$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft File: ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json) Hash identifier: 1QOOFPIDrtN5+oTUE27ja6kJtJ97lm30qQq8fZhPt3Y= Subject key identifier: 73:38:BB:11:D9:C2:ED:EB:AD:99:DE:F9:D9:03:1B:03:8A:19:9F:35 Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F Certificate issuer: /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft Manifest number: 09E5 Signing time: Fri 04 Apr 2025 20:03:24 +0000 Manifest this update: Fri 04 Apr 2025 20:03:23 +0000 Manifest next update: Fri 11 Apr 2025 20:03:23 +0000 Files and hashes: 1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: eXNAAAqf6wzk5148GUY3ZbPtJb2AZduJqgEB+6HXaGQ=) 2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: iFLleCrx5lJW9+fJUCH6MH2zTLB5N+94fs57s6ev9K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B00B6 Validity Not Before: Apr 4 20:03:23 2025 GMT Not After : Apr 11 20:03:23 2025 GMT Subject: CN=67f03b0b-476f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:79:00:4b:8f:58:4b:7d:a1:f2:28:95:38: df:3f:f4:de:9a:e0:d1:ef:80:f2:11:05:dd:0b:77: ef:78:b0:d1:b2:07:1e:88:f7:24:e6:d3:b7:1f:1d: 43:10:1f:43:bb:53:57:2f:82:40:53:73:5c:54:ab: 09:91:01:21:aa:d5:b7:ba:0a:67:8d:26:40:21:68: e6:29:52:f4:61:62:f7:7c:5b:cd:2c:86:dd:d4:44: 8a:34:ea:6f:7a:61:77:bd:02:eb:29:44:1f:48:e0: ea:24:d3:e5:b5:75:56:0b:b6:00:cb:0e:d6:c4:63: 8a:3c:2a:13:94:d9:b4:fd:cd:cb:dd:97:f1:61:5d: 5e:79:85:b0:23:c4:58:49:c2:22:c1:cf:0d:c3:8d: 84:78:48:3b:7f:a0:bb:cb:be:f7:59:2e:21:c2:b7: d2:ce:79:35:6f:40:b7:9c:5d:2a:8c:90:23:b7:ca: 57:2a:c2:6b:ab:47:c9:24:41:04:09:ba:6a:f0:4c: 20:ee:45:1f:fa:a9:20:b1:bd:c4:ff:d3:80:67:4d: 96:9c:96:b4:1d:96:da:c8:39:61:bb:a1:24:41:8c: 08:72:cd:c3:47:b7:ba:10:e0:e6:dc:1f:da:0c:5d: b1:fe:26:9d:c8:4b:6e:ba:8d:62:67:78:22:6a:60: 3d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:38:BB:11:D9:C2:ED:EB:AD:99:DE:F9:D9:03:1B:03:8A:19:9F:35 X509v3 Authority Key Identifier: keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:90:f3:ad:5e:9d:d1:71:c3:92:a1:48:46:23:45:2c:af:cf: 8f:fc:09:30:22:86:b2:b0:dc:c7:98:33:dc:58:c8:15:61:45: 94:38:7c:2e:07:b6:cb:34:6d:d9:50:e7:40:a4:4a:dd:91:ac: 1d:74:7e:e6:4c:29:25:c5:ca:3e:cf:6e:7b:03:f2:7c:d3:0e: 2e:8d:07:8a:99:dd:bf:7e:3a:ec:7d:de:66:26:f1:4b:96:e2: 66:13:99:08:87:1c:bd:ec:ce:d7:25:4d:da:24:d7:b5:7f:7b: 96:bc:41:35:db:95:61:b5:84:55:54:0a:ca:62:f4:dc:ae:49: 89:1e:46:a5:26:06:5f:6b:42:37:9e:db:7f:fe:0d:b1:96:84: b9:d7:e9:98:00:c3:fc:33:16:8d:88:99:23:da:81:c6:c9:9c: 63:10:77:8e:f2:17:ce:67:16:6a:7f:de:a8:d1:46:1c:c7:f0: 6d:e7:9f:c5:a7:29:51:de:ef:6e:ff:c5:60:10:01:11:fd:67: 2d:45:f9:38:b6:bc:36:08:6b:b0:b2:6d:5e:87:b4:d6:eb:58: db:be:e3:77:11:67:be:38:78:19:6f:c0:bc:4f:a6:ac:a2:7b: e9:0d:d1:6b:35:00:3b:73:70:0e:9e:93:f9:97:e7:96:99:73: f6:61:ec:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF RTNBNDUwNUYwHhcNMjUwNDA0MjAwMzIzWhcNMjUwNDExMjAwMzIzWjAYMRYwFAYD VQQDEw02N2YwM2IwYi00NzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlh5AEuPWEt9ofIolTjfP/TemuDR74DyEQXdC3fveLDRsgceiPck5tO3Hx1D EB9Du1NXL4JAU3NcVKsJkQEhqtW3ugpnjSZAIWjmKVL0YWL3fFvNLIbd1ESKNOpv emF3vQLrKUQfSODqJNPltXVWC7YAyw7WxGOKPCoTlNm0/c3L3ZfxYV1eeYWwI8RY ScIiwc8Nw42EeEg7f6C7y773WS4hwrfSznk1b0C3nF0qjJAjt8pXKsJrq0fJJEEE Cbpq8Ewg7kUf+qkgsb3E/9OAZ02WnJa0HZbayDlhu6EkQYwIcs3DR7e6EODm3B/a DF2x/iadyEtuuo1iZ3giamA9GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM4uxHZ wu3rrZne+dkDGwOKGZ81MB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1 NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDBCNi85RjlBRjdBODc1NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0 b3R0ZU5DdEJ4MGZ1T2tVRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUkPOtXp3RccOSoUhGI0Usr8+P/AkwIoaysNzHmDPcWMgVYUWUOHwu B7bLNG3ZUOdApErdkawddH7mTCklxco+z257A/J80w4ujQeKmd2/fjrsfd5mJvFL luJmE5kIhxy97M7XJU3aJNe1f3uWvEE125VhtYRVVArKYvTcrkmJHkalJgZfa0I3 ntt//g2xloS51+mYAMP8MxaNiJkj2oHGyZxjEHeO8hfOZxZqf96o0UYcx/Bt55/F pylR3u9u/8VgEAER/WctRfk4trw2CGuwsm1eh7TW61jbvuN3EWe+OHgZb8C8T6as onvpDdFrNQA7c3AOnpP5l+eWmXP2YewE -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:10 2025 by rpki-client