$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft File: MkzIe8yExoFRzDczpQjHilxbSYo.mft (raw, json) Hash identifier: NKS49qiB0j1SpVAziD0SJnaGAdAYsq3OsDdU2GKCtHI= Subject key identifier: F9:57:F0:02:19:32:7C:55:E5:A2:9B:B6:81:51:A7:66:9D:98:06:C4 Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A Certificate issuer: /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft Manifest number: 91 Signing time: Sat 29 Mar 2025 05:45:19 +0000 Manifest this update: Sat 29 Mar 2025 05:45:19 +0000 Manifest next update: Sat 05 Apr 2025 05:45:19 +0000 Files and hashes: 1: MkzIe8yExoFRzDczpQjHilxbSYo.crl (hash: tNB2yRv3ckhZm4nz/712w59oFTDP8oKHrTftbJX/LOY=) 2: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (hash: GXX1SqQqnLs/QR8YWu9cJWfVt1DZZvg7YhJhKqg5IbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116E6 Validity Not Before: Mar 29 05:45:19 2025 GMT Not After : Apr 5 05:45:19 2025 GMT Subject: CN=67e788ef-b151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:ad:62:16:14:93:f3:5a:94:fc:30:a5:eb: 54:bd:52:3a:19:69:b7:96:69:ad:94:16:f4:77:be: 78:c9:db:84:7a:a6:82:e0:e5:35:36:b9:01:90:d6: b5:26:f1:5d:ae:8d:4f:05:30:58:0e:19:21:8e:d4: a8:76:09:a4:53:81:16:e8:ad:93:8c:83:79:be:e8: b6:3d:ee:8a:36:3d:09:8c:24:93:76:e5:88:87:42: eb:79:c4:73:01:a3:e7:b5:30:55:26:5f:80:74:08: df:dc:a8:b2:0c:ab:79:5b:2a:a1:82:15:2c:55:53: 54:13:ae:37:b3:5c:2c:fd:40:56:fe:a9:f3:db:ca: 80:18:b8:66:06:7d:80:4d:82:65:ee:43:3a:e0:d6: de:b5:b6:41:36:f4:bb:4a:ee:13:29:13:2f:f1:ab: 74:7f:41:fb:f3:7c:cc:e9:7e:34:27:0d:a8:37:aa: d2:3e:62:f3:49:4b:27:e9:3f:7c:c4:d1:39:8d:45: 38:95:ec:13:9f:c3:a0:cc:97:8d:68:e7:6a:ce:b1: ca:d3:8b:d1:e8:de:08:42:e1:ad:8c:7b:88:52:7f: 6c:67:46:a6:06:5d:cd:fa:5d:32:1c:11:65:89:8c: 68:35:cb:ae:33:31:51:09:fb:87:ce:f4:97:78:1a: fc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:57:F0:02:19:32:7C:55:E5:A2:9B:B6:81:51:A7:66:9D:98:06:C4 X509v3 Authority Key Identifier: keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:dd:89:8c:2b:e5:dd:7d:3e:5b:7d:31:b2:72:ca:54:5c:98: c8:6f:35:79:0b:08:ac:37:ba:ff:0f:c1:29:2a:79:70:e0:3a: 76:41:4a:cb:06:ca:cc:1b:56:23:d8:74:6e:3d:fb:8c:00:8f: 2d:9c:4b:ee:49:11:88:b2:2f:25:86:3b:af:3c:36:80:72:b0: ba:67:f1:41:a2:13:92:08:55:96:7e:2f:7e:46:7a:50:c9:52: 89:a0:78:74:58:d5:80:4a:ee:12:7f:60:78:eb:f6:93:d0:83: ef:16:1c:b2:3f:0f:61:f3:db:cb:8e:b1:86:63:cd:44:cc:df: 15:a4:d6:f5:b5:02:6b:51:e3:e6:4e:21:33:f5:66:56:7f:37: 98:33:e2:85:ed:58:17:a1:f4:03:2b:3a:5e:47:b2:8d:e7:e0: 0a:21:cc:53:82:9b:54:ae:c4:51:a1:63:5f:47:a9:bf:92:8d: 3d:3e:8e:3f:14:67:5f:6e:bb:6c:61:f8:f0:01:c6:5b:a9:76: bd:5c:ad:2b:d4:bb:25:a5:ea:3d:0a:d6:2a:91:cc:69:98:d3: b8:fb:33:63:6b:70:23:10:c1:b6:22:33:73:a1:a2:76:4b:90: 1d:1d:e8:6f:f9:04:d6:29:41:dd:83:22:41:ba:ea:b8:12:b8: 1b:88:53:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RTYxMTAvBgNVBAUTKDMyNENDODdCQ0M4NEM2ODE1MUNDMzczM0E1MDhDNzhB NUM1QjQ5OEEwHhcNMjUwMzI5MDU0NTE5WhcNMjUwNDA1MDU0NTE5WjAYMRYwFAYD VQQDEw02N2U3ODhlZi1iMTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu++tYhYUk/NalPwwpetUvVI6GWm3lmmtlBb0d754yduEeqaC4OU1NrkBkNa1 JvFdro1PBTBYDhkhjtSodgmkU4EW6K2TjIN5vui2Pe6KNj0JjCSTduWIh0LrecRz AaPntTBVJl+AdAjf3KiyDKt5WyqhghUsVVNUE643s1ws/UBW/qnz28qAGLhmBn2A TYJl7kM64NbetbZBNvS7Su4TKRMv8at0f0H783zM6X40Jw2oN6rSPmLzSUsn6T98 xNE5jUU4lewTn8OgzJeNaOdqzrHK04vR6N4IQuGtjHuIUn9sZ0amBl3N+l0yHBFl iYxoNcuuMzFRCfuHzvSXeBr8UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlX8AIZ MnxV5aKbtoFRp2admAbEMB8GA1UdIwQYMBaAFDJMyHvMhMaBUcw3M6UIx4pcW0mK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZFNi9EN0QzNjIzODMx RjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhvRlJ6RGN6cFFqSGlseGJT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rekllOHlFeG9GUnpEY3pwUWpIaWx4YlNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZFNi9EN0QzNjIzODMxRjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhv RlJ6RGN6cFFqSGlseGJTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh3YmMK+XdfT5bfTGycspUXJjIbzV5CwisN7r/D8EpKnlw4Dp2QUrL BsrMG1Yj2HRuPfuMAI8tnEvuSRGIsi8lhjuvPDaAcrC6Z/FBohOSCFWWfi9+RnpQ yVKJoHh0WNWASu4Sf2B46/aT0IPvFhyyPw9h89vLjrGGY81EzN8VpNb1tQJrUePm TiEz9WZWfzeYM+KF7VgXofQDKzpeR7KN5+AKIcxTgptUrsRRoWNfR6m/ko09Po4/ FGdfbrtsYfjwAcZbqXa9XK0r1Lslpeo9CtYqkcxpmNO4+zNja3AjEMG2IjNzoaJ2 S5AdHehv+QTWKUHdgyJBuuq4ErgbiFNg -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:42 2025 by rpki-client