$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft File: bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json) Hash identifier: gXCmZA94GIk6XzmGHCBH40NpQX6iBZn5Rnx02PagKK0= Subject key identifier: 3D:6D:8D:C3:88:FA:45:0D:CD:EA:9E:4A:26:06:51:C7:18:84:0B:9A Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 Certificate issuer: /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft Manifest number: C1 Signing time: Fri 25 Apr 2025 05:00:03 +0000 Manifest this update: Fri 25 Apr 2025 05:00:03 +0000 Manifest next update: Fri 02 May 2025 05:00:03 +0000 Files and hashes: 1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: 3aBG8KP3VTV2F9NIoStcjO/H05iaXKOHN2Y+qEr3QtQ=) 2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: svWCFcB6b/XkbZIPeHevXUk9kvL6MAqPQu9nAp05skM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Validity Not Before: Apr 25 05:00:03 2025 GMT Not After : May 2 05:00:03 2025 GMT Subject: CN=680b16d3-c94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5d:5b:c2:7f:d3:69:d1:63:74:45:46:a1:ec: 2f:0f:ba:0d:89:95:1d:5b:ab:29:8c:03:21:9f:8d: be:9f:93:49:d3:23:de:e4:c0:0b:8c:5e:be:6e:5d: 0b:f3:c2:9f:e6:b5:4f:06:39:3b:ea:1c:d0:62:e4: d4:ce:57:98:3e:6a:1c:ea:f5:be:6d:6d:9c:03:3e: 20:97:20:61:ce:12:c6:e8:7d:96:46:cb:7c:d1:40: 4a:82:ef:ec:8d:ef:b7:ce:c6:3a:b3:d0:d1:0e:73: 31:bb:f7:f3:2d:3e:a0:ce:12:40:cf:74:a1:73:87: c9:b2:8e:83:82:cb:d0:f4:66:f1:8c:c2:3e:aa:ff: dd:1b:60:91:95:49:aa:de:4e:3d:b2:e5:33:d2:6b: b3:49:c2:8d:9d:88:96:79:1c:80:e8:2d:ca:fb:23: 6f:b8:19:fa:1d:6b:1e:ff:a8:1b:d9:4c:4d:06:c3: a3:02:27:7b:40:c2:81:4d:67:c6:d2:00:68:e7:40: 32:2e:af:ac:b7:40:50:ae:7e:4f:a4:c4:55:c8:f4: ce:b2:b2:58:1d:4f:99:1a:3a:d7:a1:30:9f:88:c7: b0:4f:71:24:cf:d6:91:40:a2:c7:f9:ac:17:10:f9: 07:e3:d2:04:b7:d0:4d:32:0b:4d:65:cb:26:55:f3: 74:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6D:8D:C3:88:FA:45:0D:CD:EA:9E:4A:26:06:51:C7:18:84:0B:9A X509v3 Authority Key Identifier: keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b2:70:95:86:07:ae:fb:b6:b6:2a:41:0c:7c:3e:34:fa:1e: e0:6a:4a:e6:0e:34:24:2f:41:46:02:10:b8:cf:99:00:a9:4d: 2e:7b:17:6a:9c:1c:23:8b:17:52:fe:ce:51:d0:bd:00:77:79: 1b:7e:a3:b9:fc:e5:be:89:ad:15:40:66:13:ed:d4:25:d1:52: af:ec:e1:8e:de:5d:d6:03:70:c6:d3:25:92:1c:e0:4b:89:19: 48:40:c5:52:37:b3:77:e2:55:d7:a7:15:4f:4b:3a:6b:48:72: 66:4c:e9:06:9a:11:29:06:32:57:dc:0e:f6:03:47:9a:d2:e8: 97:31:00:f5:3a:43:28:59:e4:4f:f6:0c:5c:f4:39:ab:09:a2: 76:09:e4:97:74:10:01:ef:20:99:a9:58:46:f2:5f:54:33:13: b8:f3:dc:4c:20:71:0c:97:a0:70:c2:d4:b2:de:14:e9:2f:6c: a3:fe:6f:ab:86:98:c5:f7:2a:a0:28:ef:c9:ba:a3:3e:41:2b: a6:c4:f0:e1:c5:ca:78:78:c8:c8:90:02:d2:1a:d2:3b:e0:2e: 1d:bd:67:b9:47:5a:43:42:10:50:43:17:7f:56:bc:16:02:20: 2f:c2:da:54:a7:f6:70:6c:d1:29:54:a7:d1:c9:4c:f9:25:00: 9d:b8:8b:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDM0YxMTAvBgNVBAUTKDZDRTBFOTQ5NzExQjIwM0U0QUNCMjJCNjgwRjNGRkY0 N0VEMTZDNjEwHhcNMjUwNDI1MDUwMDAzWhcNMjUwNTAyMDUwMDAzWjAYMRYwFAYD VQQDEw02ODBiMTZkMy1jOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv11bwn/TadFjdEVGoewvD7oNiZUdW6spjAMhn42+n5NJ0yPe5MALjF6+bl0L 88Kf5rVPBjk76hzQYuTUzleYPmoc6vW+bW2cAz4glyBhzhLG6H2WRst80UBKgu/s je+3zsY6s9DRDnMxu/fzLT6gzhJAz3Shc4fJso6DgsvQ9GbxjMI+qv/dG2CRlUmq 3k49suUz0muzScKNnYiWeRyA6C3K+yNvuBn6HWse/6gb2UxNBsOjAid7QMKBTWfG 0gBo50AyLq+st0BQrn5PpMRVyPTOsrJYHU+ZGjrXoTCfiMewT3Ekz9aRQKLH+awX EPkH49IEt9BNMgtNZcsmVfN0VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1tjcOI +kUNzeqeSiYGUccYhAuaMB8GA1UdIwQYMBaAFGzg6UlxGyA+SssitoDz//R+0Wxh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREMzRi81Q0U4MTA0NjBF QjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklENUt5eUsyZ1BQXzlIN1Ji R0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPRHBTWEViSUQ1S3l5SzJnUFBfOUg3UmJHRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REMzRi81Q0U4MTA0NjBFQjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklE NUt5eUsyZ1BQXzlIN1JiR0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJsnCVhgeu+7a2KkEMfD40+h7gakrmDjQkL0FGAhC4z5kAqU0uexdq nBwjixdS/s5R0L0Ad3kbfqO5/OW+ia0VQGYT7dQl0VKv7OGO3l3WA3DG0yWSHOBL iRlIQMVSN7N34lXXpxVPSzprSHJmTOkGmhEpBjJX3A72A0ea0uiXMQD1OkMoWeRP 9gxc9DmrCaJ2CeSXdBAB7yCZqVhG8l9UMxO489xMIHEMl6BwwtSy3hTpL2yj/m+r hpjF9yqgKO/JuqM+QSumxPDhxcp4eMjIkALSGtI74C4dvWe5R1pDQhBQQxd/VrwW AiAvwtpUp/ZwbNEpVKfRyUz5JQCduItE -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:58 2025 by rpki-client