$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: FdYp9LKh3Ep8zHGmhfs8ehF1Nc8tYapKAzOFbNaoBIU= Subject key identifier: 69:F9:BA:5A:85:2F:2E:2E:20:03:33:F6:4D:12:4D:B9:06:BD:EA:BB Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 011D Signing time: Thu 03 Apr 2025 03:58:15 +0000 Manifest this update: Thu 03 Apr 2025 03:58:14 +0000 Manifest next update: Thu 10 Apr 2025 03:58:14 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: wIbemP8a7v9mjEovXXM59wu3VkgFY/2E0IedSnf6ZDs=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: OeBchGabyfPVMg1/t31bD5FDzmzMHYndv4rCKHiX9jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A Validity Not Before: Apr 3 03:58:14 2025 GMT Not After : Apr 10 03:58:14 2025 GMT Subject: CN=67ee0757-1109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:13:1e:43:e0:e7:11:e1:cc:63:c9:97:e2: 76:67:6a:e0:35:b4:a9:d9:9a:5e:f8:68:c1:8f:70: c6:a1:96:c1:5f:ff:c8:77:c4:dc:c5:47:99:74:54: 62:88:15:4d:ac:b2:c1:ee:72:df:6b:5f:b4:b0:bb: b5:cc:6e:0b:b2:8a:a9:e7:52:c1:a2:9f:59:a3:e6: 9c:00:8e:c1:33:b4:28:1d:7d:a4:b4:2d:ae:7f:48: e2:4f:33:e2:17:1e:36:98:aa:f7:b7:f9:c5:c9:6f: 75:3b:6d:76:59:a0:8f:ff:5a:85:8f:d5:df:b8:98: 2b:b6:74:fb:f9:43:d0:a0:55:d8:e9:d1:0a:c6:40: da:d8:5a:69:44:38:37:f4:9b:a0:0f:e3:5f:4a:23: 98:e3:da:05:e3:a8:af:39:d8:aa:fc:0b:0d:33:b4: 52:57:00:94:48:48:4b:79:d9:36:6d:b5:9b:23:ca: 84:d8:bc:c2:8b:fd:a0:c4:d4:86:97:52:66:cc:b8: 64:9f:73:83:57:56:ea:d5:c2:ce:bc:9e:48:01:14: ac:5f:88:7d:cd:f5:ca:0b:00:8d:6c:b1:22:9d:04: 2f:b4:3e:74:6c:31:8e:65:93:c4:a1:38:4a:ef:75: d3:fa:ac:4b:91:9f:32:9f:9d:02:93:85:4a:38:e0: e4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F9:BA:5A:85:2F:2E:2E:20:03:33:F6:4D:12:4D:B9:06:BD:EA:BB X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:63:62:83:e2:64:95:67:5d:1f:13:ab:6e:08:04:cd:5b:f3: d1:6f:b0:8d:9e:60:6d:d1:69:64:ed:8c:5e:0d:92:7f:7b:7a: f5:82:41:0c:c6:68:5f:9f:7c:a3:6c:b2:69:b8:4b:f9:5f:f0: e1:bd:03:52:95:03:85:d0:f0:99:4f:d6:85:8a:02:f6:48:66: f1:3b:9e:53:9c:52:35:83:30:27:99:68:89:d6:a9:5a:cc:87: 2a:ac:09:12:d2:87:b3:a4:e0:13:5c:4a:d6:9b:fa:cf:1c:3a: b8:a9:0b:58:9d:35:10:93:e5:44:a9:fc:82:19:f0:00:14:9d: 92:1b:a7:f6:1d:32:cd:16:92:85:da:f0:0a:13:cd:36:3e:54: e1:b5:a5:95:d9:88:d4:cd:68:d1:9e:f9:3c:47:96:07:e9:ce: d7:9c:ba:13:c9:21:1c:d0:b2:b8:26:3c:dd:43:f8:6c:bd:bf: a1:37:67:b3:db:14:c0:07:eb:b3:82:55:96:4f:e5:4b:1b:bd: ac:24:3d:61:6a:94:59:09:b4:07:6e:f0:20:f9:9e:7c:4c:21: 52:35:43:47:16:05:de:8a:3d:fd:dd:f2:f5:f4:98:f7:c9:6b: 74:8c:ef:1c:d3:a6:ac:a2:c4:4a:b2:d3:9a:00:23:37:48:e2: 32:5d:78:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUwNDAzMDM1ODE0WhcNMjUwNDEwMDM1ODE0WjAYMRYwFAYD VQQDEw02N2VlMDc1Ny0xMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCUTHkPg5xHhzGPJl+J2Z2rgNbSp2Zpe+GjBj3DGoZbBX//Id8TcxUeZdFRi iBVNrLLB7nLfa1+0sLu1zG4Lsoqp51LBop9Zo+acAI7BM7QoHX2ktC2uf0jiTzPi Fx42mKr3t/nFyW91O212WaCP/1qFj9XfuJgrtnT7+UPQoFXY6dEKxkDa2FppRDg3 9JugD+NfSiOY49oF46ivOdiq/AsNM7RSVwCUSEhLedk2bbWbI8qE2LzCi/2gxNSG l1JmzLhkn3ODV1bq1cLOvJ5IARSsX4h9zfXKCwCNbLEinQQvtD50bDGOZZPEoThK 73XT+qxLkZ8yn50Ck4VKOODkdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn5ulqF Ly4uIAMz9k0STbkGveq7MB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdY2KD4mSVZ10fE6tuCATNW/PRb7CNnmBt0Wlk7YxeDZJ/e3r1gkEM xmhfn3yjbLJpuEv5X/DhvQNSlQOF0PCZT9aFigL2SGbxO55TnFI1gzAnmWiJ1qla zIcqrAkS0oezpOATXErWm/rPHDq4qQtYnTUQk+VEqfyCGfAAFJ2SG6f2HTLNFpKF 2vAKE802PlThtaWV2YjUzWjRnvk8R5YH6c7XnLoTySEc0LK4JjzdQ/hsvb+hN2ez 2xTAB+uzglWWT+VLG72sJD1hapRZCbQHbvAg+Z58TCFSNUNHFgXeij393fL19Jj3 yWt0jO8c06asosRKstOaACM3SOIyXXik -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:33 2025 by rpki-client