$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft File: fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json) Hash identifier: jcj4rXDI+PUSrbzb9u2XOB8lEAA2RdqysJk/EBxJi6o= Subject key identifier: CF:2D:FC:66:20:68:22:C4:18:91:C3:F8:BA:68:8C:DB:89:EE:02:93 Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 Certificate issuer: /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft Manifest number: 06A2 Signing time: Fri 18 Apr 2025 22:14:42 +0000 Manifest this update: Fri 18 Apr 2025 22:14:41 +0000 Manifest next update: Fri 25 Apr 2025 22:14:41 +0000 Files and hashes: 1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: j9sULcYczdeHWhy1TpC6mp7Vg1EJ5HZAnx80ZxdCI2U=) 2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: jMHgt7FvNkUCkLd7vYheLEj/MpewQSbVwisjvUIDov4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300ED, serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Validity Not Before: Apr 18 22:14:41 2025 GMT Not After : Apr 25 22:14:41 2025 GMT Subject: CN=6802ced2-ce98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:3d:be:c2:b6:31:f6:93:ab:79:c1:ce:e9: e0:d2:f6:30:36:83:71:f6:e2:f2:09:bc:dc:6b:38: 94:42:cf:60:54:e4:7a:f9:0c:6e:5a:6d:81:57:8e: 7d:b6:f5:c4:6b:97:84:e2:47:0a:dc:ae:46:1a:0d: 6f:c2:a3:97:3d:2b:4a:ca:38:35:42:4f:9d:27:d9: ec:58:b2:24:d9:bf:a0:71:b8:36:36:34:e2:37:57: 64:3c:29:d3:60:f8:9f:31:ad:92:f4:05:a6:bc:22: e6:6d:87:35:0d:27:92:30:32:49:48:49:53:ef:27: 92:cd:92:50:0f:2c:a8:a1:84:7d:aa:06:0b:69:4f: 3a:93:03:84:b7:07:9c:21:ba:c4:5b:33:ba:56:0e: 10:57:1d:67:fe:b2:83:be:f0:3b:1b:b4:b6:cb:bc: bc:98:25:fe:b8:4a:db:a3:8e:53:5b:6a:1c:33:bb: 29:5c:d4:f9:37:03:7f:4d:7b:9d:e6:56:65:e8:02: ef:32:07:f3:81:94:00:d5:1f:d8:05:0d:be:12:d7: b3:0d:fe:0c:02:0e:95:2c:10:b4:df:e1:c7:61:d1: 34:de:66:0e:72:99:68:8a:78:11:52:f2:65:f5:a8: b8:c4:d2:6a:a2:a6:5b:83:08:8f:25:8a:03:0a:a6: d2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2D:FC:66:20:68:22:C4:18:91:C3:F8:BA:68:8C:DB:89:EE:02:93 X509v3 Authority Key Identifier: keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:69:09:d1:2f:35:d7:dc:64:e9:0a:04:e5:ec:70:d2:61:29: 33:9a:38:16:ec:1e:66:02:60:9e:e9:a0:22:3d:0c:60:0e:5b: e7:be:64:7b:a5:10:a0:bb:59:cb:b4:dd:d2:b5:5c:c9:a7:5b: b8:f3:f5:95:bd:82:22:e4:c2:02:68:85:8c:c2:e1:a2:d0:67: 7e:9e:a5:8a:90:3d:22:61:ad:b9:49:e0:83:0d:fb:0a:e6:25: c7:0c:2a:e2:0d:a5:12:b6:4c:75:b3:37:1f:89:ef:51:9a:f6: e0:ac:ee:a2:54:99:58:b6:69:4a:c6:99:43:3a:e6:53:87:d9: 63:cf:13:63:b8:f4:b6:02:4b:9e:d1:d6:23:28:84:55:b9:31: 80:30:2f:fe:56:34:f0:ab:6c:92:82:d2:5e:a4:d5:58:b0:d5: 5b:19:fb:d9:7c:70:2e:cb:cd:52:e2:35:38:99:61:ba:5a:65: 42:e0:2b:d9:bd:af:99:12:e9:32:6f:e9:79:ce:25:3f:eb:bb: 5c:f4:db:dc:b7:93:72:33:e4:cd:75:12:0e:7f:00:f2:f3:61: 98:36:fb:12:00:77:6a:25:d7:73:bd:55:78:66:35:bd:32:d1: dc:c4:22:a0:1e:fb:94:bf:ad:b7:7c:5f:b0:3b:4b:42:b6:8e: e0:38:0a:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAwRUQxMTAvBgNVBAUTKDdDQTc1MENDMDk5MDc3RDRCNDMyOTBBNzYyODNBQjdC RjBCNjRBNjgwHhcNMjUwNDE4MjIxNDQxWhcNMjUwNDI1MjIxNDQxWjAYMRYwFAYD VQQDEw02ODAyY2VkMi1jZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnA89vsK2MfaTq3nBzung0vYwNoNx9uLyCbzcaziUQs9gVOR6+QxuWm2BV459 tvXEa5eE4kcK3K5GGg1vwqOXPStKyjg1Qk+dJ9nsWLIk2b+gcbg2NjTiN1dkPCnT YPifMa2S9AWmvCLmbYc1DSeSMDJJSElT7yeSzZJQDyyooYR9qgYLaU86kwOEtwec IbrEWzO6Vg4QVx1n/rKDvvA7G7S2y7y8mCX+uErbo45TW2ocM7spXNT5NwN/TXud 5lZl6ALvMgfzgZQA1R/YBQ2+EtezDf4MAg6VLBC03+HHYdE03mYOcploingRUvJl 9ai4xNJqoqZbgwiPJYoDCqbSAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8t/GYg aCLEGJHD+LpojNuJ7gKTMB8GA1UdIwQYMBaAFHynUMwJkHfUtDKQp2KDq3vwtkpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDBFRC8wRUM5NEE4ODYy MjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5UzBNcENuWW9PcmVfQzJT bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZLZFF6QW1RZDlTME1wQ25Zb09yZV9DMlNtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDBFRC8wRUM5NEE4ODYyMjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5 UzBNcENuWW9PcmVfQzJTbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsaQnRLzXX3GTpCgTl7HDSYSkzmjgW7B5mAmCe6aAiPQxgDlvnvmR7 pRCgu1nLtN3StVzJp1u48/WVvYIi5MICaIWMwuGi0Gd+nqWKkD0iYa25SeCDDfsK 5iXHDCriDaUStkx1szcfie9RmvbgrO6iVJlYtmlKxplDOuZTh9ljzxNjuPS2Akue 0dYjKIRVuTGAMC/+VjTwq2ySgtJepNVYsNVbGfvZfHAuy81S4jU4mWG6WmVC4CvZ va+ZEukyb+l5ziU/67tc9Nvct5NyM+TNdRIOfwDy82GYNvsSAHdqJddzvVV4ZjW9 MtHcxCKgHvuUv623fF+wO0tCto7gOAoN -----END CERTIFICATE-----Generated at Sat Apr 19 01:02:59 2025 by rpki-client