$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json) Hash identifier: Y8KNcIW7HofEmyD4EzvDoung2RWNhV28tXoApEwS96g= Subject key identifier: A4:A5:B4:99:AF:2C:0B:38:7B:0B:63:4B:5B:16:22:3D:A4:EB:63:6D Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft Manifest number: 017E Signing time: Fri 25 Apr 2025 02:57:49 +0000 Manifest this update: Fri 25 Apr 2025 02:57:48 +0000 Manifest next update: Fri 02 May 2025 02:57:48 +0000 Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: P74UxKv7GqTOVybuz1Brgji2+pXe7Jn2Jw6FAe9FqgE=) 2: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: jWM3qF3q7kpRiSXeFFNjIBgWbV7okecU61rSD6G1V5E=) 3: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: LSSqPw0m9vdH2z02yt+UwvMOawigT/2JykBCEQ4iiVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Validity Not Before: Apr 25 02:57:48 2025 GMT Not After : May 2 02:57:48 2025 GMT Subject: CN=680afa2d-7834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:e4:9c:e9:42:e6:1a:09:9c:cc:79:ec:e1: f5:d8:ae:e0:17:b4:73:97:4f:6c:15:f2:0e:72:85: 00:8b:73:c1:bc:c5:dc:59:e8:aa:de:2c:1a:13:11: 98:c4:4c:5b:8f:6a:a8:ea:ad:f5:32:f1:2c:0f:aa: a2:34:8a:0b:91:de:89:5a:86:54:7c:f4:14:08:d3: d5:86:c6:4f:01:ac:3f:4e:79:8e:c9:6f:6d:bb:5e: 94:70:dd:0c:81:b3:95:c3:37:ab:00:b0:0f:76:c8: bc:4d:d7:84:c8:73:df:92:15:38:ed:c1:b8:48:5a: 61:ab:be:eb:f9:f8:4d:fa:4a:04:40:05:91:62:88: 32:c4:4d:de:c6:4b:a2:bd:17:ed:62:4f:d3:32:80: 1a:ca:36:74:75:ea:6b:f8:72:10:de:71:dd:b7:6e: 57:21:ad:29:a7:ff:f0:a9:3b:6b:93:4c:a4:3f:c2: c6:b7:47:f6:46:64:09:d9:5a:c5:04:85:09:1e:35: 08:fd:c0:ea:4e:02:cd:94:be:69:78:d5:b3:1c:65: cb:78:70:b7:f1:58:55:4b:82:ee:a0:14:40:f9:46: 48:e0:b6:f0:54:81:f1:df:7d:9c:8c:a2:83:90:5d: 4c:78:2b:6c:b0:a4:fb:0e:a5:e8:a2:d1:f1:4f:79: ab:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A5:B4:99:AF:2C:0B:38:7B:0B:63:4B:5B:16:22:3D:A4:EB:63:6D X509v3 Authority Key Identifier: keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:df:b5:60:9e:65:b0:45:fb:f6:c5:d8:36:75:4c:16:a0:46: 60:37:4b:2d:af:b6:38:8e:bd:3a:7e:36:e2:27:d8:4f:dc:81: bf:1a:32:1a:a9:61:d5:54:bd:24:f8:7c:2b:28:2d:a1:d5:51: 46:16:ba:13:eb:92:a6:8c:15:97:9a:c8:4b:d9:b2:0a:cc:f5: c5:02:a0:5b:01:72:92:37:ec:b6:2b:e2:b2:7f:72:94:a9:27: 9c:9e:3b:64:12:45:57:7c:ad:2e:60:39:cf:be:1e:82:80:c2: 33:1a:65:f4:0a:f7:ce:fd:0d:6d:41:ce:85:49:3b:7b:b9:24: 03:86:ad:14:f0:40:b2:93:7b:cf:6d:d1:06:80:ca:f6:86:f5: e5:1f:be:cc:6e:64:53:e4:0c:19:b4:33:22:65:2c:40:d7:88: 92:85:57:b6:34:8b:43:1d:7b:73:b6:f4:8c:f7:f5:38:6d:8d: 6c:69:83:89:37:5d:39:fe:4a:c3:cf:fc:59:1c:7a:50:15:60: 3f:a4:91:9c:09:39:58:ff:6b:7b:44:fb:5e:6b:79:7f:78:48: bc:94:f3:bc:7c:e1:c8:1f:86:de:6f:0f:4d:9a:0e:7e:93:63: 7c:fa:1a:d0:0b:b6:56:9d:b9:fb:57:b9:6b:91:bf:63:6e:ce: f7:17:0e:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0 NzYzNEJFRjcwHhcNMjUwNDI1MDI1NzQ4WhcNMjUwNTAyMDI1NzQ4WjAYMRYwFAYD VQQDEw02ODBhZmEyZC03ODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut7knOlC5hoJnMx57OH12K7gF7Rzl09sFfIOcoUAi3PBvMXcWeiq3iwaExGY xExbj2qo6q31MvEsD6qiNIoLkd6JWoZUfPQUCNPVhsZPAaw/TnmOyW9tu16UcN0M gbOVwzerALAPdsi8TdeEyHPfkhU47cG4SFphq77r+fhN+koEQAWRYogyxE3exkui vRftYk/TMoAayjZ0depr+HIQ3nHdt25XIa0pp//wqTtrk0ykP8LGt0f2RmQJ2VrF BIUJHjUI/cDqTgLNlL5peNWzHGXLeHC38VhVS4LuoBRA+UZI4LbwVIHx332cjKKD kF1MeCtssKT7DqXootHxT3mr2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSltJmv LAs4ewtjS1sWIj2k62NtMB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFFOS9CQkNENUQyQ0VGQ0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2 WEJsYVhtMng2a1pIWTB2dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL37VgnmWwRfv2xdg2dUwWoEZgN0str7Y4jr06fjbiJ9hP3IG/GjIa qWHVVL0k+HwrKC2h1VFGFroT65KmjBWXmshL2bIKzPXFAqBbAXKSN+y2K+Kyf3KU qSecnjtkEkVXfK0uYDnPvh6CgMIzGmX0CvfO/Q1tQc6FSTt7uSQDhq0U8ECyk3vP bdEGgMr2hvXlH77MbmRT5AwZtDMiZSxA14iShVe2NItDHXtztvSM9/U4bY1saYOJ N105/krDz/xZHHpQFWA/pJGcCTlY/2t7RPtea3l/eEi8lPO8fOHIH4bebw9Nmg5+ k2N8+hrQC7ZWnbn7V7lrkb9jbs73Fw4R -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:21 2025 by rpki-client