$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: 9+SKKMJ/QXH5AE8KtFz2oubtfaVpHrINpsvJZbRe//0= Subject key identifier: CA:B3:13:A7:6E:A9:5B:14:B9:06:A3:83:9A:F3:87:85:71:40:14:28 Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 0115 Signing time: Thu 13 Mar 2025 03:18:54 +0000 Manifest this update: Thu 13 Mar 2025 03:18:54 +0000 Manifest next update: Thu 20 Mar 2025 03:18:54 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: ynMohRjGuTGKdsxiuFdCv7PYX9M3dNjoQV6B2CgcTfg=) 2: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: OXJrBCRK/B+O1fsAyaRgYbHjm3a0Kx0I8iYJcGwO1ic=) 3: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: /GlW7D5p31OP0UERONblLpyfKp9EBDNdvZFzDfcBmZ0=) 4: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: /TjW9AO7ISejU8TRY0ge1bQ+z/b39cY+4y6EmVLDEL0=) 5: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: 0GmwzEvjQkpIQOKVrUCegjL2exFdSiExkQmTbC5jqtM=) 6: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: QvSor+ZLSAycsGcCv4f76SOHLGpP9SPlvrD0IQ+tSOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62 Validity Not Before: Mar 13 03:18:54 2025 GMT Not After : Mar 20 03:18:54 2025 GMT Subject: CN=67d24e9e-0918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:d7:ee:8d:c6:a3:44:0e:c1:81:d6:cd:5e: 8a:27:aa:1a:80:6d:f9:53:e7:81:24:d2:ee:4d:d7: 34:1a:a0:05:48:d0:e0:8d:ea:ad:4f:18:d3:4c:87: 93:a4:ff:1b:3c:14:7b:bc:56:7e:f0:82:32:df:f5: ab:e9:72:5d:18:73:cb:59:9c:eb:b8:72:5e:fe:1c: 2f:8e:8e:ff:1f:8b:1c:22:e2:3e:03:bb:d8:50:7a: c5:8e:12:00:ab:ae:9a:d3:cb:c6:4e:bf:da:fc:1f: 07:a2:97:7b:08:90:fd:f7:29:50:08:ab:de:e9:dd: bb:33:2a:ab:4f:1e:b4:44:c4:97:86:62:6b:33:47: 8c:5b:13:7c:4c:51:e3:18:5c:36:36:b0:42:a7:d2: 1d:c8:47:ba:a1:d5:d3:68:5f:3d:95:d6:2a:64:a6: 18:2e:4c:d1:ee:f5:aa:d7:c4:4b:6c:f6:11:37:24: f3:a8:0e:c6:70:89:49:13:35:e9:f0:74:8c:37:93: d5:d0:52:f0:74:18:fb:61:54:9a:fb:41:17:6e:7c: 8d:28:7b:c0:ed:d0:9e:09:31:ca:80:29:74:51:cf: 9c:a1:3a:cf:23:cc:05:f2:68:8d:23:72:dc:7f:7e: 07:9b:e3:79:de:67:a5:c3:74:fc:58:6e:49:dd:75: b4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B3:13:A7:6E:A9:5B:14:B9:06:A3:83:9A:F3:87:85:71:40:14:28 X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:af:44:9e:12:fa:05:ba:20:d6:c9:ce:b1:f7:77:7d:64:46: 53:f6:c3:d8:e2:9d:0d:1f:9c:3b:c1:b4:1d:2a:5f:2b:ff:34: 62:b7:26:65:4b:5f:0c:03:86:92:4a:51:b5:97:ef:12:5d:85: 47:b3:c5:3d:c1:6e:9c:13:5c:dd:64:da:10:73:b7:22:b9:22: 5b:57:f2:8d:94:9d:09:e0:71:33:0a:71:12:7c:d4:9f:92:57: 94:a4:3c:4a:86:b5:38:c8:c9:73:fd:0c:96:c0:99:b1:a2:2d: 30:5a:cd:bd:14:00:43:09:20:49:1c:92:83:d1:c6:3c:52:a6: 61:a2:dd:76:a3:dc:c4:f7:75:fa:23:ca:9c:de:db:f0:87:c8: d7:20:89:0b:4e:db:98:a0:a4:64:bb:33:80:43:7f:32:a3:26: ef:40:d8:cb:8d:fb:45:52:34:9b:71:40:be:f2:0d:54:17:f5: 28:0a:73:95:0a:1f:23:f1:50:95:40:ac:b5:c8:58:f3:8c:17: 7b:5c:a9:91:82:61:76:ee:99:85:64:ad:17:72:dc:1d:b8:74: 26:50:cd:08:a0:e8:c2:be:f5:6e:ae:36:66:c8:8d:03:a4:5d: 35:ec:35:1b:5c:bc:8a:99:a7:dc:67:56:36:17:fa:e2:93:93: 0d:78:bd:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjUwMzEzMDMxODU0WhcNMjUwMzIwMDMxODU0WjAYMRYwFAYD VQQDEw02N2QyNGU5ZS0wOTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5LX7o3Go0QOwYHWzV6KJ6oagG35U+eBJNLuTdc0GqAFSNDgjeqtTxjTTIeT pP8bPBR7vFZ+8IIy3/Wr6XJdGHPLWZzruHJe/hwvjo7/H4scIuI+A7vYUHrFjhIA q66a08vGTr/a/B8Hopd7CJD99ylQCKve6d27MyqrTx60RMSXhmJrM0eMWxN8TFHj GFw2NrBCp9IdyEe6odXTaF89ldYqZKYYLkzR7vWq18RLbPYRNyTzqA7GcIlJEzXp 8HSMN5PV0FLwdBj7YVSa+0EXbnyNKHvA7dCeCTHKgCl0Uc+coTrPI8wF8miNI3Lc f34Hm+N53melw3T8WG5J3XW06wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqzE6du qVsUuQajg5rzh4VxQBQoMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7r0SeEvoFuiDWyc6x93d9ZEZT9sPY4p0NH5w7wbQdKl8r/zRityZl S18MA4aSSlG1l+8SXYVHs8U9wW6cE1zdZNoQc7ciuSJbV/KNlJ0J4HEzCnESfNSf kleUpDxKhrU4yMlz/QyWwJmxoi0wWs29FABDCSBJHJKD0cY8UqZhot12o9zE93X6 I8qc3tvwh8jXIIkLTtuYoKRkuzOAQ38yoybvQNjLjftFUjSbcUC+8g1UF/UoCnOV Ch8j8VCVQKy1yFjzjBd7XKmRgmF27pmFZK0XctwduHQmUM0IoOjCvvVurjZmyI0D pF017DUbXLyKmafcZ1Y2F/rik5MNeL1g -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:03 2025 by rpki-client