$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json) Hash identifier: 9b+iQ2e2Dfhk6RebnZWqG8i8c8djFxNCQ8ND2Wnq3R4= Subject key identifier: 5E:5A:0B:DB:06:46:04:7D:B8:1D:CC:13:A9:38:4C:D3:7F:C4:F4:DB Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft Manifest number: 0636 Signing time: Fri 28 Mar 2025 22:51:51 +0000 Manifest this update: Fri 28 Mar 2025 22:51:50 +0000 Manifest next update: Fri 04 Apr 2025 22:51:50 +0000 Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: 4/fHBvi2a6+i5CfZhzXnEEj1h75F3DaaNeChjhKpfMM=) 2: 813CF67A858111EB914A5377C4F9AE02.roa (hash: QEOVhybwf6Wz+3qRFXxn3E9W4TWcZxLHMSU1XgjYyAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CF4 Validity Not Before: Mar 28 22:51:50 2025 GMT Not After : Apr 4 22:51:50 2025 GMT Subject: CN=67e72806-a3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:4a:10:38:e7:ff:b7:c9:cc:6f:df:81:5f: cd:5d:3d:26:d8:db:6c:c7:bb:06:0b:da:a9:ee:8b: 5d:94:29:d3:8c:90:14:c6:26:31:c1:22:cf:23:e3: 1c:41:ca:ff:ce:86:4e:2b:46:d2:ef:dc:4c:4e:92: 81:4a:ff:78:13:9a:76:27:d2:f8:17:99:f2:ba:9e: 45:fd:67:93:0a:cc:d3:6b:70:23:f1:3f:45:ff:bd: 7e:b0:f3:21:9c:23:e7:fa:e9:d4:f9:9e:30:b8:b3: e4:99:6e:a8:af:ca:c5:87:fa:02:1d:f4:ba:5c:be: ea:6f:76:a0:8e:fa:5b:19:0b:21:3d:38:f8:03:9e: 91:4b:90:2e:8d:6f:01:09:63:21:70:05:2b:67:6f: 60:65:fe:ad:ef:00:0e:6b:7b:68:85:98:4d:7d:bd: 1a:54:26:80:5e:b4:38:e4:a3:9a:b9:f4:d3:e2:7d: d8:b0:a6:9f:24:ac:66:0c:ea:53:3a:09:13:60:c4: b0:c7:20:99:7c:5e:62:78:38:a7:12:e5:87:58:ca: 3e:24:51:27:b8:3e:5b:7a:d4:f3:4a:aa:db:ba:1d: 7b:a0:80:0c:65:f5:10:d7:5e:39:c1:9b:eb:20:0a: 95:f3:85:8a:0b:e9:f2:6b:5b:fc:94:2b:32:fa:a7: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5A:0B:DB:06:46:04:7D:B8:1D:CC:13:A9:38:4C:D3:7F:C4:F4:DB X509v3 Authority Key Identifier: keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:13:c6:11:2f:9f:6c:8a:7b:c4:74:ba:3d:3c:f2:4d:8d:c0: 95:cf:77:f6:c5:ba:d9:7a:1c:3a:4f:ef:c1:d0:f2:db:6a:b3: 5b:b1:84:78:e3:da:ae:34:7c:d9:a6:4b:9b:00:c1:4c:44:28: e7:d0:15:8d:3d:07:6a:4f:5d:cb:0e:ca:04:29:38:61:89:af: 04:c5:8c:38:c8:2c:66:21:0f:33:97:2e:f1:a9:1f:bd:3c:e4: 73:cd:83:7e:a6:a5:d7:a6:a9:c3:b3:57:82:d1:29:e2:c7:fb: 9b:de:58:1a:45:10:21:5a:c7:62:dd:e4:59:14:e5:61:e5:fe: 5a:32:ae:5e:66:11:99:2a:cb:b6:2c:23:42:e1:bc:a6:5f:1d: fb:00:4a:7a:31:4c:06:5a:a4:a8:9f:ff:22:1d:d0:eb:e5:37: ee:f0:ae:f3:f3:1d:c3:39:31:e5:81:80:6c:42:7c:43:4d:d8: db:84:f0:89:7d:bb:a9:26:e9:22:0d:3b:b7:66:66:ea:f2:8e: 82:74:4e:1e:71:6a:39:aa:a3:ed:33:7e:c2:f7:03:57:ed:24: b7:b4:8b:b3:e0:ed:be:54:ff:f4:ea:e9:21:64:93:f4:38:51: db:c1:8c:e8:b3:6e:9d:62:45:4d:4b:82:3e:f7:95:42:36:81: 9a:75:0f:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw REZEQjM0MTEwHhcNMjUwMzI4MjI1MTUwWhcNMjUwNDA0MjI1MTUwWjAYMRYwFAYD VQQDEw02N2U3MjgwNi1hM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ9KEDjn/7fJzG/fgV/NXT0m2Ntsx7sGC9qp7otdlCnTjJAUxiYxwSLPI+Mc Qcr/zoZOK0bS79xMTpKBSv94E5p2J9L4F5nyup5F/WeTCszTa3Aj8T9F/71+sPMh nCPn+unU+Z4wuLPkmW6or8rFh/oCHfS6XL7qb3agjvpbGQshPTj4A56RS5AujW8B CWMhcAUrZ29gZf6t7wAOa3tohZhNfb0aVCaAXrQ45KOaufTT4n3YsKafJKxmDOpT OgkTYMSwxyCZfF5ieDinEuWHWMo+JFEnuD5betTzSqrbuh17oIAMZfUQ1145wZvr IAqV84WKC+nya1v8lCsy+qdpOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5aC9sG RgR9uB3ME6k4TNN/xPTbMB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1 N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv V08zZThHa01qbFVOX2JOQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEE8YRL59sinvEdLo9PPJNjcCVz3f2xbrZehw6T+/B0PLbarNbsYR4 49quNHzZpkubAMFMRCjn0BWNPQdqT13LDsoEKThhia8ExYw4yCxmIQ8zly7xqR+9 PORzzYN+pqXXpqnDs1eC0Snix/ub3lgaRRAhWsdi3eRZFOVh5f5aMq5eZhGZKsu2 LCNC4bymXx37AEp6MUwGWqSon/8iHdDr5Tfu8K7z8x3DOTHlgYBsQnxDTdjbhPCJ fbupJukiDTu3Zmbq8o6CdE4ecWo5qqPtM37C9wNX7SS3tIuz4O2+VP/06ukhZJP0 OFHbwYzos26dYkVNS4I+95VCNoGadQ9M -----END CERTIFICATE-----Generated at Fri Apr 4 21:52:04 2025 by rpki-client