$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft File: 446z9aUQfjDwynHd6nWxcNCwMlY.mft (raw, json) Hash identifier: pu7JKauy9Hscc56t1M5pLsvbE732PCVO2zNs+gBftMc= Subject key identifier: 17:7B:A7:FB:7F:73:E5:99:A1:34:E4:BD:95:C8:E3:C1:19:03:CD:AB Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 Certificate issuer: /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft Manifest number: A2 Signing time: Sat 29 Mar 2025 05:38:24 +0000 Manifest this update: Sat 29 Mar 2025 05:38:24 +0000 Manifest next update: Sat 05 Apr 2025 05:38:24 +0000 Files and hashes: 1: 446z9aUQfjDwynHd6nWxcNCwMlY.crl (hash: wTbgZtk1xOE14lM1h6wPf5ZdnAuIrUK4WEOs0e53N7M=) 2: B99947EAF81811EFACB5925BC4F9AE02.roa (hash: PHBiUBl2taPoBuCvQI6Au/xOJl7/xl4HUgsAnqfu8A8=) 3: B84D6D3AF81811EFACB5925BC4F9AE02.roa (hash: OXnTHrIuW8lqh4Zru5Af4wCTMKEnL5QDhv8/K+4cKxI=) 4: F9ECF4A0295A11EFBECFCA7EC4F9AE02.roa (hash: NdbphxCCW/0QaYFIIuCoc2s3U5MsSxFLdZGoiC7E3Ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5560 Validity Not Before: Mar 29 05:38:24 2025 GMT Not After : Apr 5 05:38:24 2025 GMT Subject: CN=67e78750-ad8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:a3:50:9b:ba:76:78:a9:7d:64:a3:e6:19: 48:41:7e:5d:56:3d:ef:d4:1b:ed:ff:55:0f:c1:88: 0b:a0:66:f0:77:64:a9:50:ec:f8:5b:4d:e7:c4:b0: 73:00:17:4f:fd:05:18:da:d7:e4:17:18:f5:3c:b3: 31:c1:0c:0c:c0:81:59:91:ba:07:00:51:8c:3a:d0: 3b:08:33:64:b6:ef:c4:b3:8e:5a:61:99:9f:05:7a: eb:f5:d0:6a:62:d1:57:ca:0b:90:a4:60:9f:27:4d: 28:d9:f3:98:1b:ea:9e:dd:2c:0c:89:20:c2:a8:72: 12:67:1b:e8:f1:c7:1a:96:d1:5c:48:bc:6f:e8:ee: 33:af:e4:bf:d4:00:d0:ae:a5:09:77:21:bf:3c:70: 38:4b:ba:f1:47:a8:52:fb:97:4d:9e:98:b5:4c:5e: 46:f0:fb:ad:96:f3:f2:8a:b3:1e:f0:c9:1c:55:61: 04:6f:4d:a7:87:ee:a3:6b:d1:68:19:22:c3:89:b7: 59:18:bd:db:a8:d3:8c:74:eb:bc:56:be:78:2c:f7: c2:2d:2e:9e:c0:54:c2:a9:74:33:9c:a0:60:b4:eb: 48:91:ae:53:1a:c9:a9:be:4c:6c:60:52:9a:80:26: a3:f7:d7:11:57:67:46:49:d3:09:e8:cc:e8:f1:6b: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7B:A7:FB:7F:73:E5:99:A1:34:E4:BD:95:C8:E3:C1:19:03:CD:AB X509v3 Authority Key Identifier: keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:f5:68:9e:60:3f:0e:17:ae:97:87:2e:c1:c9:d7:33:81:96: dc:5f:8a:66:fd:30:52:e2:35:8e:6e:23:54:1b:79:8d:b9:7f: 5b:3d:ef:d5:7f:60:fa:77:54:06:a2:ff:bf:49:9b:10:06:dc: 81:c7:94:7a:ae:b4:b6:75:13:0a:fb:fb:97:b5:72:d1:35:64: 96:ca:4f:98:62:7d:bd:55:b4:9c:08:5b:71:1e:b3:73:8f:14: e0:01:5c:01:47:11:d7:25:97:c0:a4:50:cc:2b:6c:be:42:6f: 78:38:ff:01:15:40:87:d3:31:a3:8c:54:f3:70:4e:8e:cf:7d: 9f:67:1d:ee:13:1d:24:98:04:04:b3:1c:a2:cd:8d:6b:db:c7: 40:33:dd:5d:35:8e:ac:f5:9a:f6:52:bc:2a:38:d0:ab:14:19: 04:c6:f3:12:86:aa:7a:a9:40:16:e0:20:b3:36:97:2c:99:37: f3:bd:bd:c0:08:bd:4c:04:76:b5:6e:47:29:a4:dd:ea:ee:8f: 77:93:a1:a3:d0:ba:b5:a5:87:d9:dc:8e:dd:f4:3e:af:df:a2: 61:95:f2:d7:72:2d:0f:1d:7d:5b:1c:5a:de:be:59:44:73:f6: 51:a6:3b:1f:30:12:6d:c0:42:3e:51:62:90:4f:a9:7c:47:62: 6a:b3:32:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NjAxMTAvBgNVBAUTKEUzOEVCM0Y1QTUxMDdFMzBGMENBNzFEREVBNzVCMTcw RDBCMDMyNTYwHhcNMjUwMzI5MDUzODI0WhcNMjUwNDA1MDUzODI0WjAYMRYwFAYD VQQDEw02N2U3ODc1MC1hZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3+jUJu6dnipfWSj5hlIQX5dVj3v1Bvt/1UPwYgLoGbwd2SpUOz4W03nxLBz ABdP/QUY2tfkFxj1PLMxwQwMwIFZkboHAFGMOtA7CDNktu/Es45aYZmfBXrr9dBq YtFXyguQpGCfJ00o2fOYG+qe3SwMiSDCqHISZxvo8ccaltFcSLxv6O4zr+S/1ADQ rqUJdyG/PHA4S7rxR6hS+5dNnpi1TF5G8PutlvPyirMe8MkcVWEEb02nh+6ja9Fo GSLDibdZGL3bqNOMdOu8Vr54LPfCLS6ewFTCqXQznKBgtOtIka5TGsmpvkxsYFKa gCaj99cRV2dGSdMJ6Mzo8WsaeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd7p/t/ c+WZoTTkvZXI48EZA82rMB8GA1UdIwQYMBaAFOOOs/WlEH4w8Mpx3ep1sXDQsDJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU2MC80QzNENkJDMDIx NkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZqRHd5bkhkNm5XeGNOQ3dN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0Nno5YVVRZmpEd3luSGQ2bld4Y05Dd01sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU2MC80QzNENkJDMDIxNkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZq RHd5bkhkNm5XeGNOQ3dNbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz9WieYD8OF66Xhy7BydczgZbcX4pm/TBS4jWObiNUG3mNuX9bPe/V f2D6d1QGov+/SZsQBtyBx5R6rrS2dRMK+/uXtXLRNWSWyk+YYn29VbScCFtxHrNz jxTgAVwBRxHXJZfApFDMK2y+Qm94OP8BFUCH0zGjjFTzcE6Oz32fZx3uEx0kmAQE sxyizY1r28dAM91dNY6s9Zr2UrwqONCrFBkExvMShqp6qUAW4CCzNpcsmTfzvb3A CL1MBHa1bkcppN3q7o93k6Gj0Lq1pYfZ3I7d9D6v36JhlfLXci0PHX1bHFrevllE c/ZRpjsfMBJtwEI+UWKQT6l8R2JqszKh -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:53 2025 by rpki-client