$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json) Hash identifier: I3Y0N6IUAnkHBs1n2uyrCyQjO6UJhc29ht5R5Pa/rd4= Subject key identifier: A0:0A:7E:32:8B:21:B0:D7:EE:FF:75:D7:13:BC:97:F5:CE:19:37:8F Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Certificate serial: 0218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft Manifest number: 0213 Signing time: Sat 29 Mar 2025 02:15:47 +0000 Manifest this update: Sat 29 Mar 2025 02:15:47 +0000 Manifest next update: Sat 05 Apr 2025 02:15:47 +0000 Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: UbXbtDPzg+o2Q0MU9YJmSYxLrHYGrISxbTZpnkNk8w0=) 2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: qFfisBxRiCqfGUur/S/I0P4ucD2aKemCvw2qjb/eV4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36B8 Validity Not Before: Mar 29 02:15:47 2025 GMT Not After : Apr 5 02:15:47 2025 GMT Subject: CN=67e757d3-fccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:72:01:65:cb:9d:20:37:2e:b7:08:54:5d:83: 77:a3:d9:c8:b1:96:53:62:c7:a7:d2:1d:f5:3f:c0: c4:7f:d3:e7:f8:cb:06:bf:a2:f8:60:07:ab:6d:e4: da:48:15:cb:73:f1:fd:f6:83:2e:58:88:ac:34:80: f4:b3:aa:14:04:17:2c:36:cf:28:94:43:61:e0:5d: 1b:2e:15:11:09:84:0f:b0:bd:53:fb:a4:60:d3:36: 1e:75:12:91:c3:b8:cc:0a:6d:fa:b1:76:b9:d5:1d: 93:ee:7f:40:3f:74:65:05:d2:51:11:d7:15:4a:7f: 0f:5c:c4:01:db:eb:b0:7b:1e:c7:3a:bd:dd:5d:53: 09:9b:be:b2:42:c0:82:bf:c3:17:88:db:26:df:14: d1:4f:f7:36:76:5e:27:7e:39:22:d2:59:dc:dc:a0: 01:82:bf:46:07:9e:97:7a:af:30:37:b1:63:b3:8d: ca:2b:ed:fd:69:72:fd:7f:3a:23:4e:53:e7:b0:57: f7:a0:42:28:07:f9:ad:83:93:52:ec:9e:2d:7d:d3: 7f:e3:10:ca:bf:87:96:cc:a8:ed:31:41:73:55:3f: 49:c9:c4:8b:80:24:5f:e2:32:0b:fc:f9:33:ba:53: 62:07:57:64:6f:65:df:bb:97:15:5f:d9:40:15:00: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0A:7E:32:8B:21:B0:D7:EE:FF:75:D7:13:BC:97:F5:CE:19:37:8F X509v3 Authority Key Identifier: keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e8:d7:2b:97:be:85:73:53:5f:52:aa:6b:00:dc:77:c0:7c: ec:05:e8:50:ab:96:24:c6:ca:76:4d:ff:6f:19:3d:af:f2:2b: 45:4c:54:8a:7d:c5:20:00:3a:88:2f:ab:b2:ad:62:f4:80:87: be:20:96:e7:8c:a4:7b:3d:74:bd:ca:d7:95:6e:fe:90:11:f8: 84:dc:c6:45:44:60:9b:5e:09:74:65:53:a6:c2:e2:c3:61:ac: 0d:b4:28:bd:d8:34:60:bd:b7:23:c8:29:d5:bb:44:9d:cb:ad: 3b:dc:14:a1:26:d4:6d:e6:24:ff:e4:fb:38:93:28:be:74:98: 74:c0:6c:e8:e6:94:90:62:a5:16:36:a9:ce:b6:9a:33:d1:2a: be:6e:3c:98:85:c2:b2:d6:e1:6b:25:2e:fd:e3:3c:69:6f:b0: 33:d6:c6:f1:7b:15:fc:d4:64:cb:38:2f:78:b6:43:a6:1c:b4: 50:5b:45:95:7c:ac:32:81:40:f2:ce:3b:bb:ca:65:01:fe:31: 02:a3:6b:c2:95:4b:0e:52:32:62:49:05:fd:94:d9:62:84:f2: a4:90:01:e5:15:1c:a0:10:19:ba:57:74:e0:72:e4:7d:16:d8: c0:d2:c6:19:4a:27:87:e9:82:fa:79:b2:33:59:82:f7:49:94: b3:d8:57:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QjgxMTAvBgNVBAUTKEY4MDNDMzcxOEYwRTgxMjBENDNFQjAzNDgwOUY2QThC Mzg4NEQ3OUIwHhcNMjUwMzI5MDIxNTQ3WhcNMjUwNDA1MDIxNTQ3WjAYMRYwFAYD VQQDEw02N2U3NTdkMy1mY2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3IBZcudIDcutwhUXYN3o9nIsZZTYsen0h31P8DEf9Pn+MsGv6L4YAerbeTa SBXLc/H99oMuWIisNID0s6oUBBcsNs8olENh4F0bLhURCYQPsL1T+6Rg0zYedRKR w7jMCm36sXa51R2T7n9AP3RlBdJREdcVSn8PXMQB2+uwex7HOr3dXVMJm76yQsCC v8MXiNsm3xTRT/c2dl4nfjki0lnc3KABgr9GB56Xeq8wN7Fjs43KK+39aXL9fzoj TlPnsFf3oEIoB/mtg5NS7J4tfdN/4xDKv4eWzKjtMUFzVT9JycSLgCRf4jIL/Pkz ulNiB1dkb2Xfu5cVX9lAFQCbeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAKfjKL IbDX7v911xO8l/XOGTePMB8GA1UdIwQYMBaAFPgDw3GPDoEg1D6wNICfaos4hNeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZCOC8zODg0MTMxODJB NjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dTRFVQckEwZ0o5cWl6aUUx NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BUERjWThPZ1NEVVByQTBnSjlxaXppRTE1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZCOC8zODg0MTMxODJBNjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dT RFVQckEwZ0o5cWl6aUUxNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL6Ncrl76Fc1NfUqprANx3wHzsBehQq5Ykxsp2Tf9vGT2v8itFTFSK fcUgADqIL6uyrWL0gIe+IJbnjKR7PXS9yteVbv6QEfiE3MZFRGCbXgl0ZVOmwuLD YawNtCi92DRgvbcjyCnVu0Sdy6073BShJtRt5iT/5Ps4kyi+dJh0wGzo5pSQYqUW NqnOtpoz0Sq+bjyYhcKy1uFrJS794zxpb7Az1sbxexX81GTLOC94tkOmHLRQW0WV fKwygUDyzju7ymUB/jECo2vClUsOUjJiSQX9lNlihPKkkAHlFRygEBm6V3TgcuR9 FtjA0sYZSieH6YL6ebIzWYL3SZSz2FdT -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:15 2025 by rpki-client