$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft File: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft (raw, json) Hash identifier: DTR7F2TrWJb5rTbeX8IVU1Sqx3aFyf2lzvXLDtwHZiA= Subject key identifier: 9B:C6:65:FF:1D:6D:6B:4C:37:8A:A5:AB:17:35:6F:83:9F:3A:AA:05 Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft Manifest number: 063E Signing time: Wed 02 Apr 2025 22:33:50 +0000 Manifest this update: Wed 02 Apr 2025 22:33:49 +0000 Manifest next update: Wed 09 Apr 2025 22:33:49 +0000 Files and hashes: 1: -IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl (hash: soKSFxlEFSPc+goGfn4DNGuzEgqkZ8BpkyR5FBF0Ojg=) 2: 3EACF95EEBB511ECA410BF6DC4F9AE02.roa (hash: xFmg051Irl3QGxSaxPh5/PYgXOOm8roreRqol3Gv8es=) 3: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (hash: goZ7BQs8FCZwkLeH44QNaXxFhzltbICpUZt+GahLEkQ=) 4: 5892BB44853E11EB9D9E2D39C4F9AE02.roa (hash: pCDQvhpjTdtiJ3zqTDHJUEvIuviY7SsjRZSRovU8uCc=) 5: 1D526B2E5DB311EEA8990E1BC4F9AE02.roa (hash: SXTVWJ2PMrAIqDEbXazZSPAGB7rgkYD55HYA8ZjO4Yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91854B7 Validity Not Before: Apr 2 22:33:49 2025 GMT Not After : Apr 9 22:33:49 2025 GMT Subject: CN=67edbb4e-ff1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0f:f7:85:c4:40:3c:3c:63:4c:67:86:99:20: 70:54:5e:73:c0:a3:c4:7a:35:7f:04:71:f2:b0:e4: 8e:75:69:f5:f7:3f:14:06:6b:3e:45:41:10:47:db: 02:9c:37:4f:0f:95:ec:7b:6f:3f:b2:d7:a3:e7:79: 4b:b9:dd:57:63:21:44:be:cc:db:ff:6d:e3:da:52: 0b:7e:53:59:ec:ea:c1:44:95:3f:d4:b8:df:b2:a8: f0:e3:61:64:4a:71:52:60:84:d7:bd:bd:71:48:e4: 2b:f3:8d:60:d7:b8:af:2f:99:af:a7:21:8c:9d:0e: 5d:95:28:67:38:a5:7a:43:41:6a:08:ba:8f:ef:65: 3d:5c:8b:28:1e:48:17:50:61:36:70:db:2c:e3:bf: e0:49:42:0b:d0:f1:3e:b0:3c:f2:4d:d8:21:0f:dc: f8:c5:c2:57:fd:5c:31:53:ac:18:6c:1d:bc:19:b6: 87:e9:1f:07:87:27:5d:54:d3:5d:8a:a0:1f:f7:96: 7d:f6:25:8a:25:14:21:b5:e4:00:cb:ee:d3:d5:99: 48:13:c2:36:22:a4:78:c2:1f:36:ff:c7:1a:f8:e7: b8:88:13:96:5c:bc:2c:b0:ec:4c:9e:1a:e3:80:26: 8c:b0:a9:01:d5:34:79:d0:c3:60:e6:fc:04:2c:9e: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C6:65:FF:1D:6D:6B:4C:37:8A:A5:AB:17:35:6F:83:9F:3A:AA:05 X509v3 Authority Key Identifier: keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:f9:74:ca:8a:d7:ef:3d:ee:c9:dd:05:bd:1b:58:0d:43:75: 43:13:57:a4:8e:ce:0f:ae:b8:b6:1f:f9:88:dc:bf:dc:ab:bf: 48:30:1b:4b:70:38:79:57:04:f6:57:26:2e:c5:8a:f7:48:8c: a3:03:0a:9c:fa:31:75:d0:16:ec:00:f0:0f:9b:c5:23:4a:8d: 68:11:4e:fc:dc:b4:a3:ce:3b:ff:f5:b9:4b:c0:f1:2d:4d:da: a6:f4:7d:b0:03:63:ee:34:bd:ec:e4:b8:ce:f2:80:71:68:0e: a2:90:54:a0:e2:d0:11:c3:6b:77:d4:99:cd:64:a1:de:38:37: a5:d0:54:7d:66:b4:c5:60:37:bb:28:0d:c8:8e:72:3e:8d:4f: 08:18:7d:71:f0:97:b1:c1:8a:ab:4e:b1:f3:00:b1:0f:f8:2f: 76:78:30:58:cc:99:02:d0:1e:35:0f:0d:bd:43:df:da:47:19: a8:f8:cf:3a:eb:2a:88:b5:c1:f0:d7:7b:19:3b:13:84:78:a3: b1:d5:55:6a:98:16:fb:f6:e5:4b:5b:e4:0c:8d:93:ec:a5:0b: 27:e3:49:fb:35:a8:54:12:29:3c:39:e6:8e:bc:66:b7:04:81: 02:3d:7b:e0:64:85:73:57:4b:31:67:91:c2:69:3d:fa:4f:72: a8:45:b7:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0QjcxMTAvBgNVBAUTKEY4OEI5NzQwNEY5REMxMEY1QUFCMDJGNzRFQzQ5MEY5 OEFEMEQzQjAwHhcNMjUwNDAyMjIzMzQ5WhcNMjUwNDA5MjIzMzQ5WjAYMRYwFAYD VQQDEw02N2VkYmI0ZS1mZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQ/3hcRAPDxjTGeGmSBwVF5zwKPEejV/BHHysOSOdWn19z8UBms+RUEQR9sC nDdPD5Xse28/stej53lLud1XYyFEvszb/23j2lILflNZ7OrBRJU/1Ljfsqjw42Fk SnFSYITXvb1xSOQr841g17ivL5mvpyGMnQ5dlShnOKV6Q0FqCLqP72U9XIsoHkgX UGE2cNss47/gSUIL0PE+sDzyTdghD9z4xcJX/VwxU6wYbB28GbaH6R8HhyddVNNd iqAf95Z99iWKJRQhteQAy+7T1ZlIE8I2IqR4wh82/8ca+Oe4iBOWXLwssOxMnhrj gCaMsKkB1TR50MNg5vwELJ6RNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvGZf8d bWtMN4qlqxc1b4OfOqoFMB8GA1UdIwQYMBaAFPiLl0BPncEPWqsC907EkPmK0NOw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTRCNy9FMTgwQ0U3QTg1 MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdROWFxd0wzVHNTUS1ZclEw N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JdVhRRS1kd1E5YXF3TDNUc1NRLVlyUTA3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTRCNy9FMTgwQ0U3QTg1MUUxMUVCODQxOUIzMjdDNEY5QUUwMi8tSXVYUUUtZHdR OWFxd0wzVHNTUS1ZclEwN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg+XTKitfvPe7J3QW9G1gNQ3VDE1ekjs4Prri2H/mI3L/cq79IMBtL cDh5VwT2VyYuxYr3SIyjAwqc+jF10BbsAPAPm8UjSo1oEU783LSjzjv/9blLwPEt Tdqm9H2wA2PuNL3s5LjO8oBxaA6ikFSg4tARw2t31JnNZKHeODel0FR9ZrTFYDe7 KA3IjnI+jU8IGH1x8JexwYqrTrHzALEP+C92eDBYzJkC0B41Dw29Q9/aRxmo+M86 6yqItcHw13sZOxOEeKOx1VVqmBb79uVLW+QMjZPspQsn40n7NahUEik8OeaOvGa3 BIECPXvgZIVzV0sxZ5HCaT36T3KoRbeO -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:07 2025 by rpki-client