$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: IBYq51DdiKvsmJ7Xyvtcflx6m3QUe7i3VJsjIiVx1fw= Subject key identifier: 00:5F:2A:D9:6F:30:E4:7F:6C:2F:FC:13:D1:AA:71:8B:64:A9:23:E4 Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: C3 Signing time: Wed 09 Apr 2025 04:46:29 +0000 Manifest this update: Wed 09 Apr 2025 04:46:28 +0000 Manifest next update: Wed 16 Apr 2025 04:46:28 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: B5Q947Qiinj8i9NB749XgVgVcrj5eAr7peObrbrziLE=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: oDkekcVc24g24l9w3pqtjUZRiCpSkPIIazs9r2Z2ZIs=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 66xBTvofN0kw93P5VictZxaCnVByR33mxLgf2xLdWgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 04:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC Validity Not Before: Apr 9 04:46:28 2025 GMT Not After : Apr 16 04:46:28 2025 GMT Subject: CN=67f5fba4-2da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e1:bf:fd:4f:a7:ce:67:70:51:ad:72:14:37: c3:e1:ac:4b:46:4a:89:d0:eb:a6:14:62:c6:4b:36: 50:b3:c0:65:b9:bd:4b:ba:0b:d2:03:d4:1f:77:83: 66:2d:27:68:c4:04:7f:3c:d9:e4:99:de:11:cd:40: de:0f:05:31:a9:36:1e:6e:69:fd:d9:46:6a:22:11: e0:09:ef:62:0d:4f:46:d0:fd:ce:72:20:21:ae:d9: 73:27:d2:0b:d3:36:3d:88:93:d2:dc:f3:3e:14:a2: f4:f3:aa:59:cd:de:67:20:20:68:11:f8:12:7d:60: 24:5c:54:90:1d:61:36:ac:06:aa:78:f9:94:29:5d: 09:5a:8f:b8:63:5a:b5:05:a0:29:19:ad:40:12:8b: 47:58:46:a8:c6:08:d8:58:9d:2b:7a:8a:e6:85:78: 2c:54:88:2e:46:5d:8d:8d:f3:00:53:f7:ed:2e:d0: ed:94:8d:9d:9e:61:84:6d:5c:82:3f:3a:4b:cf:0b: b3:bd:5b:bf:e7:37:c6:cb:da:f2:a0:3a:22:4c:ed: e8:25:22:a0:66:ac:e2:90:b0:90:e8:da:60:28:7d: 28:b3:f1:db:b5:d1:34:9b:47:e6:4b:4f:ad:82:6e: 92:36:b7:52:f6:f5:63:cd:a6:72:a8:62:62:b2:35: 52:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5F:2A:D9:6F:30:E4:7F:6C:2F:FC:13:D1:AA:71:8B:64:A9:23:E4 X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:41:98:1b:fa:fd:9c:a6:a9:c8:f0:ee:72:6e:d8:54:c8:25: fb:2e:d4:5d:ae:be:13:fe:cb:6c:42:7d:f2:90:ee:2a:e3:ac: 23:4f:17:6b:61:b4:ab:3f:8d:de:6c:0c:c3:fd:2c:18:5b:d8: f4:e8:28:f4:f3:d0:0a:7c:43:50:cd:b1:9b:0f:8e:3a:c5:96: 96:ae:b9:8c:ef:be:d7:af:96:10:b0:da:77:7b:77:7e:33:d6: e6:24:23:7b:31:c7:73:f4:3c:97:a5:9f:e8:ff:4f:a0:04:c0: 16:60:a8:72:ac:60:21:47:a8:bd:d4:7f:75:14:8b:b5:e7:94: 85:70:70:89:4a:fc:a7:21:85:81:74:ff:5e:bd:3a:62:da:c5: 84:19:6c:c7:a3:64:a4:fb:cb:20:27:30:3a:8b:d0:1f:8f:f5: 07:ae:43:b1:d2:71:d7:c2:c8:85:f8:e0:ba:c6:c2:de:54:3c: b2:8e:a6:bb:5a:ea:ea:f1:c0:ed:98:4a:24:4f:7e:50:42:3b: 86:4f:2e:dc:2d:1b:3b:9a:b6:98:2f:7c:f4:bb:2b:48:da:3b: 30:b2:bb:1d:04:b9:3f:d4:76:14:a4:04:84:8a:45:85:9e:c6: f7:b2:68:1c:75:c9:ff:92:34:dd:87:d7:62:42:76:67:04:2f: b8:04:ac:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUwNDA5MDQ0NjI4WhcNMjUwNDE2MDQ0NjI4WjAYMRYwFAYD VQQDEw02N2Y1ZmJhNC0yZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnuG//U+nzmdwUa1yFDfD4axLRkqJ0OumFGLGSzZQs8Blub1LugvSA9Qfd4Nm LSdoxAR/PNnkmd4RzUDeDwUxqTYebmn92UZqIhHgCe9iDU9G0P3OciAhrtlzJ9IL 0zY9iJPS3PM+FKL086pZzd5nICBoEfgSfWAkXFSQHWE2rAaqePmUKV0JWo+4Y1q1 BaApGa1AEotHWEaoxgjYWJ0reormhXgsVIguRl2NjfMAU/ftLtDtlI2dnmGEbVyC PzpLzwuzvVu/5zfGy9ryoDoiTO3oJSKgZqzikLCQ6NpgKH0os/HbtdE0m0fmS0+t gm6SNrdS9vVjzaZyqGJisjVS4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABfKtlv MOR/bC/8E9GqcYtkqSPkMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWQZgb+v2cpqnI8O5ybthUyCX7LtRdrr4T/stsQn3ykO4q46wjTxdr YbSrP43ebAzD/SwYW9j06Cj089AKfENQzbGbD446xZaWrrmM777Xr5YQsNp3e3d+ M9bmJCN7Mcdz9DyXpZ/o/0+gBMAWYKhyrGAhR6i91H91FIu155SFcHCJSvynIYWB dP9evTpi2sWEGWzHo2Sk+8sgJzA6i9Afj/UHrkOx0nHXwsiF+OC6xsLeVDyyjqa7 Wurq8cDtmEokT35QQjuGTy7cLRs7mraYL3z0uytI2jswsrsdBLk/1HYUpASEikWF nsb3smgcdcn/kjTdh9diQnZnBC+4BKxl -----END CERTIFICATE-----Generated at Wed Apr 9 09:44:53 2025 by rpki-client