$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: am6lHSH43zCSrR3HWbeFOPSlNR9jgA7/h9SzJnNcHHk= Subject key identifier: 5D:D3:84:11:6A:46:08:B2:F4:14:3B:89:5E:20:C9:ED:80:C2:B8:09 Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0F5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0F55 Signing time: Sat 12 Apr 2025 17:29:47 +0000 Manifest this update: Sat 12 Apr 2025 17:29:47 +0000 Manifest next update: Sat 19 Apr 2025 17:29:47 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: F6u+LdlOWxrsW24RRkJ21zCHmdQwhDZIGbcUrcSFGAo=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3932 (0xf5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: Apr 12 17:29:47 2025 GMT Not After : Apr 19 17:29:47 2025 GMT Subject: CN=67faa30b-d2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:38:a1:1a:d7:9b:19:b0:90:36:0b:5a:b2: c8:2d:12:2f:14:6b:c4:72:2d:df:a2:49:c9:cd:53: 4c:a4:bf:4b:cb:3b:a8:67:97:4c:33:1b:ea:ea:31: 1f:ae:2b:06:9e:c4:d5:6a:25:3e:56:66:f6:42:4d: 17:d0:42:f0:22:cd:2c:12:ab:b9:1e:d9:a7:91:b2: 3d:d4:b9:80:06:28:49:2a:d2:63:17:2a:92:8f:69: 8d:6c:b7:19:cb:91:04:4d:71:fb:20:21:a3:a9:27: b3:71:72:0d:ff:0b:a1:79:95:88:55:06:a8:19:73: 82:ce:e7:f0:ee:27:4a:14:7a:a3:b4:a9:17:8b:93: d5:64:c1:d0:24:d2:57:5d:83:93:03:a8:fe:34:25: c7:f1:0b:66:07:d3:c4:07:fc:ca:61:f5:38:ef:8a: 51:ce:5a:51:4d:0d:38:c6:09:cf:82:4b:8a:35:2c: f4:f9:e9:fa:bd:56:71:20:9e:6e:ef:a1:99:e7:28: 05:2f:74:90:25:8a:7e:52:35:9c:67:61:77:ce:21: 23:8c:91:17:93:fe:86:62:3b:86:65:ea:96:98:55: f4:13:ca:94:55:12:b7:18:70:ad:e0:80:f3:fd:f8: 68:b0:94:fc:a5:98:d5:c7:a1:54:13:a7:a5:ff:44: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D3:84:11:6A:46:08:B2:F4:14:3B:89:5E:20:C9:ED:80:C2:B8:09 X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3a:d2:94:bb:8f:7e:72:43:db:6e:ea:12:b0:4c:3b:52:d6: 09:67:fd:ae:e0:89:3b:b5:bd:5b:7f:e0:70:63:4c:a2:1b:e6: 60:06:a1:c1:3d:f1:08:27:32:9c:96:58:51:4d:c2:63:e8:bd: 94:74:48:8f:11:e6:89:17:ca:53:8a:d1:d9:94:2f:ff:65:f9: 34:31:62:23:03:9b:20:63:3f:14:a3:8d:9c:06:67:c6:32:81: ec:af:e7:3c:3c:8c:f3:7b:1b:97:fd:45:b7:06:75:13:a9:a3: cf:70:9f:38:fd:9e:4a:2a:16:01:1d:22:14:be:84:0e:83:0a: ec:44:7d:95:1a:d5:6b:94:07:af:81:2e:61:d3:17:29:b7:37: 20:96:c8:87:ad:28:83:22:a6:ff:b6:e5:72:66:7b:c1:78:0e: 2e:44:40:6f:b9:ad:35:14:09:58:03:bd:0f:8c:f4:8d:53:75: a0:83:64:69:f7:f1:bd:79:c2:9f:5a:68:d3:b5:0e:e4:1e:fd: 09:a3:d8:5e:a5:08:29:0e:85:b7:6a:15:55:4a:ea:fa:aa:f5: 28:a2:a7:81:0a:54:4a:cf:63:18:20:8a:e5:e0:08:cd:25:42: 47:cd:bd:8c:75:31:c6:08:ca:28:bc:0f:a7:0d:f4:22:19:1f: b8:c9:d5:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUwNDEyMTcyOTQ3WhcNMjUwNDE5MTcyOTQ3WjAYMRYwFAYD VQQDEw02N2ZhYTMwYi1kMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2M4oRrXmxmwkDYLWrLILRIvFGvEci3foknJzVNMpL9LyzuoZ5dMMxvq6jEf risGnsTVaiU+Vmb2Qk0X0ELwIs0sEqu5HtmnkbI91LmABihJKtJjFyqSj2mNbLcZ y5EETXH7ICGjqSezcXIN/wuheZWIVQaoGXOCzufw7idKFHqjtKkXi5PVZMHQJNJX XYOTA6j+NCXH8QtmB9PEB/zKYfU474pRzlpRTQ04xgnPgkuKNSz0+en6vVZxIJ5u 76GZ5ygFL3SQJYp+UjWcZ2F3ziEjjJEXk/6GYjuGZeqWmFX0E8qUVRK3GHCt4IDz /fhosJT8pZjVx6FUE6el/0Q+/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3ThBFq Rgiy9BQ7iV4gye2AwrgJMB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfOtKUu49+ckPbbuoSsEw7UtYJZ/2u4Ik7tb1bf+BwY0yiG+ZgBqHB PfEIJzKcllhRTcJj6L2UdEiPEeaJF8pTitHZlC//Zfk0MWIjA5sgYz8Uo42cBmfG MoHsr+c8PIzzexuX/UW3BnUTqaPPcJ84/Z5KKhYBHSIUvoQOgwrsRH2VGtVrlAev gS5h0xcptzcglsiHrSiDIqb/tuVyZnvBeA4uREBvua01FAlYA70PjPSNU3Wgg2Rp 9/G9ecKfWmjTtQ7kHv0Jo9hepQgpDoW3ahVVSur6qvUooqeBClRKz2MYIIrl4AjN JUJHzb2MdTHGCMoovA+nDfQiGR+4ydW6 -----END CERTIFICATE-----Generated at Sun Apr 13 04:23:24 2025 by rpki-client