$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft File: rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json) Hash identifier: Hknxf1qBC0Lhme725UfhZR8GknfX/Dtla/tklGYZo8c= Subject key identifier: EC:DD:22:B8:AF:07:2D:31:E9:41:C1:C3:D3:90:B6:C7:17:54:F9:F5 Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2 Certificate issuer: /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2 Certificate serial: 04B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft Manifest number: 04A2 Signing time: Sat 12 Apr 2025 23:35:55 +0000 Manifest this update: Sat 12 Apr 2025 23:35:55 +0000 Manifest next update: Sat 19 Apr 2025 23:35:55 +0000 Files and hashes: 1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: 2QSBI85t8tUaqPb/ZrucJ+ujkzHvTRtqGxtT9xJeJa8=) 2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: N+v5XDTe3qGrc3Im5miqpHu358OzdQqGsyKCPQ1e/9E=) 3: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: Ugkrxpmo+RhmzNNOs4CXnhFZe2ur3HMxWdH+GOY5OTg=) 4: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: NMuBSgtK/HkuND8tStUDe+Ag9eP8OhZhvhWqets1kM8=) 5: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: vVCpAMW7qiQGHNF6JhfNX4AfCfOmlSNmnkvMLMOZ1EI=) 6: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: sOUIWYOFE2CSPs3Drpz/bEhxmM04l8k3SIDOG1UW16M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2 Validity Not Before: Apr 12 23:35:55 2025 GMT Not After : Apr 19 23:35:55 2025 GMT Subject: CN=67faf8db-74e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:da:00:8e:dd:d5:58:ff:3a:a1:28:f0:60:5f: 00:85:f6:49:53:09:23:14:e1:de:0e:82:81:9b:da: f0:83:6b:da:00:bb:0d:02:be:4d:58:b0:cf:46:cc: e4:9b:ba:be:7a:b8:12:e5:f6:b6:c2:ee:1b:c3:93: 13:23:ae:f5:f3:e0:c1:92:c4:f5:ba:a9:bc:67:7d: 4b:0b:2b:fd:56:3d:e5:fe:29:4c:2d:f6:6d:75:c9: 6d:a2:15:69:20:e8:65:12:01:ff:57:ab:71:45:30: 42:51:43:7e:e4:66:08:40:75:c1:68:1c:41:b9:03: 2e:8c:9b:a8:e4:12:53:f9:40:23:ac:af:fe:1f:56: c6:a9:3b:c5:70:c9:f7:5d:57:c3:a8:98:01:f2:fb: 7a:c4:1e:e4:2e:ec:79:53:f6:28:9b:1d:4e:63:c1: 64:fd:c7:d0:a6:8c:ee:05:f8:68:b2:0e:3a:69:e7: ad:85:e6:3d:1b:4d:de:27:a4:e9:d8:23:a5:82:60: dd:70:35:64:38:91:99:98:ce:a2:1d:fc:e9:03:e8: 88:ed:2e:72:36:76:9c:2b:fe:55:7f:b2:0e:4d:52: 0a:3d:5b:f6:6c:de:36:79:75:36:e9:95:aa:54:ff: b4:02:7e:27:3b:81:0e:57:24:df:eb:81:6e:01:6a: 4c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DD:22:B8:AF:07:2D:31:E9:41:C1:C3:D3:90:B6:C7:17:54:F9:F5 X509v3 Authority Key Identifier: keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d4:84:83:68:15:ae:29:ac:ae:63:95:90:1d:47:60:7f:17: 75:fb:35:8c:d8:d3:80:f9:ae:23:41:4d:41:ca:18:a2:3f:98: e0:40:0f:f2:de:a9:6a:f8:73:c8:a5:3c:8a:85:e1:49:c0:bb: e6:e0:5c:fa:86:1e:c2:d4:c2:5a:be:94:88:d2:a4:82:ca:d0: 6d:3c:fe:72:f8:4a:36:e1:6f:d5:e6:0e:15:96:a3:4a:91:97: 5d:16:32:75:82:eb:3f:15:1b:7d:d5:79:40:a9:06:6a:f2:a6: a5:c1:2f:48:44:89:dc:ab:a6:e5:a8:19:b8:90:e5:0d:2b:f4: 25:fc:0b:6c:66:f6:0a:8c:29:56:90:fb:31:7e:a6:e9:b0:37: e5:a2:8f:bf:ea:0d:07:95:12:34:df:3a:23:97:84:a4:99:44: 1d:23:36:74:27:6f:99:06:4e:1b:a4:ea:53:6b:4b:e6:a0:74: f8:f8:fa:3d:9d:78:e2:42:c8:1b:67:0c:59:fb:c3:4d:ef:5d: 56:6f:44:79:92:ad:1d:a7:4f:1b:40:13:66:77:37:63:51:9f: 8c:d7:31:62:00:75:3d:17:38:a8:fb:61:4f:1f:20:3d:9c:52: 97:05:ad:49:25:d3:53:3f:35:23:b2:f0:ab:77:4e:2b:65:7f: 0d:36:97:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg1QTgxMTAvBgNVBAUTKEFFMEEwRjk4QTA5MDNFMDE1RTVGQzU0Q0I4Q0UwODFE NDI0REI0RDIwHhcNMjUwNDEyMjMzNTU1WhcNMjUwNDE5MjMzNTU1WjAYMRYwFAYD VQQDEw02N2ZhZjhkYi03NGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NoAjt3VWP86oSjwYF8AhfZJUwkjFOHeDoKBm9rwg2vaALsNAr5NWLDPRszk m7q+ergS5fa2wu4bw5MTI6718+DBksT1uqm8Z31LCyv9Vj3l/ilMLfZtdcltohVp IOhlEgH/V6txRTBCUUN+5GYIQHXBaBxBuQMujJuo5BJT+UAjrK/+H1bGqTvFcMn3 XVfDqJgB8vt6xB7kLux5U/Yomx1OY8Fk/cfQpozuBfhosg46aeetheY9G03eJ6Tp 2COlgmDdcDVkOJGZmM6iHfzpA+iI7S5yNnacK/5Vf7IOTVIKPVv2bN42eXU26ZWq VP+0An4nO4EOVyTf64FuAWpMzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzdIriv By0x6UHBw9OQtscXVPn1MB8GA1UdIwQYMBaAFK4KD5igkD4BXl/FTLjOCB1CTbTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVBOC9BNTMwODE0NjJD REUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBnRmVYOFZNdU00SUhVSk50 TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jnb1BtS0NRUGdGZVg4Vk11TTRJSFVKTnROSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODVBOC9BNTMwODE0NjJDREUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBn RmVYOFZNdU00SUhVSk50TkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr1ISDaBWuKayuY5WQHUdgfxd1+zWM2NOA+a4jQU1ByhiiP5jgQA/y 3qlq+HPIpTyKheFJwLvm4Fz6hh7C1MJavpSI0qSCytBtPP5y+Eo24W/V5g4VlqNK kZddFjJ1gus/FRt91XlAqQZq8qalwS9IRIncq6blqBm4kOUNK/Ql/AtsZvYKjClW kPsxfqbpsDfloo+/6g0HlRI03zojl4SkmUQdIzZ0J2+ZBk4bpOpTa0vmoHT4+Po9 nXjiQsgbZwxZ+8NN711Wb0R5kq0dp08bQBNmdzdjUZ+M1zFiAHU9Fzio+2FPHyA9 nFKXBa1JJdNTPzUjsvCrd04rZX8NNpco -----END CERTIFICATE-----Generated at Sun Apr 13 05:11:08 2025 by rpki-client