$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json) Hash identifier: 7Aq0eywoGhfOZ9XPYZatVcD80CRwPZTjoE8kgXgGzlw= Subject key identifier: C6:8E:C9:7A:BE:09:F5:40:3D:0C:62:65:E1:A7:F5:F1:AF:77:AC:A8 Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft Manifest number: 063A Signing time: Wed 02 Apr 2025 22:35:17 +0000 Manifest this update: Wed 02 Apr 2025 22:35:17 +0000 Manifest next update: Wed 09 Apr 2025 22:35:17 +0000 Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: dk90IHcP+50eP+eb+0Xg34UFnzYLfQ313yDijVpWPZk=) 2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: 60iJClNHfCYL5vJ0EICnhz/EaXVeffgn8z0vbfJvk+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B334D Validity Not Before: Apr 2 22:35:17 2025 GMT Not After : Apr 9 22:35:17 2025 GMT Subject: CN=67edbba5-f726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:22:0d:91:62:5f:3f:40:88:89:39:4d:8b: 8a:36:b4:21:98:2b:f8:78:68:64:39:91:91:17:95: 0f:b8:51:6f:33:1c:ea:15:88:b1:10:24:c1:56:ca: 8c:4e:43:d9:9c:32:4d:1a:69:59:2e:56:10:9d:40: ef:cf:d1:9c:e8:ef:bf:cd:75:a8:08:5d:f5:cb:f8: 7e:d3:6b:76:64:ca:58:10:83:3c:f8:14:53:04:4e: ec:57:ea:31:bf:17:89:32:9d:0b:af:a3:b0:dc:fe: 2d:e3:40:0e:aa:3c:b5:ef:c6:74:12:9d:97:73:c8: 29:6f:db:dd:7d:bb:4f:22:46:be:45:c0:c1:1d:25: e5:55:de:18:4d:e7:8a:2c:ed:e7:fe:f7:01:1b:8c: 3f:d3:01:21:a9:5a:8a:84:66:94:d8:1d:1f:18:b5: 01:76:43:d7:3d:11:91:fe:f4:cf:4a:3b:42:5a:b1: 82:4b:2e:72:36:83:47:00:a3:3c:68:c7:60:a0:cb: 0e:d5:c3:9d:bc:a8:bf:d1:7d:a7:5d:58:47:66:96: 66:89:5c:98:f2:1c:07:fb:2c:fc:17:4c:d2:96:db: a2:ab:7f:c5:0c:92:8a:95:fd:01:23:6c:46:47:8a: 8f:da:04:22:bc:5b:f1:0c:e5:b6:34:53:81:d2:3c: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8E:C9:7A:BE:09:F5:40:3D:0C:62:65:E1:A7:F5:F1:AF:77:AC:A8 X509v3 Authority Key Identifier: keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f6:1f:63:75:a8:57:f7:4d:05:27:bf:be:5d:99:c8:1a:6b: f1:14:84:0c:73:42:47:77:59:16:15:2e:9f:7f:f9:0c:6f:b9: f1:08:de:cb:45:62:db:71:2c:b4:fd:ae:c4:ae:58:f3:7d:f9: a5:e0:31:37:ab:77:09:07:fa:4b:de:84:e3:23:0d:35:98:2b: 3f:76:9b:5f:bf:88:83:b4:df:cb:98:fe:9f:7c:20:63:09:7b: 95:df:f3:4d:36:d4:d9:23:c2:16:b7:2a:99:18:8d:b5:d4:94: b7:16:c5:cb:3e:e5:b9:9c:1c:da:e9:16:5f:6b:61:97:e2:b5: 13:0a:e6:29:8a:f9:b9:97:91:34:ad:2b:c1:21:b4:06:be:4a: 5e:fc:37:fa:0f:ba:c8:63:6f:77:94:3d:3e:84:dd:bc:07:27: 89:5b:41:df:2a:76:66:34:c1:2c:a5:a7:2f:34:9d:f1:75:81: 97:af:14:0e:94:67:42:9b:6a:ac:41:d2:7a:d5:79:64:98:61: dd:d6:de:b9:a6:86:17:02:e1:1e:c4:7e:f6:f2:88:2f:73:92: 51:4f:4b:93:6e:68:1a:3d:b9:65:13:47:57:65:13:88:39:7f: f0:a3:66:5b:5c:17:59:9b:a4:8d:92:e7:2e:af:98:47:68:ca: 09:66:4b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz MEFEQTVGMzIwHhcNMjUwNDAyMjIzNTE3WhcNMjUwNDA5MjIzNTE3WjAYMRYwFAYD VQQDEw02N2VkYmJhNS1mNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZwiDZFiXz9AiIk5TYuKNrQhmCv4eGhkOZGRF5UPuFFvMxzqFYixECTBVsqM TkPZnDJNGmlZLlYQnUDvz9Gc6O+/zXWoCF31y/h+02t2ZMpYEIM8+BRTBE7sV+ox vxeJMp0Lr6Ow3P4t40AOqjy178Z0Ep2Xc8gpb9vdfbtPIka+RcDBHSXlVd4YTeeK LO3n/vcBG4w/0wEhqVqKhGaU2B0fGLUBdkPXPRGR/vTPSjtCWrGCSy5yNoNHAKM8 aMdgoMsO1cOdvKi/0X2nXVhHZpZmiVyY8hwH+yz8F0zSltuiq3/FDJKKlf0BI2xG R4qP2gQivFvxDOW2NFOB0jzVxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaOyXq+ CfVAPQxiZeGn9fGvd6yoMB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1 RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzM0RC8yN0U4NjFEODg1RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFF VG5UNnFsU1gwR2N3cmFYekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL9h9jdahX900FJ7++XZnIGmvxFIQMc0JHd1kWFS6ff/kMb7nxCN7L RWLbcSy0/a7Erljzffml4DE3q3cJB/pL3oTjIw01mCs/dptfv4iDtN/LmP6ffCBj CXuV3/NNNtTZI8IWtyqZGI211JS3FsXLPuW5nBza6RZfa2GX4rUTCuYpivm5l5E0 rSvBIbQGvkpe/Df6D7rIY293lD0+hN28ByeJW0HfKnZmNMEspacvNJ3xdYGXrxQO lGdCm2qsQdJ61XlkmGHd1t65poYXAuEexH728ogvc5JRT0uTbmgaPbllE0dXZROI OX/wo2ZbXBdZm6SNkucur5hHaMoJZktZ -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:46 2025 by rpki-client