$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft File: RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft (raw, json) Hash identifier: Kmujb7o8yJmLe46nP/NEYB1f66PRCOaJWO7xq+N98rs= Subject key identifier: 7E:98:0A:24:F8:A3:F4:8F:A4:23:08:13:A3:34:9A:BE:31:6A:B4:7A Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 Certificate issuer: /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190 Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft Manifest number: 025A Signing time: Sat 29 Mar 2025 02:01:20 +0000 Manifest this update: Sat 29 Mar 2025 02:01:19 +0000 Manifest next update: Sat 05 Apr 2025 02:01:19 +0000 Files and hashes: 1: RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl (hash: jgjUMX9IL2wxeONOfCMmIYpkSZounw3RDenLpmawklw=) 2: D470449E0E4411ED9C0F5B45C4F9AE02.roa (hash: 9zqxhpOangW9769mdxLoJSN4Rv/Y8CMGWvMe+D0Ah7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78A7 Validity Not Before: Mar 29 02:01:19 2025 GMT Not After : Apr 5 02:01:19 2025 GMT Subject: CN=67e75470-a8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ef:f8:eb:58:8a:9a:42:e6:4c:1d:4e:61:e5: 74:b5:0c:bd:d2:84:b9:a8:37:b7:31:06:92:ff:ae: 15:eb:fd:a6:4a:f4:c5:a7:89:1d:7b:eb:48:c5:00: 25:ad:a9:db:f2:a4:dc:17:ae:20:90:70:8c:00:67: 73:d3:c6:83:42:50:df:d3:55:86:24:d7:12:ff:90: 5e:1b:90:0e:f4:1f:e4:ad:e4:d7:e9:4e:00:a6:dd: 0d:6b:dd:ac:b2:9a:7d:96:8c:75:b3:1e:3a:ef:8a: 52:26:f9:39:82:6b:17:d7:72:8f:11:3b:2e:51:0d: a9:1f:aa:58:71:cd:fa:47:d7:57:35:c2:b5:59:8d: fa:4d:4d:93:ab:17:08:3b:3c:f4:37:3f:3f:db:d2: 76:5d:02:f7:8f:6a:3e:08:15:dd:f7:89:e0:42:3a: 9f:2b:af:62:21:28:76:e0:25:6a:52:ad:72:80:9c: a3:d2:08:7d:16:6f:c1:fa:be:8a:9a:9e:4f:c9:74: 13:3a:e6:61:7c:77:db:f6:77:20:f4:fd:c4:86:62: 3b:7d:dc:f8:31:20:16:65:d9:54:92:d6:cb:66:f8: 2e:ca:1c:b1:79:80:f2:c6:4b:f0:77:c4:1d:d6:f0: 9e:e3:6d:2c:52:80:36:42:96:1c:10:03:41:9c:da: c4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:98:0A:24:F8:A3:F4:8F:A4:23:08:13:A3:34:9A:BE:31:6A:B4:7A X509v3 Authority Key Identifier: keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c7:7f:02:be:cb:63:86:a1:43:ab:fb:6f:6a:da:69:ac:d6: 99:75:4f:17:d1:31:ca:ba:ea:0c:54:3c:68:a5:73:b8:c6:f6: d5:65:1d:3b:99:76:26:e7:22:20:23:3e:e7:7e:98:f6:1a:a5: 59:46:4d:56:7c:d7:02:2d:01:4e:5c:5c:1e:04:0c:85:9c:6d: 12:7c:fc:40:bd:18:52:71:46:39:4c:ab:ac:48:d2:2e:bb:2f: 01:89:23:8b:ca:14:d2:39:3c:f4:5a:15:fc:b1:ee:0c:23:b4: 06:59:8e:67:93:7c:7d:e6:62:64:b9:b6:7c:45:4d:67:52:8a: 0a:90:96:56:88:90:8f:24:69:7c:48:01:b6:11:0a:14:1c:1d: 0b:84:9e:31:3a:3e:7d:57:35:78:fd:97:5f:61:62:06:95:09: e4:61:1e:a1:f1:df:b8:1b:8e:9a:d4:36:a0:aa:31:82:fc:00: eb:89:11:7d:31:05:14:93:7e:9f:d4:da:49:ca:91:57:2c:d9: 88:ea:c5:51:12:35:5e:d9:3e:6b:80:9d:6f:dd:88:f6:0f:83: 65:93:7c:aa:43:13:c5:f3:4c:6c:30:95:74:57:16:be:1c:8e: 2f:44:53:2f:3d:d9:ae:f7:82:7d:7b:ea:da:66:ee:ec:92:05: b3:dd:cd:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4QTcxMTAvBgNVBAUTKDQ1MzM3REM1RTQ4MzlFNDk4MTkxMjlERUEyQTk0NjFC MDIxQ0QxOTAwHhcNMjUwMzI5MDIwMTE5WhcNMjUwNDA1MDIwMTE5WjAYMRYwFAYD VQQDEw02N2U3NTQ3MC1hOGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9e/461iKmkLmTB1OYeV0tQy90oS5qDe3MQaS/64V6/2mSvTFp4kde+tIxQAl ranb8qTcF64gkHCMAGdz08aDQlDf01WGJNcS/5BeG5AO9B/kreTX6U4Apt0Na92s spp9lox1sx4674pSJvk5gmsX13KPETsuUQ2pH6pYcc36R9dXNcK1WY36TU2TqxcI Ozz0Nz8/29J2XQL3j2o+CBXd94ngQjqfK69iISh24CVqUq1ygJyj0gh9Fm/B+r6K mp5PyXQTOuZhfHfb9ncg9P3EhmI7fdz4MSAWZdlUktbLZvguyhyxeYDyxkvwd8Qd 1vCe420sUoA2QpYcEANBnNrEUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6YCiT4 o/SPpCMIE6M0mr4xarR6MB8GA1UdIwQYMBaAFEUzfcXkg55JgZEp3qKpRhsCHNGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzhBNy8xMDRCMTk0NjBD QkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5rbUJrU25lb3FsR0d3SWMw WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JUTjl4ZVNEbmttQmtTbmVvcWxHR3dJYzBaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzhBNy8xMDRCMTk0NjBDQkQxMUVEQUE3N0QxMkRDNEY5QUUwMi9SVE45eGVTRG5r bUJrU25lb3FsR0d3SWMwWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQx38CvstjhqFDq/tvatpprNaZdU8X0THKuuoMVDxopXO4xvbVZR07 mXYm5yIgIz7nfpj2GqVZRk1WfNcCLQFOXFweBAyFnG0SfPxAvRhScUY5TKusSNIu uy8BiSOLyhTSOTz0WhX8se4MI7QGWY5nk3x95mJkubZ8RU1nUooKkJZWiJCPJGl8 SAG2EQoUHB0LhJ4xOj59VzV4/ZdfYWIGlQnkYR6h8d+4G46a1DagqjGC/ADriRF9 MQUUk36f1NpJypFXLNmI6sVREjVe2T5rgJ1v3Yj2D4Nlk3yqQxPF80xsMJV0Vxa+ HI4vRFMvPdmu94J9e+raZu7skgWz3c2a -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:07 2025 by rpki-client