$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft File: 36hgRQpvzrHG57jU_1SxVBobabM.mft (raw, json) Hash identifier: 37YULOYvJXVXZH0QdsqkHyRwTXROnc4bmqNjeNwET3s= Subject key identifier: 5C:9A:A8:3C:05:47:AC:39:F2:CF:BF:06:CF:B9:23:62:7F:58:05:2F Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3 Certificate issuer: /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3 Certificate serial: 027D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft Manifest number: 0275 Signing time: Sat 05 Apr 2025 01:51:54 +0000 Manifest this update: Sat 05 Apr 2025 01:51:54 +0000 Manifest next update: Sat 12 Apr 2025 01:51:54 +0000 Files and hashes: 1: 36hgRQpvzrHG57jU_1SxVBobabM.crl (hash: Qtr8+VjZBGKauA12Tj8I7uZtlUHtj0QMw2qiRQ8sa8U=) 2: 56C4B5083DF511ED98215F18C4F9AE02.roa (hash: u+f2WuZi/RfejSsKb+UJ5iop6uONOfiC5gYEcHsbs6w=) 3: B0FA33FE6F9611ED8A672F69C4F9AE02.roa (hash: YDAiAdPjFYhBL5YjXoGqzzo8vheOfOc5VPFiiANGCJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8 Validity Not Before: Apr 5 01:51:54 2025 GMT Not After : Apr 12 01:51:54 2025 GMT Subject: CN=67f08cba-bed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:77:01:cf:6f:19:0b:42:8a:37:0d:3d:e5:21: 1c:6d:e2:7c:99:ee:40:4a:c2:63:50:a2:8d:6a:f4: 58:3a:cb:0b:55:d3:70:98:6f:7c:af:8a:9a:a9:13: 7b:85:e0:6b:b2:93:ab:1b:04:ca:8a:51:ff:4a:8b: 1b:9d:5d:9b:67:c5:05:7f:a0:15:bf:63:d1:e7:3b: 49:5e:e9:ea:cf:3c:1e:5a:9c:1c:9e:94:aa:9e:31: c1:47:bd:8b:b9:3f:ec:e2:cb:5b:18:45:72:3b:b2: dd:35:92:7d:54:2c:ca:c7:aa:27:15:26:65:23:18: 60:6c:fd:41:ee:eb:4c:ba:58:6d:3c:4a:31:ed:da: 70:cf:3d:3b:d9:a4:9e:09:32:b3:c6:e9:35:30:cd: 39:7b:37:8c:2b:4c:a9:0f:ca:36:34:c6:20:9b:ab: a2:4d:f2:ac:43:b5:11:ef:58:8a:ad:52:b9:e7:26: 21:4d:27:be:b1:42:52:f0:74:6b:ad:1d:b3:9a:15: e2:8d:8a:a0:c2:bc:16:47:0c:21:a1:95:79:bd:98: b9:d7:0e:03:91:e9:18:62:dc:f3:74:eb:65:bd:74: 66:21:61:2e:29:c6:b6:78:65:3e:09:45:b2:4e:b3: ed:7d:86:54:b8:59:af:71:11:1b:96:e0:3f:22:8c: 2e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9A:A8:3C:05:47:AC:39:F2:CF:BF:06:CF:B9:23:62:7F:58:05:2F X509v3 Authority Key Identifier: keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7c:9e:ae:b5:5e:7f:9e:63:3b:74:ca:ef:62:79:7b:f4:b9: a4:45:9a:4a:af:c1:58:3d:12:c7:b8:23:9f:69:bc:79:6c:3f: 7b:1c:ed:e0:ce:98:f0:e7:7b:1c:07:c7:74:0b:ac:21:0f:e4: 99:e6:d4:2a:24:2c:a1:9f:0c:28:08:6e:f9:d6:ae:1e:c8:59: d6:01:bd:ca:d6:ba:54:46:c1:60:4e:1e:2b:ef:55:98:1d:30: 65:22:e6:ef:ee:7a:2e:33:8b:32:11:b0:ac:42:ba:8d:64:ce: 6a:74:38:20:ea:52:00:d5:ff:82:ce:0c:5f:80:5e:35:ba:40: 49:9d:14:41:f0:d4:a3:84:ca:95:a1:16:20:05:7d:8f:6f:7b: 73:17:8a:de:36:ed:f9:c2:04:15:fd:b4:78:c2:f3:08:9a:c9: 81:12:5c:9e:f0:fb:d6:02:03:7a:27:63:93:75:10:aa:68:cc: a4:4b:44:72:f7:3b:53:4a:eb:d2:5c:fa:6f:44:6b:72:13:a7: 1b:91:96:73:5b:5f:fc:07:33:39:0a:d9:30:a1:5d:8d:0b:ec: 89:cf:27:8a:68:c6:55:40:08:d1:3c:b1:0f:42:68:0b:2c:2d: bb:8b:0e:aa:f4:9a:72:a3:3d:a5:51:d7:57:b1:57:67:9d:3f: 79:2e:4e:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKERGQTg2MDQ1MEE2RkNFQjFDNkU3QjhENEZGNTRCMTU0 MUExQjY5QjMwHhcNMjUwNDA1MDE1MTU0WhcNMjUwNDEyMDE1MTU0WjAYMRYwFAYD VQQDEw02N2YwOGNiYS1iZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XcBz28ZC0KKNw095SEcbeJ8me5ASsJjUKKNavRYOssLVdNwmG98r4qaqRN7 heBrspOrGwTKilH/SosbnV2bZ8UFf6AVv2PR5ztJXunqzzweWpwcnpSqnjHBR72L uT/s4stbGEVyO7LdNZJ9VCzKx6onFSZlIxhgbP1B7utMulhtPEox7dpwzz072aSe CTKzxuk1MM05ezeMK0ypD8o2NMYgm6uiTfKsQ7UR71iKrVK55yYhTSe+sUJS8HRr rR2zmhXijYqgwrwWRwwhoZV5vZi51w4DkekYYtzzdOtlvXRmIWEuKca2eGU+CUWy TrPtfYZUuFmvcREbluA/IowuwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyaqDwF R6w58s+/Bs+5I2J/WAUvMB8GA1UdIwQYMBaAFN+oYEUKb86xxue41P9UsVQaG2mz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC85RjAzQkI2MDA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8zNmhnUlFwdnpySEc1N2pVXzFTeFZCb2Jh Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzM2aGdSUXB2enJIRzU3alVfMVN4VkJvYmFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC85RjAzQkI2MDA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8zNmhnUlFwdnpy SEc1N2pVXzFTeFZCb2JhYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrfJ6utV5/nmM7dMrvYnl79LmkRZpKr8FYPRLHuCOfabx5bD97HO3g zpjw53scB8d0C6whD+SZ5tQqJCyhnwwoCG751q4eyFnWAb3K1rpURsFgTh4r71WY HTBlIubv7nouM4syEbCsQrqNZM5qdDgg6lIA1f+CzgxfgF41ukBJnRRB8NSjhMqV oRYgBX2Pb3tzF4reNu35wgQV/bR4wvMImsmBElye8PvWAgN6J2OTdRCqaMykS0Ry 9ztTSuvSXPpvRGtyE6cbkZZzW1/8BzM5CtkwoV2NC+yJzyeKaMZVQAjRPLEPQmgL LC27iw6q9Jpyoz2lUddXsVdnnT95Lk4K -----END CERTIFICATE-----Generated at Sun Apr 6 11:23:06 2025 by rpki-client