$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft File: RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json) Hash identifier: 7BVVnlCUbw1IL72etzgI+D5MxzG+n+m1TzywncHPkIM= Subject key identifier: AF:2F:D6:65:59:D1:AB:5E:AA:75:96:31:18:7C:9C:81:6F:D8:74:9E Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD Certificate issuer: /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD Certificate serial: 06BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft Manifest number: 06BA Signing time: Fri 04 Apr 2025 22:13:56 +0000 Manifest this update: Fri 04 Apr 2025 22:13:55 +0000 Manifest next update: Fri 11 Apr 2025 22:13:55 +0000 Files and hashes: 1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: zRAXjpuYeO//k9YihzhcfbU4p9fnhAjQXUlRjC7DMoY=) 2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: PrgqmGPVCZutr73KuPF9z7k4L5rKkcCQ9HWUA608bqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1727 (0x6bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91167F7 Validity Not Before: Apr 4 22:13:55 2025 GMT Not After : Apr 11 22:13:55 2025 GMT Subject: CN=67f059a3-7dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:2e:9d:82:9f:5a:17:c1:e9:ff:c6:b4:80: da:b8:fd:07:8d:3b:b0:ec:36:7d:39:3c:23:5f:ba: 31:ca:f9:a3:bf:0e:80:53:77:29:d1:0b:a0:1d:6b: d5:ee:1e:5a:40:b8:80:89:10:bf:be:af:98:8f:6a: 35:c2:89:ab:29:12:b7:80:24:6d:17:4c:76:68:40: 26:88:3b:38:04:f9:8c:80:a8:48:bc:1f:fa:3d:cd: 84:d6:8a:2c:f5:34:f5:c8:06:be:f8:9e:88:c8:51: 00:16:09:b8:78:db:1a:52:b9:78:5d:1d:8a:c4:9d: 11:02:ae:6e:fe:3e:fc:7c:8e:7f:ae:70:c6:60:f8: 4b:87:34:05:76:c6:de:f5:fb:75:24:37:67:d2:9a: 99:ee:4c:65:71:92:a0:b9:04:a2:27:b9:e2:a3:dc: c8:f1:49:da:1c:6b:1c:e9:0c:93:d0:73:95:0e:a6: 5c:43:98:a1:28:3b:da:7f:66:87:42:bc:a1:e1:49: fd:81:29:c0:dd:f6:0c:7f:e7:6d:44:2a:8f:5c:e1: bb:31:bd:21:b5:13:12:4e:d4:10:4c:54:af:41:82: ce:7a:9a:de:48:90:cb:24:96:7d:1e:9c:94:25:58: 72:6d:7c:52:29:1a:6a:11:31:c8:24:5f:74:d9:3c: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2F:D6:65:59:D1:AB:5E:AA:75:96:31:18:7C:9C:81:6F:D8:74:9E X509v3 Authority Key Identifier: keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3f:4b:1c:9a:b5:fc:e5:54:63:a3:d7:a5:be:5e:50:60:93: 0b:4c:c0:c3:71:91:8d:5c:50:e5:00:8a:0a:8d:a2:7e:df:00: 91:cd:58:12:cd:14:d2:9d:6f:1e:0e:19:a3:2f:ae:3d:4d:7c: 80:c9:98:87:d7:76:47:66:06:e0:2f:3c:77:ef:97:a4:6d:16: 0a:3c:48:6a:d9:2e:68:06:56:d5:95:cc:2e:ec:fb:14:3f:71: 63:64:95:52:24:77:67:95:eb:b7:73:77:89:1b:d1:30:57:18: c4:f6:e1:b7:66:4d:f7:4b:ef:ff:bf:9a:ca:e4:fc:70:d0:f6: 1f:65:b7:97:ff:f0:5c:a7:2b:21:9b:5b:00:9d:35:36:74:9a: 69:5a:d3:50:24:2a:88:62:af:3e:51:0a:df:c3:52:b6:d5:04: 05:c8:d9:1f:64:f5:7a:cc:be:61:8b:f5:a5:2a:fd:ac:86:e4: f8:a4:5e:70:48:4e:24:9a:d9:91:b9:5c:ff:00:5c:35:70:5d: c3:83:b6:35:de:5c:ca:dd:e9:d0:25:32:39:b0:f1:53:3b:e5: c5:9d:4a:df:01:bc:f7:09:64:f3:05:64:71:40:c1:fd:a4:7a: 46:e9:8e:b6:d3:92:95:e4:62:58:c2:91:1e:38:2b:bc:59:0c: 45:cb:53:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3RjcxMTAvBgNVBAUTKDQ0QzBCM0U1NUU4RjRENTgzMTg2MDVFNzIxMzQ5QzAy QjI4OUMyRkQwHhcNMjUwNDA0MjIxMzU1WhcNMjUwNDExMjIxMzU1WjAYMRYwFAYD VQQDEw02N2YwNTlhMy03ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqk8unYKfWhfB6f/GtIDauP0HjTuw7DZ9OTwjX7oxyvmjvw6AU3cp0QugHWvV 7h5aQLiAiRC/vq+Yj2o1womrKRK3gCRtF0x2aEAmiDs4BPmMgKhIvB/6Pc2E1oos 9TT1yAa++J6IyFEAFgm4eNsaUrl4XR2KxJ0RAq5u/j78fI5/rnDGYPhLhzQFdsbe 9ft1JDdn0pqZ7kxlcZKguQSiJ7nio9zI8UnaHGsc6QyT0HOVDqZcQ5ihKDvaf2aH Qryh4Un9gSnA3fYMf+dtRCqPXOG7Mb0htRMSTtQQTFSvQYLOepreSJDLJJZ9HpyU JVhybXxSKRpqETHIJF902TyOEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8v1mVZ 0ateqnWWMRh8nIFv2HSeMB8GA1UdIwQYMBaAFETAs+Vej01YMYYF5yE0nAKyicL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjdGNy9CRkQzRUIxQTU0 MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRWZ3hoZ1huSVRTY0FyS0p3 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JNQ3o1VjZQVFZneGhnWG5JVFNjQXJLSnd2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjdGNy9CRkQzRUIxQTU0MTYxMUVCQTRENTY4NjNDNEY5QUUwMi9STUN6NVY2UFRW Z3hoZ1huSVRTY0FyS0p3djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfP0scmrX85VRjo9elvl5QYJMLTMDDcZGNXFDlAIoKjaJ+3wCRzVgS zRTSnW8eDhmjL649TXyAyZiH13ZHZgbgLzx375ekbRYKPEhq2S5oBlbVlcwu7PsU P3FjZJVSJHdnleu3c3eJG9EwVxjE9uG3Zk33S+//v5rK5Pxw0PYfZbeX//Bcpysh m1sAnTU2dJppWtNQJCqIYq8+UQrfw1K21QQFyNkfZPV6zL5hi/WlKv2shuT4pF5w SE4kmtmRuVz/AFw1cF3Dg7Y13lzK3enQJTI5sPFTO+XFnUrfAbz3CWTzBWRxQMH9 pHpG6Y6205KV5GJYwpEeOCu8WQxFy1OV -----END CERTIFICATE-----Generated at Sat Apr 5 13:19:54 2025 by rpki-client