$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft File: 0TPfZxvFk0ayGhHuzAit0MCiCQo.mft (raw, json) Hash identifier: EQMgtStKPHZG+qUWGGif1dHLJBQVgNf8FyG5UDWZieA= Subject key identifier: A3:F9:92:C4:27:F6:1E:FB:12:2D:FB:1A:86:73:5F:A8:0D:FC:4A:97 Authority key identifier: D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A Certificate issuer: /CN=A91A8276/serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft Manifest number: 0793 Signing time: Thu 10 Apr 2025 21:12:33 +0000 Manifest this update: Thu 10 Apr 2025 21:12:32 +0000 Manifest next update: Thu 17 Apr 2025 21:12:32 +0000 Files and hashes: 1: 0TPfZxvFk0ayGhHuzAit0MCiCQo.crl (hash: w/BGzYlt1S4EUSd23GuaQtFVQR82ECuVeaUqt/HBaew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 21:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8276, serialNumber=D133DF671BC59346B21A11EECC08ADD0C0A2090A Validity Not Before: Apr 10 21:12:32 2025 GMT Not After : Apr 17 21:12:32 2025 GMT Subject: CN=67f83441-4743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:7a:08:b8:25:9c:3e:68:60:cc:e5:fd:18: 15:8a:33:5f:d4:a7:0b:fc:ad:b1:e7:c7:a1:cb:5c: f2:c6:00:b6:ae:90:48:20:79:c9:b6:01:d7:45:b5: b5:32:96:58:5d:b4:24:1e:a1:1c:50:87:f7:55:6a: 42:6d:18:93:2f:b0:72:52:58:ea:1d:c3:52:0c:cf: e4:90:a7:5c:d1:78:fb:1c:cb:3b:5d:aa:1c:2d:48: fe:44:64:ec:49:a1:ce:e5:5d:3b:96:cd:e2:d8:1f: 17:a4:4c:c8:56:9d:d4:51:cb:09:47:56:ae:1a:07: 0c:1c:15:6d:c3:3f:30:92:ee:d5:c8:cf:e3:ff:90: f6:dd:5e:8a:c4:d5:5f:ff:38:25:3a:e8:8a:07:1d: 9d:a1:f5:fb:76:19:fd:34:7b:84:12:41:d4:2d:3e: ec:a6:70:99:b1:cd:5f:ed:4f:a7:a0:43:94:0c:68: cd:c0:f8:ac:e9:94:21:58:5c:b6:62:e7:99:1a:55: c3:90:82:31:7c:82:48:2f:12:68:8e:19:01:fe:a9: f1:17:fb:88:91:6b:9c:01:15:15:8d:8c:12:d9:b1: 6a:4c:92:5e:df:2f:fe:5f:b0:ac:38:3d:09:41:92: 5b:03:39:42:9c:98:56:72:91:46:48:2d:b9:18:db: 34:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F9:92:C4:27:F6:1E:FB:12:2D:FB:1A:86:73:5F:A8:0D:FC:4A:97 X509v3 Authority Key Identifier: keyid:D1:33:DF:67:1B:C5:93:46:B2:1A:11:EE:CC:08:AD:D0:C0:A2:09:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0TPfZxvFk0ayGhHuzAit0MCiCQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8276/8138793EFEF811EA9D652A74C4F9AE02/0TPfZxvFk0ayGhHuzAit0MCiCQo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:71:c1:0c:73:e0:3c:4f:7a:d5:1d:9e:cc:50:28:da:e6:76: bd:94:b7:6a:29:2d:e8:88:d7:a1:c9:88:29:e2:09:56:e5:ad: 73:bf:97:d7:c7:67:01:12:e0:14:89:cc:ab:ed:48:8c:79:55: 03:b9:98:61:11:39:e7:3f:1b:34:5d:c7:dc:02:93:23:6e:5a: 2c:21:c5:69:f7:09:91:a1:0a:75:f8:2a:66:f0:58:65:03:b1: da:4f:12:ca:51:77:9f:b0:17:5a:af:e5:cf:7a:22:30:d5:76: 07:9c:7b:f7:dc:94:7d:46:55:7d:7b:03:da:31:03:0a:78:4f: 1d:b5:02:84:2d:db:da:3c:d3:32:10:cd:6f:b1:de:f0:eb:09: 4e:01:54:ef:29:e8:18:34:a5:88:be:91:56:61:aa:6b:bd:9e: fe:62:f6:5a:b6:ad:48:82:14:fc:c8:a1:46:87:20:85:28:08: e8:3f:88:37:7e:c8:14:cc:5f:9c:26:ce:cc:01:a8:12:61:7d: 23:0a:a9:c8:a5:8d:4f:82:70:85:89:6c:5f:e8:43:84:4c:2b: 6c:7b:7f:0c:79:8f:24:83:5d:ee:c5:9e:2a:a8:ee:e1:18:30: f5:c0:6b:88:ed:c4:20:41:44:d1:e2:80:6b:86:ea:46:b3:ca: 88:db:81:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyNzYxMTAvBgNVBAUTKEQxMzNERjY3MUJDNTkzNDZCMjFBMTFFRUNDMDhBREQw QzBBMjA5MEEwHhcNMjUwNDEwMjExMjMyWhcNMjUwNDE3MjExMjMyWjAYMRYwFAYD VQQDEw02N2Y4MzQ0MS00NzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKF6CLglnD5oYMzl/RgVijNf1KcL/K2x58ehy1zyxgC2rpBIIHnJtgHXRbW1 MpZYXbQkHqEcUIf3VWpCbRiTL7ByUljqHcNSDM/kkKdc0Xj7HMs7XaocLUj+RGTs SaHO5V07ls3i2B8XpEzIVp3UUcsJR1auGgcMHBVtwz8wku7VyM/j/5D23V6KxNVf /zglOuiKBx2dofX7dhn9NHuEEkHULT7spnCZsc1f7U+noEOUDGjNwPis6ZQhWFy2 YueZGlXDkIIxfIJILxJojhkB/qnxF/uIkWucARUVjYwS2bFqTJJe3y/+X7CsOD0J QZJbAzlCnJhWcpFGSC25GNs0wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKP5ksQn 9h77Ei37GoZzX6gN/EqXMB8GA1UdIwQYMBaAFNEz32cbxZNGshoR7swIrdDAogkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI3Ni84MTM4NzkzRUZF RjgxMUVBOUQ2NTJBNzRDNEY5QUUwMi8wVFBmWnh2RmswYXlHaEh1ekFpdDBNQ2lD UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBUUGZaeHZGazBheUdoSHV6QWl0ME1DaUNRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODI3Ni84MTM4NzkzRUZFRjgxMUVBOUQ2NTJBNzRDNEY5QUUwMi8wVFBmWnh2Rmsw YXlHaEh1ekFpdDBNQ2lDUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABccEMc+A8T3rVHZ7MUCja5na9lLdqKS3oiNehyYgp4glW5a1zv5fX x2cBEuAUicyr7UiMeVUDuZhhETnnPxs0XcfcApMjblosIcVp9wmRoQp1+Cpm8Fhl A7HaTxLKUXefsBdar+XPeiIw1XYHnHv33JR9RlV9ewPaMQMKeE8dtQKELdvaPNMy EM1vsd7w6wlOAVTvKegYNKWIvpFWYaprvZ7+YvZatq1IghT8yKFGhyCFKAjoP4g3 fsgUzF+cJs7MAagSYX0jCqnIpY1PgnCFiWxf6EOETCtse38MeY8kg13uxZ4qqO7h GDD1wGuI7cQgQUTR4oBrhupGs8qI24Ff -----END CERTIFICATE-----Generated at Sat Apr 12 20:21:57 2025 by rpki-client