$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft File: BdNlUA2kssABifPGyllQ4AdMfEo.mft (raw, json) Hash identifier: 1g/OAU04pty3WH1SwGiojDGW3Fb8j3d/VLT7xal1yLo= Subject key identifier: 08:37:F9:AF:DE:8B:BE:26:FF:F9:FB:7F:D6:D5:A8:0D:B4:E3:01:E0 Authority key identifier: 05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A Certificate issuer: /CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft Manifest number: 01C2 Signing time: Wed 09 Apr 2025 02:11:18 +0000 Manifest this update: Wed 09 Apr 2025 02:11:17 +0000 Manifest next update: Wed 16 Apr 2025 02:11:17 +0000 Files and hashes: 1: BdNlUA2kssABifPGyllQ4AdMfEo.crl (hash: rmwYA0uFcoT90Y+HPaTpXzHw40GtqTzpIY83gOBEe2Q=) 2: 999FA66011C711EF80B27457C4F9AE02.roa (hash: O9DoSIXGoRGfPB1leReaXjE3LSp6RO52qLUkhTkRojY=) 3: AD0CC70C122411EF8BEED51AC4F9AE02.roa (hash: sLDSVMLU6jI3BpmMuSVMPzt56rvnKddxBYgL4QmGgG0=) 4: A6524550C4E411EEAFF83C50C4F9AE02.roa (hash: d4lk9eKDk4hQ5jM/CM/7dtQ4pw21vQcp7xDVqjydE4E=) 5: C44A1D987E0511EDBA2BAF7FC4F9AE02.roa (hash: UGxKabSt5VefJdKh3JQwjTM53St2aD5lvYeCqBjnhKg=) 6: 99D4FC3212DC11EFB2470B7FC4F9AE02.roa (hash: E6NCI4JuiZoY4K+zXIld9/zlqD6qc3HulCUWdCEuTgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 02:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF Validity Not Before: Apr 9 02:11:17 2025 GMT Not After : Apr 16 02:11:17 2025 GMT Subject: CN=67f5d746-6f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:f6:5d:ef:af:cc:c6:ae:c8:ca:39:54:6b: 26:59:8a:47:7c:98:4f:9d:af:c7:d2:58:d0:2b:5a: c8:24:aa:ec:1a:29:3b:42:53:39:36:a6:eb:aa:08: d8:3f:0e:77:ae:0e:4f:20:7f:ad:b4:3b:fc:9d:fa: 00:e0:79:a4:f5:0c:89:58:83:68:1d:12:79:83:ed: 63:50:04:ed:28:00:5b:b4:98:8a:18:d7:9c:26:f5: 9a:d4:ef:5a:e7:35:31:94:da:0f:89:b3:55:2a:0e: 96:3a:99:2b:5a:8a:1c:06:02:75:61:2c:5e:47:97: 25:54:12:36:53:c9:78:76:71:69:35:1b:50:fc:ba: b8:cb:83:4d:12:69:e7:8c:7b:50:e1:13:8b:47:a8: ac:1b:e6:a4:49:f6:b4:46:06:2a:19:f1:58:78:44: 15:e7:a2:a6:b1:05:3b:d6:16:ea:9c:78:b1:b4:22: 06:8e:27:f1:d2:85:29:4d:d4:44:2a:38:96:cd:0e: e6:dc:de:75:de:98:03:4c:a8:4a:84:72:f9:cc:37: 68:7c:4d:c6:c9:c1:76:69:43:13:3d:87:15:64:24: 96:c7:bd:c7:88:01:2e:b5:a0:43:c5:fe:0c:53:0a: b2:e5:9d:10:45:5a:02:e6:03:64:57:28:1d:61:72: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:37:F9:AF:DE:8B:BE:26:FF:F9:FB:7F:D6:D5:A8:0D:B4:E3:01:E0 X509v3 Authority Key Identifier: keyid:05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d4:5b:92:d8:34:ed:ed:d0:46:7a:ca:ec:16:6f:72:64:de: b3:a6:65:af:42:ef:36:1e:9e:9d:b8:6d:25:31:31:a3:9e:a3: c6:da:d0:08:16:99:23:4e:90:23:19:ba:80:a9:c8:cf:01:24: 76:75:eb:78:7b:53:7d:10:e8:3b:e6:44:da:fd:c9:9c:2e:28: b6:30:78:98:e5:88:dd:5b:7d:02:01:d1:82:2b:a3:67:4e:a8: 14:19:0d:6f:9b:f8:bf:a0:4c:20:97:ad:20:b8:42:d3:99:f8: 97:a4:cb:39:6b:06:c2:67:76:78:33:b8:8a:16:cd:9f:0d:c0: 78:99:6b:37:d9:1f:02:50:ef:e7:f9:5f:6d:35:77:3e:f0:f8: eb:f7:a5:b7:08:6b:51:4c:cc:f5:3a:1e:1a:61:ab:80:2c:8c: 6f:58:34:25:fd:06:b5:8a:3d:bb:f8:09:09:69:ea:45:f5:ff: 13:e5:1a:b8:11:64:8b:a3:cf:08:d8:b6:62:25:0b:01:66:06: 1a:99:b5:c3:c9:38:48:d4:56:c6:9f:87:84:0c:34:47:db:22: b2:e9:89:73:b9:aa:de:14:e3:40:99:20:b5:60:09:0d:ca:03: f0:1e:3d:04:8b:46:49:40:10:33:e7:af:7a:af:7b:86:f3:2c: 6e:97:71:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDA1RDM2NTUwMERBNEIyQzAwMTg5RjNDNkNBNTk1MEUw MDc0QzdDNEEwHhcNMjUwNDA5MDIxMTE3WhcNMjUwNDE2MDIxMTE3WjAYMRYwFAYD VQQDEw02N2Y1ZDc0Ni02Zjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraf2Xe+vzMauyMo5VGsmWYpHfJhPna/H0ljQK1rIJKrsGik7QlM5NqbrqgjY Pw53rg5PIH+ttDv8nfoA4Hmk9QyJWINoHRJ5g+1jUATtKABbtJiKGNecJvWa1O9a 5zUxlNoPibNVKg6WOpkrWoocBgJ1YSxeR5clVBI2U8l4dnFpNRtQ/Lq4y4NNEmnn jHtQ4ROLR6isG+akSfa0RgYqGfFYeEQV56KmsQU71hbqnHixtCIGjifx0oUpTdRE KjiWzQ7m3N513pgDTKhKhHL5zDdofE3GycF2aUMTPYcVZCSWx73HiAEutaBDxf4M Uwqy5Z0QRVoC5gNkVygdYXJlowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAg3+a/e i74m//n7f9bVqA204wHgMB8GA1UdIwQYMBaAFAXTZVANpLLAAYnzxspZUOAHTHxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9FQTY3QTk4QzdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9CZE5sVUEya3NzQUJpZlBHeWxsUTRBZE1m RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JkTmxVQTJrc3NBQmlmUEd5bGxRNEFkTWZFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVERi9FQTY3QTk4QzdDNTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9CZE5sVUEya3Nz QUJpZlBHeWxsUTRBZE1mRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH1FuS2DTt7dBGesrsFm9yZN6zpmWvQu82Hp6duG0lMTGjnqPG2tAI FpkjTpAjGbqAqcjPASR2det4e1N9EOg75kTa/cmcLii2MHiY5YjdW30CAdGCK6Nn TqgUGQ1vm/i/oEwgl60guELTmfiXpMs5awbCZ3Z4M7iKFs2fDcB4mWs32R8CUO/n +V9tNXc+8Pjr96W3CGtRTMz1Oh4aYauALIxvWDQl/Qa1ij27+AkJaepF9f8T5Rq4 EWSLo88I2LZiJQsBZgYambXDyThI1FbGn4eEDDRH2yKy6YlzuareFONAmSC1YAkN ygPwHj0Ei0ZJQBAz5696r3uG8yxul3G2 -----END CERTIFICATE-----Generated at Thu Apr 10 11:50:19 2025 by rpki-client