$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json) Hash identifier: LaMx3ihzOFsmH0Rr+pXgmLEc0HqM5UQaakxV8rAY46A= Subject key identifier: 4B:13:EC:74:CD:7A:9E:89:AF:24:85:49:79:59:5C:E7:50:43:81:C9 Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft Manifest number: 0762 Signing time: Sat 12 Apr 2025 21:14:32 +0000 Manifest this update: Sat 12 Apr 2025 21:14:32 +0000 Manifest next update: Sat 19 Apr 2025 21:14:32 +0000 Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: nfcBNGNtqQY7c4nCxNJ/Ce3Ma1fni8YMhGjilL1OkG4=) 2: A3205106142511EB8FED0427C4F9AE02.roa (hash: VDZMZq0ravcenOYyOeGNgLAMJ2KdcwQBXJSf2fEc5SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Validity Not Before: Apr 12 21:14:32 2025 GMT Not After : Apr 19 21:14:32 2025 GMT Subject: CN=67fad7b8-add4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e8:6e:6c:d8:4e:54:68:1f:41:ec:73:98:a8: 09:39:23:50:f1:8b:59:88:ce:f5:43:fa:fd:30:18: 86:8f:04:ec:dc:e6:8b:88:3f:e1:00:b2:e7:be:9a: 5b:f1:5c:50:c0:8d:10:0d:13:73:09:ab:68:86:c3: 2f:c2:c3:c2:e1:a9:84:f1:72:2e:47:98:12:a6:b4: c9:70:b9:23:31:ec:a8:a5:72:81:85:e4:19:9f:f6: c8:04:8e:a9:6e:b3:3e:da:1c:d8:b8:08:e6:00:27: e2:90:dd:09:fa:a5:36:6c:d7:52:a9:05:13:56:e6: 59:fb:9f:af:1b:81:30:ba:7f:a2:e4:28:83:89:a4: ac:c6:b8:e6:00:44:77:a6:ec:b8:36:ab:bd:b8:4b: c9:56:c6:f7:07:fd:3d:29:bf:f2:d8:4a:e3:8d:32: c9:1e:3b:f0:db:e4:75:9f:3a:21:8c:53:44:c4:6d: f3:57:e1:39:c1:d5:05:93:3c:16:1e:6c:0f:44:51: dc:f5:03:3f:36:28:33:18:14:c6:24:a9:33:ba:2d: 81:88:31:1d:e8:39:c1:67:b3:a2:50:82:e7:e4:f1: 42:93:d1:bd:28:e8:a4:92:06:77:63:e1:73:98:e6: db:ce:8c:b7:20:b7:f2:29:c1:27:9d:8b:ed:04:9b: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:13:EC:74:CD:7A:9E:89:AF:24:85:49:79:59:5C:E7:50:43:81:C9 X509v3 Authority Key Identifier: keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:12:db:21:56:a8:6d:a6:21:61:67:34:10:50:c4:2a:d6:4c: 9d:1a:f9:c5:55:e1:c6:1e:30:04:65:40:a3:3f:d3:19:ed:15: 2e:31:15:32:f0:dc:34:bb:19:ce:98:ce:8f:db:af:f6:f1:82: 4d:2b:12:bd:1f:4b:41:c6:4e:cc:4f:42:3d:79:a4:f4:d5:00: 2d:98:d4:82:f3:38:d9:1e:9c:3b:75:2d:07:7e:5e:4e:84:94: 9e:1d:13:96:10:26:28:a5:94:d8:87:a0:8b:95:6e:a7:08:6f: 62:a3:b0:1e:1d:a8:d2:84:f9:34:79:e0:6d:33:48:7c:5b:f7: 15:86:38:fd:62:aa:be:5c:c8:ba:af:cb:f7:20:ab:fb:da:48: 99:1d:90:4c:fb:3b:1a:ba:e2:0b:52:4f:ce:e4:3b:d8:96:c4: cc:ef:3f:54:f0:43:ff:bb:4f:76:96:a2:43:83:de:53:d2:ca: 34:17:4e:a9:e4:35:5b:14:a5:62:5c:be:08:3d:1c:0d:cf:d0: d1:80:5a:ce:d2:6b:c1:50:61:05:2f:94:46:64:09:02:bd:c9: 0f:18:4f:ac:10:5b:01:1f:ff:15:3e:c3:16:fd:79:56:5c:28: b6:54:fb:4e:59:ab:1c:f2:76:80:0d:09:1b:41:62:8b:48:45: ac:7e:dc:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI4NEUxMTAvBgNVBAUTKEE1NjcwODFEQTY2OTVERDM3QjJDMkIxQjE3QTAxQkEz REU1OTFFQ0IwHhcNMjUwNDEyMjExNDMyWhcNMjUwNDE5MjExNDMyWjAYMRYwFAYD VQQDEw02N2ZhZDdiOC1hZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuhubNhOVGgfQexzmKgJOSNQ8YtZiM71Q/r9MBiGjwTs3OaLiD/hALLnvppb 8VxQwI0QDRNzCatohsMvwsPC4amE8XIuR5gSprTJcLkjMeyopXKBheQZn/bIBI6p brM+2hzYuAjmACfikN0J+qU2bNdSqQUTVuZZ+5+vG4Ewun+i5CiDiaSsxrjmAER3 puy4Nqu9uEvJVsb3B/09Kb/y2ErjjTLJHjvw2+R1nzohjFNExG3zV+E5wdUFkzwW HmwPRFHc9QM/NigzGBTGJKkzui2BiDEd6DnBZ7OiUILn5PFCk9G9KOikkgZ3Y+Fz mObbzoy3ILfyKcEnnYvtBJsmmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsT7HTN ep6JrySFSXlZXOdQQ4HJMB8GA1UdIwQYMBaAFKVnCB2maV3TeywrGxegG6PeWR7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjg0RS9FOTA1RENCMDE0 MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhkTjdMQ3NiRjZBYm85NVpI c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXY0lIYVpwWGRON0xDc2JGNkFibzk1Wkhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjg0RS9FOTA1RENCMDE0MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhk TjdMQ3NiRjZBYm85NVpIc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFEtshVqhtpiFhZzQQUMQq1kydGvnFVeHGHjAEZUCjP9MZ7RUuMRUy 8Nw0uxnOmM6P26/28YJNKxK9H0tBxk7MT0I9eaT01QAtmNSC8zjZHpw7dS0Hfl5O hJSeHROWECYopZTYh6CLlW6nCG9io7AeHajShPk0eeBtM0h8W/cVhjj9Yqq+XMi6 r8v3IKv72kiZHZBM+zsauuILUk/O5DvYlsTM7z9U8EP/u092lqJDg95T0so0F06p 5DVbFKViXL4IPRwNz9DRgFrO0mvBUGEFL5RGZAkCvckPGE+sEFsBH/8VPsMW/XlW XCi2VPtOWasc8naADQkbQWKLSEWsftyz -----END CERTIFICATE-----Generated at Sun Apr 13 02:00:22 2025 by rpki-client