$ rpki-client -vvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft File: 91FDq1voML6TvNd20zKw_Vt4fjs.mft (raw, json) Hash identifier: cVldJb34E/oBZ9L4LHUDVWCtgEJ0YbvFLNQvD3+uJgQ= Subject key identifier: 7B:7C:D2:2A:ED:96:ED:4B:CD:CE:AA:62:68:FE:1B:86:C9:74:AA:C2 Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B Certificate issuer: /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Certificate serial: 07B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft Manifest number: 07B3 Signing time: Fri 04 Apr 2025 21:18:48 +0000 Manifest this update: Fri 04 Apr 2025 21:18:47 +0000 Manifest next update: Fri 11 Apr 2025 21:18:47 +0000 Files and hashes: 1: 91FDq1voML6TvNd20zKw_Vt4fjs.crl (hash: E6MkPCe+h0cF7d+AhPWO7harU8ssCTgsC6uX20b+4YQ=) 2: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (hash: KTuuAh3AHOrZB4qBHVBME28/yKLVl99NGNpmQ7xayeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717C0 Validity Not Before: Apr 4 21:18:47 2025 GMT Not After : Apr 11 21:18:47 2025 GMT Subject: CN=67f04cb7-e41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:13:4d:58:72:99:d1:45:9d:fe:53:93:a9: 5c:42:ee:e3:e7:a1:5e:41:4c:29:6c:6f:7f:11:f4: 83:a2:93:b2:9e:4d:e6:6c:81:10:c4:a9:fc:4f:a3: 23:53:f0:66:d8:50:d1:39:cc:ee:c9:79:13:1f:1a: 19:72:7c:ac:b2:33:9e:3b:bb:1c:8d:a4:3d:9f:3e: 81:06:2c:f9:43:58:a5:18:0e:3b:08:09:cc:91:1e: 8d:0f:97:76:bf:86:ea:bd:80:4f:f1:30:21:4c:c4: 36:a2:31:87:7e:f3:3b:6a:ba:e6:e2:73:d1:49:91: 92:9d:48:fe:cb:89:65:23:ee:9c:37:76:17:7c:69: 59:f2:0c:78:21:44:ce:92:d0:51:6e:99:2e:3e:c3: 26:1a:af:e1:ec:1b:a6:04:2e:1d:2a:48:c2:e4:58: 38:d5:9e:d3:d0:6e:04:c1:ae:f5:89:12:2f:3b:3e: fc:97:3e:f0:53:6f:95:2b:00:ff:29:ef:f3:2c:2b: 75:89:7f:8a:48:f3:99:91:b4:38:9a:89:3b:4a:82: d0:cf:21:f2:17:7a:f9:62:08:f8:41:51:4c:09:b3: 2d:b7:21:74:de:26:d4:08:5a:0c:fe:b9:7f:86:9e: 70:28:73:39:45:e9:48:42:13:12:13:0b:b3:7a:9f: 4c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7C:D2:2A:ED:96:ED:4B:CD:CE:AA:62:68:FE:1B:86:C9:74:AA:C2 X509v3 Authority Key Identifier: keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:08:1a:44:2f:bd:87:49:6f:ab:fb:3d:32:f7:a2:00:6b:7d: ce:c2:80:90:e2:e2:44:7a:ee:ac:0e:15:48:59:53:71:2e:3e: ff:1a:b2:bb:09:67:84:9e:a5:fa:e1:01:cd:b5:4e:50:e1:4b: a5:ed:ce:a3:aa:f2:2a:c5:72:99:5b:18:29:31:6a:cb:39:65: ce:80:4a:1e:36:46:a6:10:c6:f1:83:58:b8:c0:67:e3:8c:dd: 10:62:31:dd:55:1d:d7:ca:2b:6c:2d:84:19:bc:d9:ba:ed:41: 5b:98:f3:ac:36:36:fc:5c:70:47:81:35:f1:ce:04:7e:f7:e8: 60:57:17:95:e8:83:17:2c:e9:e6:ca:26:95:2f:d0:d9:20:3b: 80:e1:71:e3:f0:b1:a5:c1:19:c3:6f:09:a1:63:8c:fb:5c:9c: 0f:7c:c3:ee:9a:b1:b1:a7:0e:18:e4:11:07:45:ff:e0:d6:a8: da:bb:7c:1f:f4:84:7a:32:f8:2b:82:b6:27:8a:e2:26:39:1a: 1b:07:55:60:d0:3e:e9:f9:dc:66:8c:87:ea:f8:c4:0a:f9:39: 51:17:1a:fc:16:c4:22:e5:73:56:d7:78:9f:7e:3c:e2:45:75: 68:7f:95:e6:e3:3e:91:80:5d:1f:5e:c0:bc:ea:9e:fc:16:a7: 43:68:64:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3QzAxMTAvBgNVBAUTKEY3NTE0M0FCNUJFODMwQkU5M0JDRDc3NkQzMzJCMEZE NUI3ODdFM0IwHhcNMjUwNDA0MjExODQ3WhcNMjUwNDExMjExODQ3WjAYMRYwFAYD VQQDEw02N2YwNGNiNy1lNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHYTTVhymdFFnf5Tk6lcQu7j56FeQUwpbG9/EfSDopOynk3mbIEQxKn8T6Mj U/Bm2FDROczuyXkTHxoZcnyssjOeO7scjaQ9nz6BBiz5Q1ilGA47CAnMkR6ND5d2 v4bqvYBP8TAhTMQ2ojGHfvM7arrm4nPRSZGSnUj+y4llI+6cN3YXfGlZ8gx4IUTO ktBRbpkuPsMmGq/h7BumBC4dKkjC5Fg41Z7T0G4Ewa71iRIvOz78lz7wU2+VKwD/ Ke/zLCt1iX+KSPOZkbQ4mok7SoLQzyHyF3r5Ygj4QVFMCbMttyF03ibUCFoM/rl/ hp5wKHM5RelIQhMSEwuzep9MzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHt80irt lu1Lzc6qYmj+G4bJdKrCMB8GA1UdIwQYMBaAFPdRQ6tb6DC+k7zXdtMysP1beH47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdDMC8wMThFQkU1OEYz MUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01MNlR2TmQyMHpLd19WdDRm anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxRkRxMXZvTUw2VHZOZDIwekt3X1Z0NGZqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdDMC8wMThFQkU1OEYzMUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01M NlR2TmQyMHpLd19WdDRmanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATCBpEL72HSW+r+z0y96IAa33OwoCQ4uJEeu6sDhVIWVNxLj7/GrK7 CWeEnqX64QHNtU5Q4Uul7c6jqvIqxXKZWxgpMWrLOWXOgEoeNkamEMbxg1i4wGfj jN0QYjHdVR3XyitsLYQZvNm67UFbmPOsNjb8XHBHgTXxzgR+9+hgVxeV6IMXLOnm yiaVL9DZIDuA4XHj8LGlwRnDbwmhY4z7XJwPfMPumrGxpw4Y5BEHRf/g1qjau3wf 9IR6MvgrgrYniuImORobB1Vg0D7p+dxmjIfq+MQK+TlRFxr8FsQi5XNW13iffjzi RXVof5Xm4z6RgF0fXsC86p78FqdDaGSF -----END CERTIFICATE-----Generated at Sun Apr 6 00:18:48 2025 by rpki-client