$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft File: _0KzQ2BElUaW_-CLDuGXXGxbjW0.mft (raw, json) Hash identifier: KuGwy+aSbl9Yy/4eRlA6XF/jnxAs7AxevGv4ZAv2Hk0= Subject key identifier: 1B:46:0C:15:2F:50:76:7E:74:22:7F:11:D8:31:C5:1C:B3:CD:E2:01 Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft Manifest number: 0188 Signing time: Thu 03 Apr 2025 02:59:23 +0000 Manifest this update: Thu 03 Apr 2025 02:59:23 +0000 Manifest next update: Thu 10 Apr 2025 02:59:22 +0000 Files and hashes: 1: _0KzQ2BElUaW_-CLDuGXXGxbjW0.crl (hash: SoYZN4JyEORQu6XNdKXVrWGeGcJCz8YBuYd7zNJS4Dc=) 2: BCAE303EF6C611EE8AA17A87C4F9AE02.roa (hash: b9dTa2nX+qFG6d7y+XsHyu+bx2asCK2u/yxDxyFKOqQ=) 3: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (hash: wwr+xiQ0ICFC4K2aFb1fxrN51KszvejW5t2iwGw5e3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91864A7 Validity Not Before: Apr 3 02:59:23 2025 GMT Not After : Apr 10 02:59:22 2025 GMT Subject: CN=67edf98b-9b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:9c:3a:7d:3f:de:62:12:92:4a:39:6a:12: 8e:cd:15:e3:db:ad:1b:3b:ca:1c:d2:82:e1:6f:1d: 4e:de:bb:5b:9f:0b:fa:6d:da:c9:67:97:60:cd:7c: 40:c4:09:24:bf:68:53:ec:62:7c:41:fa:db:a3:9c: b3:9d:1c:f7:44:b5:ec:c2:c7:05:f6:31:0a:f2:07: ae:c2:d9:13:95:ea:e4:f3:b4:87:75:f2:51:f7:58: 1a:7c:39:0c:ff:b4:bb:44:71:c3:0c:2d:ac:47:d0: c0:a0:2f:0b:71:bd:09:a7:7b:68:91:b5:13:52:5f: d1:68:9c:82:b4:1d:c0:3f:cd:9f:ae:54:74:59:3e: 10:38:88:12:6a:b3:e9:e8:8d:59:7e:42:bf:94:67: 72:df:72:87:53:3e:18:0a:21:37:6d:37:00:60:c5: 12:f4:5c:76:7b:39:c9:d8:b0:bd:5f:65:da:74:d4: ef:e3:7f:52:60:50:b2:fc:d5:62:46:22:ce:87:69: 59:02:7d:9f:a3:e0:bc:cd:9e:69:3f:3d:f1:b2:92: ff:96:42:4e:9d:65:ac:22:83:cf:4f:b6:d6:14:85: d1:9a:07:ea:9c:c3:e6:b9:fa:46:2c:e7:03:84:fd: 80:e9:42:2c:51:1f:d5:d3:8a:cb:0a:9e:79:91:95: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:46:0C:15:2F:50:76:7E:74:22:7F:11:D8:31:C5:1C:B3:CD:E2:01 X509v3 Authority Key Identifier: keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ed:21:c3:17:2a:46:ac:52:4d:7b:83:d8:a1:d3:b1:96:5e: 69:cb:38:a5:1c:16:d1:27:9d:e9:db:3c:c2:c3:4a:19:e3:9c: b9:40:45:86:33:39:09:5f:4b:40:c0:d3:f9:df:e2:57:9f:bb: 99:8c:4d:67:2b:34:6a:b6:cc:c2:c2:71:e5:aa:f3:d6:36:50: ac:21:02:0a:e2:4d:cd:b4:f7:ee:5d:fa:9c:09:25:cb:81:c9: be:59:a3:b9:30:6d:19:68:52:e8:73:9f:9f:7b:3a:ff:36:8e: c1:4d:e8:2f:77:6b:e9:8d:41:ec:f7:9b:96:23:f4:a3:13:60: b8:27:a5:19:45:4d:61:4d:98:a4:10:e8:fc:55:75:74:d4:b2: 9d:39:bc:76:ed:36:ed:b0:d4:c4:68:bb:f7:b5:8d:29:8d:3d: 19:c1:29:f3:e9:1a:15:4f:50:a4:37:51:bb:74:3c:1e:9d:62: c8:30:af:a7:88:bb:0a:7a:14:eb:a3:56:f2:53:2a:62:76:c4: a8:9e:1c:95:f3:ca:e3:0f:93:d6:29:7e:e0:2e:11:1f:20:14: 06:0a:23:72:03:8f:e6:d2:c7:0e:c6:fb:8c:b0:74:d9:45:ac: 05:79:e6:96:36:d3:3f:00:b5:10:6b:ec:9c:10:bc:44:dc:d3: b5:96:d7:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD NkM1QjhENkQwHhcNMjUwNDAzMDI1OTIzWhcNMjUwNDEwMDI1OTIyWjAYMRYwFAYD VQQDEw02N2VkZjk4Yi05YjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6mcOn0/3mISkko5ahKOzRXj260bO8oc0oLhbx1O3rtbnwv6bdrJZ5dgzXxA xAkkv2hT7GJ8Qfrbo5yznRz3RLXswscF9jEK8geuwtkTlerk87SHdfJR91gafDkM /7S7RHHDDC2sR9DAoC8Lcb0Jp3tokbUTUl/RaJyCtB3AP82frlR0WT4QOIgSarPp 6I1ZfkK/lGdy33KHUz4YCiE3bTcAYMUS9Fx2eznJ2LC9X2XadNTv439SYFCy/NVi RiLOh2lZAn2fo+C8zZ5pPz3xspL/lkJOnWWsIoPPT7bWFIXRmgfqnMPmufpGLOcD hP2A6UIsUR/V04rLCp55kZX2hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtGDBUv UHZ+dCJ/EdgxxRyzzeIBMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5 MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjRBNy9DODA1NUZENkM5MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxV YVdfLUNMRHVHWFhHeGJqVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx7SHDFypGrFJNe4PYodOxll5pyzilHBbRJ53p2zzCw0oZ45y5QEWG MzkJX0tAwNP53+JXn7uZjE1nKzRqtszCwnHlqvPWNlCsIQIK4k3NtPfuXfqcCSXL gcm+WaO5MG0ZaFLoc5+fezr/No7BTegvd2vpjUHs95uWI/SjE2C4J6UZRU1hTZik EOj8VXV01LKdObx27TbtsNTEaLv3tY0pjT0ZwSnz6RoVT1CkN1G7dDwenWLIMK+n iLsKehTro1byUypidsSonhyV88rjD5PWKX7gLhEfIBQGCiNyA4/m0scOxvuMsHTZ RawFeeaWNtM/ALUQa+ycELxE3NO1lteR -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:29 2025 by rpki-client