: e0:38:73:b2:22:bc:02:8f:12:41:1b:57:4c:80:df:c2:9d:be: 02:db:4c:37:ee:cf:a2:a1:e6:8b:bb:3a:c0:e0:10:65:b1:fc: 8b:82:64:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjUwMzEyMTQyMjQ4WhcNMjUwMzE5MTQyMjQ4WjAYMRYwFAYD VQQDEw02N2QxOThiOC0xYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtse1N+SX7gQkD9UsR9YM5GO5UeLD1GbnmH0JqC75dN+4SqKAF/hLHy7Dx6Em 4ofyQfDSDEUpBxPVJpQsAPmMzKtSik4DCbyyE7anSnCArHgBBH6RY2HrhYLkSV4l GM6KN4bc2PP4rVVfGHmAFv5sgZhBPs1HVWUNVEHQeMvc4SwS0c9kXHwiwPnXUBWz N59l/H+IAMCPjeF0oJcZOZ8iKAsEEodxAj6LlpNvk9gcG9UYWnLEv2luWBSKh5Ld vj26nWEWd5sUXoWxhFT8g0U6dei2XiBop1QKN3RwjDMdmqrKI1fZaahjw3pfF9Iq opZjp3Am4VSMzybEB4H9AzjlTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4kECSA mAvdttuZYy3kXKpQbtL1MB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATilC7xAWVu8jeYLXSYXPMUpKunmpYgLQ/2JruTtC1sV17F90A6nwF nY6Cc+GQPKG2+VBx/mj5rasI3Co81zFRIGxVRUuXZlCWVni/vpZscDtYCYvCRkW/ YtlPhkFF7zQ/SjuMqx8v2rBbPdAWaoG29ok7kKeORy/AS/wjtxOY7GljrJjagaqM awFLUcEBEIvieX/aa1/txNeBI2ohiEwvViSENEQ6xkccrTBmp9NcaLDVMIb6uA7I lakJ7dODq5SKDK2YKqCRa1KlzCc5xpGHkiDGTmE+vP3gOHOyIrwCjxJBG1dMgN/C nb4C20w37s+ioeaLuzrA4BBlsfyLgmS7 -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:19 2025 by rpki-client