$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json) Hash identifier: cRfFgLcPAkPdfterGRdlWCxhMTAjkRurG6n+3x5jHcI= Subject key identifier: FB:2E:DA:2A:9E:87:20:06:69:A7:D0:B9:91:55:6B:73:91:FE:EF:A3 Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Certificate serial: 2153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft Manifest number: 214A Signing time: Fri 18 Apr 2025 16:02:08 +0000 Manifest this update: Fri 18 Apr 2025 16:02:08 +0000 Manifest next update: Fri 25 Apr 2025 16:02:08 +0000 Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: Eqr9IHxvtzfvnTDcaKyC4sV+lYRXa+MRgBQyJMO7JNg=) 2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: /mOiRGW1T9qa7YdW+2kPvRZkQyewAraUry397iZAYjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 16:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8531 (0x2153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Validity Not Before: Apr 18 16:02:08 2025 GMT Not After : Apr 25 16:02:08 2025 GMT Subject: CN=68027780-6045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:f4:5e:82:56:fa:91:13:b9:02:da:62:09: 75:aa:10:2d:86:ce:8e:f4:0c:2e:ac:00:3f:98:72: 61:21:64:ad:d3:95:0d:ec:1d:01:0f:b1:0b:1c:52: dc:01:2f:b0:27:b5:a0:bd:78:f3:ba:8e:81:d2:95: 46:b6:8e:17:c4:9c:e1:da:b1:f1:86:c1:f1:3c:27: ce:8c:86:2f:7b:a0:35:15:df:d9:fc:49:bf:03:a6: 54:aa:ed:86:16:d4:9f:c8:91:4e:e5:68:1d:54:9d: 16:83:28:24:14:27:49:4a:3f:3e:1a:af:f0:e8:fc: 06:8f:eb:ac:03:63:cb:6e:67:ca:a7:63:a8:42:0a: 77:db:a5:c0:3a:3e:5d:66:6f:0c:8a:60:0f:db:46: 09:66:2e:13:20:6e:ec:99:fd:66:eb:db:31:73:76: 59:6e:0e:22:fb:af:22:e7:62:8f:77:5d:01:a5:1f: 69:82:f9:9b:82:70:a9:13:56:a9:7f:46:bb:e2:68: a0:4a:04:70:29:c2:bd:8e:77:e9:e5:ad:ac:0b:6a: 01:40:e0:9b:89:1c:cb:a4:8a:46:8a:7f:35:77:70: 6f:c2:69:09:1d:1f:43:21:24:47:d2:df:b3:49:6f: 50:84:b6:8f:3a:7d:8a:6d:77:46:65:dc:89:81:cd: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2E:DA:2A:9E:87:20:06:69:A7:D0:B9:91:55:6B:73:91:FE:EF:A3 X509v3 Authority Key Identifier: keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:9b:47:d9:de:77:56:13:24:a4:14:0b:b5:f5:87:95:41:58: b7:a6:dc:4b:2d:1e:4f:ee:68:36:0d:c9:b3:8f:04:a3:38:60: ef:db:46:77:3d:01:26:ac:94:10:23:07:f3:75:a4:f6:75:90: a5:37:3b:df:82:88:8d:af:e7:0f:6d:15:aa:e8:74:5f:a5:87: 38:72:33:df:22:42:0c:26:52:6e:fd:85:b2:e3:ea:ad:69:03: 9a:8b:bc:84:37:f7:4d:c4:83:ad:86:ae:05:cb:9b:1c:70:ee: e1:87:6a:4f:e7:6c:22:63:48:28:1b:fa:86:8c:f7:ac:cd:ea: 42:22:a3:06:f7:6c:23:2a:6c:d6:2f:64:42:39:b9:4d:8a:82: 04:33:ce:d3:f9:c1:b4:66:00:59:d5:75:96:81:63:4b:48:e0: 55:69:81:fe:bd:21:c0:81:61:24:8f:7a:d9:1c:47:18:69:ce: c0:75:9d:9c:5a:db:76:29:01:bf:51:77:a2:4f:e3:8d:a3:98: 80:55:aa:6b:22:a0:b3:ed:01:80:54:a7:c8:d5:1c:f0:66:d2: f3:d1:4d:c2:dc:d4:04:07:1a:0f:41:40:73:b4:41:e2:79:73: 97:f7:bc:d8:6a:39:3c:65:08:ab:66:52:30:b9:87:44:ad:5c: 0a:ca:cc:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE MUJBRjAyREYwHhcNMjUwNDE4MTYwMjA4WhcNMjUwNDI1MTYwMjA4WjAYMRYwFAYD VQQDEw02ODAyNzc4MC02MDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRj0XoJW+pETuQLaYgl1qhAths6O9AwurAA/mHJhIWSt05UN7B0BD7ELHFLc AS+wJ7WgvXjzuo6B0pVGto4XxJzh2rHxhsHxPCfOjIYve6A1Fd/Z/Em/A6ZUqu2G FtSfyJFO5WgdVJ0WgygkFCdJSj8+Gq/w6PwGj+usA2PLbmfKp2OoQgp326XAOj5d Zm8MimAP20YJZi4TIG7smf1m69sxc3ZZbg4i+68i52KPd10BpR9pgvmbgnCpE1ap f0a74migSgRwKcK9jnfp5a2sC2oBQOCbiRzLpIpGin81d3BvwmkJHR9DISRH0t+z SW9QhLaPOn2KbXdGZdyJgc1qlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsu2iqe hyAGaafQuZFVa3OR/u+jMB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhGRC85QTc5OTY0NEUxMTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhf ejRwMzVTa1o0dWJSdXZBdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBom0fZ3ndWEySkFAu19YeVQVi3ptxLLR5P7mg2DcmzjwSjOGDv20Z3 PQEmrJQQIwfzdaT2dZClNzvfgoiNr+cPbRWq6HRfpYc4cjPfIkIMJlJu/YWy4+qt aQOai7yEN/dNxIOthq4Fy5sccO7hh2pP52wiY0goG/qGjPeszepCIqMG92wjKmzW L2RCOblNioIEM87T+cG0ZgBZ1XWWgWNLSOBVaYH+vSHAgWEkj3rZHEcYac7AdZ2c Wtt2KQG/UXeiT+ONo5iAVaprIqCz7QGAVKfI1RzwZtLz0U3C3NQEBxoPQUBztEHi eXOX97zYajk8ZQirZlIwuYdErVwKysxV -----END CERTIFICATE-----Generated at Sat Apr 19 04:47:08 2025 by rpki-client