$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft File: n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json) Hash identifier: gEnZQaCRd0wofVg8WOVuv1Ka6XSZri6HDJSQfRlV3gY= Subject key identifier: 63:D3:A9:BB:09:12:E8:29:CC:B5:2F:C3:37:60:22:76:D8:0B:D7:C3 Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE Certificate issuer: /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft Manifest number: 0745 Signing time: Wed 02 Apr 2025 21:40:50 +0000 Manifest this update: Wed 02 Apr 2025 21:40:49 +0000 Manifest next update: Wed 09 Apr 2025 21:40:49 +0000 Files and hashes: 1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: wXJlQaCK7ascmbedbVVdgrdhz+zWARxopxbo19GfBR0=) 2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: 41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53AF Validity Not Before: Apr 2 21:40:49 2025 GMT Not After : Apr 9 21:40:49 2025 GMT Subject: CN=67edaee1-2bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:1d:77:a2:80:00:81:38:36:01:bd:69:02: 21:b8:67:e6:09:6b:93:a9:51:7d:c9:10:89:35:d5: fc:40:ad:4b:8c:12:e0:f2:30:f7:05:c7:a2:70:8d: b3:0d:2c:9a:71:8a:50:7d:57:93:a5:90:d4:7c:92: 55:68:4d:80:1b:9f:8e:a8:f8:a6:b7:33:91:a3:f5: 6f:82:00:db:cc:05:ca:7d:dd:07:72:d1:cf:d4:6f: ce:72:5b:c9:f1:76:88:7f:ae:e9:c5:12:bb:1b:2a: 7a:72:9b:a0:e4:b6:c7:9c:81:89:e6:dc:a6:27:3f: 0d:cd:4a:30:e0:19:7f:8e:ea:10:23:a7:30:48:82: 25:b4:a9:40:64:08:11:9d:d0:86:6b:1b:ef:11:6f: 1a:a0:93:93:34:9c:39:15:ea:24:63:b6:cf:33:44: de:4e:13:4f:86:7b:cb:0b:a0:20:5d:62:df:b2:c3: 1c:3c:0c:65:36:53:1c:dc:32:9f:35:94:7f:5d:f4: 92:fd:d8:e1:05:ef:74:b9:7e:ef:f0:90:05:2f:8b: 56:5c:45:44:b6:5d:b5:f1:40:ba:1d:25:e4:6a:e4: 60:5b:cc:26:46:fd:6b:a1:26:3d:15:af:8f:f3:e1: 2b:bc:90:89:ff:fc:45:b9:6f:8b:47:0e:26:9f:f1: ab:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D3:A9:BB:09:12:E8:29:CC:B5:2F:C3:37:60:22:76:D8:0B:D7:C3 X509v3 Authority Key Identifier: keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:ee:69:31:b4:87:f7:67:47:25:78:29:dd:4b:c4:f9:a1:99: d0:04:5f:c8:d9:30:1d:72:aa:1b:04:e2:fc:9f:db:aa:84:f2: 07:06:d2:8d:2f:03:b3:7f:2a:29:fc:b0:06:57:6f:2c:1c:55: c1:63:59:79:c9:27:fc:7f:0c:55:89:06:9b:77:20:e2:8b:2d: 2e:e4:9f:5e:4c:c1:89:a4:d7:e9:09:68:dd:df:94:55:af:6b: c0:56:83:d2:61:e4:f6:8a:f3:0e:4e:27:48:13:59:48:3d:70: 4c:0c:1a:4c:02:0d:a6:ca:ea:5f:56:9b:cf:44:93:8b:54:90: 40:ec:87:2e:72:07:ad:50:f3:27:8e:96:5b:b1:6d:b7:ae:04: d2:ac:f2:e1:8b:3f:b5:20:fe:0a:28:20:7d:54:69:6e:2f:24: 73:69:f8:93:fb:fc:a5:73:20:0c:2d:66:00:fa:17:53:42:70: ef:11:df:4a:b2:01:29:d5:cc:7b:cc:1b:7b:b6:7b:51:ce:ce: 8e:b2:fa:2b:7c:ea:90:5d:58:31:8f:7b:4d:d4:a4:10:80:0c: c4:e4:81:90:86:94:6c:09:62:90:7d:97:aa:ce:fc:02:aa:56: b5:0e:7b:28:ef:f6:e8:02:ed:c3:a0:06:9f:9a:a6:2c:6a:ea: 7a:f0:91:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQUYxMTAvBgNVBAUTKDlGQUQyMzAyM0ExNTVCRDI1QjIyNDI4MDYzQUMxOTc4 N0NFN0MyQkUwHhcNMjUwNDAyMjE0MDQ5WhcNMjUwNDA5MjE0MDQ5WjAYMRYwFAYD VQQDEw02N2VkYWVlMS0yYmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2Idd6KAAIE4NgG9aQIhuGfmCWuTqVF9yRCJNdX8QK1LjBLg8jD3BceicI2z DSyacYpQfVeTpZDUfJJVaE2AG5+OqPimtzORo/VvggDbzAXKfd0HctHP1G/OclvJ 8XaIf67pxRK7Gyp6cpug5LbHnIGJ5tymJz8NzUow4Bl/juoQI6cwSIIltKlAZAgR ndCGaxvvEW8aoJOTNJw5FeokY7bPM0TeThNPhnvLC6AgXWLfssMcPAxlNlMc3DKf NZR/XfSS/djhBe90uX7v8JAFL4tWXEVEtl218UC6HSXkauRgW8wmRv1roSY9Fa+P 8+ErvJCJ//xFuW+LRw4mn/GrswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPTqbsJ EugpzLUvwzdgInbYC9fDMB8GA1UdIwQYMBaAFJ+tIwI6FVvSWyJCgGOsGXh858K+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBRi8xRjQ5MzI1QzFE QjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5SmJJa0tBWTZ3WmVIem53 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242MGpBam9WVzlKYklrS0FZNndaZUh6bndyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBRi8xRjQ5MzI1QzFEQjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5 SmJJa0tBWTZ3WmVIem53cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA7mkxtIf3Z0cleCndS8T5oZnQBF/I2TAdcqobBOL8n9uqhPIHBtKN LwOzfyop/LAGV28sHFXBY1l5ySf8fwxViQabdyDiiy0u5J9eTMGJpNfpCWjd35RV r2vAVoPSYeT2ivMOTidIE1lIPXBMDBpMAg2myupfVpvPRJOLVJBA7IcucgetUPMn jpZbsW23rgTSrPLhiz+1IP4KKCB9VGluLyRzafiT+/ylcyAMLWYA+hdTQnDvEd9K sgEp1cx7zBt7tntRzs6OsvorfOqQXVgxj3tN1KQQgAzE5IGQhpRsCWKQfZeqzvwC qla1Dnso7/boAu3DoAafmqYsaup68JEl -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:12 2025 by rpki-client