$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft File: _f0WbMUdnjq3SWQHS25klGdOL24.mft (raw, json) Hash identifier: LU7O+EoWpa9V8RxaQT/N9EoUlPJlqLvzH6VKxlzCrb4= Subject key identifier: FA:A7:A9:94:FD:57:79:2E:CF:CA:09:ED:C1:47:34:62:CA:7B:19:59 Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E Certificate issuer: /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Certificate serial: 1E97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft Manifest number: 1E8D Signing time: Thu 24 Apr 2025 16:03:53 +0000 Manifest this update: Thu 24 Apr 2025 16:03:53 +0000 Manifest next update: Thu 01 May 2025 16:03:53 +0000 Files and hashes: 1: _f0WbMUdnjq3SWQHS25klGdOL24.crl (hash: 3mHStViHaLiJ4u+y1z6vHGW6DbbmJ+3rUUZ2z1q1t9I=) 2: 888B4AC26B3611E6A149F871C4F9AE02.roa (hash: JNpFgM+KWXtVAKMLIECfprcazoPzZ95joJw//lWOa/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7831 (0x1e97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E Validity Not Before: Apr 24 16:03:53 2025 GMT Not After : May 1 16:03:53 2025 GMT Subject: CN=680a60e9-0699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:27:04:a2:ac:db:3f:cc:38:a6:b4:9e:cb: b2:78:10:36:06:b0:e0:e5:93:84:b4:69:cc:4d:f1: 48:49:9f:ff:74:e5:67:f5:c0:6d:6a:b4:01:e6:51: 5c:73:c9:ba:71:fc:6a:5c:15:89:02:06:12:93:67: 0f:c8:21:b8:6a:a9:89:fc:cb:91:1f:57:b2:f7:90: 1d:ab:17:fa:e1:22:f5:f0:f4:1e:2d:0c:8f:40:2d: 22:14:a4:78:12:13:c1:a5:75:8f:70:16:c2:5e:ba: 73:69:86:16:6f:fb:f8:a3:c3:ea:34:92:56:20:f6: cd:fe:dc:59:10:62:06:d6:7f:7e:45:a8:8a:1f:73: b7:aa:d9:ef:a9:49:1a:8e:3c:0d:8e:05:b5:be:58: 0d:1a:2a:2f:70:b3:2b:f4:78:01:32:f1:b7:d8:19: dc:e9:f3:ce:0d:8e:1d:52:55:0f:29:a8:8c:bd:91: e6:cd:3e:b5:a6:b5:f1:e5:80:6b:60:4f:d1:a6:07: da:81:f7:38:93:16:3e:ee:b3:a2:20:c8:13:b3:8f: ae:07:ff:fd:41:5d:f4:30:e8:54:2d:ee:ee:42:4c: 84:98:c4:87:0a:1f:b2:bf:db:06:b4:e0:02:f4:e0: 2d:bc:46:2f:89:82:ee:ca:0e:1d:02:46:9b:97:0b: 3f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A7:A9:94:FD:57:79:2E:CF:CA:09:ED:C1:47:34:62:CA:7B:19:59 X509v3 Authority Key Identifier: keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b1:0c:71:5e:78:58:11:35:48:8d:b5:0b:c8:a0:e0:bf:9a: 00:9f:5c:a6:55:ab:c2:e6:4b:59:35:88:a8:cc:f7:0b:09:14: 2e:a6:a3:74:38:5f:31:04:29:b3:f3:22:85:a3:96:1c:10:57: 30:dd:36:65:64:50:df:a6:6c:43:6e:55:6d:93:89:56:8a:ef: 1f:a6:6b:ac:63:ef:f9:43:3a:55:84:a9:df:b3:0a:44:8a:4f: 69:e5:c6:93:a6:7b:63:e5:37:af:02:f5:9e:00:5e:27:73:da: ec:b0:59:bc:1e:60:3f:2b:9f:d1:c0:b0:8f:b5:59:8d:f5:76: 1b:3a:8f:ec:e3:af:30:b7:58:41:40:ea:3e:55:9c:d2:14:06: e2:34:21:b1:56:30:7b:c6:47:30:f7:91:c1:bc:16:ad:ef:38: 91:1a:2c:1e:c0:9c:9a:43:6f:8f:fd:e5:21:9e:db:4e:9e:a9: 10:45:cc:1c:46:2a:53:f3:c9:f8:9d:1e:8a:8a:c5:ea:51:0a: 11:12:e0:28:35:3b:37:0a:c9:78:e5:21:d7:32:df:e1:0b:c2: dc:c3:c5:98:ad:e1:f3:28:2b:96:52:3f:f4:0d:79:84:02:37: 75:c4:1d:c6:eb:ec:a2:f5:4b:dd:6f:91:47:03:bd:1f:bc:f8: d5:c9:ae:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0RjgxMTAvBgNVBAUTKEZERkQxNjZDQzUxRDlFM0FCNzQ5NjQwNzRCNkU2NDk0 Njc0RTJGNkUwHhcNMjUwNDI0MTYwMzUzWhcNMjUwNTAxMTYwMzUzWjAYMRYwFAYD VQQDEw02ODBhNjBlOS0wNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplEnBKKs2z/MOKa0nsuyeBA2BrDg5ZOEtGnMTfFISZ//dOVn9cBtarQB5lFc c8m6cfxqXBWJAgYSk2cPyCG4aqmJ/MuRH1ey95Adqxf64SL18PQeLQyPQC0iFKR4 EhPBpXWPcBbCXrpzaYYWb/v4o8PqNJJWIPbN/txZEGIG1n9+RaiKH3O3qtnvqUka jjwNjgW1vlgNGiovcLMr9HgBMvG32Bnc6fPODY4dUlUPKaiMvZHmzT61prXx5YBr YE/Rpgfagfc4kxY+7rOiIMgTs4+uB//9QV30MOhULe7uQkyEmMSHCh+yv9sGtOAC 9OAtvEYviYLuyg4dAkablws/NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqnqZT9 V3kuz8oJ7cFHNGLKexlZMB8GA1UdIwQYMBaAFP39FmzFHZ46t0lkB0tuZJRnTi9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRGOC8yMjhBRDNFQTZC MzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5qcTNTV1FIUzI1a2xHZE9M MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mMFdiTVVkbmpxM1NXUUhTMjVrbEdkT0wyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRGOC8yMjhBRDNFQTZCMzIxMUU2OTQxNjYyNjVDNEY5QUUwMi9fZjBXYk1VZG5q cTNTV1FIUzI1a2xHZE9MMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAsQxxXnhYETVIjbULyKDgv5oAn1ymVavC5ktZNYiozPcLCRQupqN0 OF8xBCmz8yKFo5YcEFcw3TZlZFDfpmxDblVtk4lWiu8fpmusY+/5QzpVhKnfswpE ik9p5caTpntj5TevAvWeAF4nc9rssFm8HmA/K5/RwLCPtVmN9XYbOo/s468wt1hB QOo+VZzSFAbiNCGxVjB7xkcw95HBvBat7ziRGiwewJyaQ2+P/eUhnttOnqkQRcwc RipT88n4nR6KisXqUQoREuAoNTs3Csl45SHXMt/hC8Lcw8WYreHzKCuWUj/0DXmE Ajd1xB3G6+yi9Uvdb5FHA70fvPjVya4M -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:33 2025 by rpki-client