$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft File: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft (raw, json) Hash identifier: YBVQzLaZYCvzcGAjJ9Pn112vri0N5B7XacBUmKkvS7Q= Subject key identifier: 10:55:03:76:A5:F9:E7:E5:36:F7:3A:1C:E5:26:B5:03:D4:67:8C:8E Authority key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14 Certificate issuer: /CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14 Certificate serial: 25F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft Manifest number: 25DF Signing time: Tue 08 Apr 2025 15:43:26 +0000 Manifest this update: Tue 08 Apr 2025 15:43:26 +0000 Manifest next update: Tue 15 Apr 2025 15:43:26 +0000 Files and hashes: 1: h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl (hash: tteELcx2k+rAEClZhL8jJp8PZVRGYrb90viM3XACr80=) 2: 764601EE6A7A11EFAF10EC37C4F9AE02.roa (hash: wlnyKHrlK/WWGM/sWHlA6+OjLcmqJ1sU/DSuQx9lYJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 15:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9714 (0x25f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5030 Validity Not Before: Apr 8 15:43:26 2025 GMT Not After : Apr 15 15:43:26 2025 GMT Subject: CN=67f5441e-b9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:57:a4:75:f0:3f:21:26:47:81:1b:41:42: e2:02:fd:6a:54:4b:28:e0:e6:e4:bd:d1:7b:0e:ac: 82:96:d8:b6:ce:59:ba:66:6e:70:13:86:7d:35:f9: 14:9b:3b:a0:41:e0:07:81:b9:59:75:23:36:40:38: ea:67:54:3f:bb:85:78:bb:8a:23:b6:55:ad:8c:d3: 96:ba:8a:d0:30:9d:1b:7c:af:b9:17:3a:bb:09:33: 8d:4f:7c:78:dc:a2:b4:54:78:79:2f:95:51:df:e8: ab:46:01:fc:a1:91:d0:c7:11:17:f6:8b:da:d8:9a: fa:b8:b3:74:4b:45:da:64:e3:c5:78:7c:f3:e7:46: a1:01:b5:30:8f:bd:ea:11:00:f8:ff:d7:6f:72:20: 45:69:11:51:b0:47:8c:27:0e:15:74:22:9a:d1:64: a7:73:97:c3:ae:68:55:0b:27:eb:19:ab:44:03:00: 46:4c:87:3f:b9:db:f3:bf:e1:94:23:10:46:e3:e7: 0c:8f:7b:03:c5:7c:ca:a9:b7:bc:c0:19:01:9f:45: ad:48:d8:de:6e:7b:36:c8:b0:26:f8:8a:0a:9e:3f: ee:0b:11:f1:33:bb:67:ca:e7:d9:d6:04:0c:f8:fa: 98:7c:67:19:5b:5e:3c:51:c3:aa:be:0c:6b:1b:20: 20:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:55:03:76:A5:F9:E7:E5:36:F7:3A:1C:E5:26:B5:03:D4:67:8C:8E X509v3 Authority Key Identifier: keyid:87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:b7:1d:6e:37:e5:22:aa:e5:5a:31:f4:05:9d:ec:fd:1e:4c: 96:b9:c1:c5:51:dd:b4:8d:c3:41:b0:c4:52:43:4e:3e:03:18: b9:23:f4:fe:82:6f:a6:9d:45:de:3e:7a:91:5e:16:98:bb:e6: 44:77:66:f9:33:88:03:53:cf:c7:f0:e3:07:12:1c:b9:7f:cd: c9:43:e4:91:0a:7b:d3:38:a6:e7:92:68:e8:ac:ec:a3:e0:1d: 50:62:d2:13:ef:4e:91:42:bf:7d:f5:a5:ab:af:97:2c:ed:01: df:a0:13:18:7f:e6:ac:52:31:27:f5:73:d5:7f:12:f5:58:a0: 67:d8:0a:8b:07:c3:96:c2:78:f7:e6:33:f3:62:b3:46:e2:53: 1e:1e:09:6f:8c:d6:3a:ab:92:df:fe:a0:7a:76:65:03:95:f2: 26:0b:03:ad:df:87:87:44:37:86:40:20:5c:b7:28:70:05:d2: 3e:05:f4:86:d1:bc:9c:75:75:10:46:6b:6c:2d:c1:85:f8:2a: c1:18:9e:60:09:51:44:2e:79:30:af:97:60:6e:d7:09:c8:c1: e6:56:cb:ea:92:33:03:ce:f3:6e:4d:5e:51:01:1d:f3:9a:c5: eb:db:8f:7f:ed:a5:3f:27:84:4b:ad:74:85:67:f9:05:ba:7d: 36:83:6b:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwMzAxMTAvBgNVBAUTKDg3NjlCOTUyRjlDODAwNjc1NzkyOUYwNjk5N0NERTVC MUU0NDhGMTQwHhcNMjUwNDA4MTU0MzI2WhcNMjUwNDE1MTU0MzI2WjAYMRYwFAYD VQQDEw02N2Y1NDQxZS1iOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BBXpHXwPyEmR4EbQULiAv1qVEso4ObkvdF7DqyClti2zlm6Zm5wE4Z9NfkU mzugQeAHgblZdSM2QDjqZ1Q/u4V4u4ojtlWtjNOWuorQMJ0bfK+5Fzq7CTONT3x4 3KK0VHh5L5VR3+irRgH8oZHQxxEX9ova2Jr6uLN0S0XaZOPFeHzz50ahAbUwj73q EQD4/9dvciBFaRFRsEeMJw4VdCKa0WSnc5fDrmhVCyfrGatEAwBGTIc/udvzv+GU IxBG4+cMj3sDxXzKqbe8wBkBn0WtSNjebns2yLAm+IoKnj/uCxHxM7tnyufZ1gQM +PqYfGcZW148UcOqvgxrGyAgkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBVA3al +eflNvc6HOUmtQPUZ4yOMB8GA1UdIwQYMBaAFIdpuVL5yABnV5KfBpl83lseRI8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTAzMC9DRTZBM0YxMEZE MkExMUU0Qjc0RkVBNDJDNEY5QUUwMi9oMm01VXZuSUFHZFhrcDhHbVh6ZVd4NUVq eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gybTVVdm5JQUdkWGtwOEdtWHplV3g1RWp4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTAzMC9DRTZBM0YxMEZEMkExMUU0Qjc0RkVBNDJDNEY5QUUwMi9oMm01VXZuSUFH ZFhrcDhHbVh6ZVd4NUVqeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCstx1uN+UiquVaMfQFnez9HkyWucHFUd20jcNBsMRSQ04+Axi5I/T+ gm+mnUXePnqRXhaYu+ZEd2b5M4gDU8/H8OMHEhy5f83JQ+SRCnvTOKbnkmjorOyj 4B1QYtIT706RQr999aWrr5cs7QHfoBMYf+asUjEn9XPVfxL1WKBn2AqLB8OWwnj3 5jPzYrNG4lMeHglvjNY6q5Lf/qB6dmUDlfImCwOt34eHRDeGQCBctyhwBdI+BfSG 0bycdXUQRmtsLcGF+CrBGJ5gCVFELnkwr5dgbtcJyMHmVsvqkjMDzvNuTV5RAR3z msXr249/7aU/J4RLrXSFZ/kFun02g2tz -----END CERTIFICATE-----Generated at Thu Apr 10 18:42:03 2025 by rpki-client