$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: M2Nip+OcUx3OAcK/c4IOeZIeKyAv5naK1nhzWnIyBBA= Subject key identifier: D2:25:B2:57:14:6C:A5:B2:13:5E:71:48:B8:D0:D5:EE:6A:D2:F2:81 Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 0998 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 0992 Signing time: Thu 10 Apr 2025 20:02:29 +0000 Manifest this update: Thu 10 Apr 2025 20:02:29 +0000 Manifest next update: Thu 17 Apr 2025 20:02:29 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: yLKxu9zLSNct6ss1XdDwnGk8BnBhC6FXxT4l/cK69vw=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: n5P347FiAUuKhxz5D51UBzZC3yGrF18WlVG2Rg0oGrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 20:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2456 (0x998) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: Apr 10 20:02:29 2025 GMT Not After : Apr 17 20:02:29 2025 GMT Subject: CN=67f823d5-74fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:bf:d8:bd:c2:f6:fe:3d:d0:8c:74:bf:70: 62:6f:2e:bc:d9:97:2f:cf:2d:17:0b:18:82:d2:d6: 83:f4:6b:33:68:e8:7a:6d:0a:03:53:28:fc:ad:c3: d1:e9:5d:92:18:ec:a2:bd:cb:de:53:8c:9c:4d:f9: 80:b0:6d:61:66:87:a4:e0:49:52:d0:c7:bc:38:54: a2:02:71:23:61:58:c6:f8:5e:93:de:f4:37:9f:26: 75:2e:b1:1c:6d:d3:69:b2:b7:31:a1:19:2d:be:60: db:6c:ef:5f:f5:29:7a:2e:af:03:b4:fd:dd:e8:9f: c3:67:a9:4a:3a:30:56:17:b7:8a:57:ac:66:10:83: f5:c7:48:0d:f7:2a:29:9e:0a:8f:f4:94:e7:3a:55: 4e:b9:15:9c:d3:48:02:bb:44:40:09:d6:60:6b:4c: 15:90:47:91:b0:20:6c:ca:b2:81:97:cf:4a:d9:af: d1:4f:a5:f4:cb:ed:9d:8e:53:e2:a0:62:b8:31:57: 2b:1b:28:dd:c7:a6:08:ff:0c:23:5f:69:d4:65:38: df:af:df:44:ec:e8:4d:2e:b9:30:69:73:35:ce:61: 20:b7:48:d1:ee:6e:75:00:8a:06:8a:18:5e:d7:7a: 24:92:12:49:93:ca:4a:22:66:06:2a:72:e3:f5:cc: 96:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:25:B2:57:14:6C:A5:B2:13:5E:71:48:B8:D0:D5:EE:6A:D2:F2:81 X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:a9:f2:df:66:22:13:52:93:c5:a8:1c:c7:d7:4c:99:44:9e: df:ea:55:46:d4:b0:27:f5:ea:7c:2e:3e:6f:23:06:6e:08:99: 3b:aa:5c:d6:ab:e8:15:5c:7e:32:76:3e:f4:ac:f6:45:59:68: 09:13:22:b3:70:3e:b8:57:f4:d1:54:c6:a2:3c:41:46:b5:f8: 01:ea:8f:51:a6:6c:12:58:e3:cb:2e:58:28:3a:18:64:30:df: 0c:c3:bd:bb:4e:c7:71:ed:0e:2d:cb:a7:56:cd:77:aa:16:6a: 30:4b:5f:69:4b:a1:6d:54:94:74:45:b5:0a:2f:ce:44:73:fc: 70:88:e3:b2:67:1a:49:80:86:b0:10:02:d8:bd:6d:a4:7c:ee: 4c:ac:f6:6c:50:2d:2d:76:30:d3:51:bf:09:15:9d:c2:49:21: 69:1f:f0:51:71:f9:4f:4b:31:db:f1:8c:73:2a:36:92:31:98: 4e:d6:4b:33:96:82:bb:8f:c1:d3:1c:13:9f:22:14:75:6b:14: 9f:e2:0b:07:94:2a:a0:e7:ad:27:82:57:f5:26:5b:64:8e:81: c7:6c:a4:f1:f4:a0:1a:26:c4:be:82:db:e2:2e:25:c6:7e:00: 5e:72:ea:10:a8:d8:bb:51:d0:e0:92:b5:48:f5:b6:e1:44:eb: e9:f2:40:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjUwNDEwMjAwMjI5WhcNMjUwNDE3MjAwMjI5WjAYMRYwFAYD VQQDEw02N2Y4MjNkNS03NGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraC/2L3C9v490Ix0v3Biby682Zcvzy0XCxiC0taD9GszaOh6bQoDUyj8rcPR 6V2SGOyivcveU4ycTfmAsG1hZoek4ElS0Me8OFSiAnEjYVjG+F6T3vQ3nyZ1LrEc bdNpsrcxoRktvmDbbO9f9Sl6Lq8DtP3d6J/DZ6lKOjBWF7eKV6xmEIP1x0gN9yop ngqP9JTnOlVOuRWc00gCu0RACdZga0wVkEeRsCBsyrKBl89K2a/RT6X0y+2djlPi oGK4MVcrGyjdx6YI/wwjX2nUZTjfr99E7OhNLrkwaXM1zmEgt0jR7m51AIoGihhe 13okkhJJk8pKImYGKnLj9cyWRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIlslcU bKWyE15xSLjQ1e5q0vKBMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEqfLfZiITUpPFqBzH10yZRJ7f6lVG1LAn9ep8Lj5vIwZuCJk7qlzW q+gVXH4ydj70rPZFWWgJEyKzcD64V/TRVMaiPEFGtfgB6o9RpmwSWOPLLlgoOhhk MN8Mw727Tsdx7Q4ty6dWzXeqFmowS19pS6FtVJR0RbUKL85Ec/xwiOOyZxpJgIaw EALYvW2kfO5MrPZsUC0tdjDTUb8JFZ3CSSFpH/BRcflPSzHb8YxzKjaSMZhO1ksz loK7j8HTHBOfIhR1axSf4gsHlCqg560nglf1JltkjoHHbKTx9KAaJsS+gtviLiXG fgBecuoQqNi7UdDgkrVI9bbhROvp8kBm -----END CERTIFICATE-----Generated at Sat Apr 12 17:52:55 2025 by rpki-client