$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft File: -gEnQNykk8ziA6-q3o68cZqsI7Q.mft (raw, json) Hash identifier: yy4wzzbePPVyKnjIBRCLR8Qb0ukBQeiAJ2lFJO/uSOc= Subject key identifier: CD:F8:F2:20:BB:C6:EF:23:95:FB:F5:FD:19:0A:24:56:90:B6:B3:E0 Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft Manifest number: 0168 Signing time: Thu 03 Apr 2025 03:16:08 +0000 Manifest this update: Thu 03 Apr 2025 03:16:08 +0000 Manifest next update: Thu 10 Apr 2025 03:16:08 +0000 Files and hashes: 1: -gEnQNykk8ziA6-q3o68cZqsI7Q.crl (hash: VbU6CJb+5iB9pmydwiZnoa1F1TLYAaNdAJezbMFyZKA=) 2: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (hash: XDKLEB0Itrm1xWCw6e4E/02jNXmBNEL6rySB0+zkMHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404 Validity Not Before: Apr 3 03:16:08 2025 GMT Not After : Apr 10 03:16:08 2025 GMT Subject: CN=67edfd78-c90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:b6:be:1a:a8:ff:10:d6:bb:78:52:ce:e0: d7:0e:bf:e9:4d:88:f9:20:87:69:a4:23:b6:d4:02: c2:c3:c0:d7:65:ce:44:7a:c2:d9:cb:97:08:91:b8: 48:c8:aa:d7:15:2a:71:df:f3:5d:a8:1f:bc:75:51: a8:a1:7a:be:5c:3f:72:34:fe:fa:75:10:81:87:c1: cf:e4:60:3a:6e:fc:a7:ca:86:38:2a:bf:c9:aa:c2: 7a:e7:a9:7b:08:ba:0a:36:86:32:6f:d7:eb:a6:a8: 95:1a:bc:81:81:a7:41:d9:49:a0:41:01:65:1c:4c: 93:ba:50:3a:75:bf:2e:d6:f9:04:0c:48:e7:48:38: e8:36:8b:da:2c:99:6e:8d:96:2e:0f:a7:90:13:f6: 99:b4:46:5b:52:09:56:0f:02:91:43:96:9e:ee:7b: 69:47:4a:20:cf:97:e2:2c:74:de:69:50:69:0d:b1: 4c:4b:41:ba:ec:77:19:79:6c:ea:80:5b:2f:c1:b0: 1f:99:19:03:21:95:df:2e:c9:2d:44:81:0d:5e:bb: 4f:c0:bf:c6:2c:5d:ab:81:5d:f2:75:11:7d:da:fe: 68:3d:d8:eb:89:c1:9e:f2:64:d9:0d:c5:30:5c:4b: 43:e7:92:16:cb:37:15:18:76:1a:bd:9e:d1:26:63: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F8:F2:20:BB:C6:EF:23:95:FB:F5:FD:19:0A:24:56:90:B6:B3:E0 X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9a:d0:55:54:96:b5:87:b8:3f:75:c5:7d:a3:68:52:d1:12: 12:ec:ad:10:9c:94:35:6c:f8:30:10:a2:04:33:7e:2c:ce:95: 0a:b2:cd:67:5a:5f:1a:73:79:b8:33:12:b3:5b:c1:ec:1c:9d: 0e:6d:24:01:1f:3b:72:28:41:15:d4:a8:1a:4f:e1:53:10:aa: 77:58:4f:70:d0:d9:14:c9:56:f6:43:b9:5d:46:f0:4e:86:2e: 9a:63:ce:39:db:b0:a7:3c:a7:df:66:87:1c:d7:15:a2:47:b9: ef:75:38:4c:fa:e1:04:f9:f0:7b:16:9d:21:a9:ce:2f:e2:52: 92:22:67:16:26:99:83:79:ae:d3:62:29:57:28:9e:08:c8:c9: 76:d9:b8:5c:8d:f2:af:13:9a:7b:2e:9e:5f:87:3f:aa:84:a9: b0:35:f7:f4:b9:86:ee:22:36:23:13:d7:b6:c7:89:f2:89:cd: 6a:c7:d4:cf:61:c5:90:46:2b:6a:f4:76:95:54:8a:71:28:4c: fa:85:a2:61:a8:dd:e5:41:c2:80:5a:fb:41:aa:14:e8:9f:ae: b4:0d:7c:a4:91:8b:36:6f:80:0d:38:15:a9:06:1d:2c:e1:1f: a7:8a:79:c6:7f:a6:a6:9c:98:04:fd:da:76:06:f5:0c:ab:3a: 9d:d9:53:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjUwNDAzMDMxNjA4WhcNMjUwNDEwMDMxNjA4WjAYMRYwFAYD VQQDEw02N2VkZmQ3OC1jOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRW2vhqo/xDWu3hSzuDXDr/pTYj5IIdppCO21ALCw8DXZc5EesLZy5cIkbhI yKrXFSpx3/NdqB+8dVGooXq+XD9yNP76dRCBh8HP5GA6bvynyoY4Kr/JqsJ656l7 CLoKNoYyb9frpqiVGryBgadB2UmgQQFlHEyTulA6db8u1vkEDEjnSDjoNovaLJlu jZYuD6eQE/aZtEZbUglWDwKRQ5ae7ntpR0ogz5fiLHTeaVBpDbFMS0G67HcZeWzq gFsvwbAfmRkDIZXfLsktRIENXrtPwL/GLF2rgV3ydRF92v5oPdjricGe8mTZDcUw XEtD55IWyzcVGHYavZ7RJmPR4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM348iC7 xu8jlfv1/RkKJFaQtrPgMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNC81NDQwODFEMkY0RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4 emlBNi1xM282OGNacXNJN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8mtBVVJa1h7g/dcV9o2hS0RIS7K0QnJQ1bPgwEKIEM34szpUKss1n Wl8ac3m4MxKzW8HsHJ0ObSQBHztyKEEV1KgaT+FTEKp3WE9w0NkUyVb2Q7ldRvBO hi6aY84527CnPKffZocc1xWiR7nvdThM+uEE+fB7Fp0hqc4v4lKSImcWJpmDea7T YilXKJ4IyMl22bhcjfKvE5p7Lp5fhz+qhKmwNff0uYbuIjYjE9e2x4nyic1qx9TP YcWQRitq9HaVVIpxKEz6haJhqN3lQcKAWvtBqhTon660DXykkYs2b4ANOBWpBh0s 4R+ninnGf6amnJgE/dp2BvUMqzqd2VN7 -----END CERTIFICATE-----Generated at Fri Apr 4 18:24:42 2025 by rpki-client