$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft File: 7loKCg1eD1xijRpwW1rGj-8gxG8.mft (raw, json) Hash identifier: n9AUK6EFAXXRRpx36Vb2Sb7cGS/AJzVmws7CkUBhOAM= Subject key identifier: 81:13:D7:2F:2F:89:73:F0:39:1E:E7:C4:A8:ED:BE:05:86:C1:3A:EE Authority key identifier: EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F Certificate issuer: /CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft Manifest number: C1 Signing time: Sat 29 Mar 2025 05:14:58 +0000 Manifest this update: Sat 29 Mar 2025 05:14:57 +0000 Manifest next update: Sat 05 Apr 2025 05:14:57 +0000 Files and hashes: 1: 7loKCg1eD1xijRpwW1rGj-8gxG8.crl (hash: /OLv+el2omo59iNAmCgoMWfSoC6lAV9R1dOdmAXYpF0=) 2: 521FC3D8E74211EE9A78EC6EC4F9AE02.roa (hash: Evu2uB2GkC2WPAp+Ym3GMN1P169UzI1o+wjhgoORlbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB574 Validity Not Before: Mar 29 05:14:57 2025 GMT Not After : Apr 5 05:14:57 2025 GMT Subject: CN=67e781d1-bfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:55:34:de:9c:0a:fc:c3:0a:08:db:58:61: 44:53:2b:26:a0:9a:96:af:77:32:03:4d:64:42:3a: 63:c3:e7:86:8d:83:dc:37:2d:22:e6:85:16:41:e0: c0:7f:94:b6:30:3c:75:0b:88:9c:24:9c:6b:ee:c0: a3:6f:0b:84:94:41:37:6f:01:8f:2f:2d:65:47:a4: 53:00:20:a8:53:40:45:47:ec:45:7d:af:a7:2f:12: 34:c4:99:e1:66:3f:bd:3e:d2:88:88:2c:9e:19:ee: 71:df:82:54:a3:12:87:68:bc:c1:ba:f3:bb:8f:a0: c2:1a:a2:03:f1:f7:b0:fb:60:c7:a7:9a:2c:d2:0a: cd:4a:7f:e9:eb:90:21:d6:97:ad:d8:8c:2e:9f:63: 7d:d6:d1:59:41:5e:12:c7:40:76:af:02:e0:c3:81: c4:95:53:c8:c4:d1:7e:70:af:63:73:ae:8b:47:e7: 01:6b:7d:a3:7d:82:09:a7:a3:fc:7d:25:66:06:d3: a6:f1:3e:bf:96:ef:37:f8:e5:e9:bc:49:bf:a8:2a: 19:22:e3:78:60:f1:66:df:4f:1b:a2:69:5e:fe:7e: c1:0b:f6:d9:3f:24:d9:08:e1:8e:c4:f0:48:dd:49: 2c:9d:99:19:0c:33:f0:af:21:e2:b5:9a:c6:5a:b6: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:13:D7:2F:2F:89:73:F0:39:1E:E7:C4:A8:ED:BE:05:86:C1:3A:EE X509v3 Authority Key Identifier: keyid:EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c0:7d:f4:e3:3f:47:ed:cb:54:50:17:d7:01:ed:22:46:46: a9:1b:91:dd:3e:08:2a:f4:30:1d:5c:c4:2f:70:7c:34:d5:4b: 11:bc:14:4a:2a:d7:00:a3:c3:23:1a:ce:29:81:63:60:d8:0e: 6e:8d:71:8c:8f:ec:05:1c:13:ff:18:18:1b:d1:b2:0a:56:7d: e3:fa:0b:04:24:ce:fd:9a:a0:bc:48:dc:f9:ae:26:f0:f1:ce: 28:93:c1:64:02:87:19:0b:64:42:aa:df:af:93:55:8e:4b:eb: 75:4d:f7:be:38:5d:14:2f:4d:0d:61:68:89:62:14:2e:ef:fd: 12:05:d6:b6:03:bc:4d:12:44:72:28:e7:7f:94:4c:34:72:61: 6c:22:40:79:c1:13:cc:b5:23:eb:98:12:a7:37:e3:1f:4e:fa: 37:b1:d4:5a:53:61:ba:89:82:29:72:68:4a:fc:2d:05:7d:41: e2:ed:4b:2f:66:60:ad:03:18:09:68:7b:6b:88:87:3f:a1:89: 8f:fe:c4:f5:8a:a2:d5:fe:0f:d6:02:69:1c:6e:37:72:f6:a0: 9b:29:40:8e:d7:54:a9:45:5f:20:88:8b:48:8f:2c:04:8d:b3: 14:da:94:b8:07:b5:bf:5a:b8:11:63:53:c3:31:1f:7b:53:af: d4:ff:6d:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI1NzQxMTAvBgNVBAUTKEVFNUEwQTBBMEQ1RTBGNUM2MjhEMUE3MDVCNUFDNjhG RUYyMEM0NkYwHhcNMjUwMzI5MDUxNDU3WhcNMjUwNDA1MDUxNDU3WjAYMRYwFAYD VQQDEw02N2U3ODFkMS1iZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbpVNN6cCvzDCgjbWGFEUysmoJqWr3cyA01kQjpjw+eGjYPcNy0i5oUWQeDA f5S2MDx1C4icJJxr7sCjbwuElEE3bwGPLy1lR6RTACCoU0BFR+xFfa+nLxI0xJnh Zj+9PtKIiCyeGe5x34JUoxKHaLzBuvO7j6DCGqID8few+2DHp5os0grNSn/p65Ah 1pet2Iwun2N91tFZQV4Sx0B2rwLgw4HElVPIxNF+cK9jc66LR+cBa32jfYIJp6P8 fSVmBtOm8T6/lu83+OXpvEm/qCoZIuN4YPFm308bomle/n7BC/bZPyTZCOGOxPBI 3UksnZkZDDPwryHitZrGWraSawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIET1y8v iXPwOR7nxKjtvgWGwTruMB8GA1UdIwQYMBaAFO5aCgoNXg9cYo0acFtaxo/vIMRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjU3NC9GMDdFQkEyNkU3 NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQxeGlqUnB3VzFyR2otOGd4 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsb0tDZzFlRDF4aWpScHdXMXJHai04Z3hHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjU3NC9GMDdFQkEyNkU3NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQx eGlqUnB3VzFyR2otOGd4RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBywH304z9H7ctUUBfXAe0iRkapG5HdPggq9DAdXMQvcHw01UsRvBRK KtcAo8MjGs4pgWNg2A5ujXGMj+wFHBP/GBgb0bIKVn3j+gsEJM79mqC8SNz5ribw 8c4ok8FkAocZC2RCqt+vk1WOS+t1Tfe+OF0UL00NYWiJYhQu7/0SBda2A7xNEkRy KOd/lEw0cmFsIkB5wRPMtSPrmBKnN+MfTvo3sdRaU2G6iYIpcmhK/C0FfUHi7Usv ZmCtAxgJaHtriIc/oYmP/sT1iqLV/g/WAmkcbjdy9qCbKUCO11SpRV8giItIjywE jbMU2pS4B7W/WrgRY1PDMR97U6/U/23C -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:54 2025 by rpki-client