$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft File: grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json) Hash identifier: 4UFN8RDOBrC94J/haO9i8xmglIzoSMWEA4nAw41tG2Q= Subject key identifier: 55:0E:0D:67:4E:A8:68:13:0F:0B:0F:83:A0:86:03:CB:54:FA:AA:14 Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE Certificate issuer: /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Certificate serial: 050E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft Manifest number: 050A Signing time: Thu 10 Apr 2025 23:34:40 +0000 Manifest this update: Thu 10 Apr 2025 23:34:40 +0000 Manifest next update: Thu 17 Apr 2025 23:34:40 +0000 Files and hashes: 1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: T9bQQLUTWPkb+XYs4BiQsQz40ZTePLN5BWR3q5HJrvg=) 2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: bQFmQGHXUQ7x87MmTGs+0s+NObqkgDsk8Nc02TDmNdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 23:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE Validity Not Before: Apr 10 23:34:40 2025 GMT Not After : Apr 17 23:34:40 2025 GMT Subject: CN=67f85590-e762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:96:51:24:10:51:d1:b9:3b:c4:8d:d4:82:bc: 8d:93:48:3c:04:d2:33:d6:4f:75:ca:ef:cd:aa:52: ab:3f:a6:1f:12:6f:8b:39:07:6e:a3:cf:1b:e8:f4: 39:26:20:e3:76:28:47:cc:1c:95:e9:05:29:91:82: bc:21:d3:24:4b:5c:2a:38:f7:a3:d1:de:6c:0e:bd: 9b:5f:28:eb:e7:b9:fb:4e:96:0a:2d:2c:33:a1:81: 1f:a8:42:05:b4:d2:cb:76:40:6e:31:84:56:63:ee: a8:98:60:a2:f4:5e:c4:f7:2f:0c:28:4e:d6:77:19: ff:01:60:a9:13:f7:5c:cb:1d:d8:5f:99:d0:09:8d: 36:8e:b4:d9:52:22:f9:1b:cd:a3:ab:83:9c:df:7d: 43:f0:27:8f:6c:7e:2f:9d:21:71:fb:e3:d5:03:31: 19:d1:51:11:bf:23:48:9d:2f:33:90:94:5b:de:e3: b9:c1:7c:a2:f4:35:8f:d7:36:98:8b:23:83:2b:58: 8c:68:07:c4:65:d1:55:a7:fd:ca:94:3d:05:26:38: 8e:ac:63:1a:4a:fd:a6:b2:92:72:fd:5b:90:09:30: 16:0e:25:9e:6c:ea:90:2e:71:a8:7b:51:5d:62:f3: 25:c5:b4:75:1d:4c:40:87:06:8c:54:d2:97:4d:b9: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0E:0D:67:4E:A8:68:13:0F:0B:0F:83:A0:86:03:CB:54:FA:AA:14 X509v3 Authority Key Identifier: keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ed:5c:3a:35:dc:f9:91:55:ff:8e:0c:98:31:2a:8e:79:50: 07:a7:9d:b7:04:bd:68:a6:6e:26:a5:70:f8:e1:bb:85:ba:13: 18:82:6c:79:48:3b:c0:d1:f2:24:74:d8:a6:8a:74:6d:12:52: ca:94:a5:3c:a5:0f:8f:49:c1:06:1b:aa:c3:b6:46:80:c0:e1: 44:7d:24:05:75:ec:71:e4:d2:6a:81:fa:25:86:4b:ad:a3:ea: 1f:b4:44:78:1d:9b:9c:7e:e4:28:6c:b1:89:35:60:96:a2:f8: ee:4f:21:91:5c:c2:c1:bf:38:d5:c8:e4:1f:0b:65:37:d5:c3: a6:4c:99:7e:46:ad:69:b2:d5:09:ad:bf:3f:80:86:0d:e8:71: 08:e8:9e:ff:20:b8:01:10:c8:91:57:43:93:3f:78:21:6c:db: 8f:b1:a7:b8:1f:83:c9:59:75:93:58:21:67:ac:59:9d:f7:5a: 0b:b1:71:ae:24:1d:29:0a:69:2f:ad:c3:46:3b:bd:fc:13:f4: 51:b3:71:c1:66:9a:0f:39:f0:64:c9:d3:30:e8:cc:44:4c:6a: 3d:4e:ef:a6:a0:6c:bd:e1:bb:94:1f:df:8c:ab:02:21:d9:da: 97:41:15:5e:c7:3e:3d:6c:42:77:e7:ea:94:b0:b4:12:bd:de: b8:d6:d7:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk0RjcxMTAvBgNVBAUTKDgyQjMxRkExRENFMEM0QkYyRjY2Mzk3Nzg2QTZDMDhF NDdDNkI4RkUwHhcNMjUwNDEwMjMzNDQwWhcNMjUwNDE3MjMzNDQwWjAYMRYwFAYD VQQDEw02N2Y4NTU5MC1lNzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZZRJBBR0bk7xI3UgryNk0g8BNIz1k91yu/NqlKrP6YfEm+LOQduo88b6PQ5 JiDjdihHzByV6QUpkYK8IdMkS1wqOPej0d5sDr2bXyjr57n7TpYKLSwzoYEfqEIF tNLLdkBuMYRWY+6omGCi9F7E9y8MKE7Wdxn/AWCpE/dcyx3YX5nQCY02jrTZUiL5 G82jq4Oc331D8CePbH4vnSFx++PVAzEZ0VERvyNInS8zkJRb3uO5wXyi9DWP1zaY iyODK1iMaAfEZdFVp/3KlD0FJjiOrGMaSv2mspJy/VuQCTAWDiWebOqQLnGoe1Fd YvMlxbR1HUxAhwaMVNKXTbkzmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUODWdO qGgTDwsPg6CGA8tU+qoUMB8GA1UdIwQYMBaAFIKzH6Hc4MS/L2Y5d4amwI5Hxrj+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTRGNy81OUZGMDVBQUZG QzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hMOHZaamwzaHFiQWprZkd1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyTWZvZHpneEw4dlpqbDNocWJBamtmR3VQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTRGNy81OUZGMDVBQUZGQzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hM OHZaamwzaHFiQWprZkd1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT7Vw6Ndz5kVX/jgyYMSqOeVAHp523BL1opm4mpXD44buFuhMYgmx5 SDvA0fIkdNiminRtElLKlKU8pQ+PScEGG6rDtkaAwOFEfSQFdexx5NJqgfolhkut o+oftER4HZucfuQobLGJNWCWovjuTyGRXMLBvzjVyOQfC2U31cOmTJl+Rq1pstUJ rb8/gIYN6HEI6J7/ILgBEMiRV0OTP3ghbNuPsae4H4PJWXWTWCFnrFmd91oLsXGu JB0pCmkvrcNGO738E/RRs3HBZpoPOfBkydMw6MxETGo9Tu+moGy94buUH9+MqwIh 2dqXQRVexz49bEJ35+qUsLQSvd641te9 -----END CERTIFICATE-----Generated at Sat Apr 12 15:22:28 2025 by rpki-client