$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft File: grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json) Hash identifier: BUzVbTXoy9WKoU08TNrat1mjXw/35W6Sgj8zr4H/rR8= Subject key identifier: 16:D4:18:06:6D:E6:D3:06:8F:42:4B:9C:3F:DB:96:48:3E:7F:BF:2C Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft Manifest number: 9A Signing time: Fri 25 Apr 2025 05:20:49 +0000 Manifest this update: Fri 25 Apr 2025 05:20:48 +0000 Manifest next update: Fri 02 May 2025 05:20:48 +0000 Files and hashes: 1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: 6ZbecP/cGcRPmPaBPXzjBjjKRBGZYkmG0XhTe99lVMY=) 2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: cLX/NcpRBUgL7nqhk0rMjH0omx3nN9XKcz3vUbvy2EE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Validity Not Before: Apr 25 05:20:48 2025 GMT Not After : May 2 05:20:48 2025 GMT Subject: CN=680b1bb0-b955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:7c:67:e8:c6:c9:b4:98:b8:cc:39:0c:df: 5c:15:5d:7a:aa:ab:01:c9:af:82:2c:2e:fd:46:b3: 55:db:fc:b7:2b:c0:71:12:a1:36:9e:7c:20:27:66: bb:35:e9:97:90:0d:ad:fb:5c:4f:04:74:20:d8:ec: 71:9b:52:b0:56:3b:78:f5:6c:33:8f:ad:71:23:e4: 87:d7:73:2c:f8:91:43:31:43:59:9c:5f:08:38:ef: a9:c8:7c:ca:71:96:37:20:e5:2b:9d:e0:c1:9e:0e: 45:f5:23:f8:c9:4d:a1:e5:c9:be:b5:43:96:2c:a2: 3a:89:45:26:79:96:c8:b9:16:de:eb:ef:3f:1b:53: 18:3a:be:f4:7b:a1:36:a5:44:43:1f:f0:af:80:94: 02:03:0b:d0:da:7f:f6:d5:1b:66:ea:d3:34:2e:86: a5:c3:44:15:a6:83:32:f7:e8:a8:b2:bf:e5:60:c1: 20:a8:9c:ca:90:1e:f2:85:dd:a4:1e:b1:68:8c:23: b6:1e:4e:c7:1b:6a:83:07:3e:ce:00:79:13:dc:c4: 58:bb:46:eb:cf:c4:c4:7a:c3:97:1c:4f:5c:9d:c0: 21:19:e4:23:ba:e3:16:1a:df:08:1c:30:1c:42:77: 93:63:17:86:e8:f4:9d:77:84:46:c8:8f:b7:50:f4: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D4:18:06:6D:E6:D3:06:8F:42:4B:9C:3F:DB:96:48:3E:7F:BF:2C X509v3 Authority Key Identifier: keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3e:ca:65:19:d2:d0:b3:5a:77:18:73:7e:e3:6e:64:c8:b8: cc:ba:60:a2:0e:8f:b8:9e:2a:76:ab:2e:36:85:37:54:47:2f: da:5e:e0:d1:a8:5f:9d:bd:05:41:11:f5:43:7a:3f:1b:fa:f3: 02:6e:b5:5c:49:a4:76:29:12:f6:68:66:6b:b0:eb:8a:31:35: 43:3c:0d:f5:6a:a2:ce:fb:9e:14:1e:ca:99:b9:b0:ce:95:f9: 52:6a:ac:62:32:cd:67:5a:1f:4d:b3:1f:0b:b7:4c:63:c4:8a: 1d:85:95:6a:c8:d8:0f:2d:92:d9:c7:16:53:b4:e8:39:bc:10: bf:4c:ec:97:cd:96:00:90:ac:be:34:81:60:98:ee:63:c4:2c: 44:18:2b:41:6b:f5:7e:9d:5a:db:30:c1:88:64:82:4f:36:0f: 3f:03:6b:af:f0:6d:65:e8:40:c7:bf:f8:86:2c:5b:58:8a:b3: d0:01:26:19:18:fb:84:7c:9f:a9:e2:56:49:1c:ab:b5:70:5b: 32:ff:5a:82:cf:6f:3d:6d:c1:a1:3c:2b:cf:3c:ac:05:9e:6f: 68:8c:df:38:e6:aa:93:37:5a:b8:45:47:4a:02:30:d3:5d:e2: d9:f8:a4:97:86:e6:bc:ea:f9:d9:c8:dc:d4:68:42:3c:a0:52: f9:1e:0a:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3OUYxMTAvBgNVBAUTKDgyQjREMjcxREUyMTJFMDYzMzVDMEI0NUU2NjUxN0I1 MDhCODM1MTYwHhcNMjUwNDI1MDUyMDQ4WhcNMjUwNTAyMDUyMDQ4WjAYMRYwFAYD VQQDEw02ODBiMWJiMC1iOTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UR8Z+jGybSYuMw5DN9cFV16qqsBya+CLC79RrNV2/y3K8BxEqE2nnwgJ2a7 NemXkA2t+1xPBHQg2Oxxm1KwVjt49Wwzj61xI+SH13Ms+JFDMUNZnF8IOO+pyHzK cZY3IOUrneDBng5F9SP4yU2h5cm+tUOWLKI6iUUmeZbIuRbe6+8/G1MYOr70e6E2 pURDH/CvgJQCAwvQ2n/21Rtm6tM0Loalw0QVpoMy9+iosr/lYMEgqJzKkB7yhd2k HrFojCO2Hk7HG2qDBz7OAHkT3MRYu0brz8TEesOXHE9cncAhGeQjuuMWGt8IHDAc QneTYxeG6PSdd4RGyI+3UPR/VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbUGAZt 5tMGj0JLnD/blkg+f78sMB8GA1UdIwQYMBaAFIK00nHeIS4GM1wLReZlF7UIuDUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzc5Ri82Rjk5RDRGMDND RjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExnWXpYQXRGNW1VWHRRaTRO UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mzc5Ri82Rjk5RDRGMDNDRjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExn WXpYQXRGNW1VWHRRaTROUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApPsplGdLQs1p3GHN+425kyLjMumCiDo+4nip2qy42hTdURy/aXuDR qF+dvQVBEfVDej8b+vMCbrVcSaR2KRL2aGZrsOuKMTVDPA31aqLO+54UHsqZubDO lflSaqxiMs1nWh9Nsx8Lt0xjxIodhZVqyNgPLZLZxxZTtOg5vBC/TOyXzZYAkKy+ NIFgmO5jxCxEGCtBa/V+nVrbMMGIZIJPNg8/A2uv8G1l6EDHv/iGLFtYirPQASYZ GPuEfJ+p4lZJHKu1cFsy/1qCz289bcGhPCvPPKwFnm9ojN845qqTN1q4RUdKAjDT XeLZ+KSXhua86vnZyNzUaEI8oFL5Hgpw -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:09 2025 by rpki-client