$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json) Hash identifier: Bblz5lyt/0g9lk3W/jEeLlPgSMjPb29xCHZA6MUCEhE= Subject key identifier: BA:CF:08:5B:FC:39:CD:F4:BD:D0:07:7A:76:36:98:02:40:46:B0:2D Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 0484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft Manifest number: 047F Signing time: Sat 05 Apr 2025 00:10:05 +0000 Manifest this update: Sat 05 Apr 2025 00:10:05 +0000 Manifest next update: Sat 12 Apr 2025 00:10:05 +0000 Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: ndv/TqZMNSfyU7eiUjH27ein9ezrzVM0rVvvb80StD4=) 2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: vSYCfM+ntYW7G9aAaLxoQnL6y+A35VWVI2iBiGFSPJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3 Validity Not Before: Apr 5 00:10:05 2025 GMT Not After : Apr 12 00:10:05 2025 GMT Subject: CN=67f074dd-f697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:21:9a:9a:f8:4e:35:dd:2e:be:89:bb:4d: d3:ff:06:78:6b:c2:a2:1c:ce:24:18:5a:f7:96:b5: 75:d8:01:40:cc:29:ab:e6:34:3c:75:ee:78:18:66: d2:d5:64:bd:fe:e3:29:81:90:50:11:ab:24:32:ca: 4d:8e:9e:47:9c:b1:33:ab:6a:6d:f6:19:98:22:b5: 94:05:7c:30:78:03:5d:3b:70:db:48:bc:05:ef:0e: 69:ab:86:7c:f1:ff:34:49:16:f2:c9:c5:f8:ab:91: 23:b9:ae:bf:c8:23:43:d4:d8:06:e3:15:dd:98:7b: 53:59:eb:6f:ad:29:f4:cc:06:b6:54:f7:83:c8:14: 55:5e:aa:45:0d:42:e5:bd:4f:12:c1:55:49:ec:f6: c5:94:db:0b:9f:cc:41:91:54:b2:04:a9:4b:ae:2a: 22:b7:ac:3a:32:22:ee:1a:58:20:a9:e4:30:eb:9a: 6c:9d:b3:b1:39:26:4b:57:02:ff:29:35:c2:01:87: 65:9f:0d:fb:07:0f:79:fc:76:83:34:92:7b:88:6c: 77:49:e9:dc:5e:86:67:18:f4:f6:ed:e8:24:0a:c4: f6:14:c0:ff:78:d2:a4:65:91:d7:bd:7e:30:50:a3: 12:0e:fc:52:2b:ce:ac:5f:75:cd:2c:53:25:84:00: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CF:08:5B:FC:39:CD:F4:BD:D0:07:7A:76:36:98:02:40:46:B0:2D X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:4d:48:7f:c4:19:40:3d:88:bd:ce:ea:59:c0:60:40:37:fa: 2d:8f:19:0e:ab:9e:2d:63:f9:55:07:cf:a4:ae:a6:ed:23:61: 1c:57:c7:db:84:03:91:cd:3d:c1:05:9d:f1:cf:1d:99:4a:d9: f4:25:a2:2d:a1:75:d4:fe:e9:c6:e0:14:57:98:7d:4a:ec:ed: f5:6f:bf:45:95:bd:00:71:1d:3b:4d:43:6e:32:70:01:b8:c1: 1f:ed:c9:a4:38:19:62:e3:79:c5:a6:28:c4:48:ae:a9:5e:11: 54:d8:ce:64:30:ed:5f:56:dd:ee:0a:94:2e:b9:7e:08:1d:5b: 93:9f:fe:a1:7b:1d:5b:28:02:f8:cd:cd:2c:19:dd:22:14:fe: b4:4e:6f:3e:25:43:95:e1:21:62:98:8b:d6:4a:d1:63:b2:40: 54:74:56:f9:f7:fe:2b:1e:6a:cf:f2:5d:fa:9a:4f:98:de:97: 58:2c:10:ed:01:8d:63:45:e9:d4:1b:7f:36:eb:65:43:1e:ea: 96:70:9e:36:1c:2f:15:a6:e3:00:83:c3:5a:2d:a7:1b:d3:a5: 44:e9:03:55:17:01:81:de:40:5c:8d:95:2b:a6:cf:e1:07:55: 92:ad:9e:2d:d0:57:b8:85:25:b4:f0:5c:8b:ff:9f:a1:9c:c7: 22:fb:a5:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjUwNDA1MDAxMDA1WhcNMjUwNDEyMDAxMDA1WjAYMRYwFAYD VQQDEw02N2YwNzRkZC1mNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyMhmpr4TjXdLr6Ju03T/wZ4a8KiHM4kGFr3lrV12AFAzCmr5jQ8de54GGbS 1WS9/uMpgZBQEaskMspNjp5HnLEzq2pt9hmYIrWUBXwweANdO3DbSLwF7w5pq4Z8 8f80SRbyycX4q5Ejua6/yCND1NgG4xXdmHtTWetvrSn0zAa2VPeDyBRVXqpFDULl vU8SwVVJ7PbFlNsLn8xBkVSyBKlLrioit6w6MiLuGlggqeQw65psnbOxOSZLVwL/ KTXCAYdlnw37Bw95/HaDNJJ7iGx3SencXoZnGPT27egkCsT2FMD/eNKkZZHXvX4w UKMSDvxSK86sX3XNLFMlhADtIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrPCFv8 Oc30vdAHenY2mAJARrAtMB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTTUh/xBlAPYi9zupZwGBAN/otjxkOq54tY/lVB8+krqbtI2EcV8fb hAORzT3BBZ3xzx2ZStn0JaItoXXU/unG4BRXmH1K7O31b79Flb0AcR07TUNuMnAB uMEf7cmkOBli43nFpijESK6pXhFU2M5kMO1fVt3uCpQuuX4IHVuTn/6hex1bKAL4 zc0sGd0iFP60Tm8+JUOV4SFimIvWStFjskBUdFb59/4rHmrP8l36mk+Y3pdYLBDt AY1jRenUG38262VDHuqWcJ42HC8VpuMAg8NaLacb06VE6QNVFwGB3kBcjZUrps/h B1WSrZ4t0Fe4hSW08FyL/5+hnMci+6WE -----END CERTIFICATE-----Generated at Sun Apr 6 01:17:49 2025 by rpki-client