$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: mihg7MlRzL7vtp73DI+Y8MVXWNRupsiw6PgI56E06aw= Subject key identifier: 94:00:7F:7C:14:EF:34:E1:78:6B:1C:27:EE:25:24:86:C1:23:35:48 Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: 010F Signing time: Fri 25 Apr 2025 03:58:16 +0000 Manifest this update: Fri 25 Apr 2025 03:58:16 +0000 Manifest next update: Fri 02 May 2025 03:58:16 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: fmIPwP4xRaQFID//cEXJ11RZOedbtU0Cy+cvy3E8i1s=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: AgEcJkKDpEPBaGjrS9V0jt2iST6E+qzc3K1SEhivhc4=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: 548P4XWsPS3JTWuhyip3nqsrffc51BRt/khZw2JCljI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Apr 25 03:58:16 2025 GMT Not After : May 2 03:58:16 2025 GMT Subject: CN=680b0858-5b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:da:38:32:56:b2:ca:c9:d1:d7:6d:7f:e0: 6b:6e:3a:44:9e:4c:b8:bf:4a:4e:87:7a:f5:f6:3b: 39:ff:89:69:2f:15:77:fe:65:a1:c1:4b:30:2b:b9: 96:58:1f:01:e9:cf:5e:0b:77:85:f4:89:fd:3f:9c: ed:57:e5:13:8f:2e:16:db:29:52:67:40:53:10:11: 34:cf:64:f2:87:0b:36:e2:88:af:2a:e2:ad:84:a4: 75:7e:72:c9:20:55:1c:88:7b:c6:3d:2a:ce:ea:b0: 79:db:1f:95:0c:7e:7a:92:56:1e:6c:f0:e9:2b:34: c6:9b:e0:b9:0a:3d:08:d5:8b:68:87:e1:19:d7:71: 35:4f:ae:9f:a6:03:0f:85:61:59:cc:2b:31:7e:d6: 41:83:9a:e1:47:31:5c:76:15:8a:6e:5e:f1:0c:40: 15:f0:34:98:64:51:e1:49:60:73:a0:d3:d5:e5:b6: 91:5e:25:98:ba:fe:f1:5d:eb:5d:dc:4e:95:c2:d5: a4:a5:5c:48:c2:f3:c9:6d:2e:f9:63:f1:8a:07:05: 32:39:1d:eb:d7:a9:aa:e6:09:c3:9b:3b:c6:3c:9c: 6a:84:17:78:0e:bd:3d:55:3b:0f:7d:b5:a8:ba:00: ea:0a:34:08:49:e6:7c:37:82:ae:a1:60:8a:e3:79: 73:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:00:7F:7C:14:EF:34:E1:78:6B:1C:27:EE:25:24:86:C1:23:35:48 X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:40:4c:77:3d:ee:23:0d:87:bb:09:d7:e3:78:91:e8:26:2a: eb:e8:bb:8f:1f:6c:27:c5:59:ec:13:e8:9b:42:2b:a5:48:a3: e4:d6:b8:85:c7:d0:a3:0f:f1:e5:91:a7:ad:56:3b:0a:b8:64: bf:9a:9f:05:76:aa:bd:a2:7b:a7:0a:26:5a:86:0a:e1:c1:60: 88:67:10:30:37:5b:81:58:70:05:14:d3:81:ab:5b:d7:20:9f: 21:99:5b:ac:25:ae:f3:5a:4a:8f:2d:88:88:15:9e:98:ba:46: 71:3d:93:f8:bf:82:79:a9:ab:ef:07:6d:36:5a:f9:94:5c:b8: 5b:10:95:e6:6b:11:ae:c1:4e:5f:d4:e7:2b:f3:2d:b5:31:24: be:3f:50:9b:e2:0f:ce:2c:e4:3e:8f:96:5b:e3:67:c2:20:df: 6f:36:d8:eb:3b:af:0b:af:a3:bd:08:bd:f1:17:0d:86:01:76: 3c:5a:fa:45:8f:63:fd:b3:9c:0a:d0:85:74:f1:00:30:63:e3: bb:a0:d7:48:89:d9:f1:6b:e5:ab:d2:85:8b:bc:b2:92:be:0f: 85:f5:9f:46:67:df:6f:9d:51:50:52:a7:6d:07:6e:74:72:8e: 95:7b:31:60:9f:f6:a8:86:6d:2d:b7:73:ec:14:2e:3d:f0:b0: 83:d0:d8:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjUwNDI1MDM1ODE2WhcNMjUwNTAyMDM1ODE2WjAYMRYwFAYD VQQDEw02ODBiMDg1OC01YjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAraODJWssrJ0ddtf+BrbjpEnky4v0pOh3r19js5/4lpLxV3/mWhwUswK7mW WB8B6c9eC3eF9In9P5ztV+UTjy4W2ylSZ0BTEBE0z2Tyhws24oivKuKthKR1fnLJ IFUciHvGPSrO6rB52x+VDH56klYebPDpKzTGm+C5Cj0I1Ytoh+EZ13E1T66fpgMP hWFZzCsxftZBg5rhRzFcdhWKbl7xDEAV8DSYZFHhSWBzoNPV5baRXiWYuv7xXetd 3E6VwtWkpVxIwvPJbS75Y/GKBwUyOR3r16mq5gnDmzvGPJxqhBd4Dr09VTsPfbWo ugDqCjQISeZ8N4KuoWCK43lzEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQAf3wU 7zTheGscJ+4lJIbBIzVIMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmQEx3Pe4jDYe7CdfjeJHoJirr6LuPH2wnxVnsE+ibQiulSKPk1riF x9CjD/HlkaetVjsKuGS/mp8Fdqq9onunCiZahgrhwWCIZxAwN1uBWHAFFNOBq1vX IJ8hmVusJa7zWkqPLYiIFZ6YukZxPZP4v4J5qavvB202WvmUXLhbEJXmaxGuwU5f 1Ocr8y21MSS+P1Cb4g/OLOQ+j5Zb42fCIN9vNtjrO68Lr6O9CL3xFw2GAXY8WvpF j2P9s5wK0IV08QAwY+O7oNdIidnxa+Wr0oWLvLKSvg+F9Z9GZ99vnVFQUqdtB250 co6VezFgn/aohm0tt3PsFC498LCD0NhK -----END CERTIFICATE-----Generated at Sat Apr 26 03:31:50 2025 by rpki-client