$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json) Hash identifier: 10jhU8oPjnP8Vvh20yNCf+l5tDAFyH9NgG82lDWUOVk= Subject key identifier: F2:8E:65:4F:B2:3B:8D:F8:6A:B4:F2:C8:60:21:9D:E0:AB:4E:70:92 Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft Manifest number: 20 Signing time: Sat 05 Apr 2025 07:07:24 +0000 Manifest this update: Sat 05 Apr 2025 07:07:24 +0000 Manifest next update: Sat 12 Apr 2025 07:07:24 +0000 Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: DVjcbS0olsiI0Jx3YuFoQ4hGDQQ5A2Wjh7Lr+uT5Qsk=) 2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB Validity Not Before: Apr 5 07:07:24 2025 GMT Not After : Apr 12 07:07:24 2025 GMT Subject: CN=67f0d6ac-3367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:1d:84:a0:2e:43:4a:e6:1b:cb:4c:13:96: 63:e5:6a:a0:b3:76:cc:ad:e1:47:42:eb:1b:91:13: 7e:d3:8a:20:34:b7:25:ae:04:91:17:c7:35:cd:71: c7:39:9d:99:d4:37:32:b3:b7:dd:e7:46:03:2a:35: ca:3b:ce:2f:3e:3a:37:14:a9:1c:79:a1:34:8c:06: bf:6b:bb:b6:42:9f:82:a2:71:e9:d1:eb:25:be:f2: e4:44:e7:ca:5b:b5:90:ee:7c:61:fa:f5:b5:cd:17: a7:a7:0d:a9:83:b3:85:73:1e:6f:f5:34:50:2b:ac: c8:a3:f3:21:76:38:0d:17:2f:8b:21:fd:04:0a:40: bf:2c:93:5b:82:77:9e:ad:b3:6c:c7:ae:d5:4f:28: 31:dc:a9:dc:ac:d1:08:9c:18:bb:d8:97:63:0e:9a: 48:ed:38:68:8c:e2:d9:60:5f:27:98:ed:aa:5b:45: 09:12:9f:29:5d:5f:1a:53:1a:b4:16:73:c6:91:e3: fc:6f:1b:b4:25:e5:8f:c5:fd:89:6b:50:c5:22:f0: a2:49:2e:21:de:5b:2f:59:69:ae:c5:31:35:aa:ad: 8c:d8:98:fb:a6:d9:76:f2:49:88:07:b8:7c:b3:9f: eb:ba:96:13:da:b5:10:f3:24:85:6f:c3:b5:38:92: b1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8E:65:4F:B2:3B:8D:F8:6A:B4:F2:C8:60:21:9D:E0:AB:4E:70:92 X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d7:08:15:65:6e:1c:e3:fd:27:a7:77:10:84:5c:4b:98:39: 34:24:cf:78:32:f9:ee:84:4e:6f:a2:b8:e9:21:60:90:b4:06: 41:10:95:22:0f:d3:cb:77:99:75:68:e4:ec:5c:00:c0:74:bb: e2:9c:da:2a:27:5f:e5:5a:fa:cc:c7:9a:2b:bb:eb:2f:c2:44: fa:a4:80:a4:8d:26:1d:e7:79:0b:b0:e6:6f:1d:7a:2d:42:94: 39:9c:ff:25:26:bb:27:71:f5:f7:5e:dc:ab:bf:9b:c6:b1:bd: f6:41:7a:1a:20:c5:18:48:e6:7f:cd:28:20:52:79:04:ff:8e: 1e:06:3c:75:2a:58:33:74:a8:30:93:07:dd:eb:85:46:fe:52: 5e:21:dd:bd:f6:fe:77:9a:38:ec:3c:81:70:b6:c4:a1:c1:00: 71:21:9d:e1:cd:b9:e4:d8:4f:ad:bb:de:a8:90:e0:1e:4b:5c: 19:47:fb:fd:60:77:3f:e3:cc:e4:77:36:9f:1a:60:9f:2c:45: fe:dd:63:23:cb:8f:19:1b:bc:db:40:b6:a3:89:25:8f:40:47: 3e:f4:55:04:f0:17:be:5b:26:0e:aa:65:71:ae:9f:62:46:7e: b3:da:3c:26:3e:74:1b:b9:ef:cb:2a:bb:c9:16:9a:35:20:43: 7c:c6:b4:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoQkI1MDVERkYzMkVDRDQ5MkJGMUVGRjdGRTM5NEYxMjg5 MEFBNjczNDAeFw0yNTA0MDUwNzA3MjRaFw0yNTA0MTIwNzA3MjRaMBgxFjAUBgNV BAMTDTY3ZjBkNmFjLTMzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMSx2EoC5DSuYby0wTlmPlaqCzdsyt4UdC6xuRE37TiiA0tyWuBJEXxzXNccc5 nZnUNzKzt93nRgMqNco7zi8+OjcUqRx5oTSMBr9ru7ZCn4KicenR6yW+8uRE58pb tZDufGH69bXNF6enDamDs4VzHm/1NFArrMij8yF2OA0XL4sh/QQKQL8sk1uCd56t s2zHrtVPKDHcqdys0QicGLvYl2MOmkjtOGiM4tlgXyeY7apbRQkSnyldXxpTGrQW c8aR4/xvG7Ql5Y/F/YlrUMUi8KJJLiHeWy9Zaa7FMTWqrYzYmPum2XbySYgHuHyz n+u6lhPatRDzJIVvw7U4krFFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8o5lT7I7 jfhqtPLIYCGd4KtOcJIwHwYDVR0jBBgwFoAUu1Bd/zLs1JK/Hv9/45TxKJCqZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzUxQkUwMTI0RTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTFCZF96THMxSktfSHY5XzQ1VHhLSkNxWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzUxQkUwMTI0RTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpL X0h2OV80NVR4S0pDcVp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC/XCBVlbhzj/SendxCEXEuYOTQkz3gy+e6ETm+iuOkhYJC0BkEQlSIP 08t3mXVo5OxcAMB0u+Kc2ionX+Va+szHmiu76y/CRPqkgKSNJh3neQuw5m8dei1C lDmc/yUmuydx9fde3Ku/m8axvfZBehogxRhI5n/NKCBSeQT/jh4GPHUqWDN0qDCT B93rhUb+Ul4h3b32/neaOOw8gXC2xKHBAHEhneHNueTYT6273qiQ4B5LXBlH+/1g dz/jzOR3Np8aYJ8sRf7dYyPLjxkbvNtAtqOJJY9ARz70VQTwF75bJg6qZXGun2JG frPaPCY+dBu578squ8kWmjUgQ3zGtN0= -----END CERTIFICATE-----Generated at Mon Apr 7 01:44:34 2025 by rpki-client