$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: Gac9ecgWaF7nxbNCCKbJlKHilNZyvRbgvLbC9/RbmM0= Subject key identifier: 85:27:95:7C:3B:A3:A7:18:39:1F:E3:47:BC:37:85:E8:B5:B8:C6:AE Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: E1 Signing time: Thu 13 Mar 2025 03:41:06 +0000 Manifest this update: Thu 13 Mar 2025 03:41:05 +0000 Manifest next update: Thu 20 Mar 2025 03:41:05 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: VzWCRtb0IlRMC5fSl5qsQP1BYXbNNMaJfJkhfvWocP8=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: BKT8mKOvtKDrwuLWmsCuesw/k4MktBnMTWfVhN9KpJk=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: Qk5WperL9Uyej6ohOzdzkfdTG/QX7gXEMdP5wBlxS2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2 Validity Not Before: Mar 13 03:41:05 2025 GMT Not After : Mar 20 03:41:05 2025 GMT Subject: CN=67d253d2-e062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a0:e7:2b:7c:77:f8:99:b4:c7:70:79:54:33: 08:90:86:57:a3:b1:05:36:20:e0:c4:62:ab:42:7d: 40:00:94:01:97:47:d3:3d:9e:6f:55:7a:d1:f0:e4: 04:93:2e:e1:09:84:8b:13:1f:7b:80:e5:61:f8:f2: e6:e1:ff:b7:fd:fd:4f:72:93:92:74:d9:7b:1d:55: 1a:7d:62:bc:42:cd:72:7a:12:76:1e:7e:dd:46:cd: 44:ae:86:d8:98:4c:25:a9:4b:35:c0:5a:5e:da:38: 6c:5c:e6:74:1b:63:e5:8d:2a:09:24:6c:63:6e:8c: 0c:0d:f8:12:4e:7b:93:c3:49:2f:d1:7d:e2:9e:ff: 3f:0a:b4:5a:f5:3e:d0:96:b8:18:64:9c:41:8f:bf: e6:76:c8:f0:77:5c:a5:4e:b0:cb:ad:ea:97:1b:88: 8b:61:30:fe:2e:ea:d9:4f:50:85:21:1a:a9:50:4e: 33:d7:74:7b:43:0e:f8:a0:70:7c:b3:24:4c:f0:fc: ab:9a:ad:ef:46:50:5a:19:9d:f1:58:ad:10:95:f5: 47:54:12:b4:67:c5:9c:ee:1c:40:76:c6:19:71:3d: f7:42:3a:fa:4e:2c:dc:1e:ed:23:a6:6b:e0:b0:1b: 9f:75:85:ac:17:10:a9:d4:31:38:65:a3:16:ce:fd: d5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:27:95:7C:3B:A3:A7:18:39:1F:E3:47:BC:37:85:E8:B5:B8:C6:AE X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:2e:34:5d:d0:a4:53:19:b8:c1:e0:81:b4:fc:19:ad:e9:e5: c4:7b:f9:c8:07:a9:07:fc:a8:b0:1d:7a:1c:69:6d:b7:21:0a: ad:58:c2:d1:2f:04:fc:c7:15:1d:8e:70:20:7c:aa:d2:76:a1: fb:b1:22:0f:6e:5a:9f:aa:2f:f5:b2:b6:6b:35:48:fa:9e:d1: 2d:63:42:9c:0f:a0:4b:44:23:ec:78:ac:d5:18:0c:c4:6a:3b: 3e:41:ba:ce:e3:0f:09:20:f4:ca:b3:f8:15:a0:0a:8b:5e:23: 0e:40:2c:e1:25:cd:98:85:06:03:6a:bc:b2:69:fa:a5:3f:14: 38:24:92:21:66:6d:61:5c:ca:b7:16:49:20:e3:a4:e4:6c:14: bb:2d:e4:80:59:89:cb:c4:26:92:9a:0a:fd:95:9f:0f:03:78: 16:43:ee:c1:8c:b2:9d:73:00:86:c6:ee:30:b4:08:ce:fd:ac: f8:44:32:a7:ed:55:a0:e9:9f:ed:fc:23:a8:3c:b3:34:c2:4d: a5:2f:8d:6f:e8:44:80:23:f4:4d:45:53:7f:4d:df:84:da:09: 29:cf:b3:f0:2b:72:7a:a0:99:90:8a:e5:bf:80:f1:4b:26:18: b0:0a:5a:88:13:6b:bf:5f:38:91:12:39:c6:56:aa:cc:49:58: 60:fd:d7:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwMzEzMDM0MTA1WhcNMjUwMzIwMDM0MTA1WjAYMRYwFAYD VQQDEw02N2QyNTNkMi1lMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqDnK3x3+Jm0x3B5VDMIkIZXo7EFNiDgxGKrQn1AAJQBl0fTPZ5vVXrR8OQE ky7hCYSLEx97gOVh+PLm4f+3/f1PcpOSdNl7HVUafWK8Qs1yehJ2Hn7dRs1ErobY mEwlqUs1wFpe2jhsXOZ0G2PljSoJJGxjbowMDfgSTnuTw0kv0X3inv8/CrRa9T7Q lrgYZJxBj7/mdsjwd1ylTrDLreqXG4iLYTD+LurZT1CFIRqpUE4z13R7Qw74oHB8 syRM8Pyrmq3vRlBaGZ3xWK0QlfVHVBK0Z8Wc7hxAdsYZcT33Qjr6TizcHu0jpmvg sBufdYWsFxCp1DE4ZaMWzv3VgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUnlXw7 o6cYOR/jR7w3hei1uMauMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyLjRd0KRTGbjB4IG0/Bmt6eXEe/nIB6kH/KiwHXocaW23IQqtWMLR LwT8xxUdjnAgfKrSdqH7sSIPblqfqi/1srZrNUj6ntEtY0KcD6BLRCPseKzVGAzE ajs+QbrO4w8JIPTKs/gVoAqLXiMOQCzhJc2YhQYDaryyafqlPxQ4JJIhZm1hXMq3 Fkkg46TkbBS7LeSAWYnLxCaSmgr9lZ8PA3gWQ+7BjLKdcwCGxu4wtAjO/az4RDKn 7VWg6Z/t/COoPLM0wk2lL41v6ESAI/RNRVN/Td+E2gkpz7PwK3J6oJmQiuW/gPFL JhiwClqIE2u/XziREjnGVqrMSVhg/dfC -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:07 2025 by rpki-client