$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft File: kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json) Hash identifier: KV8J6qK6MYAXWCeSj1FwfISIFgRn9icbkVI3PgoheAk= Subject key identifier: 9F:D1:23:9C:FF:72:E0:6F:B8:71:A2:7A:CB:92:86:53:86:92:71:5C Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Certificate serial: 05C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft Manifest number: 05BA Signing time: Fri 28 Mar 2025 23:22:01 +0000 Manifest this update: Fri 28 Mar 2025 23:22:00 +0000 Manifest next update: Fri 04 Apr 2025 23:22:00 +0000 Files and hashes: 1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: 9vTGgsNQ/yuaYLo9Vx/vYLreVVAC0i79kuMF8l3N128=) 2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: Zin5Bd4weOB/NhOZcniDknZ2HAO8m6tl6cWhzqt6SiQ=) 3: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: 7ouwwfgk28NyLw1cYRcaWcwCb0VnFZR8rpTez7FwTos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1473 (0x5c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813E4 Validity Not Before: Mar 28 23:22:00 2025 GMT Not After : Apr 4 23:22:00 2025 GMT Subject: CN=67e72f19-0331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:93:71:fb:11:82:40:4d:38:5c:dd:cf:d7: 1c:53:40:fa:4f:59:b1:b5:33:db:45:34:38:8e:45: 8e:1a:49:fa:77:9a:0d:22:c8:e2:70:44:64:c7:4c: bf:c6:31:8c:6e:25:70:7f:ec:52:1c:eb:4f:be:8b: fb:d3:af:d0:55:f4:f4:5e:3e:0b:f8:c7:3f:a3:69: ad:4c:73:df:e1:dc:3e:44:92:cc:39:f1:19:f0:13: 31:bc:88:71:21:41:4b:0c:09:67:35:a5:4b:09:fa: 95:c1:61:39:c5:39:de:b5:3f:73:e2:4b:90:0c:9e: 84:a8:36:a1:19:b1:17:e4:fd:27:fc:42:ad:b1:5c: 15:e8:b2:ac:24:f3:10:c3:77:7d:a7:0a:b7:83:c5: 85:8d:13:4c:d0:a1:f0:0a:0d:93:cb:35:55:ea:ac: d3:5e:31:07:ee:f4:0a:7c:7d:dd:39:5a:59:57:87: c3:e2:47:45:70:34:7e:0e:53:7e:26:ad:92:b3:ed: 57:1e:b8:f0:14:50:4c:03:0d:78:54:33:36:ce:6b: 8a:fa:09:95:9a:1b:8c:81:9c:32:b4:52:18:0a:5a: 57:04:9c:de:44:b7:04:ae:6e:81:89:ef:d4:d0:64: ef:27:70:da:a9:f2:f7:ea:c3:6d:ce:86:71:a6:42: 63:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D1:23:9C:FF:72:E0:6F:B8:71:A2:7A:CB:92:86:53:86:92:71:5C X509v3 Authority Key Identifier: keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ab:5b:91:95:93:c3:84:5a:d0:b9:b6:07:c1:8f:91:e8:fa: 22:ed:7e:5b:27:10:f7:29:a1:5e:32:1c:6e:1f:d3:e9:a4:cd: af:1c:ea:dd:36:fd:98:00:d0:bb:c2:3f:a6:3d:61:06:89:e6: e2:ad:2d:eb:7b:aa:9c:23:7f:9b:09:62:d4:3e:20:ce:e6:2e: 07:51:f8:79:29:0a:da:51:4c:f5:22:21:a3:9f:80:39:8f:65: bc:5c:84:8d:24:d1:6d:85:63:05:4d:50:63:43:c2:74:e7:c8: bf:be:43:3a:10:f7:3d:76:6f:ba:ac:1a:55:7c:53:90:f7:2b: b2:91:55:e8:e7:39:fc:f1:31:53:82:ed:40:79:44:3d:d6:76: cf:2e:af:1f:16:ae:5d:20:c1:fc:17:92:6e:b1:58:57:eb:1a: c8:3f:95:42:37:7b:a8:dd:90:fe:f9:ae:e8:f5:9d:4e:bf:fd: ec:6d:a4:ea:e2:d1:61:92:24:b4:4f:39:96:da:74:5f:4a:7b: 04:71:53:ed:26:25:8b:2f:29:33:22:23:f7:67:4b:7a:60:fe: 49:26:2b:bd:3f:7e:60:b4:53:6f:e3:aa:8c:50:31:b2:64:c0: 11:bd:9b:93:52:f3:fe:9b:74:ff:8b:ff:10:2a:16:85:b8:5e: 2a:3a:0f:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRTQxMTAvBgNVBAUTKDkwNjhERTIwMzMyQ0JEMURCMzlCMjM3NDM1QjE3NERF NzA5OTRGMDMwHhcNMjUwMzI4MjMyMjAwWhcNMjUwNDA0MjMyMjAwWjAYMRYwFAYD VQQDEw02N2U3MmYxOS0wMzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt96TcfsRgkBNOFzdz9ccU0D6T1mxtTPbRTQ4jkWOGkn6d5oNIsjicERkx0y/ xjGMbiVwf+xSHOtPvov706/QVfT0Xj4L+Mc/o2mtTHPf4dw+RJLMOfEZ8BMxvIhx IUFLDAlnNaVLCfqVwWE5xTnetT9z4kuQDJ6EqDahGbEX5P0n/EKtsVwV6LKsJPMQ w3d9pwq3g8WFjRNM0KHwCg2TyzVV6qzTXjEH7vQKfH3dOVpZV4fD4kdFcDR+DlN+ Jq2Ss+1XHrjwFFBMAw14VDM2zmuK+gmVmhuMgZwytFIYClpXBJzeRLcErm6Bie/U 0GTvJ3DaqfL36sNtzoZxpkJjQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/RI5z/ cuBvuHGiesuShlOGknFcMB8GA1UdIwQYMBaAFJBo3iAzLL0ds5sjdDWxdN5wmU8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFNC8yNzUwNTg4MkI5 QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZSMnpteU4wTmJGMDNuQ1pU d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tHamVJRE1zdlIyem15TjBOYkYwM25DWlR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFNC8yNzUwNTg4MkI5QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZS MnpteU4wTmJGMDNuQ1pUd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHq1uRlZPDhFrQubYHwY+R6Poi7X5bJxD3KaFeMhxuH9PppM2vHOrd Nv2YANC7wj+mPWEGiebirS3re6qcI3+bCWLUPiDO5i4HUfh5KQraUUz1IiGjn4A5 j2W8XISNJNFthWMFTVBjQ8J058i/vkM6EPc9dm+6rBpVfFOQ9yuykVXo5zn88TFT gu1AeUQ91nbPLq8fFq5dIMH8F5JusVhX6xrIP5VCN3uo3ZD++a7o9Z1Ov/3sbaTq 4tFhkiS0TzmW2nRfSnsEcVPtJiWLLykzIiP3Z0t6YP5JJiu9P35gtFNv46qMUDGy ZMARvZuTUvP+m3T/i/8QKhaFuF4qOg8U -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:01 2025 by rpki-client