$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: O62wkR2Lc0SvYlqAfeHGcYLUwahI5V2gJzeatvJ0/d0= Subject key identifier: 84:67:A1:60:BF:FB:F9:E7:8F:AA:FF:95:24:59:75:DC:47:84:22:B2 Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: AF Signing time: Mon 07 Apr 2025 04:58:05 +0000 Manifest this update: Mon 07 Apr 2025 04:58:04 +0000 Manifest next update: Mon 14 Apr 2025 04:58:04 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: LAxJNVXGYVCRJqWVKBXmKV+y7xoqgOXlQER3hh8pc0Y=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: xyAm+OptmLWgEZqD9AH33MZxMqQhEFXVgaoDCMDjmoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 04:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC Validity Not Before: Apr 7 04:58:04 2025 GMT Not After : Apr 14 04:58:04 2025 GMT Subject: CN=67f35b5d-b581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:ef:d6:b9:c4:6d:c2:3b:f1:bf:80:0d:7e: ca:8e:9a:44:fb:96:9d:95:7a:ba:d6:8d:d4:44:c1: aa:98:e0:38:db:31:1e:ad:be:42:17:8e:0c:8a:97: f4:67:85:bb:f5:d1:e1:9c:08:cc:2a:91:7f:2d:c0: b9:d4:7f:87:41:e3:92:f8:46:c1:32:39:8b:e3:64: be:68:68:64:f6:2d:7b:2c:c7:35:9a:56:ba:5e:eb: cb:8a:2b:a9:68:b7:c6:7f:a1:c8:44:c9:01:20:f0: cd:9b:a8:bc:58:a9:17:cc:ad:4f:f6:7c:ee:8d:7b: 0c:87:ae:71:44:3e:38:ef:9d:4f:6f:02:51:d4:7d: 7f:cb:c2:2b:67:3e:4a:27:16:05:60:b0:50:d2:c8: bd:2f:9b:39:2e:5c:db:f4:6e:d9:96:6a:91:75:2d: f9:fc:a2:e2:46:2d:d8:a8:b4:a8:11:e2:07:f9:d6: 40:bd:e2:9a:ac:79:be:bd:73:59:4b:37:b2:5f:74: 3d:90:cb:29:a8:d2:b6:e2:a1:6b:61:08:6d:6c:80: 96:75:cf:a6:68:41:9d:06:78:ac:bd:11:33:e6:8c: d9:46:75:35:58:31:12:26:c4:41:22:de:ac:a8:5b: 64:e9:fc:03:92:03:32:15:a2:83:12:7e:38:ef:97: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:67:A1:60:BF:FB:F9:E7:8F:AA:FF:95:24:59:75:DC:47:84:22:B2 X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:0d:16:73:e4:c6:0a:3e:ab:fc:27:9e:83:f7:d9:51:73:e4: 02:0d:8d:ef:86:2c:61:c4:f9:79:f8:67:8a:ca:03:0e:aa:6a: c5:7a:17:47:5a:42:bf:1d:ff:73:55:da:c8:be:71:b6:af:7a: a1:e6:14:3b:0d:39:e1:58:08:5f:7e:60:89:99:7d:ba:ae:34: de:73:77:6c:ae:11:20:51:42:1f:0d:27:e5:d5:c7:5d:3b:32: 4f:bc:1b:e6:0c:a2:76:1f:2c:91:2f:3c:30:24:bf:a0:23:f9: 5a:c1:a4:7d:46:24:62:2e:2e:f6:a9:f3:30:74:d5:25:a7:34: b7:77:12:26:de:8d:e1:e2:22:cf:0f:f1:0a:d8:9a:d8:7a:66: d4:bc:47:d1:7c:15:15:d2:31:1d:2e:61:9d:cc:6d:72:77:cf: 49:0e:e3:6a:90:17:4e:19:d1:cf:4d:a4:28:5e:e5:4f:33:3b: 85:bc:92:6b:75:11:e8:ae:c3:48:2a:b4:32:17:81:d7:bc:b3: 56:99:81:de:eb:ae:5b:31:7a:0a:2a:f1:66:15:f1:53:78:3b: 63:3a:42:db:18:b3:0d:bb:9b:49:e0:43:a5:f3:bc:e6:81:a0: f1:83:fc:ae:e3:23:82:03:6e:3c:42:9d:2c:fd:78:f5:51:d7: 41:b5:1a:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzExQkMxMTAvBgNVBAUTKEQ0QjFERDNFQjFBMDZGQTI2MkFCNkM1RUJGNEFGNTM2 NzFBQ0QyRjQwHhcNMjUwNDA3MDQ1ODA0WhcNMjUwNDE0MDQ1ODA0WjAYMRYwFAYD VQQDEw02N2YzNWI1ZC1iNTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZHv1rnEbcI78b+ADX7KjppE+5adlXq61o3URMGqmOA42zEerb5CF44Mipf0 Z4W79dHhnAjMKpF/LcC51H+HQeOS+EbBMjmL42S+aGhk9i17LMc1mla6XuvLiiup aLfGf6HIRMkBIPDNm6i8WKkXzK1P9nzujXsMh65xRD44751PbwJR1H1/y8IrZz5K JxYFYLBQ0si9L5s5Llzb9G7ZlmqRdS35/KLiRi3YqLSoEeIH+dZAveKarHm+vXNZ SzeyX3Q9kMspqNK24qFrYQhtbICWdc+maEGdBnisvREz5ozZRnU1WDESJsRBIt6s qFtk6fwDkgMyFaKDEn4475czDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRnoWC/ +/nnj6r/lSRZddxHhCKyMB8GA1UdIwQYMBaAFNSx3T6xoG+iYqtsXr9K9TZxrNL0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTFCQy8wNUVFQUJGQzBG QTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2SmlxMnhldjByMU5uR3Mw dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTFCQy8wNUVFQUJGQzBGQTQxMUVGQTNBQThEMzNDNEY5QUUwMi8xTEhkUHJHZ2I2 SmlxMnhldjByMU5uR3MwdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5DRZz5MYKPqv8J56D99lRc+QCDY3vhixhxPl5+GeKygMOqmrFehdH WkK/Hf9zVdrIvnG2r3qh5hQ7DTnhWAhffmCJmX26rjTec3dsrhEgUUIfDSfl1cdd OzJPvBvmDKJ2HyyRLzwwJL+gI/lawaR9RiRiLi72qfMwdNUlpzS3dxIm3o3h4iLP D/EK2JrYembUvEfRfBUV0jEdLmGdzG1yd89JDuNqkBdOGdHPTaQoXuVPMzuFvJJr dRHorsNIKrQyF4HXvLNWmYHe665bMXoKKvFmFfFTeDtjOkLbGLMNu5tJ4EOl87zm gaDxg/yu4yOCA248Qp0s/Xj1UddBtRrD -----END CERTIFICATE-----Generated at Tue Apr 8 18:44:49 2025 by rpki-client