$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json) Hash identifier: orQV/cnESnxSV0IP/LNhDcQ1MoDN5yuzQFPMdgfi4N0= Subject key identifier: 4E:22:C6:47:63:62:5B:1D:BB:0F:CF:CA:E1:3B:F4:90:D4:76:BF:7F Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft Manifest number: 0145 Signing time: Fri 25 Apr 2025 03:24:30 +0000 Manifest this update: Fri 25 Apr 2025 03:24:29 +0000 Manifest next update: Fri 02 May 2025 03:24:29 +0000 Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: 8dVW6AMgHMi5V+DNsU8zdZ8UArrBZB8bl23u6xpvfhY=) 2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: +03LMs4GrIEKMr4AUS8THT/+aKHBZJZQJL5qDyXGi38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: Apr 25 03:24:29 2025 GMT Not After : May 2 03:24:29 2025 GMT Subject: CN=680b006e-238e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:1c:68:4a:2e:5f:66:04:e0:19:81:22:dd: 3e:f7:b2:78:0e:7f:e3:f5:8b:cd:60:b9:e0:ca:13: 40:b2:3d:70:b4:8f:72:67:ff:96:e3:66:db:f9:88: df:49:d6:ea:ba:cc:18:cc:2c:46:8c:86:2c:ca:d4: 61:d1:6b:4c:0d:29:59:5a:90:2f:1b:f4:84:a8:af: 9c:89:19:79:22:80:d3:38:72:d8:09:87:22:4d:4e: 6a:9c:d7:ad:c5:35:84:4f:b8:28:fa:e4:7e:b3:12: 47:0b:32:eb:33:67:e4:a9:f7:ab:0c:a1:15:ab:05: 9b:ab:36:9f:81:60:e2:02:2b:33:95:79:64:ee:e4: 70:fe:ca:e7:ce:df:5e:21:01:79:24:2d:41:14:5d: 46:d2:1f:03:0e:77:93:98:9a:d9:d5:a3:b5:ab:5c: e6:33:ed:c9:0f:4b:cc:d1:52:af:4e:4e:f1:ee:66: 7c:4f:b7:aa:66:64:a9:2d:1a:42:e3:b9:78:37:3a: 39:a5:2b:5e:dd:6c:5f:93:eb:eb:29:a6:df:08:e1: e4:29:89:01:cb:4e:e9:23:c0:d3:8b:85:3d:b2:f5: 49:31:72:19:17:41:29:de:5f:8f:ec:5f:b4:be:22: 00:ea:62:14:0a:76:26:ef:6c:94:ad:c5:6e:31:4e: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:22:C6:47:63:62:5B:1D:BB:0F:CF:CA:E1:3B:F4:90:D4:76:BF:7F X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a7:3d:e3:35:12:02:9a:3e:8c:44:a5:e2:6d:3d:e5:07:d7: 1d:eb:8c:ba:14:30:cb:a3:1d:a7:c6:1e:f8:40:db:23:ac:5a: a6:de:45:78:17:00:2b:4c:e3:00:bf:cc:38:59:8d:0d:84:4f: 2b:10:0b:1a:2c:11:07:ad:3b:62:47:01:a5:df:10:b1:4e:60: 7f:77:60:f6:0d:7b:6c:81:f4:f3:8c:02:eb:e1:49:e5:52:a4: b8:58:00:63:97:f8:e2:fb:41:27:bf:3a:5b:ff:a9:eb:7c:eb: 95:6c:cc:70:27:3b:ff:a1:30:43:58:74:7f:dd:f6:47:a6:1c: 6c:d3:15:32:36:01:6f:05:0a:95:89:ff:1c:60:f5:b7:c9:6c: ea:76:47:ce:db:fa:7b:b6:14:99:91:ab:1b:5b:94:6c:60:d3: 70:85:a1:c4:39:a9:89:48:52:ef:18:5b:96:f9:2e:c2:4a:30: c8:b0:cc:9a:c8:30:94:dd:bc:0c:70:d2:eb:c0:77:66:7c:23: 58:68:e2:ad:b9:1d:5e:ca:50:32:b5:f7:c6:69:be:67:34:68: 37:e9:ab:a5:7e:45:14:23:66:23:18:1d:67:68:1b:48:90:7f: f6:67:53:fb:13:74:df:03:f0:73:3a:2e:ac:b4:85:81:db:ed: 00:3b:54:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4 MURBNEIzMUMwHhcNMjUwNDI1MDMyNDI5WhcNMjUwNTAyMDMyNDI5WjAYMRYwFAYD VQQDEw02ODBiMDA2ZS0yMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyh8caEouX2YE4BmBIt0+97J4Dn/j9YvNYLngyhNAsj1wtI9yZ/+W42bb+Yjf SdbquswYzCxGjIYsytRh0WtMDSlZWpAvG/SEqK+ciRl5IoDTOHLYCYciTU5qnNet xTWET7go+uR+sxJHCzLrM2fkqferDKEVqwWbqzafgWDiAiszlXlk7uRw/srnzt9e IQF5JC1BFF1G0h8DDneTmJrZ1aO1q1zmM+3JD0vM0VKvTk7x7mZ8T7eqZmSpLRpC 47l4Nzo5pSte3Wxfk+vrKabfCOHkKYkBy07pI8DTi4U9svVJMXIZF0Ep3l+P7F+0 viIA6mIUCnYm72yUrcVuMU477QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4ixkdj Ylsduw/PyuE79JDUdr9/MB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq M2E1amRsWlBqVmFCMmtzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjpz3jNRICmj6MRKXibT3lB9cd64y6FDDLox2nxh74QNsjrFqm3kV4 FwArTOMAv8w4WY0NhE8rEAsaLBEHrTtiRwGl3xCxTmB/d2D2DXtsgfTzjALr4Unl UqS4WABjl/ji+0Envzpb/6nrfOuVbMxwJzv/oTBDWHR/3fZHphxs0xUyNgFvBQqV if8cYPW3yWzqdkfO2/p7thSZkasbW5RsYNNwhaHEOamJSFLvGFuW+S7CSjDIsMya yDCU3bwMcNLrwHdmfCNYaOKtuR1eylAytffGab5nNGg36aulfkUUI2YjGB1naBtI kH/2Z1P7E3TfA/BzOi6stIWB2+0AO1Sh -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:11 2025 by rpki-client