$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft File: g--P6e5IafC5SpX3RvWJS6H7MPA.mft (raw, json) Hash identifier: 0IMVJ1lXCoE+ZC4Nmdm0dndTdUXK/oKB4fdNYBUVQlY= Subject key identifier: 04:82:F5:5D:0C:4F:2A:9E:6F:00:80:D0:5B:F8:77:E0:21:9F:4F:02 Authority key identifier: 83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 Certificate issuer: /CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft Manifest number: 9A Signing time: Sat 29 Mar 2025 05:39:41 +0000 Manifest this update: Sat 29 Mar 2025 05:39:40 +0000 Manifest next update: Sat 05 Apr 2025 05:39:40 +0000 Files and hashes: 1: g--P6e5IafC5SpX3RvWJS6H7MPA.crl (hash: i1zVWplMSI7m49fRLHvL5kFD3pZWP355Re4/Sw/krMQ=) 2: A368B23623C411EFB7164123C4F9AE02.roa (hash: xksJk5Cwcy8+0Thge3EVjB2r6Pp+L19aLaysM6rp0MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A Validity Not Before: Mar 29 05:39:40 2025 GMT Not After : Apr 5 05:39:40 2025 GMT Subject: CN=67e7879d-fb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d7:f6:06:87:fe:cb:f2:cc:92:38:60:ef:50: e5:32:eb:f1:78:82:bd:4e:1b:65:9b:4d:13:4a:66: 24:9b:54:4b:40:0c:13:b4:10:9b:66:3a:2c:87:ed: d6:ce:78:2b:d7:fb:4c:52:95:27:63:08:a1:b6:a6: c5:a5:43:3b:de:20:b7:d2:6f:a3:73:a9:d6:be:68: 10:15:07:19:1b:96:c5:2e:c3:26:bf:c3:45:64:f7: de:ab:57:c9:9f:74:bb:56:0f:9d:d8:c9:1d:77:9a: 09:b9:6c:96:d3:18:5b:be:0c:49:0b:53:a8:5d:10: 73:63:91:d0:4d:7a:32:a3:ee:55:2b:9f:ea:2d:b5: 99:ed:64:36:8b:4e:d4:1b:8d:c4:12:05:e2:26:1b: f6:46:b0:9a:24:55:ac:51:b5:69:c5:bf:2d:f1:1e: ae:db:35:4a:62:20:37:50:8d:9b:b4:c3:db:86:0b: d7:81:12:15:06:45:11:e9:84:68:44:da:e5:79:07: 3e:c3:ba:ca:ab:6d:be:46:47:8a:1a:1d:43:8c:52: a8:30:39:5a:e4:f3:d1:0f:58:a7:cd:be:9e:be:7a: b2:4f:69:d5:0e:79:f8:90:03:c5:f1:88:35:f0:13: f3:d5:a0:14:3c:2f:fe:dc:85:4a:5d:54:d2:d6:2e: 18:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:82:F5:5D:0C:4F:2A:9E:6F:00:80:D0:5B:F8:77:E0:21:9F:4F:02 X509v3 Authority Key Identifier: keyid:83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:72:a4:cd:9f:8e:61:8c:d3:48:99:49:f6:1f:3c:9c:a1:ed: 0b:e0:ec:53:5c:8e:e0:44:96:45:59:ac:35:56:1b:21:a1:b3: 14:4b:6c:b9:c5:f8:27:68:49:86:7e:78:b5:27:08:7d:0c:88: fe:da:ab:ee:81:50:b3:20:09:da:18:46:bf:b0:20:f5:ad:8c: 35:cf:3b:60:2e:32:8f:ec:d9:92:e9:8a:c4:6c:70:ff:d8:53: 67:46:cd:a6:bd:33:64:d4:7e:9c:5c:5b:09:70:0e:e4:92:c2: d0:23:ce:4f:7b:36:b8:69:b9:e0:29:07:0b:90:aa:f3:5b:ca: c4:25:8c:61:34:ba:5d:bb:61:76:77:a9:06:33:e0:ba:ea:74: 9d:0c:b8:27:23:64:2f:35:82:d5:2f:86:03:9d:a4:57:10:ab: e8:53:33:13:42:42:7f:e2:ed:60:4e:13:75:7e:df:8b:e4:47: 51:19:c8:da:d8:bf:16:9b:96:24:71:e1:0a:59:d4:ea:d8:cb: 61:3c:ee:1c:81:a3:e9:b7:de:44:13:cc:f6:87:77:59:47:26: df:8a:78:fc:62:f9:f2:43:34:48:3e:3c:e2:3f:40:b5:c7:92: 83:52:99:13:97:53:c8:1a:b9:50:19:4b:b1:5f:62:65:49:7e: 75:d1:8f:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKDgzRUY4RkU5RUU0ODY5RjBCOTRBOTVGNzQ2RjU4OTRC QTFGQjMwRjAwHhcNMjUwMzI5MDUzOTQwWhcNMjUwNDA1MDUzOTQwWjAYMRYwFAYD VQQDEw02N2U3ODc5ZC1mYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltf2Bof+y/LMkjhg71DlMuvxeIK9Thtlm00TSmYkm1RLQAwTtBCbZjosh+3W zngr1/tMUpUnYwihtqbFpUM73iC30m+jc6nWvmgQFQcZG5bFLsMmv8NFZPfeq1fJ n3S7Vg+d2Mkdd5oJuWyW0xhbvgxJC1OoXRBzY5HQTXoyo+5VK5/qLbWZ7WQ2i07U G43EEgXiJhv2RrCaJFWsUbVpxb8t8R6u2zVKYiA3UI2btMPbhgvXgRIVBkUR6YRo RNrleQc+w7rKq22+RkeKGh1DjFKoMDla5PPRD1inzb6evnqyT2nVDnn4kAPF8Yg1 8BPz1aAUPC/+3IVKXVTS1i4Y8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASC9V0M TyqebwCA0Fv4d+Ahn08CMB8GA1UdIwQYMBaAFIPvj+nuSGnwuUqV90b1iUuh+zDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9FNEE2NUVERTIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFmQzVTcFgzUnZXSlM2SDdN UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctLVA2ZTVJYWZDNVNwWDNSdldKUzZIN01QQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9FNEE2NUVERTIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFm QzVTcFgzUnZXSlM2SDdNUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwcqTNn45hjNNImUn2Hzycoe0L4OxTXI7gRJZFWaw1VhshobMUS2y5 xfgnaEmGfni1Jwh9DIj+2qvugVCzIAnaGEa/sCD1rYw1zztgLjKP7NmS6YrEbHD/ 2FNnRs2mvTNk1H6cXFsJcA7kksLQI85Peza4abngKQcLkKrzW8rEJYxhNLpdu2F2 d6kGM+C66nSdDLgnI2QvNYLVL4YDnaRXEKvoUzMTQkJ/4u1gThN1ft+L5EdRGcja 2L8Wm5YkceEKWdTq2MthPO4cgaPpt95EE8z2h3dZRybfinj8YvnyQzRIPjziP0C1 x5KDUpkTl1PIGrlQGUuxX2JlSX510Y9f -----END CERTIFICATE-----Generated at Sat Apr 5 01:14:55 2025 by rpki-client