$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: QN+KiVgNXZukm+Cr/5QOV/Zau8LbBVD4TIZFBouU2ZM= Subject key identifier: 6E:04:2D:5A:FD:EF:74:3B:F1:40:B9:79:C8:5E:75:F8:E4:F5:17:85 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: F9 Signing time: Fri 25 Apr 2025 04:19:23 +0000 Manifest this update: Fri 25 Apr 2025 04:19:23 +0000 Manifest next update: Fri 02 May 2025 04:19:23 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: XC8Eao0EprqRNoq6+QnE8VXnkPUdsU2BWkmf9QMjqhk=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Apr 25 04:19:23 2025 GMT Not After : May 2 04:19:23 2025 GMT Subject: CN=680b0d4b-bbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:f8:c8:9b:f6:61:e6:50:f1:64:f2:36:70: b9:80:42:59:67:ed:5f:04:9d:d4:fa:e8:d7:90:37: 27:d1:34:68:7c:aa:e0:8a:39:56:60:ed:99:ab:cf: c9:12:49:95:0a:1d:b0:6c:f7:0e:3e:26:40:2e:4e: 35:5b:0f:9d:d5:c1:68:22:a7:da:7d:23:e1:7f:12: 46:b9:3d:ca:91:14:d7:56:6f:ac:15:c3:50:a7:a0: 28:df:ea:b8:a4:ca:93:77:f6:dd:39:fb:25:4e:ca: 63:09:f7:46:d5:ea:cd:74:b7:c4:46:b0:22:68:54: 83:fe:fa:bb:a8:bf:30:a8:69:f8:1d:c9:bb:5f:50: 78:b0:a5:5f:25:96:a3:f7:8b:54:96:39:43:40:c9: af:a6:0a:ce:b0:cb:c8:07:7e:38:23:a3:49:36:6a: bf:85:00:95:81:95:d8:bf:bb:07:07:cc:08:f7:4f: fb:b6:94:5a:57:f3:0b:b2:89:08:f0:6f:4f:32:83: ba:7d:f8:96:73:1c:84:5c:45:ba:e7:97:65:d2:f5: 16:c2:ba:1f:72:e9:29:5c:53:e9:43:13:91:ca:21: 05:82:34:12:fd:da:aa:7d:16:99:55:2a:ed:43:45: c6:9f:7f:e5:2c:2f:6f:44:c9:bc:24:6e:8d:29:a7: 37:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:04:2D:5A:FD:EF:74:3B:F1:40:B9:79:C8:5E:75:F8:E4:F5:17:85 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:02:ba:4d:da:31:5e:a5:f3:da:ee:c0:7c:ca:4c:9c:5d:37: 62:12:e7:4b:f9:de:f6:c1:b1:a6:13:59:c9:5f:51:f3:2f:bc: 08:58:5b:e1:2f:2a:4d:11:c1:c1:c0:ef:1c:a3:b0:fb:93:f1: 2f:e2:37:d7:18:dd:20:92:41:3f:cf:0d:9e:f9:b9:3a:fc:13: 74:26:33:d2:2b:91:59:71:e6:ce:60:fd:10:e8:0b:5d:c9:51: 07:d9:38:3e:d8:ad:1a:8d:4a:14:ef:32:7f:ea:3a:26:98:e0: 97:f4:94:d8:91:34:90:a1:2b:ff:4f:bf:08:e3:86:3f:17:b9: 4c:f4:8b:b2:8a:5a:ea:b3:ea:ca:a7:88:ac:99:46:47:06:98: 4b:5f:28:21:cf:3c:76:48:81:f8:f8:4e:c3:85:d3:12:e9:55: 1f:bb:c1:b6:ae:98:04:46:39:cf:24:5c:61:74:3e:9a:91:63: 62:f3:43:6b:2e:72:35:6c:14:ff:f3:68:35:4e:b2:e9:a6:55: 64:71:63:1e:56:39:39:3e:16:8e:9f:c4:b2:2a:83:6d:96:da: 1f:c4:b5:3a:fe:7d:f8:e1:2d:c3:0c:cc:81:39:19:9e:5d:4d: 53:fc:68:e9:c5:81:11:a6:6b:6d:fb:ea:35:6c:15:8f:fd:f5: fc:93:66:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwNDI1MDQxOTIzWhcNMjUwNTAyMDQxOTIzWjAYMRYwFAYD VQQDEw02ODBiMGQ0Yi1iYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOT4yJv2YeZQ8WTyNnC5gEJZZ+1fBJ3U+ujXkDcn0TRofKrgijlWYO2Zq8/J EkmVCh2wbPcOPiZALk41Ww+d1cFoIqfafSPhfxJGuT3KkRTXVm+sFcNQp6Ao3+q4 pMqTd/bdOfslTspjCfdG1erNdLfERrAiaFSD/vq7qL8wqGn4Hcm7X1B4sKVfJZaj 94tUljlDQMmvpgrOsMvIB344I6NJNmq/hQCVgZXYv7sHB8wI90/7tpRaV/MLsokI 8G9PMoO6ffiWcxyEXEW655dl0vUWwrofcukpXFPpQxORyiEFgjQS/dqqfRaZVSrt Q0XGn3/lLC9vRMm8JG6NKac3iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4ELVr9 73Q78UC5echedfjk9ReFMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLArpN2jFepfPa7sB8ykycXTdiEudL+d72wbGmE1nJX1HzL7wIWFvh LypNEcHBwO8co7D7k/Ev4jfXGN0gkkE/zw2e+bk6/BN0JjPSK5FZcebOYP0Q6Atd yVEH2Tg+2K0ajUoU7zJ/6jommOCX9JTYkTSQoSv/T78I44Y/F7lM9Iuyilrqs+rK p4ismUZHBphLXyghzzx2SIH4+E7DhdMS6VUfu8G2rpgERjnPJFxhdD6akWNi80Nr LnI1bBT/82g1TrLpplVkcWMeVjk5PhaOn8SyKoNtltofxLU6/n344S3DDMyBORme XU1T/GjpxYERpmtt++o1bBWP/fX8k2b6 -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:35 2025 by rpki-client