$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft File: 91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json) Hash identifier: D+hxqjlpziabSOlU9B9rH+RJjlhP66iUX5T1sZpeZ3Y= Subject key identifier: B2:2D:BC:24:78:EB:B1:3B:74:FB:A2:50:F2:75:56:D3:A4:6F:E0:52 Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 Certificate issuer: /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft Manifest number: 0182 Signing time: Mon 07 Apr 2025 02:37:43 +0000 Manifest this update: Mon 07 Apr 2025 02:37:43 +0000 Manifest next update: Mon 14 Apr 2025 02:37:42 +0000 Files and hashes: 1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: x8KmkrzgJNtzbdsE+L6T+QdAKL797if+YLnwaGtTfBs=) 2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: sO+2+/cvQ7fG/IUMq+A+e08x9da5+jbIe5T9qmjARBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 02:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CDE4 Validity Not Before: Apr 7 02:37:43 2025 GMT Not After : Apr 14 02:37:42 2025 GMT Subject: CN=67f33a77-fbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:54:21:8f:bc:12:58:12:65:ab:4f:cb:8b:9d: 69:74:46:86:8e:f5:35:2e:25:13:3b:f5:fa:9f:d1: c7:d1:08:03:4b:36:6f:5d:9e:a7:02:4d:1d:bc:72: 85:59:1d:0f:84:d1:35:c7:df:81:e8:84:70:84:6d: 82:3b:55:ea:b2:27:fb:5c:8f:4f:f1:67:c0:91:16: 1a:72:c5:20:08:26:b7:2b:4f:0c:f1:15:57:0a:71: 3b:e7:41:88:bf:8c:c2:c7:48:75:05:5d:05:89:77: bb:09:ad:52:73:2c:41:26:2a:37:0f:1c:ea:87:9d: 01:c8:56:20:bd:07:23:45:37:d5:c5:98:54:aa:22: 13:82:5b:de:e7:f0:fa:cd:fd:03:69:79:95:82:74: 8d:22:67:18:16:74:46:e1:32:1c:42:b3:76:0f:d9: 11:44:66:f6:e7:a3:2b:ff:d0:24:96:8c:7d:10:88: 4a:a9:88:90:df:dd:4c:42:e3:58:3d:82:e4:20:42: 95:07:07:ed:4a:6c:b7:1a:82:bd:2a:58:3e:30:12: 11:16:f4:55:4f:cc:b3:4e:f7:27:3e:a2:fe:17:4e: a3:c6:47:cf:84:5e:7c:ca:a7:02:85:73:40:91:09: fb:1f:4c:38:d0:99:77:6f:97:62:07:eb:e3:9c:c0: a2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2D:BC:24:78:EB:B1:3B:74:FB:A2:50:F2:75:56:D3:A4:6F:E0:52 X509v3 Authority Key Identifier: keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:bf:a8:28:91:12:15:da:6a:de:cd:6f:b7:e0:3d:49:d0:8f: 89:43:cf:a0:80:e3:59:42:6f:3c:e5:5a:33:7d:d7:06:28:c2: d3:9e:81:05:90:87:b3:fa:f8:d7:19:e3:e0:d6:c1:f6:ec:1c: 4e:87:ea:32:ca:23:95:c8:14:fc:e7:24:2a:46:e7:ac:51:ab: 1b:82:d8:a1:e8:25:c4:5c:c7:f8:c1:b7:61:2d:ec:82:41:e8: 71:05:89:26:bb:3f:84:ce:37:ec:ea:15:64:95:9e:d1:b9:95: b7:75:99:43:07:01:85:8d:84:70:8d:60:bc:0c:fc:cf:82:09: 73:32:ef:6d:b3:80:cf:61:2f:61:51:cf:cf:a3:71:ca:a4:21: 2f:30:b6:84:00:99:9f:2f:83:a1:d1:3c:ca:4e:77:fc:74:e7: 39:e5:9e:53:d8:54:81:35:dd:56:1d:a1:60:cf:3f:e1:c6:4a: 69:65:d6:54:93:44:ae:32:3c:6d:65:f2:87:82:ac:57:2d:60: 46:91:81:26:6c:a8:f9:35:22:0f:b2:71:d6:6d:44:ab:b6:27: fc:2d:6e:80:51:7e:1d:25:68:0f:3c:4f:d4:57:f9:b8:30:f9: 80:0c:33:7b:a1:54:f2:e8:a2:b2:48:f1:16:47:21:d2:42:39: 01:2f:04:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNERTQxMTAvBgNVBAUTKEY3NUFDOERDMDQ0OTU3QjFCMTVBMEIxNUM2RURBMzE4 QjIzQjQwMzMwHhcNMjUwNDA3MDIzNzQzWhcNMjUwNDE0MDIzNzQyWjAYMRYwFAYD VQQDEw02N2YzM2E3Ny1mYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VQhj7wSWBJlq0/Li51pdEaGjvU1LiUTO/X6n9HH0QgDSzZvXZ6nAk0dvHKF WR0PhNE1x9+B6IRwhG2CO1Xqsif7XI9P8WfAkRYacsUgCCa3K08M8RVXCnE750GI v4zCx0h1BV0FiXe7Ca1ScyxBJio3Dxzqh50ByFYgvQcjRTfVxZhUqiITglve5/D6 zf0DaXmVgnSNImcYFnRG4TIcQrN2D9kRRGb256Mr/9Aklox9EIhKqYiQ391MQuNY PYLkIEKVBwftSmy3GoK9Klg+MBIRFvRVT8yzTvcnPqL+F06jxkfPhF58yqcChXNA kQn7H0w40Jl3b5diB+vjnMCiBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLItvCR4 67E7dPuiUPJ1VtOkb+BSMB8GA1UdIwQYMBaAFPdayNwESVexsVoLFcbtoxiyO0Az MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0RFNC9CNUE0NzM5MEM5 OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3R3hXZ3NWeHUyakdMSTdR RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxckkzQVJKVjdHeFdnc1Z4dTJqR0xJN1FETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0RFNC9CNUE0NzM5MEM5OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3 R3hXZ3NWeHUyakdMSTdRRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkv6gokRIV2mrezW+34D1J0I+JQ8+ggONZQm885VozfdcGKMLTnoEF kIez+vjXGePg1sH27BxOh+oyyiOVyBT85yQqRuesUasbgtih6CXEXMf4wbdhLeyC QehxBYkmuz+Ezjfs6hVklZ7RuZW3dZlDBwGFjYRwjWC8DPzPgglzMu9ts4DPYS9h Uc/Po3HKpCEvMLaEAJmfL4Oh0TzKTnf8dOc55Z5T2FSBNd1WHaFgzz/hxkppZdZU k0SuMjxtZfKHgqxXLWBGkYEmbKj5NSIPsnHWbUSrtif8LW6AUX4dJWgPPE/UV/m4 MPmADDN7oVTy6KKySPEWRyHSQjkBLwT2 -----END CERTIFICATE-----Generated at Tue Apr 8 14:03:35 2025 by rpki-client